![]() |
|
Log-Analyse und Auswertung: Bluescreen beim Enfernen von "ADWARE/BProtector.E" durch Avira AntivirWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Bluescreen beim Enfernen von "ADWARE/BProtector.E" durch Avira Antivir Hallo, ich habe seit gestern Abend das Problem, dass Avira mir zwar die Malware "ADWARE/Bprotector.E" zum Entfernen anzeigt, das Löschen nicht möglich ist. Der Laptop stürzt mit einer Bluescreen-Meldung ab und die Malware wird mir wie vorher zum Löschen angezeigt. Leider kann ich den Log der Ereignisliste von Avira nicht posten, da diese leer (?) ist. Kann nur den Log der Quarantäne aufweisen. Der Log wäre mit den anderen allerdings zu groß, sodass er sich im Anhang befindet. Als ich zur Sicherheit auch die neuste Version von "Malewarebytes Anti-Malware" drüberlaufen lassen habe, wurden mir sogar noch mehr "Infektionen" angezeigt. Muss ich mir da Sorgen machen? Malwarebytes Anit-Malware - Log Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.03.08 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16428 Jonas ****** :: JONAS-ACERASPIR [Administrator] 04.12.2013 02:50:35 MBAM-log-2013-12-04 (03-39-33).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 238150 Laufzeit: 8 Minute(n), 17 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 37 HKCR\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE} (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCR\escort.escortIEPane.1 (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCR\escort.escortIEPane (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCR\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCR\delta.deltaHlpr.1 (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCR\delta.deltaHlpr (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8} (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCR\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D} (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCR\esrv.deltaESrvc.1 (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCR\esrv.deltaESrvc (PUP.Optional.Delta) -> Keine Aktion durchgeführt. HKCR\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCR\delta.deltadskBnd.1 (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCR\delta.deltadskBnd (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCR\Typelib\{4599D05A-D545-4069-BB42-5895B4EAE05B} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCR\Interface\{1231839B-064E-4788-B865-465A1B5266FD} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\DELTA\DELTA (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> Keine Aktion durchgeführt. HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt. HKCU\Software\delta LTD (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt. HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings (PUP.Optional.BProtector.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Delta\delta\Instl (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCR\delta.deltaappCore.1 (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCR\delta.deltaappCore (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCR\d (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. Infizierte Registrierungswerte: 8 HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Daten: Delta Toolbar -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Daten: -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Delta\Delta|tlbrSrchUrl (PUP.Optional.Delta.A) -> Daten: -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|bProtector Start Page (PUP.BProtector) -> Daten: hxxp://search.babylon.com/?babsrc=HP_ss_gin2g&mntrId=9681E4D53DA9D10A&affID=121562&tsp=4931 -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|bProtectorDefaultScope (PUP.BProtector) -> Daten: {0633EE93-D776-472f-A0FF-E1416B8B2E3A} -> Keine Aktion durchgeführt. HKCU\Software\Delta\delta|lastB (PUP.Optional.Delta.A) -> Daten: hxxp://www.delta-search.com/?babsrc=HP_ss&mntrId=9681E4D53DA9D10A&affID=121562&tsp=4931 -> Keine Aktion durchgeführt. HKCU\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: 11111111 -> Keine Aktion durchgeführt. HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: 11111111 -> Keine Aktion durchgeführt. Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 7 C:\Users\Jonas ******\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\Delta\delta\1.8.21.5 (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\Delta\delta\1.8.21.5\bh (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\OpenCandy\53E87836B465411D9D3CE407BAB6570D (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\OpenCandy\C663F5198E8E445D9E438D6C8EDA697B (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\File Scout (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt. Infizierte Dateien: 15 C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (PUP.Optional.Delta) -> Keine Aktion durchgeführt. C:\Program Files (x86)\Delta\delta\1.8.21.5\deltasrv.exe (PUP.Optional.Delta) -> Keine Aktion durchgeführt. C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\File Scout\filescout.exe (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\OpenCandy\53E87836B465411D9D3CE407BAB6570D\LatestDLMgr.exe (PUP.Optional.OpenCandy.A) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\OpenCandy\53E87836B465411D9D3CE407BAB6570D\OpenCandyU1Dlm.dll (PUP.Optional.OpenCandy.A) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\OpenCandy\C663F5198E8E445D9E438D6C8EDA697B\DeltaTB.exe (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaApp.dll (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaEng.dll (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\Delta\delta\1.8.21.5\GUninstaller.exe (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\Delta\delta\1.8.21.5\uninstall.exe (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\OpenCandy\53E87836B465411D9D3CE407BAB6570D\3130.ico (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\OpenCandy\53E87836B465411D9D3CE407BAB6570D\TuneUpUtilities2013_2200217_de-DE.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\Users\Jonas ******\AppData\Roaming\File Scout\uninst.exe (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt. (Ende) frst-log FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-12-2013 02 Ran by Jonas ****** (administrator) on JONAS-ACERASPIR on 04-12-2013 03:54:49 Running from C:\Users\Jonas ******\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe () C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Spotify Ltd) C:\Users\Jonas ******\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe () C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] () HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-05] (ELAN Microelectronics Corp.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01] (Logitech Inc.) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20133824 2013-09-25] (Google) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Jonas ******\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-11-19] (Spotify Ltd) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.) HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.) HKLM-x32\...\Run: [ArcadeMovieService] - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe [1058400 2011-10-31] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [162408 2011-09-13] () AppInit_DLLs: c:\progra~3\bitguard\271832~1.68\{c16c1~1\loader.dll c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll c:\windows\system32\nvinitx.dll,c:\windows\system32\nvinitx.dll [ ] () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?babsrc=HP_ss_gin2g&mntrId=9681E4D53DA9D10A&affID=121562&tsp=4931 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://search.babylon.com/?babsrc=HP_ss_gin2g&mntrId=9681E4D53DA9D10A&affID=121562&tsp=4931 URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - bProtectorDefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=9681E4D53DA9D10A&affID=121562&tsp=4931 SearchScopes: HKCU - {A86D74DF-55FF-44E7-A13A-52D7262146D8} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10395&src=kw&q={searchTerms}&locale=&apn_ptnrs=^ABT&apn_dtid=^YYYYYY^YY^DE&apn_uid=448229bb-b5d3-4f18-8bab-c44a48654235&apn_sauid=80B7E441-443F-4960-9F18-EBD83BC607FA BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\EPSON Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION) BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Flagfox - {BA7B8F39-DF7F-4A98-83E9-57CE6ED9CA24} - C:\Users\Jonas ******\AppData\LocalLow\Flagfox\IE\Flagfox.dll (Dave G) BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com) BHO-x32: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\EPSON Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION) Toolbar: HKLM-x32 - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.) Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com) DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{3B7F2F84-982A-49EA-9368-45FB5BC144D9}: [NameServer]141.53.8.1,141.53.8.3 FireFox: ======== FF ProfilePath: C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default FF user.js: detected! => C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\user.js FF NewTab: user_pref("browser.newtab.url", ""); FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", ""); FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", ""); FF Homepage: https://www.google.de/ FF NetworkProxy: "autoconfig_url", "file:///C:\\Users\\JONASD~1\\AppData\\Local\\Temp\\proxtube.pac" FF NetworkProxy: "http", "207.40.43.5" FF NetworkProxy: "http_port", 3128 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll () FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.3.1 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll (Amazon.com, Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF SearchPlugin: C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\searchplugins\delta.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Battlefield Play4Free - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\battlefieldplay4free@ea.com FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\ich@maltegoetz.de FF Extension: Flagfox - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\info@flagfox.net FF Extension: Better Battlelog (BBLog) - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack FF Extension: GMX MailCheck - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\toolbar@gmx.net FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\{2541D29A-DB9E-4c1e-949A-31EFB4AEF4E7} FF Extension: SoundCloud Downloader - Technowise - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac} FF Extension: Adblock Edge - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc} FF Extension: jid1-qQSMEVsYTOjgYA - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi FF Extension: toolbar - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\toolbar@gmx.net.xpi FF Extension: DVDVideoSoft Menu - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: prefs - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi FF Extension: No Name - C:\Users\Jonas ******\AppData\Roaming\Mozilla\Firefox\Profiles\4hy0vg21.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ Chrome: ======= CHR Extension: (Google Docs) - C:\Users\JONASD~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\JONASD~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\JONASD~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Flagfox) - C:\Users\JONASD~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfdfamfnacokbbbnmpdfmhonipnhmbid\4.2.781_0 CHR Extension: (Google Search) - C:\Users\JONASD~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Google Wallet) - C:\Users\JONASD~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\JONASD~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [cfdfamfnacokbbbnmpdfmhonipnhmbid] - C:\Users\Jonas ******\AppData\LocalLow\Flagfox\CHROME\Flagfox.crx CHR HKLM-x32\...\Chrome\Extension: [jplinpmadfkdgipabgcdchbdikologlh] - C:\Program Files (x86)\1ClickDownload\1click12.crx ==================== Services (Whitelisted) ================= R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) R2 BitGuard; C:\ProgramData\BitGuard\2.7.1832.68\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [3780064 2013-11-18] () S2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] () S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-28] () ==================== Drivers (Whitelisted) ==================== R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-07-15] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG) R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-07-15] () S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2005-01-01] (INCA Internet Co., Ltd.) S3 dump_wmimmc; \??\C:\AeriaGames\Wolfteam-DE\GameGuard\dump_wmimmc.sys [x] S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-04 03:54 - 2013-12-04 03:54 - 00022449 _____ C:\Users\Jonas ******\Desktop\FRST.txt 2013-12-04 03:53 - 2013-12-04 03:54 - 01959614 _____ (Farbar) C:\Users\Jonas ******\Desktop\FRST64.exe 2013-12-04 03:51 - 2013-12-04 03:51 - 00000486 _____ C:\Users\Jonas ******\Desktop\defogger_disable.log 2013-12-04 03:51 - 2013-12-04 03:51 - 00000258 _____ C:\Users\Jonas ******\Downloads\defogger_enable.log 2013-12-04 03:51 - 2013-12-04 03:51 - 00000000 _____ C:\Users\Jonas ******\defogger_reenable 2013-12-04 03:50 - 2013-12-04 03:50 - 00000486 _____ C:\Users\Jonas ******\Downloads\defogger_disable.log 2013-12-04 03:44 - 2013-12-04 03:45 - 00050477 _____ C:\Users\Jonas ******\Desktop\Defogger.exe 2013-12-03 23:40 - 2013-12-03 23:40 - 00000000 ____D C:\Users\Jonas ******\AppData\Roaming\Malwarebytes 2013-12-03 23:39 - 2013-12-03 23:39 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Jonas ******\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-03 23:39 - 2013-12-03 23:39 - 00001073 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-03 23:39 - 2013-12-03 23:39 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-03 23:39 - 2013-12-03 23:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-03 23:39 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-12-03 10:54 - 2013-12-03 10:55 - 00017647 _____ C:\Windows\DirectX.log 2013-12-03 10:52 - 2013-12-03 10:53 - 00032718 _____ C:\Users\Jonas ******\Downloads\Addition.txt 2013-12-03 10:51 - 2013-12-03 10:53 - 00063081 _____ C:\Users\Jonas ******\Downloads\FRST.txt 2013-12-03 10:51 - 2013-12-03 10:51 - 00000000 ____D C:\FRST 2013-12-03 10:44 - 2013-12-03 10:44 - 643337992 _____ C:\Windows\MEMORY.DMP 2013-12-03 10:44 - 2013-12-03 10:44 - 00262144 _____ C:\Windows\Minidump\120313-29593-01.dmp 2013-12-03 00:06 - 2013-12-03 00:06 - 00000219 _____ C:\Users\Jonas ******\Desktop\Counter-Strike Source.url 2013-12-02 22:41 - 2013-12-02 22:42 - 00000000 ____D C:\Users\Jonas ******\Documents\B.Biochemie 2012 2013-12-02 22:10 - 2013-12-02 22:19 - 1108480269 _____ C:\Users\Jonas ******\Downloads\B.Biochemie_2012-2013-12-02.zip 2013-11-28 11:13 - 2013-11-28 11:14 - 03821064 _____ C:\Users\Jonas ******\Downloads\battlelog-web-plugins_2.3.2_130.exe 2013-11-26 12:53 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-11-26 12:50 - 2013-11-26 12:50 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-26 12:50 - 2013-11-26 12:50 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-26 12:50 - 2013-11-26 12:50 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-26 12:50 - 2013-11-26 12:50 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-26 12:50 - 2013-11-26 12:50 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-26 12:50 - 2013-11-26 12:50 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-26 12:49 - 2013-11-26 12:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 12:49 - 2013-11-26 12:49 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 12:49 - 2013-11-26 12:49 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-26 12:49 - 2013-11-26 12:49 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-26 12:49 - 2013-11-26 12:49 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-26 12:49 - 2013-11-26 12:49 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-26 12:49 - 2013-11-26 12:49 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-26 12:49 - 2013-11-26 12:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-26 12:49 - 2013-11-26 12:49 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-26 12:49 - 2013-11-26 12:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-26 12:48 - 2013-11-26 12:53 - 00010277 _____ C:\Windows\IE11_main.log 2013-11-25 17:29 - 2013-11-25 17:29 - 00019456 ___SH C:\Users\Jonas ******\Thumbs.db 2013-11-23 18:30 - 2013-12-03 23:15 - 00002296 _____ C:\Windows\setupact.log 2013-11-23 18:30 - 2013-11-23 18:30 - 00000000 _____ C:\Windows\setuperr.log 2013-11-23 13:38 - 2013-11-23 13:38 - 04379048 _____ (Piriform Ltd) C:\Users\Jonas ******\Downloads\ccsetup407.exe 2013-11-23 13:38 - 2013-11-23 13:38 - 00002786 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-23 13:20 - 2013-11-25 18:09 - 00000000 ____D C:\Users\Jonas ******\Documents\OC-Praktikum 2013-11-23 13:18 - 2013-12-02 17:40 - 00000000 ____D C:\Users\Jonas ******\Documents\Tierphysiologische Übungen 2013-11-22 20:52 - 2013-11-29 17:56 - 00000000 ____D C:\Program Files (x86)\DevPro 2013-11-22 20:05 - 2013-11-22 20:38 - 247763201 _____ (YGOPro DevPro Online ) C:\Users\Jonas ******\Downloads\SetupDevPro1.9.7r2new.exe 2013-11-21 19:27 - 2013-11-21 19:27 - 00000000 ____D C:\Users\Jonas ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard 2013-11-21 17:35 - 2013-11-21 17:35 - 03820448 _____ C:\Users\Jonas ******\Downloads\battlelog-web-plugins_2.3.2_129.exe 2013-11-14 16:38 - 2013-11-14 16:38 - 03820824 _____ C:\Users\Jonas ******\Downloads\battlelog-web-plugins_2.3.1_125.exe 2013-11-13 16:07 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-13 16:07 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-13 16:07 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-13 16:07 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-13 16:07 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-13 16:07 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-13 16:07 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-13 16:07 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-13 16:07 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-13 16:06 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-13 16:06 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-13 16:06 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-13 16:06 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-13 16:06 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-13 16:06 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-13 16:06 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-13 16:06 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-13 16:06 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-13 16:06 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-13 16:06 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-13 16:06 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-13 16:06 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-13 16:06 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-13 16:06 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-13 16:06 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-13 16:06 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-13 16:06 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-13 16:06 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-13 16:06 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-13 16:06 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-11 07:57 - 2013-11-11 07:57 - 00058067 _____ C:\Users\Jonas ******\Downloads\2. Ernährung und Verdauung.zip 2013-11-10 16:31 - 2013-12-03 23:22 - 00000000 ___RD C:\Users\Jonas ******\Google Drive 2013-11-10 16:31 - 2013-11-10 16:31 - 00001731 _____ C:\Users\Jonas ******\Desktop\Google Drive.lnk 2013-11-10 16:29 - 2013-11-10 16:30 - 00819136 _____ (Google Inc.) C:\Users\Jonas ******\Downloads\googledrivesync.exe 2013-11-10 14:58 - 2013-11-10 14:58 - 00270004 _____ C:\Users\Jonas ******\Documents\ts3_clientui-win64-1382530211-2013-11-10 14_58_03.435999.dmp 2013-11-05 20:32 - 2013-11-12 21:03 - 00000010 _____ C:\Users\Jonas ******\Documents\LastLab.sk 2013-11-05 20:32 - 2013-11-05 20:32 - 00000203 _____ C:\Users\Jonas ******\Documents\BasicLab.sk 2013-11-05 20:32 - 2013-11-05 20:32 - 00000000 _____ C:\Users\Jonas ******\Documents\UserLab.sk 2013-11-05 10:25 - 2013-11-05 22:29 - 105085299 _____ C:\Windows\SysWOW64\ⅆ줭” ==================== One Month Modified Files and Folders ======= 2013-12-04 03:55 - 2013-12-04 03:54 - 00022449 _____ C:\Users\Jonas ******\Desktop\FRST.txt 2013-12-04 03:54 - 2013-12-04 03:53 - 01959614 _____ (Farbar) C:\Users\Jonas ******\Desktop\FRST64.exe 2013-12-04 03:51 - 2013-12-04 03:51 - 00000486 _____ C:\Users\Jonas ******\Desktop\defogger_disable.log 2013-12-04 03:51 - 2013-12-04 03:51 - 00000258 _____ C:\Users\Jonas ******\Downloads\defogger_enable.log 2013-12-04 03:51 - 2013-12-04 03:51 - 00000000 _____ C:\Users\Jonas ******\defogger_reenable 2013-12-04 03:51 - 2012-04-06 00:41 - 00000000 ____D C:\Users\Jonas ****** 2013-12-04 03:50 - 2013-12-04 03:50 - 00000486 _____ C:\Users\Jonas ******\Downloads\defogger_disable.log 2013-12-04 03:45 - 2013-12-04 03:44 - 00050477 _____ C:\Users\Jonas ******\Desktop\Defogger.exe 2013-12-04 03:32 - 2012-04-13 11:52 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-04 03:00 - 2011-12-17 11:28 - 01086271 _____ C:\Windows\WindowsUpdate.log 2013-12-04 00:56 - 2012-04-07 13:44 - 00000000 ____D C:\Program Files (x86)\Steam 2013-12-03 23:40 - 2013-12-03 23:40 - 00000000 ____D C:\Users\Jonas ******\AppData\Roaming\Malwarebytes 2013-12-03 23:39 - 2013-12-03 23:39 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Jonas ******\Downloads\mbam-setup-1.75.0.1300.exe 2013-12-03 23:39 - 2013-12-03 23:39 - 00001073 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-03 23:39 - 2013-12-03 23:39 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-12-03 23:39 - 2013-12-03 23:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-03 23:23 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-03 23:23 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-03 23:22 - 2013-11-10 16:31 - 00000000 ___RD C:\Users\Jonas ******\Google Drive 2013-12-03 23:15 - 2013-11-23 18:30 - 00002296 _____ C:\Windows\setupact.log 2013-12-03 23:15 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-03 21:42 - 2012-07-24 13:59 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2013-12-03 21:37 - 2013-09-13 20:22 - 00000000 ____D C:\Program Files (x86)\Origin 2013-12-03 21:29 - 2012-08-10 00:10 - 00000000 ____D C:\Users\Jonas ******\AppData\Local\PMB Files 2013-12-03 21:29 - 2012-08-10 00:10 - 00000000 ____D C:\ProgramData\PMB Files 2013-12-03 20:19 - 2012-07-24 13:59 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2013-12-03 10:55 - 2013-12-03 10:54 - 00017647 _____ C:\Windows\DirectX.log 2013-12-03 10:55 - 2012-04-07 15:18 - 00000000 ____D C:\Users\Jonas ******\Documents\My Games 2013-12-03 10:53 - 2013-12-03 10:52 - 00032718 _____ C:\Users\Jonas ******\Downloads\Addition.txt 2013-12-03 10:53 - 2013-12-03 10:51 - 00063081 _____ C:\Users\Jonas ******\Downloads\FRST.txt 2013-12-03 10:51 - 2013-12-03 10:51 - 00000000 ____D C:\FRST 2013-12-03 10:44 - 2013-12-03 10:44 - 643337992 _____ C:\Windows\MEMORY.DMP 2013-12-03 10:44 - 2013-12-03 10:44 - 00262144 _____ C:\Windows\Minidump\120313-29593-01.dmp 2013-12-03 10:44 - 2012-08-13 22:26 - 00000000 ____D C:\Windows\Minidump 2013-12-03 10:42 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-12-03 10:37 - 2013-04-01 01:56 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-03 02:45 - 2012-04-13 17:14 - 00000000 ____D C:\Users\Jonas ******\AppData\Roaming\SoftGrid Client 2013-12-03 00:06 - 2013-12-03 00:06 - 00000219 _____ C:\Users\Jonas ******\Desktop\Counter-Strike Source.url 2013-12-02 23:02 - 2012-05-30 14:05 - 00000000 ____D C:\Users\Jonas ******\Desktop\Spiele 2013-12-02 22:42 - 2013-12-02 22:41 - 00000000 ____D C:\Users\Jonas ******\Documents\B.Biochemie 2012 2013-12-02 22:40 - 2012-09-03 12:10 - 00000000 ____D C:\Users\Jonas ******\AppData\Roaming\TS3Client 2013-12-02 22:24 - 2012-10-07 15:25 - 00000000 ____D C:\Users\Jonas ******\AppData\Roaming\Spotify 2013-12-02 22:19 - 2013-12-02 22:10 - 1108480269 _____ C:\Users\Jonas ******\Downloads\B.Biochemie_2012-2013-12-02.zip 2013-12-02 17:40 - 2013-11-23 13:18 - 00000000 ____D C:\Users\Jonas ******\Documents\Tierphysiologische Übungen 2013-12-02 17:23 - 2012-10-07 15:25 - 00000000 ____D C:\Users\Jonas ******\AppData\Local\Spotify 2013-11-30 23:16 - 2013-01-16 20:28 - 00000000 ____D C:\Users\Jonas ******\AppData\Roaming\vlc 2013-11-29 19:39 - 2011-12-17 20:21 - 00697322 _____ C:\Windows\system32\perfh007.dat 2013-11-29 19:39 - 2011-12-17 20:21 - 00148328 _____ C:\Windows\system32\perfc007.dat 2013-11-29 19:39 - 2009-07-14 06:13 - 01614036 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-29 18:07 - 2012-08-16 21:01 - 00000000 ____D C:\Users\Jonas ******\AppData\Roaming\Skype 2013-11-29 17:56 - 2013-11-22 20:52 - 00000000 ____D C:\Program Files (x86)\DevPro 2013-11-28 11:14 - 2013-11-28 11:13 - 03821064 _____ C:\Users\Jonas ******\Downloads\battlelog-web-plugins_2.3.2_130.exe 2013-11-28 11:14 - 2012-12-10 00:13 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins 2013-11-26 20:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-26 18:06 - 2012-04-06 00:44 - 00001425 _____ C:\Users\Jonas ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-26 18:06 - 2007-07-12 02:49 - 00000000 ____D C:\Windows\Panther 2013-11-26 18:04 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-26 12:53 - 2013-11-26 12:48 - 00010277 _____ C:\Windows\IE11_main.log 2013-11-26 12:50 - 2013-11-26 12:50 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-26 12:50 - 2013-11-26 12:50 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-26 12:50 - 2013-11-26 12:50 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-26 12:50 - 2013-11-26 12:50 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-26 12:50 - 2013-11-26 12:50 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-26 12:50 - 2013-11-26 12:50 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-26 12:49 - 2013-11-26 12:49 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-26 12:49 - 2013-11-26 12:49 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-26 12:49 - 2013-11-26 12:49 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-26 12:49 - 2013-11-26 12:49 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-26 12:49 - 2013-11-26 12:49 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-26 12:49 - 2013-11-26 12:49 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-26 12:49 - 2013-11-26 12:49 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-26 12:49 - 2013-11-26 12:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-26 12:49 - 2013-11-26 12:49 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-26 12:49 - 2013-11-26 12:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-26 12:49 - 2013-11-26 12:49 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-26 12:49 - 2013-11-26 12:49 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-25 18:25 - 2012-04-06 00:41 - 00068248 _____ C:\Users\Jonas ******\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-25 18:09 - 2013-11-23 13:20 - 00000000 ____D C:\Users\Jonas ******\Documents\OC-Praktikum 2013-11-25 18:09 - 2013-10-30 01:35 - 00000584 _____ C:\Users\Jonas ******\Documents\grstyles.stl 2013-11-25 17:29 - 2013-11-25 17:29 - 00019456 ___SH C:\Users\Jonas ******\Thumbs.db 2013-11-25 17:24 - 2013-05-06 09:46 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-11-25 17:24 - 2013-04-01 01:56 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-11-25 17:24 - 2013-04-01 01:56 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-11-24 01:53 - 2012-05-11 00:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-23 18:30 - 2013-11-23 18:30 - 00000000 _____ C:\Windows\setuperr.log 2013-11-23 16:58 - 2013-10-14 17:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-11-23 13:38 - 2013-11-23 13:38 - 04379048 _____ (Piriform Ltd) C:\Users\Jonas ******\Downloads\ccsetup407.exe 2013-11-23 13:38 - 2013-11-23 13:38 - 00002786 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-23 13:38 - 2013-09-13 20:05 - 00000826 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-11-23 13:38 - 2013-09-13 20:05 - 00000000 ____D C:\Program Files\CCleaner 2013-11-23 08:32 - 2012-04-13 11:52 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-11-23 08:32 - 2012-04-13 11:52 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-11-23 08:32 - 2011-10-14 04:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-22 20:38 - 2013-11-22 20:05 - 247763201 _____ (YGOPro DevPro Online ) C:\Users\Jonas ******\Downloads\SetupDevPro1.9.7r2new.exe 2013-11-22 14:56 - 2013-09-13 19:36 - 00000000 ____D C:\ProgramData\BitGuard 2013-11-21 19:27 - 2013-11-21 19:27 - 00000000 ____D C:\Users\Jonas ******\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard 2013-11-21 17:35 - 2013-11-21 17:35 - 03820448 _____ C:\Users\Jonas ******\Downloads\battlelog-web-plugins_2.3.2_129.exe 2013-11-20 18:20 - 2012-04-13 15:28 - 00000000 ____D C:\Users\Jonas ******\AppData\Local\Adobe 2013-11-19 18:37 - 2013-05-17 23:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-16 02:37 - 2012-04-13 12:50 - 00000000 ____D C:\Users\Jonas ******\AppData\Roaming\Apple Computer 2013-11-14 22:54 - 2013-09-28 15:34 - 00002139 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-11-14 16:38 - 2013-11-14 16:38 - 03820824 _____ C:\Users\Jonas ******\Downloads\battlelog-web-plugins_2.3.1_125.exe 2013-11-14 00:47 - 2013-07-26 15:14 - 00000000 ____D C:\Windows\system32\MRT 2013-11-14 00:44 - 2012-04-14 19:37 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-12 21:03 - 2013-11-05 20:32 - 00000010 _____ C:\Users\Jonas ******\Documents\LastLab.sk 2013-11-11 08:58 - 2012-08-22 09:50 - 00000000 ____D C:\Users\Jonas ******\Documents\Buch 2013-11-11 07:57 - 2013-11-11 07:57 - 00058067 _____ C:\Users\Jonas ******\Downloads\2. Ernährung und Verdauung.zip 2013-11-11 05:50 - 2010-11-21 04:27 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-11-10 16:31 - 2013-11-10 16:31 - 00001731 _____ C:\Users\Jonas ******\Desktop\Google Drive.lnk 2013-11-10 16:30 - 2013-11-10 16:29 - 00819136 _____ (Google Inc.) C:\Users\Jonas ******\Downloads\googledrivesync.exe 2013-11-10 16:30 - 2013-09-28 15:33 - 00000000 ____D C:\Program Files (x86)\Google 2013-11-10 16:30 - 2013-07-03 15:22 - 00000000 ____D C:\Users\Jonas ******\AppData\Local\Google 2013-11-10 14:58 - 2013-11-10 14:58 - 00270004 _____ C:\Users\Jonas ******\Documents\ts3_clientui-win64-1382530211-2013-11-10 14_58_03.435999.dmp 2013-11-07 00:29 - 2012-06-24 18:54 - 00000000 ____D C:\ProgramData\CanonIJPLM 2013-11-05 22:29 - 2013-11-05 10:25 - 105085299 _____ C:\Windows\SysWOW64\ⅆ줭” 2013-11-05 20:32 - 2013-11-05 20:32 - 00000203 _____ C:\Users\Jonas ******\Documents\BasicLab.sk 2013-11-05 20:32 - 2013-11-05 20:32 - 00000000 _____ C:\Users\Jonas ******\Documents\UserLab.sk Some content of TEMP: ==================== C:\Users\Jonas ******\AppData\Local\Temp\avgnt.exe C:\Users\Jonas ******\AppData\Local\Temp\sonarinst.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-30 05:33 ==================== End Of Log ============================ --- --- --- Wäre super, wenn Sie mir helfen könnten. Denn ich komme nicht weiter und eine Allwunderheilformel gibt es ja anscheinend leider nicht, wie ich aus den Goldenen Regeln gelernt habe. Ich danke im Voraus, MFG Ragnokh PS: Ich habe auch die anderen Log-Dateinen, wie den GMER-Log vorliegen, aber habe diese noch nicht eingefügt, weil ich dann einen relativ großen Anhang hätte. Falls benötigt, reiche ich diese umgehend nach. Geändert von Ragnokh (04.12.2013 um 04:54 Uhr) Grund: Rechtschreibung, Andere Log-Dateinen |
Themen zu Bluescreen beim Enfernen von "ADWARE/BProtector.E" durch Avira Antivir |
adblock, adobe, avira, avira searchfree toolbar, bprotector, canon, ccsetup, dvdvideosoft ltd., filescout.exe, flash player, helper, homepage, install.exe, launch, log-datei, malware, minidump, newtab, pup.bprotector, pup.optional.1clickdownload.a, pup.optional.babylon.a, pup.optional.bprotector.a, pup.optional.datamngr.a, pup.optional.delta, pup.optional.delta.a, pup.optional.filescout.a, pup.optional.opencandy, pup.optional.opencandy.a, pup.optional.sweetim.a, security, services.exe, sicherheit, software, spotify web helper, super, svchost.exe, symantec |