|
Log-Analyse und Auswertung: Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefundenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
09.12.2013, 08:50 | #1 |
| Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden Hallo, ich habe dasselbe Problem, das ich schon in einem anderen Thread gelesen habe, aber nicht weiß, wie ich es bei mir lösen kann. Beim Hochfahren meines PC kommt diese Meldung: RunDLL Problem beim Start von C:\Users\Benutzername\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll Das angegebene Modul wurde nicht gefunden. In einem anderen Thread habe ich gelesen, daß zunächst FRST64 gestartet werden soll. Habe ich gemacht; hier die LogFiles: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 03 Ran by Benutzername (administrator) on PC on 09-12-2013 08:27:10 Running from G:\ Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe (shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe (REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe (Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Frontend.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe () C:\Program Files (x86)\FOXIT SOFTWARE\FOXIT READER\Foxit Reader.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [438784 2010-12-17] () Winlogon\Notify\ScCertProp: C:\Windows\SysWOW64\explorer.exe (Microsoft Corporation) HKCU\...\Run: [BackgroundContainer] - "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Benutzername\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [NWEReboot] - [x] HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [40960 2004-03-09] (ScanSoft, Inc.) HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [57393 2004-03-09] (ScanSoft, Inc.) HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Up-date\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-21] (AVAST Software) HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\da89f187-2013-45e2-8d0a-7564b3210415.exe [180184 2013-11-23] (AVAST Software) HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [623376 2013-11-18] (BlueStack Systems, Inc.) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== ProxyServer: localhost:21320 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://media.radiosai.org/www/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE7F40B6E99C0CB01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.1und1.de/br/ie9_startpage URLSearchHook: HKLM-x32 - (No Name) - {422f7661-9403-4da4-b4ef-cc3e268817b5} - No File URLSearchHook: HKCU - (No Name) - {422f7661-9403-4da4-b4ef-cc3e268817b5} - No File SearchScopes: HKCU - DefaultScope {94D71752-DB36-420A-B721-0E4D2828CD15} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {09038620-190C-402B-A92F-18864E6AB22F} URL = hxxp://go.1und1.de/br/ie9_search_web/?su={searchTerms} SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL = SearchScopes: HKCU - {40064957-18EB-412d-9146-3F57E8D92EEC} URL = hxxp://go.1und1.de/br/ie9_search_pic/?su={searchTerms} SearchScopes: HKCU - {5A817CF6-92D5-4DE5-AC38-82DF8A73EF28} URL = hxxp://go.gmx.net/br/ie9_search_web/?su={searchTerms} SearchScopes: HKCU - {64A0CF90-33DD-4B42-88A1-4AF10528A62F} URL = hxxp://suche.web.de/search/web/?mc=hp%40suche.suche%40home&mc=hp%40suche.suche%40home&su={searchTerms}&x=37&y=6 SearchScopes: HKCU - {6B1D1FB7-7233-4F7C-802C-21A1DDB12754} URL = hxxp://go.web.de/br/ie9_search_web/?su={searchTerms} SearchScopes: HKCU - {8D27B32E-89EE-460e-82D2-5FC354078EAD} URL = hxxp://go.1und1.de/br/ie9_search_produkte/?su={searchTerms} SearchScopes: HKCU - {94403E0D-8048-42DB-B16B-22B5AA70D423} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3317892&CUI=UN21651529163045011&UM=2 SearchScopes: HKCU - {94D71752-DB36-420A-B721-0E4D2828CD15} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = SearchScopes: HKCU - {DCE59F23-A446-45a5-9459-E68FDC0DE38D} URL = hxxp://go.1und1.de/br/ie9_search_maps/?su={searchTerms} BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Soft-ware\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO-x32: No Name - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (Real-Player) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKLM-x32 - No Name - {422f7661-9403-4da4-b4ef-cc3e268817b5} - No File Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKCU - No Name - {422F7661-9403-4DA4-B4EF-CC3E268817B5} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524 FF NewTab: about:blank FF Homepage: hxxp://www.benefind.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll () FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silver-light\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vi-sion\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll No File FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\searchplugins\benefind.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Shop-Alarm - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\971d5a0e-9273-487f-b423-ed4d001e437a@73136d87-5f3a-4380-8edb-16a7fa56bbc4.com FF Extension: Garmin Communicator - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} FF Extension: keyloggerbeater - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\keyloggerbeater@toptip.ca.xpi FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF HKCU\...\Firefox\Extensions: [firejump@firejump.net] - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8jv9no8s.default\extensions\firejump@firejump.net Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: () - C:\Users\Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0 CHR Extension: () - C:\Users\Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab CHR Extension: () - C:\Users\Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0 CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-21] (AVAST Soft-ware) R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [398096 2013-11-18] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-11-18] (BlueStack Systems, Inc.) R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT) S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Ser-vice\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries) R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [231936 2012-03-23] (Samsung Electronics Co., Ltd.) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [993848 2011-04-19] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [399416 2011-04-19] (Secunia) S2 AcrSch2Svc; "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe" [x] ==================== Drivers (Whitelisted) ==================== R1 27784551; C:\Windows\System32\DRIVERS\27784551.sys [157712 2009-09-25] (Kaspersky Lab) R0 27784552; C:\Windows\System32\DRIVERS\27784552.sys [40464 2009-10-22] (Kaspersky Lab) R1 73230381; C:\Windows\System32\DRIVERS\73230381.sys [157712 2009-09-25] (Kaspersky Lab) R0 73230382; C:\Windows\System32\DRIVERS\73230382.sys [40464 2009-10-22] (Kaspersky Lab) S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-01] (Wondershare) R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-21] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-21] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-21] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-21] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-21] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-21] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-21] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-21] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-07] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [77584 2013-11-18] (BlueStack Systems) S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT) S3 eh100; C:\Windows\System32\DRIVERS\eh100.sys [45568 2009-11-11] (SCM Microsystems Inc.) R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S0 snapman; C:\Windows\SysWow64\DRIVERS\snapman.sys [96320 2011-01-30] (Acronis) R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-09 08:27 - 2013-12-09 08:27 - 00000000 ____D C:\FRST 2013-12-08 10:18 - 2013-12-08 10:18 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk 2013-12-08 10:18 - 2013-12-08 10:18 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk 2013-12-08 10:17 - 2013-12-09 07:54 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks 2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2013-12-08 10:12 - 2013-12-09 07:46 - 00000112 _____ C:\Windows\setupact.log 2013-12-08 10:12 - 2013-12-08 10:12 - 00000000 _____ C:\Windows\setuperr.log 2013-12-08 10:11 - 2013-12-09 07:46 - 00000968 _____ C:\Windows\PFRO.log 2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini 2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B} 2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6} 2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk 2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32 2013-12-01 22:52 - 2013-12-01 22:56 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\FileZilla 2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Benutzername\Desktop\BrccMCtl.exe - Ver-knüpfung.lnk 2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT 2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini 2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother 2013-11-27 18:38 - 2009-01-15 19:20 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll 2013-11-27 18:38 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll 2013-11-27 18:38 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll 2013-11-27 18:38 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll 2013-11-27 18:38 - 2003-11-28 18:57 - 00000000 _____ C:\Windows\brdfxspd.dat 2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\InstallShield 2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner 2013-11-27 16:33 - 2013-11-27 16:37 - 00032768 ___SH C:\Users\Benutzername\Documents\Thumbs.db 2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Foxit Reader 2013-11-23 11:58 - 2013-11-23 12:00 - 00000890 _____ C:\Users\Benutzername\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk 2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk 2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\AVAST Software 2013-11-17 14:40 - 2013-11-17 14:40 - 00000000 ____D C:\Users\Benutzername\AppData\Local\{FB739428-8E54-405C-9996-126A28D53B10} 2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Benutzername\Documents\ProcAlyzer Dumps 2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-14 07:34 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2013-11-14 07:34 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2013-11-14 07:34 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2013-11-14 07:34 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2013-11-14 07:34 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2013-11-14 07:34 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-11-14 07:34 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2013-11-14 07:34 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2013-11-14 07:34 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2013-11-14 07:34 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2013-11-14 07:34 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2013-11-14 07:34 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2013-11-14 07:34 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2013-11-14 07:34 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2013-11-14 07:34 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2013-11-14 07:34 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2013-11-14 07:34 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-11-14 07:34 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2013-11-14 07:28 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2013-11-14 07:28 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2013-11-14 07:13 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-14 07:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-14 07:12 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-14 07:12 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-14 07:12 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-14 07:12 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-14 07:12 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-14 07:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-14 07:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-14 07:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-14 07:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-14 07:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-14 07:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-14 07:12 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-14 07:12 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-14 07:12 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-14 07:12 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-14 07:12 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-14 07:12 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-14 07:12 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-14 07:12 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-14 07:12 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-14 07:12 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-14 07:12 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-14 07:12 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-14 07:12 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-14 07:12 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-14 07:12 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-14 07:12 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-14 07:12 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-13 06:57 - 2013-09-06 07:55 - 06583664 _____ (AVAST Software) C:\Program1 2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE 2013-11-09 21:13 - 2013-08-16 13:56 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll 2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Benutzername\Desktop\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11 ==================== One Month Modified Files and Folders ======= 2013-12-09 08:27 - 2013-12-09 08:27 - 00000000 ____D C:\FRST 2013-12-09 08:16 - 2011-02-10 07:48 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-09 08:15 - 2011-01-30 17:08 - 00000947 _____ C:\Windows\Brpfx04a.ini 2013-12-09 07:55 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-09 07:55 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-09 07:54 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2013-12-09 07:46 - 2013-12-08 10:12 - 00000112 _____ C:\Windows\setupact.log 2013-12-09 07:46 - 2013-12-08 10:11 - 00000968 _____ C:\Windows\PFRO.log 2013-12-09 07:46 - 2011-06-16 19:54 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-09 07:46 - 2011-02-10 07:48 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-09 07:46 - 2011-01-31 20:15 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs 2013-12-09 07:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-08 22:09 - 2011-01-30 16:41 - 01954491 _____ C:\Windows\WindowsUpdate.log 2013-12-08 21:58 - 2011-08-13 13:19 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Skype 2013-12-08 21:37 - 2013-01-06 19:57 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-08 20:49 - 2013-10-18 19:49 - 00000000 ____D C:\Program Files (x86)\File Type Advisor 2013-12-08 15:02 - 2013-10-16 20:24 - 00000099 _____ C:\Users\Public\LMDebug.log 2013-12-08 10:18 - 2013-12-08 10:18 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk 2013-12-08 10:18 - 2013-12-08 10:18 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk 2013-12-08 10:18 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries 2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks 2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2013-12-08 10:12 - 2013-12-08 10:12 - 00000000 _____ C:\Windows\setuperr.log 2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini 2013-12-08 09:11 - 2012-11-05 20:59 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-12-08 08:49 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat 2013-12-08 08:49 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat 2013-12-08 08:49 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B} 2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6} 2013-12-07 23:24 - 2013-03-28 07:25 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-12-07 23:18 - 2011-01-30 16:45 - 00000000 ____D C:\Users\Benutzername 2013-12-07 23:17 - 2011-06-22 10:38 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\PC-FAX TX 2013-12-07 23:17 - 2011-02-02 22:42 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Google 2013-12-07 23:17 - 2011-01-31 09:05 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\IrfanView 2013-12-07 23:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat 2013-12-07 23:16 - 2011-06-26 11:32 - 00000000 ____D C:\ProgramData\Real 2013-12-07 23:16 - 2011-02-10 07:48 - 00000000 ____D C:\Program Files\Google 2013-12-07 23:16 - 2011-02-10 07:47 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-07 23:16 - 2011-02-02 22:42 - 00000000 ____D C:\ProgramData\Google 2013-12-07 23:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration 2013-12-06 10:55 - 2011-02-04 19:07 - 00000000 ____D C:\Users\Benutzername\AppData\Local\FreePDF_XP 2013-12-03 18:27 - 2012-10-02 13:42 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\korAccount 2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk 2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32 2013-12-01 22:56 - 2013-12-01 22:52 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\FileZilla 2013-11-30 20:49 - 2013-10-18 19:49 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck 2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Benutzername\Desktop\BrccMCtl.exe - Verknüpfung.lnk 2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT 2013-11-27 18:39 - 2011-01-30 17:08 - 00000467 _____ C:\Windows\BRWMARK.INI 2013-11-27 18:39 - 2011-01-30 17:08 - 00000169 _____ C:\Windows\brpcfx.ini 2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini 2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother 2013-11-27 18:38 - 2011-01-30 17:01 - 00000050 _____ C:\Windows\system32\bd7420.dat 2013-11-27 18:38 - 2011-01-28 11:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Infor-mation 2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\InstallShield 2013-11-27 18:34 - 2011-01-28 10:59 - 00000000 ____D C:\Windows\Panther 2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner 2013-11-27 16:37 - 2013-11-27 16:33 - 00032768 ___SH C:\Users\Benutzername\Documents\Thumbs.db 2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Foxit Reader 2013-11-26 19:27 - 2012-08-24 06:23 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-26 19:27 - 2011-08-13 13:19 - 00000000 ____D C:\ProgramData\Skype 2013-11-25 20:25 - 2013-05-08 06:08 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-11-25 20:25 - 2013-03-28 07:25 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-11-25 20:25 - 2013-03-28 07:25 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-11-25 12:02 - 2011-01-30 20:23 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Microsoft Help 2013-11-25 12:02 - 2011-01-30 20:22 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-23 13:39 - 2011-01-30 19:49 - 00000000 ____D C:\ProgramData\PSYPRCFG 2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\ProgramData\Psyprax32 2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\Program Files (x86)\Psyprax32 2013-11-23 12:00 - 2013-11-23 11:58 - 00000890 _____ C:\Users\Benutzername\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk 2013-11-22 16:09 - 2011-01-30 23:26 - 00000000 ____D C:\Program Files (x86)\svnet 2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk 2013-11-22 12:00 - 2011-01-31 21:36 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\vlc 2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\AVAST Software 2013-11-21 15:07 - 2013-03-05 07:42 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-11-21 15:07 - 2013-03-05 07:42 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-11-21 15:07 - 2012-11-05 20:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-11-21 15:07 - 2011-06-29 07:56 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-11-21 07:42 - 2013-01-06 19:57 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-11-21 07:42 - 2012-04-04 14:13 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-11-21 07:42 - 2011-05-16 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-21 07:42 - 2011-02-01 11:59 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Adobe 2013-11-21 07:02 - 2013-09-12 17:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-20 23:20 - 2013-10-12 10:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-11-19 14:32 - 2013-10-09 21:52 - 00000919 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-11-17 20:45 - 2013-11-02 08:26 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software 2013-11-17 14:58 - 2013-10-19 19:49 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\FileAdvisor 2013-11-17 14:40 - 2013-11-17 14:40 - 00000000 ____D C:\Users\Benutzername\AppData\Local\{FB739428-8E54-405C-9996-126A28D53B10} 2013-11-17 14:40 - 2011-02-01 14:00 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Windows Live 2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Benutzername\Documents\ProcAlyzer Dumps 2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-14 12:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-14 08:24 - 2013-05-11 06:48 - 00001431 _____ C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-14 08:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-14 07:34 - 2013-08-14 21:25 - 00000000 ____D C:\Windows\system32\MRT 2013-11-14 07:32 - 2011-01-31 21:26 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-13 14:05 - 2011-01-31 17:25 - 00000000 ____D C:\Program Files (x86)\Yahoo! 2013-11-13 12:00 - 2011-01-31 17:28 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Yahoo 2013-11-11 05:50 - 2011-01-30 16:59 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-11-10 11:42 - 2012-12-25 14:30 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Foxit Software 2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE 2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Benutzername\Desktop\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11 2013-11-09 08:59 - 2013-05-21 19:25 - 00000000 ____D C:\Users\Benutzername\AppData\Local\Zeta Producer 11 Some content of TEMP: ==================== C:\Users\Benutzername\AppData\Local\Temp\avgnt.exe C:\Users\Benutzername\AppData\Local\Temp\Checkupdate.exe C:\Users\Benutzername\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\Benutzername\AppData\Local\Temp\gcapi_dll.dll C:\Users\Benutzername\AppData\Local\Temp\gtapi_signed.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-20 20:18 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-12-2013 03 Ran by Josef Robrecht at 2013-12-09 08:28:21 Running from G:\ Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (x32) 1&1 Upload-Manager (x32 Version: 2.0.676) Adobe AIR (x32 Version: 3.9.0.1210) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.152) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152) Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05) Adobe Shockwave Player 12.0 (x32 Version: 12.0.5.146) Apple Application Support (x32 Version: 1.4.1) Apple Software Update (x32 Version: 2.1.1.116) avast! Free Antivirus (x32 Version: 9.0.2008) Avira Free Antivirus (x32 Version: 14.0.1.759) BlueStacks App Player (x32 Version: 0.8.2.3018) BlueStacks Notification Center (x32 Version: 0.8.2.3018) Brother MFL-Pro Suite MFC-7420 (x32 Version: 1.0.1.0) capella reader 6.0 (x32 Version: 6.0.19.0) CCleaner (Version: 4.08) CloudReading (x32 Version: 1.0.27.1025) Common Desktop Agent (Version: 1.53.0) CompuGROUP Java 1.6.0.11.1 (x32) Cool Edit Pro 2.0 (x32) cyberJack Base Components (x32 Version: 6.10.0) D3DX10 (x32 Version: 15.4.2368.0902) DesignPro SE eMedia (x32 Version: 5.0.1056) Desktop Icon für Amazon (Version: 1.0.1 (de)) eHealth200 BCS Terminal (x32 Version: 1.13) eHealth500 Terminal (x32 Version: 1.05) Elevated Installer (x32 Version: 2.1.13) Fahrtenbuch mmm/fb Version 2008 (x32) File Type Advisor 1.0 (x32) FilterFTP (x32 Version: Actual Version) FireJump (x32 Version: 1.0.2.5) FormatFactory 3.0.1 (x32 Version: 3.0.1) Foxit Reader (x32 Version: 6.1.1.1031) Free M4a to MP3 Converter 8.0 (x32) Free Video Flip and Rotate version 2.1.6.128 (x32 Version: 2.1.6.128) Free Video to DVD Converter version 5.0.9.412 (x32 Version: 5.0.9.412) Free Video to MP3 Converter version 5.0.6.221 (x32 Version: 5.0.6.221) Free YouTube Download version 3.1.24.412 (x32 Version: 3.1.24.412) FreeOCR 3.0 (Version: 3.0) FreePDF (Remove only) (x32) Garmin Express (x32 Version: 2.1.13) Garmin Express Tray (x32 Version: 2.1.13) Garmin Update Service (x32 Version: 2.1.13) GMX SMS-Manager (x32 Version: 2.7.2) GMX SMS-Manager (x32 Version: 2.7.2.6) Google Toolbar for Internet Explorer (x32 Version: 1.0.0) Google Toolbar for Internet Explorer (x32 Version: 7.5.4601.54) Google Update Helper (x32 Version: 1.3.21.165) GPL Ghostscript 9.00 (x32) Helium Audio Converter (build 245) (x32 Version: 1.3.0.245) IrfanView (remove only) (x32 Version: 4.36) Java 7 Update 45 (x32 Version: 7.0.450) Java Auto Updater (x32 Version: 2.1.9.8) Junk Mail filter update (x32 Version: 15.4.3502.0922) korAccount 3 (x32 Version: 3.3.31) Logitech Webcam Software (Version: 12.10.1113) Logitech Webcam Software-Treiberpaket (Version: 12.10.1110) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) MediaCoder x64 0.8.21.5392 (Version: 0.8.21.5392) Mesh Runtime (x32 Version: 15.4.5722.2) Messenger Companion (x32 Version: 15.4.3502.0922) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office 2007 Service Pack 3 (SP3) (x32) Microsoft Office 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office XP Professional mit FrontPage (x32 Version: 10.0.6626.0) Microsoft Silverlight (Version: 5.1.20913.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1) Mozilla Maintenance Service (x32 Version: 24.1.1) Mozilla Thunderbird 24.1.1 (x86 de) (x32 Version: 24.1.1) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0) MuseScore 1.0 MuseScore score typesetter (x32 Version: 1.0.0) MyFreeCodec (HKCU) Nero BurnLite 10 (x32 Version: 10.0.10500.5.100) Nero BurnLite 10 (x32 Version: 10.0.10600) Nero Control Center 10 (x32 Version: 10.6.13000.0.11) Nero ControlCenter 10 Help (CHM) (x32 Version: 1.0.10700) Nero Core Components 10 (x32 Version: 2.0.19900.9.11) Nero Update (x32 Version: 11.0.11500.28.0) Notepad++ (x32 Version: 5.9) NVIDIA 3D Vision Treiber 331.65 (Version: 331.65) NVIDIA Grafiktreiber 331.65 (Version: 331.65) NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4) NVIDIA Install Application (Version: 2.1002.133.889) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165) NVIDIA Systemsteuerung 331.65 (Version: 331.65) NVIDIA Update 1.15.2 (Version: 1.15.2) NVIDIA Update Components (Version: 1.15.2) PaperPort (x32 Version: 9.02.0814) PDFCreator (x32 Version: 1.1.0) PL-2303 USB-to-Serial (x32 Version: 1.3.0) Psyprax (x32) QuickTime (x32 Version: 7.74.80.86) RadioTotal1 Toolbar for IE (x32 Version: 6.17.1.25) RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6215) RealUpgrade 1.1 (x32 Version: 1.1.0) Recuva (Version: 1.42) RedMon - Redirection Port Monitor RST-MED / ICD-10-GM 2012 Thesaurus (x32 Version: 4.2.0.0) Samsung Easy Printer Manager (x32 Version: 1.02.06.10) Samsung Network PC Fax (x32 Version: 1.05.29.00) Samsung Printer Live Update (x32 Version: 1.01.00:04(2013-04-22)) Samsung Scan Assistant (x32 Version: 1.04.45.00) Samsung SCX-472x Series (x32 Version: 1.15 (28.05.2012)) Secunia PSI (2.0.0.3003) (x32) SkillsTraining für Borderline-Patienten (x32 Version: 1.1.34) Skype™ 6.11 (x32 Version: 6.11.102) Spybot - Search & Destroy (x32 Version: 2.1.19) sv.net (x32 Version: 13.2) swMSM (x32 Version: 12.0.0.1) TeamViewer 8 (x32 Version: 8.0.22298) Update for 2007 Microsoft Office System (KB967642) (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32) Update für Microsoft Office Excel 2007 Help (KB963678) (x32) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Update für Microsoft Office Word 2007 Help (KB963665) (x32) VideoPad Videobearbeitungs-Software (x32) VIS (x32) VLC media player 2.1.1 (x32 Version: 2.1.1) VR-NetWorld (x32) WEB.DE MailCheck für Mozilla Firefox (x32 Version: 2.1.4.1420) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3502.0922) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3502.0922) Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3502.0922) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8) Windows Mobile-Gerätecenter (Version: 6.1.6965.0) XMind (x32 Version: 3.2.1) Yahoo! Messenger (x32) Zeta Producer 11 11.4.2 (nur entfernen) (HKCU Version: 11.4.2) ==================== Restore Points ========================= 07-12-2013 21:55:12 Removed BlueStacks Notification Center 07-12-2013 22:14:17 Wiederherstellungsvorgang 07-12-2013 22:20:04 avast! antivirus system restore point 07-12-2013 22:24:36 Windows Update 07-12-2013 22:56:50 Removed BlueStacks Notification Center 08-12-2013 08:05:55 Removed BlueStacks Notification Center 08-12-2013 11:00:37 Windows-Sicherung 08-12-2013 15:56:04 Windows-Sicherung ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {23DE297F-9CB4-4AB1-B5B3-DD6964E486AD} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-11-21] (AVAST Software) Task: {2EAB93CF-3A21-4F66-B329-BD17F87309C5} - System32\Tasks\{E63939F1-0BC4-4D9D-B409-189EA9BA1C9F} => C:\Program Files (x86)\Common Files\microsoft shared\PhotoEd\PHOTOED.EXE [2000-12-15] (Microsoft Corporation) Task: {3FB40B39-2C0F-43F9-8247-A1462F5A0D28} - System32\Tasks\{7C82D7F2-08EA-4333-8EA7-FE176942F802} => H:\Acronis.True.Image.v9.0.2323\setup.exe Task: {49A7011E-AD2E-48A3-BD73-C4BDF1A6AA2F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-21] (Adobe Systems Incorporated) Task: {4D1F6C6D-DD0D-42A0-89B5-2D0627CE8DD3} - System32\Tasks\NeroLaufwerkssicherungC => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe Task: {4EFC51CC-B712-4EE1-81C9-4DD8FFF23EAA} - System32\Tasks\FileAdvisorCheck => C:\Program Files (x86)\File Type Advisor\file-type-advisor.exe [2013-07-12] (filetypeadvisor.com ) Task: {553C22DC-08AF-47F7-8D09-BD32CD89EE74} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {59F28BA5-4164-4F83-90F7-63143D9EF39E} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1630602834-2246192719-3532302717-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-07-27] (RealNetworks, Inc.) Task: {5CBA4D7E-1CEC-4A90-A2C4-BF756C169DC1} - System32\Tasks\NCH Software\videopadShakeIcon => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [2013-11-02] (NCH Software) Task: {63A241CA-BB1F-4413-8099-431AAC30F690} - System32\Tasks\Josef Robrecht Local Autobackup 5 4 => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe Task: {6648226C-F9D8-4E67-B55D-DACDB4E22249} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1630602834-2246192719-3532302717-1001 => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe [2012-07-27] (RealNetworks, Inc.) Task: {693D82C2-679C-46B9-903E-EAFB0907DCAA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd) Task: {6FA8A20F-6C7A-4E56-AFF7-ADD783DDB779} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe Task: {7BD61152-2010-45E9-AD36-D7BCF879E2D3} - System32\Tasks\FileAdvisorUpdate => C:\Program Files (x86)\File Type Advisor\fileadvisor.exe [2013-07-12] (File Type Advisor) Task: {83C76275-584C-4837-96F4-BEC0553849F4} - System32\Tasks\NeroDateisicherungC => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe Task: {878ADC9D-572A-4BC1-AAF6-F2E4F5A6CE8B} - System32\Tasks\{59B9C79B-31B4-45F6-840C-30D5C5B7869F} => D:\Nero 7.0 Premium\setupx.exe Task: {88D8A33A-95ED-415E-B606-DBCD2DB2DEAB} - System32\Tasks\{B0D78F4B-2872-40FD-8324-A2A5E9AC55A0} => C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe [2013-09-05] (Adobe Systems Incorporated) Task: {8B55C209-CF4F-444C-9016-91710E0BBE20} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {9060B6BE-541E-48F2-80BD-31D2A3D724E7} - System32\Tasks\{EBF376DF-9CC3-4A04-8751-87C323B325D7} => H:\Acronis.True.Image.v9.0.2323\setup.exe Task: {A2A9CDD7-30A0-4F5A-AE5E-5EEDA98B3802} - System32\Tasks\NeroLaufwerkssicherungCundRecovery => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe Task: {A633D176-F4E5-45DF-98DA-9EA0E1FFA8D9} - System32\Tasks\{D289D534-C809-41D8-9387-21EB09910F4E} => C:\Program Files (x86)\svnet\svnet.exe [2013-05-28] (ITSG GmbH) Task: {BA6F8006-2D57-4D47-8882-212360E1E26F} - System32\Tasks\{395EAFC9-CE5F-46A4-B510-8EAB37D2891B} => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe [2013-10-01] (TeamViewer GmbH) Task: {BB409853-28D0-49EF-BEF9-AAAACE658C0D} - System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6} => C:\Program Files (x86)\BlueStacks\HD-StartLauncher.exe [2013-11-18] (BlueStack Systems, Inc.) Task: {BB82560E-9A98-4151-BD62-E46D062FE8B9} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {BBBEADDD-EA2B-4C38-B6D3-C9D1A4F5B713} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\Josef Robrecht\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION Task: {C3FC3E86-312D-4E94-AD4A-AE8A8FCBB492} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-10] (Google Inc.) Task: {CD58EA66-6982-4583-9FB7-1A3CBB781FBC} - System32\Tasks\Josef Robrecht => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe Task: {D3A48D0C-CA80-4D5E-B3A3-71112AC837F2} - System32\Tasks\SicherungFestplatteC => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBCore.exe Task: {E34100B2-2A38-4A46-AC87-E91908390C6F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-10] (Google Inc.) Task: {E77ABB7E-A2CD-40B1-9778-DC283D33DE16} - System32\Tasks\{4DB97B9F-9B7B-4992-A9AC-46E6155AC30B} => C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe [2013-10-01] (TeamViewer GmbH) Task: {F252A275-9B97-46B8-BA6F-5AB478D51560} - System32\Tasks\{BF97051F-EF8D-436D-A0F4-4A23CEE3E943} => C:\Program Files (x86)\Psychoholic Software\Patientenfragebogen\Patientenfragebogen.exe Task: {F8914082-0FBE-4F81-A21F-77F74A6D716B} - System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B} => C:\Program Files (x86)\BlueStacks\HD-StartLauncher.exe [2013-11-18] (BlueStack Systems, Inc.) Task: {F9779B8F-3E39-4708-A3EB-4D238B674CBB} - System32\Tasks\Josef Robrecht NBAgent 5 4 => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2010-12-17 17:13 - 2010-12-17 17:13 - 00050688 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll 2013-12-09 07:48 - 2013-12-08 17:08 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13120801\algo.dll 2012-09-29 23:29 - 2012-09-19 18:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll 2013-09-14 12:49 - 2013-05-16 09:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2013-09-14 12:49 - 2013-05-16 09:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2013-09-14 12:49 - 2013-05-16 09:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2013-11-21 15:07 - 2013-11-21 15:07 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2011-08-08 07:31 - 2007-05-31 06:38 - 00167936 ____N () C:\Windows\SysWOW64\SerialXP.dll 2013-09-14 12:49 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2013-09-14 12:49 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2013-10-12 10:58 - 2013-11-20 23:20 - 03008624 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll 2013-10-12 10:58 - 2013-11-20 23:20 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll 2013-10-12 10:58 - 2013-11-20 23:20 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll 2013-11-09 21:13 - 2013-09-27 14:19 - 00561152 _____ () C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\CommentsSummary.fpi 2013-11-09 21:13 - 2013-09-27 15:54 - 01746432 _____ () C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\Speech.fpi 2013-11-27 18:38 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll 2013-11-15 20:16 - 2013-11-15 20:16 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Windows:F8671BEAE7CF0F7B ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (12/08/2013 05:39:55 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: i_view32.exe, Version: 4.3.6.0, Zeitstempel: 0x51cafb1c Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x8bfff632 ID des fehlerhaften Prozesses: 0x1190 Startzeit der fehlerhaften Anwendung: 0xi_view32.exe0 Pfad der fehlerhaften Anwendung: i_view32.exe1 Pfad des fehlerhaften Moduls: i_view32.exe2 Berichtskennung: i_view32.exe3 Error: (12/08/2013 10:14:59 AM) (Source: Windows Search Service) (User: ) Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80070002, "file:///G:\__WordPerfect\">. Error: (12/08/2013 10:14:59 AM) (Source: Windows Search Service) (User: ) Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80070002, "file:///G:\__Personen\">. Error: (12/08/2013 10:14:59 AM) (Source: Windows Search Service) (User: ) Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80070003, "file:///G:\_Fotos\KunzmannHelga\">. Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: ) Description: Der Index kann nicht initialisiert werden. Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: ) Description: Die Anwendung kann nicht initialisiert werden. Kontext: Windows Anwendung Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: ) Description: Das Gatherer-Objekt kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (12/08/2013 10:14:21 AM) (Source: Windows Search Service) (User: ) Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490) Error: (12/08/2013 10:14:14 AM) (Source: Windows Search Service) (User: ) Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (12/08/2013 10:14:14 AM) (Source: Windows Search Service) (User: ) Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800) System errors: ============= Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (12/09/2013 07:49:24 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (12/09/2013 07:49:24 AM) (Source: PNRPSvc) (User: ) Description: 0x80630801 Error: (12/09/2013 07:49:24 AM) (Source: PNRPSvc) (User: ) Description: 0x80630801 Error: (12/09/2013 07:49:14 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%-2140993535 Error: (12/09/2013 07:49:14 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: %%-2140993535 Error: (12/09/2013 07:49:14 AM) (Source: PNRPSvc) (User: ) Description: 0x80630801 Error: (12/09/2013 07:48:49 AM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: snapman Microsoft Office Sessions: ========================= Error: (05/30/2013 10:51:01 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 3315 seconds with 1200 seconds of active time. This session ended with a crash. Error: (01/13/2013 05:25:18 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 19 seconds with 0 seconds of active time. This session ended with a crash. Error: (09/05/2012 09:17:50 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 6579 seconds with 120 seconds of active time. This session ended with a crash. Error: (05/14/2012 09:44:27 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 11075 seconds with 540 seconds of active time. This session ended with a crash. Error: (05/01/2012 03:11:36 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 83 seconds with 0 seconds of active time. This session ended with a crash. Error: (05/01/2012 02:35:56 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 58 seconds with 0 seconds of active time. This session ended with a crash. Error: (05/01/2012 02:34:26 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 49 seconds with 0 seconds of active time. This session ended with a crash. Error: (05/01/2012 02:33:24 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 15863 seconds with 10800 seconds of active time. This session ended with a crash. Error: (02/14/2012 08:38:03 AM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4536 seconds with 180 seconds of active time. This session ended with a crash. Error: (02/24/2011 01:03:45 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1974 seconds with 0 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 37% Total physical RAM: 8151.12 MB Available physical RAM: 5098.43 MB Total Pagefile: 16300.41 MB Available Pagefile: 12444.75 MB Total Virtual: 8192 MB Available Virtual: 8191.79 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:467.27 GB) (Free:377.78 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Daten) (Fixed) (Total:195.31 GB) (Free:134.84 GB) NTFS Drive e: (Sicherung) (Fixed) (Total:259.17 GB) (Free:115.85 GB) NTFS Drive g: (SEA_DISK) (Fixed) (Total:232.83 GB) (Free:172.39 GB) FAT32 Drive h: (DOROJOSE) (Removable) (Total:1.92 GB) (Free:1.52 GB) FAT Drive i: (JOSEF 08 GB) (Removable) (Total:7.46 GB) (Free:7.41 GB) FAT32 ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 191EBE5D) Partition 1: (Not Active) - (Size=10 GB) - (Type=27) Partition 2: (Active) - (Size=467 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=195 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=259 GB) - (Type=OF Extended) ======================================================== Disk: 1 (Size: 7 GB) (Disk ID: 00000000) Partition 1: (Not Active) - (Size=7 GB) - (Type=0B) ======================================================== Disk: 2 (Size: 2 GB) (Disk ID: 004DF91E) Partition 1: (Active) - (Size=2 GB) - (Type=06) ======================================================== Disk: 3 (Size: 233 GB) (Disk ID: EEF844D8) Partition 1: (Active) - (Size=233 GB) - (Type=0C) ==================== End Of Log ============================ Danke! |
09.12.2013, 09:15 | #2 |
/// the machine /// TB-Ausbilder | Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden hi,
__________________Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
09.12.2013, 10:54 | #3 |
| Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden Vielen Dank für die rasche Antwort. Nun habe ich versucht, alles zu befolgen. Hier sind die Ergebnisse:
__________________Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.09.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16428 Josef Benutzername :: PC [Administrator] 09.12.2013 09:24:12 mbam-log-2013-12-09 (09-24-12).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 236970 Laufzeit: 5 Minute(n), 35 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 3 HKCU\SOFTWARE\BI (PUP.Optional.FilesFrog.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IECT3317892 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 2 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|BackgroundContainer (PUP.Optional.Conduit) -> Daten: "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\Josef Benutzerna-me\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\BI|ui_path_filesfrog (PUP.Optional.FilesFrog.A) -> Daten: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker -> Erfolgreich ge-löscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 4 C:\Users\Josef Benutzername\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Josef Benutzername\AppData\Roaming\OpenCandy\FEC282186F784E23974C4207211CAF59 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE\CT3317892 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 4 C:\Users\Josef Benutzerna-me\AppData\Roaming\OpenCandy\FEC282186F784E23974C4207211CAF59\EIE10_DE-DE_WOL_Win764.EXE (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE\CT3317892\configutaion.json (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE\CT3317892\SetupIcon.ico (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE\CT3317892\UninstallerUI.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.014 - Bericht erstellt am 09/12/2013 um 10:13:06 # Updated 01/12/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Josef Benutzername - PC # Gestartet von : G:\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\Conduit Ordner Gelöscht : C:\ProgramData\FreeRIP Ordner Gelöscht : C:\ProgramData\NCH Software Ordner Gelöscht : C:\ProgramData\ParetoLogic Ordner Gelöscht : C:\ProgramData\Tarma Installer Ordner Gelöscht : C:\ProgramData\Uniblue\DriverScanner Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec Ordner Gelöscht : C:\Program Files (x86)\Conduit Ordner Gelöscht : C:\Program Files (x86)\myfree codec Ordner Gelöscht : C:\Program Files (x86)\NCH Software Ordner Gelöscht : C:\Program Files (x86)\RadioTotal1 Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\LocalLow\Conduit Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\LocalLow\PriceGong Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\LocalLow\RadioTotal1 Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\DesktopIconForAmazon Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\DriverCure Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\DSite Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\dvdvideosoftiehelpers Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\NCH Software Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\ParetoLogic Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Roaming\Windows Net Data Ordner Gelöscht : C:\Users\Josef Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\fmlgoencnlndpglbocajlimaikjohmab Datei Gelöscht : C:\Windows\System32\Tasks\BackgroundContainer Startup Task Datei Gelöscht : C:\Windows\System32\Tasks\NCH Software ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [firejump@firejump.net] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\FreeRIP3_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\FreeRIP3_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3317892 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-video-to-dvd-converter_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_free-video-to-dvd-converter_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freepdf_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freepdf_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freerip-mp3_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freerip-mp3_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_gx-transcoder_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_gx-transcoder_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mediacoder_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mediacoder_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_midi-to-wav-converter_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_midi-to-wav-converter_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-media-player-plugin_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-media-player-plugin_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ED8F1591-D34F-4B4A-B8BE-7FC3B55536D0} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Ob-jects\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED8F1591-D34F-4B4A-B8BE-7FC3B55536D0} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F261B3D-A979-49AC-AD16-C09621DB3EF6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3E829B10-082E-4829-84B4-4770C93D8411} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{422F7661-9403-4DA4-B4EF-CC3E268817B5}] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{422F7661-9403-4DA4-B4EF-CC3E268817B5}] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{422F7661-9403-4DA4-B4EF-CC3E268817B5}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{422F7661-9403-4DA4-B4EF-CC3E268817B5}] Schlüssel Gelöscht : HKCU\Software\APN PIP Schlüssel Gelöscht : HKCU\Software\Conduit Schlüssel Gelöscht : HKCU\Software\dsiteproducts Schlüssel Gelöscht : HKCU\Software\InstallCore Schlüssel Gelöscht : HKCU\Software\MGShareware Schlüssel Gelöscht : HKCU\Software\Myfree Codec Schlüssel Gelöscht : HKCU\Software\NCH Software Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\ParetoLogic Schlüssel Gelöscht : HKCU\Software\PIP Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\BackgroundContainer Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\RadioTotal1 Schlüssel Gelöscht : HKLM\Software\Conduit Schlüssel Gelöscht : HKLM\Software\MGShareware Schlüssel Gelöscht : HKLM\Software\Myfree Codec Schlüssel Gelöscht : HKLM\Software\NCH Software Schlüssel Gelöscht : HKLM\Software\ParetoLogic Schlüssel Gelöscht : HKLM\Software\PIP Schlüssel Gelöscht : HKLM\Software\Uniblue Schlüssel Gelöscht : HKLM\Software\RadioTotal1 Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D85FFE92-BF14-4E9B-BCCD-E5C16069E65F}_is1 Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Tarma Installer Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v25.0.1 (de) [ Datei : C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\prefs.js ] Zeile gelöscht : us-er_pref("extensions.a971d5a0e9273487fb423ed4d001e437a73136d875f3a43808edb16a7fa56bbc4com39090.39090.internaldb.Resources_meta.value", "%7B%22HTML/settings.html%22%3A%7B%22id%22%3A309589%2C%22ver%22%[...] Zeile gelöscht : us-er_pref("extensions.a971d5a0e9273487fb423ed4d001e437a73136d875f3a43808edb16a7fa56bbc4com39090.39090.internaldb.Resources_resource_309595.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...] Zeile gelöscht : user_pref("extensions.crossrider.bic", "14290b7ee057a0ca08daea4f6c946e47"); ************************* AdwCleaner[R0].txt - [10528 octets] - [09/12/2013 09:42:33] AdwCleaner[R1].txt - [10589 octets] - [09/12/2013 10:11:00] AdwCleaner[S0].txt - [9668 octets] - [09/12/2013 10:13:06] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9728 octets] ########## Trotzdem habe ich die weiteren Schritte noch gemacht. Hier die Ergebnisse: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.0.8 (11.05.2013:1) OS: Windows 7 Home Premium x64 Ran by Josef Benutzername on 09.12.2013 at 10:25:24,04 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explor-er\SearchScopes\{94403E0D-8048-42DB-B16B-22B5AA70D423} ~~~ Files ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{0A7F4117-05E8-4CFE-AE2E-F37F8D3289C5} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{14BE0A64-D6CC-4189-9B79-41D7C42E8F1B} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{1BD7E5A1-6AE2-4115-96A3-80545C109A49} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{20A8F60E-FD13-43CB-84A3-919CD0DB604C} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{2B09A172-683E-49D1-8E55-3107355D47DD} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{378FB7DC-7FFD-480F-9ACD-B72877B7FBF3} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{51659BB6-95D2-4D56-918C-9B343CEC4ED1} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{562464D4-ACC4-49D2-AD6A-851707B33785} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{5A3164C6-5299-4E34-A4C2-80E63DAE18C2} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{5E381246-19F3-4474-8073-F6AA5CB4388F} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{8DD50F3C-1C50-40E8-98DA-3DE63AB406B1} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{98082DEE-07AB-4418-A4D6-20C177CED34E} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{B41BFBC4-A01B-4CDA-BA3B-E1B7E062603F} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{B706C288-B590-4790-AE91-FC5BFCDBC0B6} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{B94D2AD4-4D12-47BC-BC6D-2BA0FE82FF9B} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{C80310E5-56E1-4613-9D64-9C99B5A4053B} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{DD6A5472-009D-458E-8AA8-C703B63B6ACB} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{F26BC96D-9110-4998-A73A-ADFD4E365C08} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{FB739428-8E54-405C-9996-126A28D53B10} Successfully deleted: [Empty Folder] C:\Users\Josef Benutzername\appdata\local\{FE870E0A-AA67-4D43-B372-44631B89B8EE} ~~~ FireFox Successfully deleted: [Folder] C:\Users\Josef Benutzername\AppData\Roaming\mozilla\firefox\profiles\fp6pkvew.default-1385202844524\extensions\971d5a0e-9273-487f-b423-ed4d001e437a@73136d87-5f3a-4380-8edb-16a7fa56bbc4.com Successfully deleted the following from C:\Users\Josef Benutzername\AppData\Roaming\mozilla\firefox\profiles\fp6pkvew.default-1385202844524\prefs.js us-er_pref("extensions.a971d5a0e9273487fb423ed4d001e437a73136d875f3a43808edb16a7fa56bbc4com39090.39090.internaldb.Resources_resource_309597.value", "%22data%3Aimage/png%3Bbase6 Emptied folder: C:\Users\Josef Benutzername\AppData\Roaming\mozilla\firefox\profiles\fp6pkvew.default-1385202844524\minidumps [3 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 09.12.2013 at 10:31:00,13 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 03 Ran by Josef Benutzername (administrator) on PC on 09-12-2013 10:46:16 Running from G:\ Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe (ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe (shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe (Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Windows\splwow64.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [438784 2010-12-17] () Winlogon\Notify\ScCertProp: C:\Windows\SysWOW64\explorer.exe (Microsoft Corporation) HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [NWEReboot] - [x] HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [40960 2004-03-09] (ScanSoft, Inc.) HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [57393 2004-03-09] (ScanSoft, Inc.) HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Up-date\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-21] (AVAST Software) HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\da89f187-2013-45e2-8d0a-7564b3210415.exe [180184 2013-11-23] (AVAST Software) HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [623376 2013-11-18] (BlueStack Systems, Inc.) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== ProxyServer: localhost:21320 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://media.radiosai.org/www/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE7F40B6E99C0CB01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.1und1.de/br/ie9_startpage SearchScopes: HKCU - {09038620-190C-402B-A92F-18864E6AB22F} URL = hxxp://go.1und1.de/br/ie9_search_web/?su={searchTerms} SearchScopes: HKCU - {40064957-18EB-412d-9146-3F57E8D92EEC} URL = hxxp://go.1und1.de/br/ie9_search_pic/?su={searchTerms} SearchScopes: HKCU - {5A817CF6-92D5-4DE5-AC38-82DF8A73EF28} URL = hxxp://go.gmx.net/br/ie9_search_web/?su={searchTerms} SearchScopes: HKCU - {64A0CF90-33DD-4B42-88A1-4AF10528A62F} URL = hxxp://suche.web.de/search/web/?mc=hp%40suche.suche%40home&mc=hp%40suche.suche%40home&su={searchTerms}&x=37&y=6 SearchScopes: HKCU - {6B1D1FB7-7233-4F7C-802C-21A1DDB12754} URL = hxxp://go.web.de/br/ie9_search_web/?su={searchTerms} SearchScopes: HKCU - {8D27B32E-89EE-460e-82D2-5FC354078EAD} URL = hxxp://go.1und1.de/br/ie9_search_produkte/?su={searchTerms} SearchScopes: HKCU - {94D71752-DB36-420A-B721-0E4D2828CD15} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {DCE59F23-A446-45a5-9459-E68FDC0DE38D} URL = hxxp://go.1und1.de/br/ie9_search_maps/?su={searchTerms} BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Soft-ware\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (Real-Player) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524 FF NewTab: about:blank FF Homepage: hxxp://www.benefind.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll () FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silver-light\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vi-sion\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll No File FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\searchplugins\benefind.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Garmin Communicator - C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} FF Extension: keyloggerbeater - C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\keyloggerbeater@toptip.ca.xpi FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: () - C:\Users\Josef Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0 CHR Extension: () - C:\Users\Josef Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0 CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-21] (AVAST Soft-ware) R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [398096 2013-11-18] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-11-18] (BlueStack Systems, Inc.) R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT) S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Ser-vice\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries) R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [231936 2012-03-23] (Samsung Electronics Co., Ltd.) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [993848 2011-04-19] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [399416 2011-04-19] (Secunia) S2 AcrSch2Svc; "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe" [x] ==================== Drivers (Whitelisted) ==================== R1 27784551; C:\Windows\System32\DRIVERS\27784551.sys [157712 2009-09-25] (Kaspersky Lab) R0 27784552; C:\Windows\System32\DRIVERS\27784552.sys [40464 2009-10-22] (Kaspersky Lab) R1 73230381; C:\Windows\System32\DRIVERS\73230381.sys [157712 2009-09-25] (Kaspersky Lab) R0 73230382; C:\Windows\System32\DRIVERS\73230382.sys [40464 2009-10-22] (Kaspersky Lab) S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-01] (Wondershare) R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-21] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-21] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-21] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-21] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-21] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-21] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-21] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-21] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-07] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [77584 2013-11-18] (BlueStack Systems) S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT) S3 eh100; C:\Windows\System32\DRIVERS\eh100.sys [45568 2009-11-11] (SCM Microsystems Inc.) R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S0 snapman; C:\Windows\SysWow64\DRIVERS\snapman.sys [96320 2011-01-30] (Acronis) R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-09 10:35 - 2013-12-09 10:35 - 00002024 _____ C:\Users\Josef Benutzername\Desktop\Avira Free Antivirus starten.lnk 2013-12-09 10:31 - 2013-12-09 10:31 - 00003779 _____ C:\Users\Josef Benutzername\Desktop\JRT.txt 2013-12-09 10:25 - 2013-12-09 10:25 - 00000000 ____D C:\Windows\ERUNT 2013-12-09 10:21 - 2013-12-09 10:21 - 00000579 _____ C:\Users\Josef Benutzername\Desktop\JRT.exe - Verknüpfung.lnk 2013-12-09 10:10 - 2013-12-09 10:10 - 00000634 _____ C:\Users\Josef Benutzername\Desktop\adwcleaner.exe - Verknüpfung.lnk 2013-12-09 09:42 - 2013-12-09 10:13 - 00000000 ____D C:\AdwCleaner 2013-12-09 09:36 - 2013-12-09 10:37 - 00000168 _____ C:\Windows\setupact.log 2013-12-09 09:36 - 2013-12-09 10:36 - 00005678 _____ C:\Windows\PFRO.log 2013-12-09 09:36 - 2013-12-09 09:36 - 00000000 _____ C:\Windows\setuperr.log 2013-12-09 09:19 - 2013-12-09 09:19 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-09 08:27 - 2013-12-09 08:27 - 00000000 ____D C:\FRST 2013-12-08 10:18 - 2013-12-08 10:18 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk 2013-12-08 10:18 - 2013-12-08 10:18 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk 2013-12-08 10:17 - 2013-12-09 07:54 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks 2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini 2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B} 2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6} 2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Josef Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk 2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32 2013-12-01 22:52 - 2013-12-01 22:56 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileZilla 2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Josef Benutzername\Desktop\BrccMCtl.exe - Verknüpfung.lnk 2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT 2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini 2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother 2013-11-27 18:38 - 2009-01-15 19:20 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll 2013-11-27 18:38 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll 2013-11-27 18:38 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll 2013-11-27 18:38 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll 2013-11-27 18:38 - 2003-11-28 18:57 - 00000000 _____ C:\Windows\brdfxspd.dat 2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\InstallShield 2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner 2013-11-27 16:33 - 2013-11-27 16:37 - 00032768 ___SH C:\Users\Josef Benutzername\Documents\Thumbs.db 2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Foxit Reader 2013-11-23 11:58 - 2013-11-23 12:00 - 00000890 _____ C:\Users\Josef Benutzername\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk 2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Josef Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk 2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\AVAST Software 2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Josef Benutzername\Documents\ProcAlyzer Dumps 2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-14 07:34 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2013-11-14 07:34 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2013-11-14 07:34 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2013-11-14 07:34 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2013-11-14 07:34 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2013-11-14 07:34 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-11-14 07:34 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2013-11-14 07:34 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2013-11-14 07:34 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2013-11-14 07:34 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2013-11-14 07:34 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2013-11-14 07:34 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2013-11-14 07:34 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2013-11-14 07:34 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2013-11-14 07:34 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2013-11-14 07:34 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2013-11-14 07:34 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-11-14 07:34 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2013-11-14 07:28 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2013-11-14 07:28 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2013-11-14 07:13 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-14 07:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-14 07:12 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-14 07:12 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-14 07:12 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-14 07:12 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-14 07:12 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-14 07:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-14 07:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-14 07:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-14 07:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-14 07:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-14 07:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-14 07:12 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-14 07:12 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-14 07:12 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-14 07:12 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-14 07:12 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-14 07:12 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-14 07:12 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-14 07:12 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-14 07:12 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-14 07:12 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-14 07:12 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-14 07:12 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-14 07:12 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-14 07:12 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-14 07:12 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-14 07:12 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-14 07:12 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-13 06:57 - 2013-09-06 07:55 - 06583664 _____ (AVAST Software) C:\Program1 2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE 2013-11-09 21:13 - 2013-08-16 13:56 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll 2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Josef Benutzername\Desktop\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11 ==================== One Month Modified Files and Folders ======= 2013-12-09 10:43 - 2011-01-30 16:41 - 01985984 _____ C:\Windows\WindowsUpdate.log 2013-12-09 10:38 - 2012-11-05 20:59 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-12-09 10:37 - 2013-12-09 09:36 - 00000168 _____ C:\Windows\setupact.log 2013-12-09 10:37 - 2011-06-16 19:54 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-09 10:37 - 2011-02-10 07:48 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-09 10:37 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-09 10:36 - 2013-12-09 09:36 - 00005678 _____ C:\Windows\PFRO.log 2013-12-09 10:36 - 2011-01-31 20:15 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs 2013-12-09 10:35 - 2013-12-09 10:35 - 00002024 _____ C:\Users\Josef Benutzername\Desktop\Avira Free Antivirus starten.lnk 2013-12-09 10:31 - 2013-12-09 10:31 - 00003779 _____ C:\Users\Josef Benutzername\Desktop\JRT.txt 2013-12-09 10:25 - 2013-12-09 10:25 - 00000000 ____D C:\Windows\ERUNT 2013-12-09 10:24 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-09 10:24 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-09 10:21 - 2013-12-09 10:21 - 00000579 _____ C:\Users\Josef Benutzername\Desktop\JRT.exe - Verknüpfung.lnk 2013-12-09 10:16 - 2011-02-10 07:48 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-09 10:13 - 2013-12-09 09:42 - 00000000 ____D C:\AdwCleaner 2013-12-09 10:13 - 2013-11-02 08:26 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software 2013-12-09 10:13 - 2013-09-11 11:10 - 00000000 ____D C:\ProgramData\Uniblue 2013-12-09 10:10 - 2013-12-09 10:10 - 00000634 _____ C:\Users\Josef Benutzername\Desktop\adwcleaner.exe - Verknüpfung.lnk 2013-12-09 10:03 - 2013-10-16 20:24 - 00000099 _____ C:\Users\Public\LMDebug.log 2013-12-09 09:57 - 2011-08-13 13:19 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Skype 2013-12-09 09:37 - 2013-01-06 19:57 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-09 09:36 - 2013-12-09 09:36 - 00000000 _____ C:\Windows\setuperr.log 2013-12-09 09:36 - 2011-02-10 07:48 - 00000000 ____D C:\Program Files\Google 2013-12-09 09:36 - 2011-02-10 07:47 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-09 09:19 - 2013-12-09 09:19 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-09 09:19 - 2013-09-14 10:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-09 08:52 - 2011-02-02 22:42 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Google 2013-12-09 08:27 - 2013-12-09 08:27 - 00000000 ____D C:\FRST 2013-12-09 08:15 - 2011-01-30 17:08 - 00000947 _____ C:\Windows\Brpfx04a.ini 2013-12-09 07:54 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2013-12-08 20:49 - 2013-10-18 19:49 - 00000000 ____D C:\Program Files (x86)\File Type Advisor 2013-12-08 10:18 - 2013-12-08 10:18 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk 2013-12-08 10:18 - 2013-12-08 10:18 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk 2013-12-08 10:18 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries 2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks 2013-12-08 10:17 - 2013-12-08 10:17 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini 2013-12-08 08:49 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat 2013-12-08 08:49 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat 2013-12-08 08:49 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B} 2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6} 2013-12-07 23:24 - 2013-03-28 07:25 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-12-07 23:18 - 2011-01-30 16:45 - 00000000 ____D C:\Users\Josef Benutzername 2013-12-07 23:17 - 2011-06-22 10:38 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\PC-FAX TX 2013-12-07 23:17 - 2011-01-31 09:05 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\IrfanView 2013-12-07 23:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat 2013-12-07 23:16 - 2011-06-26 11:32 - 00000000 ____D C:\ProgramData\Real 2013-12-07 23:16 - 2011-02-02 22:42 - 00000000 ____D C:\ProgramData\Google 2013-12-07 23:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration 2013-12-06 10:55 - 2011-02-04 19:07 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\FreePDF_XP 2013-12-03 18:27 - 2012-10-02 13:42 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\korAccount 2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Josef Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk 2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32 2013-12-01 22:56 - 2013-12-01 22:52 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileZilla 2013-11-30 20:49 - 2013-10-18 19:49 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck 2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Josef Benutzername\Desktop\BrccMCtl.exe - Verknüpfung.lnk 2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT 2013-11-27 18:39 - 2011-01-30 17:08 - 00000467 _____ C:\Windows\BRWMARK.INI 2013-11-27 18:39 - 2011-01-30 17:08 - 00000169 _____ C:\Windows\brpcfx.ini 2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini 2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother 2013-11-27 18:38 - 2011-01-30 17:01 - 00000050 _____ C:\Windows\system32\bd7420.dat 2013-11-27 18:38 - 2011-01-28 11:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Infor-mation 2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\InstallShield 2013-11-27 18:34 - 2011-01-28 10:59 - 00000000 ____D C:\Windows\Panther 2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner 2013-11-27 16:37 - 2013-11-27 16:33 - 00032768 ___SH C:\Users\Josef Benutzername\Documents\Thumbs.db 2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Foxit Reader 2013-11-26 19:27 - 2012-08-24 06:23 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-26 19:27 - 2011-08-13 13:19 - 00000000 ____D C:\ProgramData\Skype 2013-11-25 20:25 - 2013-05-08 06:08 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-11-25 20:25 - 2013-03-28 07:25 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-11-25 20:25 - 2013-03-28 07:25 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-11-25 12:02 - 2011-01-30 20:23 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Microsoft Help 2013-11-25 12:02 - 2011-01-30 20:22 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-23 13:39 - 2011-01-30 19:49 - 00000000 ____D C:\ProgramData\PSYPRCFG 2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\ProgramData\Psyprax32 2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\Program Files (x86)\Psyprax32 2013-11-23 12:00 - 2013-11-23 11:58 - 00000890 _____ C:\Users\Josef Benutzerna-me\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk 2013-11-22 16:09 - 2011-01-30 23:26 - 00000000 ____D C:\Program Files (x86)\svnet 2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Josef Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk 2013-11-22 12:00 - 2011-01-31 21:36 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\vlc 2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\AVAST Software 2013-11-21 15:07 - 2013-03-05 07:42 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-11-21 15:07 - 2013-03-05 07:42 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-11-21 15:07 - 2012-11-05 20:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-11-21 15:07 - 2011-06-29 07:56 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-11-21 07:42 - 2013-01-06 19:57 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-11-21 07:42 - 2012-04-04 14:13 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-11-21 07:42 - 2011-05-16 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-21 07:42 - 2011-02-01 11:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Adobe 2013-11-21 07:02 - 2013-09-12 17:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-20 23:20 - 2013-10-12 10:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-11-19 14:32 - 2013-10-09 21:52 - 00000919 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-11-17 14:58 - 2013-10-19 19:49 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileAdvisor 2013-11-17 14:40 - 2011-02-01 14:00 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Windows Live 2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Josef Benutzername\Documents\ProcAlyzer Dumps 2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-14 12:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-14 08:24 - 2013-05-11 06:48 - 00001431 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-14 08:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-14 07:34 - 2013-08-14 21:25 - 00000000 ____D C:\Windows\system32\MRT 2013-11-14 07:32 - 2011-01-31 21:26 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-13 14:05 - 2011-01-31 17:25 - 00000000 ____D C:\Program Files (x86)\Yahoo! 2013-11-13 12:00 - 2011-01-31 17:28 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Yahoo 2013-11-11 05:50 - 2011-01-30 16:59 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-11-10 11:42 - 2012-12-25 14:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Foxit Software 2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE 2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Josef Benutzername\Desktop\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11 2013-11-09 08:59 - 2013-05-21 19:25 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Zeta Producer 11 Some content of TEMP: ==================== C:\Users\Josef Benutzername\AppData\Local\Temp\avgnt.exe C:\Users\Josef Benutzername\AppData\Local\Temp\Checkupdate.exe C:\Users\Josef Benutzername\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\Josef Benutzername\AppData\Local\Temp\gcapi_dll.dll C:\Users\Josef Benutzername\AppData\Local\Temp\gtapi_signed.dll C:\Users\Josef Benutzername\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-20 20:18 ==================== End Of Log ============================ --- --- --- Ist damit das Problem offenbar bei mir gelöst, oder? Und was war eigentlich passiert?? Vielen Dank!!! |
09.12.2013, 16:04 | #4 |
/// the machine /// TB-Ausbilder | Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden nen Haufen Adware ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
09.12.2013, 23:24 | #5 |
| Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden So sehen jetzt die weiteren Ergebnisse aus: Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=5c37d30ed360f94aa6770e2d0d1d0e04 # engine=16199 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-12-09 10:01:53 # local_time=2013-12-09 11:01:53 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=774 16777213 85 83 175208 163336385 0 0 # compatibility_mode=1799 16775165 100 96 58189 252049803 47773 0 # compatibility_mode=5893 16776573 100 94 175008 138256363 0 0 # scanned=280684 # found=0 # cleaned=0 # scan_time=12490 Code:
ATTFilter Results of screen317's Security Check version 0.99.76 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Secunia PSI (2.0.0.3003) Malwarebytes Anti-Malware Version 1.75.0.1300 CompuGROUP Java 1.6.0.11.1 Java 7 Update 45 Adobe Flash Player 11.9.900.152 Adobe Reader XI Mozilla Firefox (25.0.1) Mozilla Thunderbird (24.1.1) ````````Process Check: objlist.exe by Laurent```````` Spybot Teatimer.exe is disabled! Avira Antivir avgnt.exe Avira Antivir avguard.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-12-2013 Ran by Josef Benutzername (administrator) on PC on 09-12-2013 23:17:29 Running from G:\Downloads_Josef\ComputerSicherheitEtc\TrojanerBoard Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (ScanSoft, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe (shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe (REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\mdm.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe (Microsoft Corporation) C:\Windows\splwow64.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [438784 2010-12-17] () Winlogon\Notify\ScCertProp: C:\Windows\SysWOW64\explorer.exe (Microsoft Corporation) HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [3642312 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [NWEReboot] - [x] HKLM-x32\...\Run: [IndexSearch] - C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [40960 2004-03-09] (ScanSoft, Inc.) HKLM-x32\...\Run: [PaperPort PTD] - C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [57393 2004-03-09] (ScanSoft, Inc.) HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Up-date\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-11-21] (AVAST Software) HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\da89f187-2013-45e2-8d0a-7564b3210415.exe [180184 2013-11-23] (AVAST Software) HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.) HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [811792 2013-12-05] (BlueStack Systems, Inc.) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== ProxyServer: localhost:21320 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://media.radiosai.org/www/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xE7F40B6E99C0CB01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.1und1.de/br/ie9_startpage SearchScopes: HKCU - {09038620-190C-402B-A92F-18864E6AB22F} URL = hxxp://go.1und1.de/br/ie9_search_web/?su={searchTerms} SearchScopes: HKCU - {40064957-18EB-412d-9146-3F57E8D92EEC} URL = hxxp://go.1und1.de/br/ie9_search_pic/?su={searchTerms} SearchScopes: HKCU - {5A817CF6-92D5-4DE5-AC38-82DF8A73EF28} URL = hxxp://go.gmx.net/br/ie9_search_web/?su={searchTerms} SearchScopes: HKCU - {64A0CF90-33DD-4B42-88A1-4AF10528A62F} URL = hxxp://suche.web.de/search/web/?mc=hp%40suche.suche%40home&mc=hp%40suche.suche%40home&su={searchTerms}&x=37&y=6 SearchScopes: HKCU - {6B1D1FB7-7233-4F7C-802C-21A1DDB12754} URL = hxxp://go.web.de/br/ie9_search_web/?su={searchTerms} SearchScopes: HKCU - {8D27B32E-89EE-460e-82D2-5FC354078EAD} URL = hxxp://go.1und1.de/br/ie9_search_produkte/?su={searchTerms} SearchScopes: HKCU - {94D71752-DB36-420A-B721-0E4D2828CD15} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus SearchScopes: HKCU - {DCE59F23-A446-45a5-9459-E68FDC0DE38D} URL = hxxp://go.1und1.de/br/ie9_search_maps/?su={searchTerms} BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Soft-ware\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (Real-Player) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524 FF NewTab: about:blank FF Homepage: hxxp://www.benefind.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll () FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1206147.dll (Adobe Systems, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silver-light\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vi-sion\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @real.com/nppl3260;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File FF Plugin-x32: @real.com/nprjplug;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll No File FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=15.0.6.14 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\searchplugins\benefind.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Garmin Communicator - C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} FF Extension: keyloggerbeater - C:\Users\Josef Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\fp6pkvew.default-1385202844524\Extensions\keyloggerbeater@toptip.ca.xpi FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: () - C:\Users\Josef Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0 CHR Extension: () - C:\Users\Josef Benutzername\AppData\Local\Google\Chrome\User Da-ta\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0 CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-11-21] (AVAST Soft-ware) R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-05] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-05] (BlueStack Systems, Inc.) R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [514128 2012-03-19] (REINER SCT) S2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Ser-vice\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries) R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [231936 2012-03-23] (Samsung Electronics Co., Ltd.) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [993848 2011-04-19] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [399416 2011-04-19] (Secunia) S2 AcrSch2Svc; "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe" [x] ==================== Drivers (Whitelisted) ==================== R1 27784551; C:\Windows\System32\DRIVERS\27784551.sys [157712 2009-09-25] (Kaspersky Lab) R0 27784552; C:\Windows\System32\DRIVERS\27784552.sys [40464 2009-10-22] (Kaspersky Lab) R1 73230381; C:\Windows\System32\DRIVERS\73230381.sys [157712 2009-09-25] (Kaspersky Lab) R0 73230382; C:\Windows\System32\DRIVERS\73230382.sys [40464 2009-10-22] (Kaspersky Lab) S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-01] (Wondershare) R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2013-11-21] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2013-11-21] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-21] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-21] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2013-11-21] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2013-11-21] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2013-11-21] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-11-21] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-07] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [113424 2013-12-05] (BlueStack Systems) S3 cjusb; C:\Windows\System32\DRIVERS\cjusb.sys [34672 2011-03-29] (REINER SCT) S3 eh100; C:\Windows\System32\DRIVERS\eh100.sys [45568 2009-11-11] (SCM Microsystems Inc.) R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S0 snapman; C:\Windows\SysWow64\DRIVERS\snapman.sys [96320 2011-01-30] (Acronis) R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-12-09 14:27 - 2013-12-09 14:27 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk 2013-12-09 14:27 - 2013-12-09 14:27 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk 2013-12-09 14:26 - 2013-12-09 14:26 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2013-12-09 13:29 - 2013-12-09 16:13 - 00000470 ____H C:\Windows\Tasks\Norton Security Scan for Josef Benutzername.job 2013-12-09 13:29 - 2013-12-09 13:29 - 00003634 _____ C:\Windows\System32\Tasks\Norton Security Scan for Josef Benutzername 2013-12-09 13:29 - 2013-12-09 13:29 - 00001463 _____ C:\Users\Public\Desktop\Norton Security Scan.LNK 2013-12-09 13:29 - 2013-12-09 13:29 - 00000000 ____D C:\ProgramData\Symantec 2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\Windows\system32\Drivers\NSSx64 2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\ProgramData\Norton 2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\Program Files (x86)\Norton Security Scan 2013-12-09 10:35 - 2013-12-09 10:35 - 00002024 _____ C:\Users\Josef Benutzername\Desktop\Avira Free Antivirus starten.lnk 2013-12-09 10:25 - 2013-12-09 10:25 - 00000000 ____D C:\Windows\ERUNT 2013-12-09 10:21 - 2013-12-09 10:21 - 00000579 _____ C:\Users\Josef Benutzername\Desktop\JRT.exe - Verknüpfung.lnk 2013-12-09 10:10 - 2013-12-09 10:10 - 00000634 _____ C:\Users\Josef Benutzername\Desktop\adwcleaner.exe - Verknüpfung.lnk 2013-12-09 09:42 - 2013-12-09 10:13 - 00000000 ____D C:\AdwCleaner 2013-12-09 09:36 - 2013-12-09 13:32 - 00000224 _____ C:\Windows\setupact.log 2013-12-09 09:36 - 2013-12-09 13:31 - 00005976 _____ C:\Windows\PFRO.log 2013-12-09 09:36 - 2013-12-09 09:36 - 00000000 _____ C:\Windows\setuperr.log 2013-12-09 09:19 - 2013-12-09 09:19 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-09 08:27 - 2013-12-09 23:17 - 00000000 ____D C:\FRST 2013-12-08 10:17 - 2013-12-09 14:36 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2013-12-08 10:17 - 2013-12-09 14:26 - 00000000 ____D C:\ProgramData\BlueStacks 2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini 2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B} 2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6} 2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Josef Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk 2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32 2013-12-01 22:52 - 2013-12-01 22:56 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileZilla 2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Josef Benutzername\Desktop\BrccMCtl.exe - Verknüpfung.lnk 2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT 2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini 2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother 2013-11-27 18:38 - 2009-01-15 19:20 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll 2013-11-27 18:38 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll 2013-11-27 18:38 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll 2013-11-27 18:38 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll 2013-11-27 18:38 - 2003-11-28 18:57 - 00000000 _____ C:\Windows\brdfxspd.dat 2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\InstallShield 2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner 2013-11-27 16:33 - 2013-11-27 16:37 - 00032768 ___SH C:\Users\Josef Benutzername\Documents\Thumbs.db 2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Foxit Reader 2013-11-23 11:58 - 2013-11-23 12:00 - 00000890 _____ C:\Users\Josef Benutzername\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk 2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Josef Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk 2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\AVAST Software 2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Josef Benutzername\Documents\ProcAlyzer Dumps 2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-14 07:34 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys 2013-11-14 07:34 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2013-11-14 07:34 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2013-11-14 07:34 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll 2013-11-14 07:34 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll 2013-11-14 07:34 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll 2013-11-14 07:34 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll 2013-11-14 07:34 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll 2013-11-14 07:34 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll 2013-11-14 07:34 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll 2013-11-14 07:34 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe 2013-11-14 07:34 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe 2013-11-14 07:34 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll 2013-11-14 07:34 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2013-11-14 07:34 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll 2013-11-14 07:34 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2013-11-14 07:34 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2013-11-14 07:34 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2013-11-14 07:28 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2013-11-14 07:28 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2013-11-14 07:13 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-11-14 07:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-11-14 07:12 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2013-11-14 07:12 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2013-11-14 07:12 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2013-11-14 07:12 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2013-11-14 07:12 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2013-11-14 07:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2013-11-14 07:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2013-11-14 07:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2013-11-14 07:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2013-11-14 07:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2013-11-14 07:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2013-11-14 07:12 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2013-11-14 07:12 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2013-11-14 07:12 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-11-14 07:12 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2013-11-14 07:12 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2013-11-14 07:12 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2013-11-14 07:12 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2013-11-14 07:12 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2013-11-14 07:12 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2013-11-14 07:12 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2013-11-14 07:12 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2013-11-14 07:12 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2013-11-14 07:12 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2013-11-14 07:12 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2013-11-14 07:12 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2013-11-14 07:12 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2013-11-14 07:12 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2013-11-13 06:57 - 2013-09-06 07:55 - 06583664 _____ (AVAST Software) C:\Program1 2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE 2013-11-09 21:13 - 2013-08-16 13:56 - 00216064 _____ C:\Windows\SysWOW64\gcapi_dll.dll 2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Josef Benutzername\Desktop\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11 ==================== One Month Modified Files and Folders ======= 2013-12-09 23:17 - 2013-12-09 08:27 - 00000000 ____D C:\FRST 2013-12-09 23:16 - 2011-02-10 07:48 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-12-09 22:37 - 2013-01-06 19:57 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-12-09 20:49 - 2013-10-18 19:49 - 00000000 ____D C:\Program Files (x86)\File Type Advisor 2013-12-09 19:27 - 2013-10-16 20:24 - 00000099 _____ C:\Users\Public\LMDebug.log 2013-12-09 19:21 - 2009-07-14 18:58 - 00654150 _____ C:\Windows\system32\perfh007.dat 2013-12-09 19:21 - 2009-07-14 18:58 - 00130022 _____ C:\Windows\system32\perfc007.dat 2013-12-09 19:21 - 2009-07-14 06:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2013-12-09 19:20 - 2011-08-13 13:19 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Skype 2013-12-09 18:22 - 2011-02-10 07:48 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-12-09 16:13 - 2013-12-09 13:29 - 00000470 ____H C:\Windows\Tasks\Norton Security Scan for Josef Benutzername.job 2013-12-09 15:34 - 2011-02-04 19:07 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\FreePDF_XP 2013-12-09 14:36 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacksSetup 2013-12-09 14:27 - 2013-12-09 14:27 - 00001820 _____ C:\Users\Public\Desktop\Apps.lnk 2013-12-09 14:27 - 2013-12-09 14:27 - 00001813 _____ C:\Users\Public\Desktop\Start BlueStacks.lnk 2013-12-09 14:27 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries 2013-12-09 14:26 - 2013-12-09 14:26 - 00000000 ____D C:\Program Files (x86)\BlueStacks 2013-12-09 14:26 - 2013-12-08 10:17 - 00000000 ____D C:\ProgramData\BlueStacks 2013-12-09 13:41 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-12-09 13:41 - 2009-07-14 05:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-12-09 13:32 - 2013-12-09 09:36 - 00000224 _____ C:\Windows\setupact.log 2013-12-09 13:32 - 2011-06-16 19:54 - 00000000 ____D C:\ProgramData\NVIDIA 2013-12-09 13:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-12-09 13:31 - 2013-12-09 09:36 - 00005976 _____ C:\Windows\PFRO.log 2013-12-09 13:31 - 2011-01-31 20:15 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs 2013-12-09 13:30 - 2011-01-30 16:41 - 02017593 _____ C:\Windows\WindowsUpdate.log 2013-12-09 13:29 - 2013-12-09 13:29 - 00003634 _____ C:\Windows\System32\Tasks\Norton Security Scan for Josef Benutzername 2013-12-09 13:29 - 2013-12-09 13:29 - 00001463 _____ C:\Users\Public\Desktop\Norton Security Scan.LNK 2013-12-09 13:29 - 2013-12-09 13:29 - 00000000 ____D C:\ProgramData\Symantec 2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\Windows\system32\Drivers\NSSx64 2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\ProgramData\Norton 2013-12-09 13:28 - 2013-12-09 13:28 - 00000000 ____D C:\Program Files (x86)\Norton Security Scan 2013-12-09 10:38 - 2012-11-05 20:59 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2013-12-09 10:35 - 2013-12-09 10:35 - 00002024 _____ C:\Users\Josef Benutzername\Desktop\Avira Free Antivirus starten.lnk 2013-12-09 10:25 - 2013-12-09 10:25 - 00000000 ____D C:\Windows\ERUNT 2013-12-09 10:21 - 2013-12-09 10:21 - 00000579 _____ C:\Users\Josef Benutzername\Desktop\JRT.exe - Verknüpfung.lnk 2013-12-09 10:13 - 2013-12-09 09:42 - 00000000 ____D C:\AdwCleaner 2013-12-09 10:13 - 2013-11-02 08:26 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software 2013-12-09 10:13 - 2013-09-11 11:10 - 00000000 ____D C:\ProgramData\Uniblue 2013-12-09 10:10 - 2013-12-09 10:10 - 00000634 _____ C:\Users\Josef Benutzername\Desktop\adwcleaner.exe - Verknüpfung.lnk 2013-12-09 09:36 - 2013-12-09 09:36 - 00000000 _____ C:\Windows\setuperr.log 2013-12-09 09:36 - 2011-02-10 07:48 - 00000000 ____D C:\Program Files\Google 2013-12-09 09:36 - 2011-02-10 07:47 - 00000000 ____D C:\Program Files (x86)\Google 2013-12-09 09:19 - 2013-12-09 09:19 - 00001119 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-12-09 09:19 - 2013-09-14 10:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-12-09 08:52 - 2011-02-02 22:42 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Google 2013-12-09 08:15 - 2011-01-30 17:08 - 00000947 _____ C:\Windows\Brpfx04a.ini 2013-12-08 09:47 - 2013-12-08 09:47 - 00000270 _____ C:\Windows\wininit.ini 2013-12-07 23:30 - 2013-12-07 23:30 - 00002980 _____ C:\Windows\System32\Tasks\{9EE5D41A-2A37-4D82-B85B-DA3ED184616B} 2013-12-07 23:29 - 2013-12-07 23:29 - 00002980 _____ C:\Windows\System32\Tasks\{CA325891-AE77-4133-BE8F-6EE12CA0F3C6} 2013-12-07 23:24 - 2013-03-28 07:25 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-12-07 23:21 - 2013-12-07 23:21 - 00001972 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-12-07 23:18 - 2011-01-30 16:45 - 00000000 ____D C:\Users\Josef Benutzername 2013-12-07 23:17 - 2011-06-22 10:38 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\PC-FAX TX 2013-12-07 23:17 - 2011-01-31 09:05 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\IrfanView 2013-12-07 23:17 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat 2013-12-07 23:16 - 2011-06-26 11:32 - 00000000 ____D C:\ProgramData\Real 2013-12-07 23:16 - 2011-02-02 22:42 - 00000000 ____D C:\ProgramData\Google 2013-12-07 23:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration 2013-12-03 18:27 - 2012-10-02 13:42 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\korAccount 2013-12-01 23:03 - 2013-12-01 23:03 - 00001834 _____ C:\Users\Josef Benutzername\Desktop\filezilla.exe - Verknüpfung.lnk 2013-12-01 22:56 - 2013-12-01 22:56 - 00000000 ____D C:\Program Files (x86)\FileZilla_3.7.3_win32 2013-12-01 22:56 - 2013-12-01 22:52 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileZilla 2013-11-30 20:49 - 2013-10-18 19:49 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck 2013-11-27 18:54 - 2013-11-27 18:54 - 00001652 _____ C:\Users\Josef Benutzername\Desktop\BrccMCtl.exe - Verknüpfung.lnk 2013-11-27 18:39 - 2013-11-27 18:39 - 00000034 _____ C:\Windows\SysWOW64\BD7420.DAT 2013-11-27 18:39 - 2011-01-30 17:08 - 00000467 _____ C:\Windows\BRWMARK.INI 2013-11-27 18:39 - 2011-01-30 17:08 - 00000169 _____ C:\Windows\brpcfx.ini 2013-11-27 18:38 - 2013-11-27 18:38 - 00000066 _____ C:\Windows\Brfaxrx.ini 2013-11-27 18:38 - 2013-11-27 18:38 - 00000000 ____D C:\Program Files (x86)\Brother 2013-11-27 18:38 - 2011-01-30 17:01 - 00000050 _____ C:\Windows\system32\bd7420.dat 2013-11-27 18:38 - 2011-01-28 11:16 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Infor-mation 2013-11-27 18:37 - 2013-11-27 18:37 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\InstallShield 2013-11-27 18:34 - 2011-01-28 10:59 - 00000000 ____D C:\Windows\Panther 2013-11-27 18:04 - 2013-11-27 18:04 - 00002790 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-27 18:04 - 2013-11-27 18:04 - 00000828 _____ C:\Users\Public\Desktop\CCleaner.lnk 2013-11-27 18:04 - 2013-11-27 18:04 - 00000000 ____D C:\Program Files\CCleaner 2013-11-27 16:37 - 2013-11-27 16:33 - 00032768 ___SH C:\Users\Josef Benutzername\Documents\Thumbs.db 2013-11-27 09:30 - 2013-11-27 09:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Foxit Reader 2013-11-26 19:27 - 2012-08-24 06:23 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-11-26 19:27 - 2011-08-13 13:19 - 00000000 ____D C:\ProgramData\Skype 2013-11-25 20:25 - 2013-05-08 06:08 - 00083160 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-11-25 20:25 - 2013-03-28 07:25 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-11-25 20:25 - 2013-03-28 07:25 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2013-11-25 12:02 - 2011-01-30 20:23 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Microsoft Help 2013-11-25 12:02 - 2011-01-30 20:22 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-23 13:39 - 2011-01-30 19:49 - 00000000 ____D C:\ProgramData\PSYPRCFG 2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\ProgramData\Psyprax32 2013-11-23 13:39 - 2011-01-30 19:47 - 00000000 ____D C:\Program Files (x86)\Psyprax32 2013-11-23 12:00 - 2013-11-23 11:58 - 00000890 _____ C:\Users\Josef Benutzerna-me\Desktop\GarminMapUpdater.exe - Verknüpfung.lnk 2013-11-22 16:09 - 2011-01-30 23:26 - 00000000 ____D C:\Program Files (x86)\svnet 2013-11-22 14:54 - 2013-11-22 14:54 - 00001668 _____ C:\Users\Josef Benutzername\Desktop\_1plus11-Josef.mp3 - Verknüpfung.lnk 2013-11-22 12:00 - 2011-01-31 21:36 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\vlc 2013-11-21 15:17 - 2013-11-21 15:17 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\AVAST Software 2013-11-21 15:07 - 2013-03-05 07:42 - 00205320 _____ C:\Windows\system32\Drivers\aswVmm.sys 2013-11-21 15:07 - 2013-03-05 07:42 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2013-11-21 15:07 - 2012-11-05 20:59 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2013-11-21 15:07 - 2012-11-05 20:58 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2013-11-21 15:07 - 2011-06-29 07:56 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 ____D C:\ProgramData\AVAST Software 2013-11-21 15:03 - 2011-06-29 07:56 - 00000000 _____ C:\Windows\SysWOW64\config.nt 2013-11-21 07:42 - 2013-01-06 19:57 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-11-21 07:42 - 2012-04-04 14:13 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-11-21 07:42 - 2011-05-16 06:37 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-21 07:42 - 2011-02-01 11:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Adobe 2013-11-21 07:02 - 2013-09-12 17:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-20 23:20 - 2013-10-12 10:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-11-19 14:32 - 2013-10-09 21:52 - 00000919 _____ C:\Users\Public\Desktop\VLC media player.lnk 2013-11-17 14:58 - 2013-10-19 19:49 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\FileAdvisor 2013-11-17 14:40 - 2011-02-01 14:00 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Windows Live 2013-11-15 22:50 - 2013-11-15 22:50 - 00000000 ____D C:\Users\Josef Benutzername\Documents\ProcAlyzer Dumps 2013-11-15 20:16 - 2013-11-15 20:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-14 12:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-11-14 08:24 - 2013-05-11 06:48 - 00001431 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-14 08:19 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-11-14 07:36 - 2013-11-14 07:36 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-11-14 07:36 - 2013-11-14 07:36 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-11-14 07:36 - 2013-11-14 07:36 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-11-14 07:36 - 2013-11-14 07:36 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-11-14 07:36 - 2013-11-14 07:36 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-11-14 07:36 - 2013-11-14 07:36 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-11-14 07:36 - 2013-11-14 07:36 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-11-14 07:36 - 2013-11-14 07:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-11-14 07:34 - 2013-08-14 21:25 - 00000000 ____D C:\Windows\system32\MRT 2013-11-14 07:32 - 2011-01-31 21:26 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-11-13 14:05 - 2011-01-31 17:25 - 00000000 ____D C:\Program Files (x86)\Yahoo! 2013-11-13 12:00 - 2011-01-31 17:28 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Yahoo 2013-11-11 05:50 - 2011-01-30 16:59 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2013-11-10 11:42 - 2012-12-25 14:30 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Foxit Software 2013-11-09 21:13 - 2013-11-09 21:13 - 00000000 ____D C:\Program Files (x86)\FOXIT SOFTWARE 2013-11-09 08:59 - 2013-11-09 08:59 - 00001282 _____ C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00001274 _____ C:\Users\Josef Benutzername\Desktop\Zeta Producer 11.lnk 2013-11-09 08:59 - 2013-11-09 08:59 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zeta Producer 11 2013-11-09 08:59 - 2013-05-21 19:25 - 00000000 ____D C:\Users\Josef Benutzername\AppData\Local\Zeta Producer 11 Some content of TEMP: ==================== C:\Users\Josef Benutzername\AppData\Local\Temp\avgnt.exe C:\Users\Josef Benutzername\AppData\Local\Temp\Checkupdate.exe C:\Users\Josef Benutzername\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\Josef Benutzername\AppData\Local\Temp\gcapi_dll.dll C:\Users\Josef Benutzername\AppData\Local\Temp\gtapi_signed.dll C:\Users\Josef Benutzername\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-11-20 20:18 ==================== End Of Log ============================ --- --- --- Irgendwie fühlt sich jetzt alles sehr sauber an!!! Stimmt das? DANKE! |
10.12.2013, 12:06 | #6 |
/// the machine /// TB-Ausbilder | Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ProxyServer: localhost:21320 Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden |
10.12.2013, 19:59 | #7 |
| Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden Hier die Fixlog.txt Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-12-2013 Ran by Josef Benutzername at 2013-12-10 14:53:17 Run:1 Running from G:\Downloads_Josef\ComputerSicherheitEtc\TrojanerBoard Boot Mode: Normal ============================================== Content of fixlist: ***************** ProxyServer: localhost:21320 ***************** HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully. ==== End of Fixlog ==== Deine Hinweise für sicheres Surfen werde ich umsetzen. Möchte mich ganz herzlich für die umfassende und superkompetente Hilfe bedanken! Frohe Feiertag und guten Rutsch! Josef Nachtragen möchte ich noch, daß ich zur Bereinigung der Temp Files den TFC heruntergeladen und gestartet hatte, was allerdings zum Sofort-Crash des gesamten PC geführt hat!! Aber ich habe auch den CCleaner, den ich benutzen kann (ohne Registry Cleaning). |
11.12.2013, 12:15 | #8 |
/// the machine /// TB-Ausbilder | Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden Dann benutz den Ccleaner
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Win 7, 64 Bit, Problem beim Starten: Conduit\BackgroundContainer\BackgroundContainer.dll wurde nicht gefunden |
antivir, antivirus, backgroundcontainer, bluestacks, converter, entfernen, flash player, homepage, installation, kaspersky, mozilla, newtab, plug-in, problem, pup.optional.conduit, pup.optional.conduit.a, pup.optional.filesfrog.a, pup.optional.opencandy, refresh, registry, secunia psi, security, services.exe, software, starten, svchost.exe, system |