| |
| |||||||
Log-Analyse und Auswertung: Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefundenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
09.12.2013, 08:50
| #1 |
 |  Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden Hallo, ich habe dasselbe Problem, das ich schon in einem anderen Thread gelesen habe, aber nicht weiß, wie ich es bei mir lösen kann. Beim Hochfahren meines PC kommt diese Meldung: RunDLL Problem beim Start von C:\Users\Benutzername\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll Das angegebene Modul wurde nicht gefunden. In einem anderen Thread habe ich gelesen, daß zunächst FRST64 gestartet werden soll. Habe ich gemacht; hier die LogFiles: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 03
Ran by Benutzername (administrator) on PC on 09-12-2013 08:27:10
Running from G:\
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Frontend.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
() C:\Program Files (x86)\FOXIT SOFTWARE\FOXIT READER\Foxit Reader.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [438784 2010-12-17] ()
Winlogon\Notify\ScCertProp: C:\Windows\SysWOW64\explorer.exe (Microsoft Corporation)
HKCU\...\Run: [BackgroundContainer] - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Benutzername\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [NWEReboot] - [x]
HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [40960 2004-03-09] (ScanSoft, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [57393 2004-03-09] (ScanSoft, Inc.)
HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Up-date\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-21] (AVAST Software)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\da89f187-2013-45e2-8d0a-7564b3210415.exe [180184 2013-11-23] (AVAST Software)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [623376 2013-11-18] (BlueStack Systems, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Whitelisted) ====================
ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://media.radiosai.org/www/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE7F40B6E99C0CB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.1und1.de/br/ie9_startpage
URLSearchHook: HKLM-x32 - (No Name) - {422f7661-9403-4da4-b4ef-cc3e268817b5} - No File
URLSearchHook: HKCU - (No Name) - {422f7661-9403-4da4-b4ef-cc3e268817b5} - No File
SearchScopes: HKCU - DefaultScope {94D71752-DB36-420A-B721-0E4D2828CD15} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {09038620-190C-402B-A92F-18864E6AB22F} URL = hxxp://go.1und1.de/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL =
SearchScopes: HKCU - {40064957-18EB-412d-9146-3F57E8D92EEC} URL = hxxp://go.1und1.de/br/ie9_search_pic/?su={searchTerms}
SearchScopes: HKCU - {5A817CF6-92D5-4DE5-AC38-82DF8A73EF28} URL = hxxp://go.gmx.net/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {64A0CF90-33DD-4B42-88A1-4AF10528A62F} URL = hxxp://suche.web.de/search/web/?mc=hp%40suche.suche%40home&mc=hp%40suche.suche%40home&su={searchTerms}&x=37&y=6
SearchScopes: HKCU - {6B1D1FB7-7233-4F7C-802C-21A1DDB12754} URL = hxxp://go.web.de/br/ie9_search_web/?su={searchTerms}
SearchScopes: HKCU - {8D27B32E-89EE-460e-82D2-5FC354078EAD} URL = hxxp://go.1und1.de/br/ie9_search_produkte/?su={searchTerms}
SearchScopes: HKCU - {94403E0D-8048-42DB-B16B-22B5AA70D423} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3317892&CUI=UN21651529163045011&UM=2
SearchScopes: HKCU - {94D71752-DB36-420A-B721-0E4D2828CD15} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL =
SearchScopes: HKCU - {DCE59F23-A446-45a5-9459-E68FDC0DE38D} URL = hxxp://go.1und1.de/br/ie9_search_maps/?su={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Soft-ware\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: No Name - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (Real-Player)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - No Name - {422f7661-9403-4da4-b4ef-cc3e268817b5} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {422F7661-9403-4DA4-B4EF-CC3E268817B5} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524
FF NewTab: about:blank
FF Homepage: hxxp://www.benefind.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silver-light\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vi-sion\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File
FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll No File
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\searchplugins\benefind.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Shop-Alarm - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\971d5a0e-9273-487f-b423-ed4d001e437a@73136d87-5f3a-4380-8edb-16a7fa56bbc4.com
FF Extension: Garmin Communicator - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: keyloggerbeater - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\keyloggerbeater@toptip.ca.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKCU\...\Firefox\Extensions: [firejump@firejump.net] - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8jv9no8s.default\extensions\firejump@firejump.net
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: () - C:\Users\Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: () - C:\Users\Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab
CHR Extension: () - C:\Users\Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-21] (AVAST Soft-ware)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [398096 2013-11-18] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-11-18] (BlueStack Systems, Inc.)
R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT)
S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Ser-vice\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [231936 2012-03-23] (Samsung Electronics Co., Ltd.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [993848 2011-04-19] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [399416 2011-04-19] (Secunia)
S2 AcrSch2Svc; "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe" [x]
==================== Drivers (Whitelisted) ====================
R1 27784551; C:\Windows\System32\DRIVERS\27784551.sys [157712 2009-09-25] (Kaspersky Lab)
R0 27784552; C:\Windows\System32\DRIVERS\27784552.sys [40464 2009-10-22] (Kaspersky Lab)
R1 73230381; C:\Windows\System32\DRIVERS\73230381.sys [157712 2009-09-25] (Kaspersky Lab)
R0 73230382; C:\Windows\System32\DRIVERS\73230382.sys [40464 2009-10-22] (Kaspersky Lab)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-01] (Wondershare)
R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-21] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-21] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-21] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-21] (AVAST Software)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-21] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-21] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [77584 2013-11-18] (BlueStack Systems)
S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT)
S3 eh100; C:\Windows\System32\DRIVERS\eh100.sys [45568 2009-11-11] (SCM Microsystems Inc.)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S0 snapman; C:\Windows\SysWow64\DRIVERS\snapman.sys [96320 2011-01-30] (Acronis)
R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-09 08:27 - 2013-12-09 08:27 - 00000000 ____D C:\FRST
2013-12-08 10:18 - 2013-12-08 10:18 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk
2013-12-08 10:18 - 2013-12-08 10:18 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2013-12-08 10:17 - 2013-12-09 07:54 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-12-08 10:12 - 2013-12-09 07:46 - 00000112 _____ C:\Windows\setupact.log
2013-12-08 10:12 - 2013-12-08 10:12 - 00000000 _____ C:\Windows\setuperr.log
2013-12-08 10:11 - 2013-12-09 07:46 - 00000968 _____ C:\Windows\PFRO.log
2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini
2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B}
2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6}
2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk
2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32
2013-12-01 22:52 - 2013-12-01 22:56 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\FileZilla
2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Benutzername\Desktop\BrccMCtl.exe - Ver-knüpfung.lnk
2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT
2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother
2013-11-27 18:38 - 2009-01-15 19:20 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll
2013-11-27 18:38 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll
2013-11-27 18:38 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll
2013-11-27 18:38 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll
2013-11-27 18:38 - 2003-11-28 18:57 - 00000000 _____ C:\Windows\brdfxspd.dat
2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\InstallShield
2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner
2013-11-27 16:33 - 2013-11-27 16:37 - 00032768 ___SH C:\Users\Benutzername\Documents\Thumbs.db
2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Foxit Reader
2013-11-23 11:58 - 2013-11-23 12:00 - 00000890 _____ C:\Users\Benutzername\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk
2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk
2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\AVAST Software
2013-11-17 14:40 - 2013-11-17 14:40 - 00000000 ____D C:\Users\Benutzername\AppData\Local\{FB739428-8E54-405C-9996-126A28D53B10}
2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Benutzername\Documents\ProcAlyzer Dumps
2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 07:34 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-11-14 07:34 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-14 07:34 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-14 07:34 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-11-14 07:34 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-11-14 07:34 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-11-14 07:34 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-11-14 07:34 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2013-11-14 07:34 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2013-11-14 07:34 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2013-11-14 07:34 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-11-14 07:34 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-11-14 07:34 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-11-14 07:34 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-11-14 07:34 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2013-11-14 07:34 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2013-11-14 07:34 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-11-14 07:34 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-11-14 07:28 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2013-11-14 07:28 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2013-11-14 07:13 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-14 07:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-14 07:12 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-11-14 07:12 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-14 07:12 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-14 07:12 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-11-14 07:12 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-11-14 07:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-14 07:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2013-11-14 07:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-11-14 07:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2013-11-14 07:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-14 07:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2013-11-14 07:12 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-11-14 07:12 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-14 07:12 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-11-14 07:12 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-11-14 07:12 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-11-14 07:12 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-11-14 07:12 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-11-14 07:12 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-11-14 07:12 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-11-14 07:12 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-11-14 07:12 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-11-14 07:12 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-11-14 07:12 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-14 07:12 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-11-14 07:12 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-11-14 07:12 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-11-14 07:12 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-11-13 06:57 - 2013-09-06 07:55 - 06583664 _____ (AVAST Software) C:\Program1
2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE
2013-11-09 21:13 - 2013-08-16 13:56 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll
2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Benutzername\Desktop\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11
==================== One Month Modified Files and Folders =======
2013-12-09 08:27 - 2013-12-09 08:27 - 00000000 ____D C:\FRST
2013-12-09 08:16 - 2011-02-10 07:48 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-09 08:15 - 2011-01-30 17:08 - 00000947 _____ C:\Windows\Brpfx04a.ini
2013-12-09 07:55 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-09 07:55 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-09 07:54 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2013-12-09 07:46 - 2013-12-08 10:12 - 00000112 _____ C:\Windows\setupact.log
2013-12-09 07:46 - 2013-12-08 10:11 - 00000968 _____ C:\Windows\PFRO.log
2013-12-09 07:46 - 2011-06-16 19:54 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-09 07:46 - 2011-02-10 07:48 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-09 07:46 - 2011-01-31 20:15 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-12-09 07:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-08 22:09 - 2011-01-30 16:41 - 01954491 _____ C:\Windows\WindowsUpdate.log
2013-12-08 21:58 - 2011-08-13 13:19 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Skype
2013-12-08 21:37 - 2013-01-06 19:57 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-08 20:49 - 2013-10-18 19:49 - 00000000 ____D C:\Program Files (x86)\File Type Advisor
2013-12-08 15:02 - 2013-10-16 20:24 - 00000099 _____ C:\Users\Public\LMDebug.log
2013-12-08 10:18 - 2013-12-08 10:18 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk
2013-12-08 10:18 - 2013-12-08 10:18 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk
2013-12-08 10:18 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks
2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\Program Files (x86)\BlueStacks
2013-12-08 10:12 - 2013-12-08 10:12 - 00000000 _____ C:\Windows\setuperr.log
2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini
2013-12-08 09:11 - 2012-11-05 20:59 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-12-08 08:49 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat
2013-12-08 08:49 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat
2013-12-08 08:49 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B}
2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6}
2013-12-07 23:24 - 2013-03-28 07:25 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-07 23:18 - 2011-01-30 16:45 - 00000000 ____D C:\Users\Benutzername
2013-12-07 23:17 - 2011-06-22 10:38 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\PC-FAX TX
2013-12-07 23:17 - 2011-02-02 22:42 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Google
2013-12-07 23:17 - 2011-01-31 09:05 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\IrfanView
2013-12-07 23:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2013-12-07 23:16 - 2011-06-26 11:32 - 00000000 ____D C:\ProgramData\Real
2013-12-07 23:16 - 2011-02-10 07:48 - 00000000 ____D C:\Program Files\Google
2013-12-07 23:16 - 2011-02-10 07:47 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-07 23:16 - 2011-02-02 22:42 - 00000000 ____D C:\ProgramData\Google
2013-12-07 23:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-12-06 10:55 - 2011-02-04 19:07 - 00000000 ____D C:\Users\Benutzername\AppData\Local\FreePDF_XP
2013-12-03 18:27 - 2012-10-02 13:42 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\korAccount
2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk
2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32
2013-12-01 22:56 - 2013-12-01 22:52 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\FileZilla
2013-11-30 20:49 - 2013-10-18 19:49 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck
2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Benutzername\Desktop\BrccMCtl.exe - Verknüpfung.lnk
2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT
2013-11-27 18:39 - 2011-01-30 17:08 - 00000467 _____ C:\Windows\BRWMARK.INI
2013-11-27 18:39 - 2011-01-30 17:08 - 00000169 _____ C:\Windows\brpcfx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini
2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother
2013-11-27 18:38 - 2011-01-30 17:01 - 00000050 _____ C:\Windows\system32\bd7420.dat
2013-11-27 18:38 - 2011-01-28 11:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Infor-mation
2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\InstallShield
2013-11-27 18:34 - 2011-01-28 10:59 - 00000000 ____D C:\Windows\Panther
2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner
2013-11-27 16:37 - 2013-11-27 16:33 - 00032768 ___SH C:\Users\Benutzername\Documents\Thumbs.db
2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Foxit Reader
2013-11-26 19:27 - 2012-08-24 06:23 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-26 19:27 - 2011-08-13 13:19 - 00000000 ____D C:\ProgramData\Skype
2013-11-25 20:25 - 2013-05-08 06:08 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-11-25 20:25 - 2013-03-28 07:25 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-11-25 20:25 - 2013-03-28 07:25 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-25 12:02 - 2011-01-30 20:23 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Microsoft Help
2013-11-25 12:02 - 2011-01-30 20:22 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-23 13:39 - 2011-01-30 19:49 - 00000000 ____D C:\ProgramData\PSYPRCFG
2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\ProgramData\Psyprax32
2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\Program Files (x86)\Psyprax32
2013-11-23 12:00 - 2013-11-23 11:58 - 00000890 _____ C:\Users\Benutzername\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk
2013-11-22 16:09 - 2011-01-30 23:26 - 00000000 ____D C:\Program Files (x86)\svnet
2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk
2013-11-22 12:00 - 2011-01-31 21:36 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\vlc
2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\AVAST Software
2013-11-21 15:07 - 2013-03-05 07:42 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-11-21 15:07 - 2013-03-05 07:42 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys
2013-11-21 15:07 - 2012-11-05 20:59 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys
2013-11-21 15:07 - 2012-11-05 20:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-11-21 15:07 - 2011-06-29 07:56 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 _____ C:\Windows\SysWOW64\config.nt
2013-11-21 07:42 - 2013-01-06 19:57 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-21 07:42 - 2012-04-04 14:13 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-21 07:42 - 2011-05-16 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-21 07:42 - 2011-02-01 11:59 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Adobe
2013-11-21 07:02 - 2013-09-12 17:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-20 23:20 - 2013-10-12 10:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-11-19 14:32 - 2013-10-09 21:52 - 00000919 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-11-17 20:45 - 2013-11-02 08:26 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2013-11-17 14:58 - 2013-10-19 19:49 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\FileAdvisor
2013-11-17 14:40 - 2013-11-17 14:40 - 00000000 ____D C:\Users\Benutzername\AppData\Local\{FB739428-8E54-405C-9996-126A28D53B10}
2013-11-17 14:40 - 2011-02-01 14:00 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Windows Live
2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Benutzername\Documents\ProcAlyzer Dumps
2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-14 12:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-14 08:24 - 2013-05-11 06:48 - 00001431 _____ C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-14 08:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 07:34 - 2013-08-14 21:25 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 07:32 - 2011-01-31 21:26 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-13 14:05 - 2011-01-31 17:25 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2013-11-13 12:00 - 2011-01-31 17:28 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Yahoo
2013-11-11 05:50 - 2011-01-30 16:59 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-10 11:42 - 2012-12-25 14:30 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Foxit Software
2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE
2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Benutzername\Desktop\Zeta Producer 11.lnk
2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11
2013-11-09 08:59 - 2013-05-21 19:25 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Zeta Producer 11
Some content of TEMP:
====================
C:\Users\Benutzername\AppData\Local\Temp\avgnt.exe
C:\Users\Benutzername\AppData\Local\Temp\Checkupdate.exe
C:\Users\Benutzername\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Benutzername\AppData\Local\Temp\gcapi_dll.dll
C:\Users\Benutzername\AppData\Local\Temp\gtapi_signed.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-20 20:18
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-12-2013 03
Ran by Josef Robrecht at 2013-12-09 08:28:21
Running from G:\
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958) (x32)
1&1 Upload-Manager (x32 Version: 2.0.676)
Adobe AIR (x32 Version: 3.9.0.1210)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.152)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.5.146)
Apple Application Support (x32 Version: 1.4.1)
Apple Software Update (x32 Version: 2.1.1.116)
avast! Free Antivirus (x32 Version: 9.0.2008)
Avira Free Antivirus (x32 Version: 14.0.1.759)
BlueStacks App Player (x32 Version: 0.8.2.3018)
BlueStacks Notification Center (x32 Version: 0.8.2.3018)
Brother MFL-Pro Suite MFC-7420 (x32 Version: 1.0.1.0)
capella reader 6.0 (x32 Version: 6.0.19.0)
CCleaner (Version: 4.08)
CloudReading (x32 Version: 1.0.27.1025)
Common Desktop Agent (Version: 1.53.0)
CompuGROUP Java 1.6.0.11.1 (x32)
Cool Edit Pro 2.0 (x32)
cyberJack Base Components (x32 Version: 6.10.0)
D3DX10 (x32 Version: 15.4.2368.0902)
DesignPro SE eMedia (x32 Version: 5.0.1056)
Desktop Icon für Amazon (Version: 1.0.1 (de))
eHealth200 BCS Terminal (x32 Version: 1.13)
eHealth500 Terminal (x32 Version: 1.05)
Elevated Installer (x32 Version: 2.1.13)
Fahrtenbuch mmm/fb Version 2008 (x32)
File Type Advisor 1.0 (x32)
FilterFTP (x32 Version: Actual Version)
FireJump (x32 Version: 1.0.2.5)
FormatFactory 3.0.1 (x32 Version: 3.0.1)
Foxit Reader (x32 Version: 6.1.1.1031)
Free M4a to MP3 Converter 8.0 (x32)
Free Video Flip and Rotate version 2.1.6.128 (x32 Version: 2.1.6.128)
Free Video to DVD Converter version 5.0.9.412 (x32 Version: 5.0.9.412)
Free Video to MP3 Converter version 5.0.6.221 (x32 Version: 5.0.6.221)
Free YouTube Download version 3.1.24.412 (x32 Version: 3.1.24.412)
FreeOCR 3.0 (Version: 3.0)
FreePDF (Remove only) (x32)
Garmin Express (x32 Version: 2.1.13)
Garmin Express Tray (x32 Version: 2.1.13)
Garmin Update Service (x32 Version: 2.1.13)
GMX SMS-Manager (x32 Version: 2.7.2)
GMX SMS-Manager (x32 Version: 2.7.2.6)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54)
Google Update Helper (x32 Version: 1.3.21.165)
GPL Ghostscript 9.00 (x32)
Helium Audio Converter (build 245) (x32 Version: 1.3.0.245)
IrfanView (remove only) (x32 Version: 4.36)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
korAccount 3 (x32 Version: 3.3.31)
Logitech Webcam Software (Version: 12.10.1113)
Logitech Webcam Software-Treiberpaket (Version: 12.10.1110)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
MediaCoder x64 0.8.21.5392 (Version: 0.8.21.5392)
Mesh Runtime (x32 Version: 15.4.5722.2)
Messenger Companion (x32 Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office XP Professional mit FrontPage (x32 Version: 10.0.6626.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 24.1.1)
Mozilla Thunderbird 24.1.1 (x86 de) (x32 Version: 24.1.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
MuseScore 1.0 MuseScore score typesetter (x32 Version: 1.0.0)
MyFreeCodec (HKCU)
Nero BurnLite 10 (x32 Version: 10.0.10500.5.100)
Nero BurnLite 10 (x32 Version: 10.0.10600)
Nero Control Center 10 (x32 Version: 10.6.13000.0.11)
Nero ControlCenter 10 Help (CHM) (x32 Version: 1.0.10700)
Nero Core Components 10 (x32 Version: 2.0.19900.9.11)
Nero Update (x32 Version: 11.0.11500.28.0)
Notepad++ (x32 Version: 5.9)
NVIDIA 3D Vision Treiber 331.65 (Version: 331.65)
NVIDIA Grafiktreiber 331.65 (Version: 331.65)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.133.889)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165)
NVIDIA Systemsteuerung 331.65 (Version: 331.65)
NVIDIA Update 1.15.2 (Version: 1.15.2)
NVIDIA Update Components (Version: 1.15.2)
PaperPort (x32 Version: 9.02.0814)
PDFCreator (x32 Version: 1.1.0)
PL-2303 USB-to-Serial (x32 Version: 1.3.0)
Psyprax (x32)
QuickTime (x32 Version: 7.74.80.86)
RadioTotal1 Toolbar for IE (x32 Version: 6.17.1.25)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6215)
RealUpgrade 1.1 (x32 Version: 1.1.0)
Recuva (Version: 1.42)
RedMon - Redirection Port Monitor
RST-MED / ICD-10-GM 2012 Thesaurus (x32 Version: 4.2.0.0)
Samsung Easy Printer Manager (x32 Version: 1.02.06.10)
Samsung Network PC Fax (x32 Version: 1.05.29.00)
Samsung Printer Live Update (x32 Version: 1.01.00:04(2013-04-22))
Samsung Scan Assistant (x32 Version: 1.04.45.00)
Samsung SCX-472x Series (x32 Version: 1.15 (28.05.2012))
Secunia PSI (2.0.0.3003) (x32)
SkillsTraining für Borderline-Patienten (x32 Version: 1.1.34)
Skype™ 6.11 (x32 Version: 6.11.102)
Spybot - Search & Destroy (x32 Version: 2.1.19)
sv.net (x32 Version: 13.2)
swMSM (x32 Version: 12.0.0.1)
TeamViewer 8 (x32 Version: 8.0.22298)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VideoPad Videobearbeitungs-Software (x32)
VIS (x32)
VLC media player 2.1.1 (x32 Version: 2.1.1)
VR-NetWorld (x32)
WEB.DE MailCheck für Mozilla Firefox (x32 Version: 2.1.4.1420)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3502.0922)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3502.0922)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0)
XMind (x32 Version: 3.2.1)
Yahoo! Messenger (x32)
Zeta Producer 11 11.4.2 (nur entfernen) (HKCU Version: 11.4.2)
==================== Restore Points =========================
07-12-2013 21:55:12 Removed BlueStacks Notification Center
07-12-2013 22:14:17 Wiederherstellungsvorgang
07-12-2013 22:20:04 avast! antivirus system restore point
07-12-2013 22:24:36 Windows Update
07-12-2013 22:56:50 Removed BlueStacks Notification Center
08-12-2013 08:05:55 Removed BlueStacks Notification Center
08-12-2013 11:00:37 Windows-Sicherung
08-12-2013 15:56:04 Windows-Sicherung
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {23DE297F-9CB4-4AB1-B5B3-DD6964E486AD} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-21] (AVAST Software)
Task: {2EAB93CF-3A21-4F66-B329-BD17F87309C5} - System32\Tasks\{E63939F1-0BC4-4D9D-B409-189EA9BA1C9F} => C:\Program Files (x86)\Common Files\microsoft shared\PhotoEd\PHOTOED.EXE [2000-12-15] (Microsoft Corporation)
Task: {3FB40B39-2C0F-43F9-8247-A1462F5A0D28} - System32\Tasks\{7C82D7F2-08EA-4333-8EA7-FE176942F802} => H:\Acronis.True.Image.v9.0.2323\setup.exe
Task: {49A7011E-AD2E-48A3-BD73-C4BDF1A6AA2F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {4D1F6C6D-DD0D-42A0-89B5-2D0627CE8DD3} - System32\Tasks\NeroLaufwerkssicherungC => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {4EFC51CC-B712-4EE1-81C9-4DD8FFF23EAA} - System32\Tasks\FileAdvisorCheck => C:\Program Files (x86)\File Type Advisor\file-type-advisor.exe [2013-07-12] (filetypeadvisor.com )
Task: {553C22DC-08AF-47F7-8D09-BD32CD89EE74} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {59F28BA5-4164-4F83-90F7-63143D9EF39E} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1630602834-2246192719-3532302717-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-07-27] (RealNetworks, Inc.)
Task: {5CBA4D7E-1CEC-4A90-A2C4-BF756C169DC1} - System32\Tasks\NCH Software\videopadShakeIcon => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [2013-11-02] (NCH Software)
Task: {63A241CA-BB1F-4413-8099-431AAC30F690} - System32\Tasks\Josef Robrecht Local Autobackup 5 4 => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {6648226C-F9D8-4E67-B55D-DACDB4E22249} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1630602834-2246192719-3532302717-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-07-27] (RealNetworks, Inc.)
Task: {693D82C2-679C-46B9-903E-EAFB0907DCAA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {6FA8A20F-6C7A-4E56-AFF7-ADD783DDB779} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
Task: {7BD61152-2010-45E9-AD36-D7BCF879E2D3} - System32\Tasks\FileAdvisorUpdate => C:\Program Files (x86)\File Type Advisor\fileadvisor.exe [2013-07-12] (File Type Advisor)
Task: {83C76275-584C-4837-96F4-BEC0553849F4} - System32\Tasks\NeroDateisicherungC => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {878ADC9D-572A-4BC1-AAF6-F2E4F5A6CE8B} - System32\Tasks\{59B9C79B-31B4-45F6-840C-30D5C5B7869F} => D:\Nero 7.0 Premium\setupx.exe
Task: {88D8A33A-95ED-415E-B606-DBCD2DB2DEAB} - System32\Tasks\{B0D78F4B-2872-40FD-8324-A2A5E9AC55A0} => C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe [2013-09-05] (Adobe Systems Incorporated)
Task: {8B55C209-CF4F-444C-9016-91710E0BBE20} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {9060B6BE-541E-48F2-80BD-31D2A3D724E7} - System32\Tasks\{EBF376DF-9CC3-4A04-8751-87C323B325D7} => H:\Acronis.True.Image.v9.0.2323\setup.exe
Task: {A2A9CDD7-30A0-4F5A-AE5E-5EEDA98B3802} - System32\Tasks\NeroLaufwerkssicherungCundRecovery => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {A633D176-F4E5-45DF-98DA-9EA0E1FFA8D9} - System32\Tasks\{D289D534-C809-41D8-9387-21EB09910F4E} => C:\Program Files (x86)\svnet\svnet.exe [2013-05-28] (ITSG GmbH)
Task: {BA6F8006-2D57-4D47-8882-212360E1E26F} - System32\Tasks\{395EAFC9-CE5F-46A4-B510-8EAB37D2891B} => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe [2013-10-01] (TeamViewer GmbH)
Task: {BB409853-28D0-49EF-BEF9-AAAACE658C0D} - System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6} => C:\Program Files (x86)\BlueStacks\HD-StartLauncher.exe [2013-11-18] (BlueStack Systems, Inc.)
Task: {BB82560E-9A98-4151-BD62-E46D062FE8B9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {BBBEADDD-EA2B-4C38-B6D3-C9D1A4F5B713} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\Josef Robrecht\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION
Task: {C3FC3E86-312D-4E94-AD4A-AE8A8FCBB492} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-10] (Google Inc.)
Task: {CD58EA66-6982-4583-9FB7-1A3CBB781FBC} - System32\Tasks\Josef Robrecht => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {D3A48D0C-CA80-4D5E-B3A3-71112AC837F2} - System32\Tasks\SicherungFestplatteC => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe
Task: {E34100B2-2A38-4A46-AC87-E91908390C6F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-10] (Google Inc.)
Task: {E77ABB7E-A2CD-40B1-9778-DC283D33DE16} - System32\Tasks\{4DB97B9F-9B7B-4992-A9AC-46E6155AC30B} => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe [2013-10-01] (TeamViewer GmbH)
Task: {F252A275-9B97-46B8-BA6F-5AB478D51560} - System32\Tasks\{BF97051F-EF8D-436D-A0F4-4A23CEE3E943} => C:\Program Files (x86)\Psychoholic Software\Patientenfragebogen\Patientenfragebogen.exe
Task: {F8914082-0FBE-4F81-A21F-77F74A6D716B} - System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B} => C:\Program Files (x86)\BlueStacks\HD-StartLauncher.exe [2013-11-18] (BlueStack Systems, Inc.)
Task: {F9779B8F-3E39-4708-A3EB-4D238B674CBB} - System32\Tasks\Josef Robrecht NBAgent 5 4 => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2010-12-17 17:13 - 2010-12-17 17:13 - 00050688 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2013-12-09 07:48 - 2013-12-08 17:08 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13120801\algo.dll
2012-09-29 23:29 - 2012-09-19 18:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-09-14 12:49 - 2013-05-16 09:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-09-14 12:49 - 2013-05-16 09:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2013-09-14 12:49 - 2013-05-16 09:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2013-11-21 15:07 - 2013-11-21 15:07 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2011-08-08 07:31 - 2007-05-31 06:38 - 00167936 ____N () C:\Windows\SysWOW64\SerialXP.dll
2013-09-14 12:49 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2013-09-14 12:49 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2013-10-12 10:58 - 2013-11-20 23:20 - 03008624 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-10-12 10:58 - 2013-11-20 23:20 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-10-12 10:58 - 2013-11-20 23:20 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2013-11-09 21:13 - 2013-09-27 14:19 - 00561152 _____ () C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\CommentsSummary.fpi
2013-11-09 21:13 - 2013-09-27 15:54 - 01746432 _____ () C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\Speech.fpi
2013-11-27 18:38 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-11-15 20:16 - 2013-11-15 20:16 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Windows:F8671BEAE7CF0F7B
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/08/2013 05:39:55 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: i_view32.exe, Version: 4.3.6.0, Zeitstempel: 0x51cafb1c
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x8bfff632
ID des fehlerhaften Prozesses: 0x1190
Startzeit der fehlerhaften Anwendung: 0xi_view32.exe0
Pfad der fehlerhaften Anwendung: i_view32.exe1
Pfad des fehlerhaften Moduls: i_view32.exe2
Berichtskennung: i_view32.exe3
Error: (12/08/2013 10:14:59 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80070002, "file:///G:\__WordPerfect\">.
Error: (12/08/2013 10:14:59 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80070002, "file:///G:\__Personen\">.
Error: (12/08/2013 10:14:59 AM) (Source: Windows Search Service) (User: )
Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80070003, "file:///G:\_Fotos\KunzmannHelga\">.
Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: )
Description: Der Index kann nicht initialisiert werden.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490)
Error: (12/08/2013 10:14:14 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (12/08/2013 10:14:14 AM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800)
System errors:
=============
Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (12/09/2013 07:49:24 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
Error: (12/09/2013 07:49:24 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
Error: (12/09/2013 07:49:14 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%-2140993535
Error: (12/09/2013 07:49:14 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet:
%%-2140993535
Error: (12/09/2013 07:49:14 AM) (Source: PNRPSvc) (User: )
Description: 0x80630801
Error: (12/09/2013 07:48:49 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
snapman
Microsoft Office Sessions:
=========================
Error: (05/30/2013 10:51:01 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3315 seconds with 1200 seconds of active time. This session ended with a crash.
Error: (01/13/2013 05:25:18 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 19 seconds with 0 seconds of active time. This session ended with a crash.
Error: (09/05/2012 09:17:50 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 6579 seconds with 120 seconds of active time. This session ended with a crash.
Error: (05/14/2012 09:44:27 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 11075 seconds with 540 seconds of active time. This session ended with a crash.
Error: (05/01/2012 03:11:36 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 83 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/01/2012 02:35:56 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 58 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/01/2012 02:34:26 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 49 seconds with 0 seconds of active time. This session ended with a crash.
Error: (05/01/2012 02:33:24 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 15863 seconds with 10800 seconds of active time. This session ended with a crash.
Error: (02/14/2012 08:38:03 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4536 seconds with 180 seconds of active time. This session ended with a crash.
Error: (02/24/2011 01:03:45 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1974 seconds with 0 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Percentage of memory in use: 37%
Total physical RAM: 8151.12 MB
Available physical RAM: 5098.43 MB
Total Pagefile: 16300.41 MB
Available Pagefile: 12444.75 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: (System) (Fixed) (Total:467.27 GB) (Free:377.78 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:195.31 GB) (Free:134.84 GB) NTFS
Drive e: (Sicherung) (Fixed) (Total:259.17 GB) (Free:115.85 GB) NTFS
Drive g: (SEA_DISK) (Fixed) (Total:232.83 GB) (Free:172.39 GB) FAT32
Drive h: (DOROJOSE) (Removable) (Total:1.92 GB) (Free:1.52 GB) FAT
Drive i: (JOSEF 08 GB) (Removable) (Total:7.46 GB) (Free:7.41 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 191EBE5D)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=467 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=195 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=259 GB) - (Type=OF Extended)
========================================================
Disk: 1 (Size: 7 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)
========================================================
Disk: 2 (Size: 2 GB) (Disk ID: 004DF91E)
Partition 1: (Active) - (Size=2 GB) - (Type=06)
========================================================
Disk: 3 (Size: 233 GB) (Disk ID: EEF844D8)
Partition 1: (Active) - (Size=233 GB) - (Type=0C)
==================== End Of Log ============================
Danke! |
| Themen zu Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden |
| antivir, antivirus, backgroundcontainer, bluestacks, converter, entfernen, flash player, homepage, installation, kaspersky, mozilla, newtab, plug-in, problem, pup.optional.conduit, pup.optional.conduit.a, pup.optional.filesfrog.a, pup.optional.opencandy, refresh, registry, secunia psi, security, services.exe, software, starten, svchost.exe, system |
Baum-Darstellung