| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
12.12.2013, 20:42
| #1 |
| |  Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Erst mal guten Tag, jetzt bin ich auch betroffen und zwar stürzt der Internet-Explorer oder auch Firefox ab mit einer Problemmeldung und manchmal auch der ganze Rechner mit Bluescreen. Lenovo TC-A57 Betriebssystem:Windows 7 Enterprise Sp1 Intel Core TM 2 DUO CPU E8200 2,66 GHz Arbeitsspeicher 2GB BS:32bit Ich habe verschiedene Versionen der I-Netexplorer installiert, sowie chkdsk/f/r duchlaufen lassen. Zurück gesetzt habe ich den PC noch nicht, da alle anderen Funktionen normal laufen. Antiviren- und Webschutz über Sophos und kein Virenbefind angezeigt nach scan. Memory Test auch negativ. Allerdings im abgesicherten Modus kam es nicht zum Absturz. Welche Routine müsste ich jetzt befolgen? Vielen Dank im Voraus! Achim |
|
12.12.2013, 22:07
| #2 |
| /// the machine /// TB-Ausbilder    | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
12.12.2013, 23:09
| #3 |
| | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Hallo Schrauber,
__________________läuft alles wie geplant und nach dem Start (scan) hat sich die Statusanzeige die letzte halbe Stunde vielleicht ca.8mm bewegt. Dauert der Scan länger und ist das normal dann ist alles in Ordnung und ich lasse den Rechner über Nacht an? Ich habe die 32bit Version gewählt. Erst mal schon recht herzlichen Dank im Voraus.  |
|
13.12.2013, 20:11
| #4 |
| /// the machine /// TB-Ausbilder | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Nee normal geht der ganz scnell. Abbrechen, FRST löschen und neu laden, nochmal versuchen 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
13.12.2013, 20:58
| #5 |
| | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Hallo Ich muss noch die Web-Plattform neu installieren. Dann muss ich versuchen,dass mir der Browser nicht abstürzt oder der PC mit Blue Screen. Dauert noch etwas,dann melde ich mich wieder? Viele Grüsse Achim |
|
13.12.2013, 23:30
| #6 |
| | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Hallo Schrauber, ich habe es jetzt im abgesicherten Modus geschafft,da der Browser hier nicht abstürzt. Ich hoffe die addition-Datei ist die Richtige,da ich eine auf dem Desktop hatte und eine zweite im Verzeichnis wo der Doenload gestartet wurde? Ansonsten kann ich den scan nochmals durchführen. Vielen Dank Achim |
|
14.12.2013, 07:59
| #7 |
| /// the machine /// TB-Ausbilder | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Hi, Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
14.12.2013, 09:34
| #8 |
| | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Hallo Schrauber, ich habe den scan nochmal durchlaufen lassen und funktioniert. Hier ist erst mal der Text oder besser das Ergebnis: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-12-2013 01
Ran by Achim (administrator) on GEORGE on 14-12-2013 09:02:54
Running from C:\Users\Achim\Desktop
Microsoft Windows 7 Enterprise Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Eaton Corporation) C:\Program Files\Powerware\LanSafe\Bin\PowerMonitor.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Ignition\LMIGuardianSvc.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\ramaint.exe
(NCP engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\ncpclcfg.exe
(NCP Engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\ncprwsnt.exe
() C:\Program Files\LANCOM\Advanced VPN Client\NCPSEC.EXE
(Nuance Communications, Inc.) C:\Program Files\Nuance\PDF Professional 6\PDFProFiltSrv.exe
(Microsoft Corporation) C:\Windows\System32\Locator.exe
(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Axis Communications) C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files\Powerware\LanSafe\Bin\LSTrayAgent.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeIn.exe
(Eaton Corporation) C:\Program Files\Powerware\LanSafe\Bin\XYNTService.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(Powerware) C:\Program Files\Powerware\LanSafe\Bin\httpserver.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
(Powerware) C:\Program Files\Powerware\LanSafe\Bin\status_glance.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(Wondershare) C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PDF Professional 6\PdfPro6Hook.exe
(NCP engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\NcpBudgetGui.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
(CANON INC.) C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
(Axis Communications) C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmAdmin.exe
(Spotify Ltd) C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Achim\AppData\Roaming\Spotify\spotify.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Dropbox, Inc.) C:\Users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AVM Berlin) C:\Users\Achim\AppData\Local\Apps\2.0\VQ9HEPM4.KK8\OQATJMLW.1MX\frit..tion_1acae14e4778b8d2_0002.0003_7c9366a34786c7f9\fritzbox-usb-fernanschluss.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEUPDT.EXE
() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\agent.exe
(Microsoft Corporation) C:\Program Files\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files\Windows Live\Contacts\wlcomm.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NWEReboot] - [x]
HKLM\...\Run: [SCLicense] - [x]
HKLM\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1743648 2013-06-13] (Wondershare)
HKLM\...\Run: [tvncontrol] - C:\Program Files\TightVNC\tvnserver.exe [1690096 2013-07-19] (GlavSoft LLC.)
HKLM\...\Run: [TrayServer] - C:\Program Files\MAGIX\Video_deluxe_17_Premium\Trayserver.exe [90112 2008-08-07] (MAGIX AG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Sophos AutoUpdate Monitor] - C:\Program Files\Sophos\AutoUpdate\ALMon.exe [929272 2013-01-11] (Sophos Limited)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [PDFHook] - C:\Program Files\Nuance\PDF Professional 6\PdfPro6Hook.exe [1275168 2009-07-27] (Nuance Communications, Inc.)
HKLM\...\Run: [PDF6 Registry Controller] - C:\Program Files\Nuance\PDF Professional 6\RegistryController.exe [110880 2009-07-27] (Nuance Communications, Inc.)
HKLM\...\Run: [Nuance PDF Professional 6-reminder] - C:\Program Files\Nuance\PDF Professional 6\Ereg\Ereg.exe [54560 2008-11-03] (Nuance Communications, Inc.)
HKLM\...\Run: [Nuance PDF Converter Professional 7-reminder] - "C:\Program Files\Nuance\PDF Professional 7\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Converter Professional 7\Ereg\Ereg.ini"
HKLM\...\Run: [NcpPopup] - C:\Program Files\LANCOM\Advanced VPN Client\NCPPOPUP.EXE [1011280 2012-03-20] (NCP engineering GmbH)
HKLM\...\Run: [NcpBudgetGui] - C:\Program Files\LANCOM\Advanced VPN Client\NcpBudgetGui.exe [999424 2013-08-08] (NCP engineering GmbH)
HKLM\...\Run: [LogMeIn GUI] - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [63048 2012-11-29] (LogMeIn, Inc.)
HKLM\...\Run: [KeePass 2 PreLoad] - C:\Program Files\KeePass Password Safe 2\KeePass.exe [1960448 2013-04-05] (Dominik Reichl)
HKLM\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [439440 2011-09-27] (CANON INC.)
HKLM\...\Run: [ControlCenter3] - C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1637496 2011-08-04] (CANON INC.)
HKLM\...\Run: [BrowserPlugInHelper] - C:\Program Files\Wondershare\Video Converter Ultimate\BrowserPlugInHelper.exe [1966992 2013-09-04] ()
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AXIS Camera Management Service Control] - C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmAdmin.exe [1831320 2013-07-11] (Axis Communications)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-05] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\Achim\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-05] (Spotify Ltd)
HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [210208 2008-11-17] (Acresso Corporation)
HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)
HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20133824 2013-09-25] (Google)
HKCU\...\Run: [D78C92992BD5DF6C33342FFA1CEF81EA1030193A._service_run] - "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=service
HKCU\...\Run: [AVMUSBFernanschluss] - C:\Users\Achim\AppData\Local\Apps\2.0\VQ9HEPM4.KK8\OQATJMLW.1MX\frit..tion_1acae14e4778b8d2_0002.0003_7c9366a34786c7f9\AVMAutoStart.exe [139264 2013-07-13] (AVM Berlin)
MountPoints2: {1d58cb6e-0c86-11e3-a93a-001e909e0c7e} - F:\FingerVerify.exe
MountPoints2: {79f09736-611b-11e3-8ca7-001e909e0c7e} - F:\pushinst.exe
MountPoints2: {d484f749-8641-11e2-bedb-806e6f6e6963} - E:\setup.exe
AppInit_DLLs: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll [ 2013-05-17] (Sophos Limited)
Startup: C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x147CCD919DF6CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files\Nuance\PDF Professional 6\bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: FRITZ!Box Addon BHO - {C0C86BBE-9509-4296-8459-FDBFDAF4B673} - C:\Program Files\FRITZ!Box\AddOn (IE)\FBoxIESplitButton.dll (AVM Berlin)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab
DPF: {7191F0AC-D686-46A8-BFCC-EA61778C74DD} hxxp://192.168.178.54/aplugLite.cab
DPF: {721700FE-7F0E-49C5-BDED-CA92B7CB1245} hxxp://192.168.178.23:84/camclictrl.cab
DPF: {82E5DF24-51E8-47CD-864A-F4BD5005AA73} https://www.icloud.com/system/iCloud.cab
DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} hxxp://192.168.178.50/activex/AxisCamControl.cab
DPF: {9464D0CA-5BD8-4175-AB33-A61A4A67AA97} hxxp://192.168.178.23:84/camclictrl.cab
DPF: {9C3EFB8A-DC20-484B-B905-5E337A988C5D} hxxp://192.168.178.20:81/LNetCam.cab
DPF: {B015B944-7316-49AE-AC84-ACCA9379EA32} hxxp://192.168.178.25:82/IPCamPluginMJPEG.cab
DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 19 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Tcpip\..\Interfaces\{1C2EF6A4-791E-4D02-B6D4-2358FABE2256}: [NameServer]192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @TRENDnet.com/CameraPlugin - C:\Program Files\TRENDnet\Plugin\npcamstreamctrl.dll (TRENDnet)
FF Plugin: ZEON/PDF,version=2.0 - C:\Program Files\Nuance\PDF Professional 6\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: nuance - C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default\Extensions\nuance@pdf6
FF HKLM\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF Extension: Wondershare Video Converter Ultimate - C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
========================== Services (Whitelisted) =================
R2 AXIS Camera Management; C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmService.exe [17920 2013-07-11] (Axis Communications)
S4 DcRaidMoSrv; C:\Program Files\Dawicontrol GmbH\Dawicontrol RAID Monitor\RAIDservice.exe [341504 2012-05-30] (Dawicontrol GmbH)
S4 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG)
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®)
R2 LanSafe PM; C:\Program Files\Powerware\LanSafe\Bin\PowerMonitor.exe [532480 2009-12-05] (Eaton Corporation)
R3 LanSafe Process Manager; C:\Program Files\Powerware\LanSafe\bin\xyntservice.exe [49152 2009-12-02] (Eaton Corporation)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Ignition\LMIGuardianSvc.exe [374160 2011-05-17] (LogMeIn, Inc.)
R2 ncpclcfg; C:\Program Files\LANCOM\Advanced VPN Client\ncpclcfg.exe [150800 2013-10-28] (NCP engineering GmbH)
R2 ncprwsnt; C:\Program Files\LANCOM\Advanced VPN Client\ncprwsnt.exe [1395464 2013-11-08] (NCP Engineering GmbH)
R2 NcpSec; C:\Program Files\LANCOM\Advanced VPN Client\NCPSEC.EXE [119808 2011-04-21] ()
R2 PDFProFiltSrv; C:\Program Files\Nuance\PDF Professional 6\PDFProFiltSrv.exe [134944 2009-07-27] (Nuance Communications, Inc.)
R2 SAVAdminService; C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [290296 2013-05-17] (Sophos Limited)
S4 SAVService; C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe [206328 2013-05-17] (Sophos Limited)
S4 Sophos AutoUpdate Service; C:\Program Files\Sophos\AutoUpdate\ALsvc.exe [237048 2013-01-11] (Sophos Limited)
S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22888 2013-09-17] ()
S4 swi_service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [3109880 2013-09-17] (Sophos Limited)
S4 swi_update; C:\ProgramData\Sophos\Web Intelligence\swi_update.exe [1471992 2013-05-17] (Sophos Limited)
S4 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [1690096 2013-07-19] (GlavSoft LLC.)
S3 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [3602752 2013-03-04] (RealVNC Ltd)
==================== Drivers (Whitelisted) ====================
S3 61883; C:\Windows\System32\DRIVERS\61883.sys [46976 2009-07-14] (Microsoft Corporation)
R3 avmaura; C:\Windows\System32\DRIVERS\avmaura.sys [105728 2013-07-13] (AVM Berlin)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)
R0 DC300e; C:\Windows\System32\DRIVERS\DC300e.sys [39872 2013-03-09] (Dawicontrol GmbH)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [25160 2007-08-07] (Elaborate Bytes AG)
R3 ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [11984 2007-02-16] (Elaborate Bytes AG)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2010-10-22] (AVM GmbH)
S3 ncpfilt; C:\Windows\System32\DRIVERS\ncplelhp.sys [87280 2013-09-11] (NCP Engineering GmbH)
R3 ncplelhp; C:\Windows\System32\DRIVERS\ncplelhp.sys [87280 2013-09-11] (NCP Engineering GmbH)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\WNA1000M.sys [734824 2011-02-21] (Realtek Semiconductor Corporation )
R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [132424 2013-05-17] (Sophos Limited)
S3 Ser2plx86; C:\Windows\System32\DRIVERS\ser2pl.sys [134144 2013-02-22] (Prolific Technology Inc.)
R0 Si3132r5; C:\Windows\System32\DRIVERS\Si3132r5.sys [215856 2007-06-01] (Silicon Image, Inc)
R0 SiFilter; C:\Windows\System32\DRIVERS\SiWinAcc.sys [17328 2007-05-25] (Silicon Image, Inc.)
R0 SiRemFil; C:\Windows\System32\DRIVERS\SiRemFil.sys [12464 2007-05-25] (Silicon Image, Inc.)
R1 SKMScan; C:\Windows\System32\DRIVERS\skmscan.sys [33096 2013-05-17] (Sophos Limited)
S4 SophosBootDriver; C:\Windows\System32\DRIVERS\SophosBootDriver.sys [22536 2011-10-23] (Sophos Plc)
R3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [4608 2013-03-04] (RealVNC Ltd.)
S4 LMIRfsClientNP; No ImagePath
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-14 09:02 - 2013-12-14 09:02 - 00020081 _____ C:\Users\Achim\Desktop\FRST.txt
2013-12-14 00:05 - 2013-12-14 00:05 - 00000000 ____D C:\Users\Achim\AppData\Local\{2C2739FB-BC09-46C8-93DE-C51E519DA94F}
2013-12-13 23:33 - 2013-12-13 23:33 - 00889416 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\dotNetFx40_Full_setup.exe
2013-12-13 23:32 - 2013-12-13 23:32 - 24805592 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\Windows-KB890830-V5.7.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 23:19 - 2013-12-13 23:19 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 23:19 - 2013-12-13 23:19 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-13 23:19 - 2013-12-13 23:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-13 23:19 - 2013-12-13 23:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-13 23:19 - 2013-12-13 23:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-13 23:17 - 2013-12-13 23:17 - 02077392 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE11-Windows6.1.exe
2013-12-13 23:07 - 2013-12-13 23:07 - 00027125 _____ C:\Users\Achim\Downloads\Addition.txt
2013-12-13 23:06 - 2013-12-13 23:06 - 00000000 ____D C:\Users\Achim\Downloads\FRST-OlderVersion
2013-12-13 20:30 - 2013-12-13 20:30 - 00000000 ____D C:\Users\Achim\AppData\Local\{DBBE0DAE-37CF-4C2D-AE48-9D5281B2E5DA}
2013-12-13 17:56 - 2013-12-13 23:12 - 00000000 ____D C:\Program Files\IIS Express
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Users\Achim\AppData\Roaming\npm
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\nodejs
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\iisnode-dev
2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\runphp
2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\Microsoft SDKs
2013-12-13 07:23 - 2013-12-13 07:23 - 00116384 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\wpilauncher.exe
2013-12-13 06:58 - 2013-12-13 06:58 - 00000000 ____D C:\Users\Achim\AppData\Local\{C1DA257A-C66F-42C8-9BA0-6D840235018D}
2013-12-12 22:28 - 2013-12-13 23:06 - 01060575 _____ (Farbar) C:\Users\Achim\Desktop\FRST.exe
2013-12-12 22:28 - 2013-12-13 23:06 - 00000000 ____D C:\FRST
2013-12-12 22:12 - 2013-12-12 22:12 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Mozilla
2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 21:22 - 2013-12-12 21:29 - 00000000 ____D C:\ldiag
2013-12-12 20:50 - 2013-12-12 20:50 - 00072892 _____ C:\Users\Achim\Desktop\GEORGE.html
2013-12-12 20:47 - 2013-12-12 20:47 - 00001022 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2013-12-12 20:47 - 2013-12-12 20:47 - 00000000 ____D C:\Program Files\CPUID
2013-12-12 19:37 - 2013-12-12 19:37 - 00003544 ____N C:\bootsqm.dat
2013-12-12 18:26 - 2013-12-12 18:26 - 00000000 ____D C:\Users\Achim\AppData\Local\{E10E834A-B165-4DA9-AB94-570C52339AFA}
2013-12-12 07:58 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 07:58 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 07:45 - 2013-12-12 07:45 - 00422914 _____ C:\Users\Achim\Documents\VHS-kaki-umschlag-2014.pptx
2013-12-12 07:02 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 07:02 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 07:02 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 07:02 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 07:02 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 07:02 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 07:02 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 07:02 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 07:02 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 07:02 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 07:02 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-12 00:20 - 2013-12-13 23:31 - 00026640 _____ C:\Windows\IE11_main.log
2013-12-11 20:23 - 2013-12-11 20:23 - 00059862 _____ C:\Windows\PFRO.log
2013-12-11 20:19 - 2013-12-12 07:07 - 00000095 _____ C:\Users\Achim\Desktop\CMD-Archiv.txt
2013-12-11 18:55 - 2013-12-11 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\Tvsukernel
2013-12-11 18:54 - 2013-12-11 18:54 - 00000000 ____D C:\Program Files\ThinkVantage
2013-12-11 18:36 - 2013-12-11 18:36 - 00000000 ____D C:\Users\Achim\AppData\Local\{E2D1553E-0F76-4874-B75C-9D76E8751983}
2013-12-11 18:34 - 2013-12-11 18:49 - 00007337 _____ C:\Windows\IE10_main.log
2013-12-11 18:24 - 2013-12-11 18:24 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-12-11 18:17 - 2013-12-14 08:35 - 00001749 _____ C:\Windows\setupact.log
2013-12-11 18:17 - 2013-12-11 18:17 - 00000000 _____ C:\Windows\setuperr.log
2013-12-11 07:52 - 2013-12-11 18:24 - 00034573 _____ C:\Windows\ie8_main.log
2013-12-10 20:33 - 2013-12-10 20:33 - 00192888 _____ C:\Users\Achim\cc_20131210_203255.reg
2013-12-10 19:52 - 2013-12-10 19:52 - 00001356 _____ C:\Users\Achim\Desktop\CCleaner.exe - Verknüpfung.lnk
2013-12-10 19:13 - 2010-10-22 02:00 - 00480632 ____N (AVM Berlin) C:\Windows\instwcli.dex
2013-12-10 18:51 - 2013-12-10 18:51 - 00000000 ____D C:\Users\Achim\AppData\Local\{91763463-211A-4527-B882-B35102CF258A}
2013-12-09 23:07 - 2010-10-22 02:00 - 00074240 _____ (AVM Berlin) C:\Windows\system32\fwlanci.org
2013-12-09 23:05 - 2013-12-09 23:05 - 00000000 ____D C:\Program Files\AVM_update
2013-12-09 17:03 - 2013-12-09 17:03 - 00000000 ____D C:\Users\Achim\AppData\Local\{8465BFAE-761F-45B7-A165-2F207C12DCC8}
2013-12-08 19:25 - 2013-12-08 19:25 - 00000000 ____D C:\Users\Achim\AppData\Local\{5DE8D5F8-2105-4566-A3BA-04358E8A7289}
2013-12-08 13:59 - 2013-12-08 14:00 - 37059280 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE11_w7_Windows6.1-x86-de-de.exe
2013-12-08 11:33 - 2013-12-08 11:33 - 00659968 _____ C:\Users\Achim\Downloads\MicrosoftFixit50195.msi
2013-12-08 11:05 - 1998-10-21 18:43 - 00328704 _____ (InstallShield Software Corporation ) C:\Windows\IsUn0407.exe
2013-12-07 11:37 - 2013-12-12 21:01 - 00000000 ____D C:\Users\Achim\Documents\DriverGenius
2013-12-07 10:50 - 2013-12-07 10:51 - 00000000 ____D C:\Users\Achim\AppData\Local\{73248BC2-7A96-4ABE-8A60-1483D1091D51}
2013-12-06 19:57 - 2013-12-06 19:57 - 00000000 ____D C:\Users\Achim\AppData\Local\{15238591-D7D5-4729-AE47-B0C19B081F88}
2013-12-05 19:40 - 2013-12-05 19:40 - 00000000 ____D C:\Users\Achim\AppData\Local\{7D47938A-4131-42E4-9835-A4AA50C8BC30}
2013-12-04 20:52 - 2013-12-04 20:52 - 00000000 ____D C:\Users\Achim\AppData\Local\{BB81DD55-396C-4CB5-9987-4D6599505CC8}
2013-12-04 20:43 - 2013-12-04 20:43 - 00000000 ____D C:\Users\Achim\AppData\Local\vsmedia.de
2013-12-04 20:39 - 2013-12-04 20:39 - 00001128 _____ C:\Users\Achim\Desktop\Continue Image Editor Installation.lnk
2013-12-04 19:43 - 2013-12-04 20:05 - 00000000 ____D C:\Users\Achim\Desktop\FP_2980_1
2013-12-04 07:35 - 2013-12-04 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{D64317D2-6704-4DFF-B1DC-4FC6C9D35CFE}
2013-12-03 17:59 - 2013-12-03 17:59 - 00000000 ____D C:\Users\Achim\AppData\Local\{1AF41660-AD34-48D4-8A36-7A760A548293}
2013-12-02 22:14 - 2013-12-02 22:14 - 00000000 ____D C:\Users\Achim\AppData\Local\{1105C651-2A16-4FE7-BD70-B298078BF86F}
2013-12-02 19:52 - 2013-12-10 19:57 - 00000000 ____D C:\Users\Achim\AppData\Roaming\NCH Software
2013-12-02 19:51 - 2013-12-10 19:57 - 00000000 ____D C:\ProgramData\NCH Software
2013-12-02 19:51 - 2013-12-10 19:57 - 00000000 ____D C:\Program Files\NCH Software
2013-12-01 18:54 - 2013-12-01 18:54 - 00001120 _____ C:\Users\Achim\Desktop\TeamViewer 8.lnk
2013-12-01 09:10 - 2013-12-01 09:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{0E4F093B-18D9-4563-896D-BFD99F598C22}
2013-11-30 17:47 - 2013-11-30 17:47 - 22099928 _____ (DVDVideoSoft Ltd. ) C:\Users\Achim\Downloads\FreeDiscBurner-3.0.19.1125.exe
2013-11-30 11:46 - 2013-11-30 11:47 - 00000000 ____D C:\Users\Achim\AppData\Local\{EC8686D9-D1FC-48AE-BB6A-38FE540BAD42}
2013-11-29 18:55 - 2013-11-29 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\{59930784-6774-456E-9C09-4C3BEC76C278}
2013-11-28 19:10 - 2013-11-28 19:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{3128A4B2-EE2E-4A75-B3C8-61F98196943B}
2013-11-28 07:10 - 2013-11-28 07:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{416E6F95-46A3-48C0-8801-0CA0DA5B9D1B}
2013-11-27 18:11 - 2013-11-27 18:12 - 00000000 ____D C:\Users\Achim\AppData\Local\{DABA9068-D1EA-4E5A-9CD9-49E791E000CE}
2013-11-26 23:04 - 2013-11-26 23:03 - 00001774 _____ C:\Users\Achim\Desktop\qr_code_ohne_logo_plus_informationsmappe.zip
2013-11-26 17:29 - 2013-11-26 17:29 - 00000000 ____D C:\Users\Achim\AppData\Local\{57C2A3E0-4208-4E77-A0B3-590638E0C6DA}
2013-11-25 21:36 - 2013-11-25 21:36 - 00000000 ____D C:\Users\Achim\AppData\Local\{DAAF6226-50BF-476F-867D-536E123ACE20}
2013-11-25 18:46 - 2013-11-25 18:46 - 00002161 _____ C:\Users\Achim\Desktop\Klassik-DB.xlsx - Verknüpfung.lnk
2013-11-25 07:00 - 2013-11-25 07:00 - 00000000 ____D C:\Users\Achim\AppData\Local\{E84B5DE1-1B75-4249-BE29-5896583A8F94}
2013-11-24 09:17 - 2013-11-24 09:18 - 00000000 ____D C:\Users\Achim\AppData\Local\{7613B49A-7575-4675-B410-8A94C8E1D1C2}
2013-11-23 11:30 - 2013-11-23 11:31 - 00000000 ____D C:\Users\Achim\AppData\Local\{07AB9F67-046D-4651-A407-E9FF4CCE79A7}
2013-11-23 11:16 - 2013-11-23 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\libimobiledevice
2013-11-23 11:12 - 2013-11-23 11:12 - 00000000 ____D C:\Users\Achim\Documents\evasi0n-win-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-release
2013-11-22 15:57 - 2013-11-26 07:42 - 00011284 _____ C:\Users\Achim\Documents\Klassik-DB.xlsx
2013-11-22 15:41 - 2013-12-02 22:00 - 00000292 _____ C:\Users\Achim\AppData\Roaming\burnaware.ini
2013-11-22 14:23 - 2013-11-22 14:23 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spesoft Audio Converter
2013-11-22 14:11 - 2013-11-22 14:11 - 00001829 _____ C:\Users\Achim\Desktop\P-touch Editor 5.0.lnk
2013-11-22 13:59 - 2013-11-22 13:59 - 00000000 ____D C:\Program Files\Common Files\Brother
2013-11-22 12:41 - 2013-11-22 12:41 - 00001271 _____ C:\Users\Achim\Desktop\Kufer-WEB-Zugangsdaten.txt - Verknüpfung.lnk
2013-11-22 12:27 - 2013-11-22 12:28 - 00000000 ____D C:\Users\Achim\AppData\Local\{CD813A04-B917-4D47-8713-1EF427C12C00}
2013-11-21 19:44 - 2013-11-21 19:44 - 00000000 ____D C:\Users\Achim\AppData\Local\{86EFDEDB-6E62-43B9-89FA-18B35D328DC5}
2013-11-21 07:35 - 2013-11-21 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{EA9FC986-450B-48AF-B133-D79D012AC790}
2013-11-20 07:35 - 2013-11-20 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{31DC784B-644F-4A12-B0B0-08DA5DE82850}
2013-11-19 07:00 - 2013-11-19 07:00 - 00000000 ____D C:\Users\Achim\AppData\Local\{8EBAA0DE-E38E-4695-A149-352C77218C92}
2013-11-17 17:50 - 2013-11-17 17:50 - 00000000 ____D C:\Users\Achim\AppData\Local\{30E09A1C-77BD-42E9-B422-5D15346259F9}
2013-11-16 08:40 - 2013-11-16 08:40 - 00000000 ____D C:\Users\Achim\AppData\Local\{FA5FC6FE-11D0-4B24-9D67-062FEB1CEDCD}
2013-11-14 16:22 - 2013-11-14 16:22 - 00000000 ____D C:\Users\Achim\AppData\Local\{D660F8F1-43CC-42A5-B816-99CD9BEC8830}
==================== One Month Modified Files and Folders =======
2013-12-14 09:03 - 2013-12-14 09:02 - 00020081 _____ C:\Users\Achim\Desktop\FRST.txt
2013-12-14 08:58 - 2013-04-15 18:08 - 00000000 ____D C:\Users\Achim\AppData\Local\6CE0D6AC-6EB9-4808-A530-20BD3892313C.aplzod
2013-12-14 08:44 - 2009-07-14 05:34 - 00015264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-14 08:44 - 2009-07-14 05:34 - 00015264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-14 08:39 - 2013-03-15 19:54 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Dropbox
2013-12-14 08:38 - 2013-07-11 18:42 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spotify
2013-12-14 08:38 - 2013-03-16 11:48 - 00000000 ___RD C:\Users\Achim\Google Drive
2013-12-14 08:38 - 2013-03-15 19:57 - 00000000 ___RD C:\Users\Achim\Dropbox
2013-12-14 08:37 - 2013-03-06 11:54 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-14 08:37 - 2013-03-06 10:43 - 01203062 _____ C:\Windows\WindowsUpdate.log
2013-12-14 08:35 - 2013-12-11 18:17 - 00001749 _____ C:\Windows\setupact.log
2013-12-14 08:35 - 2013-08-09 15:10 - 00000000 ____D C:\ProgramData\firebird
2013-12-14 08:35 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-14 00:11 - 2013-03-06 11:20 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-14 00:05 - 2013-12-14 00:05 - 00000000 ____D C:\Users\Achim\AppData\Local\{2C2739FB-BC09-46C8-93DE-C51E519DA94F}
2013-12-14 00:04 - 2013-07-11 18:42 - 00000000 ____D C:\Users\Achim\AppData\Local\Spotify
2013-12-13 23:35 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-12-13 23:33 - 2013-12-13 23:33 - 00889416 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\dotNetFx40_Full_setup.exe
2013-12-13 23:32 - 2013-12-13 23:32 - 24805592 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\Windows-KB890830-V5.7.exe
2013-12-13 23:31 - 2013-12-12 00:20 - 00026640 _____ C:\Windows\IE11_main.log
2013-12-13 23:19 - 2013-12-13 23:19 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 23:19 - 2013-12-13 23:19 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 23:19 - 2013-12-13 23:19 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-13 23:19 - 2013-12-13 23:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-13 23:19 - 2013-12-13 23:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-13 23:19 - 2013-12-13 23:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-13 23:19 - 2013-12-13 23:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-13 23:19 - 2013-12-13 23:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-13 23:17 - 2013-12-13 23:17 - 02077392 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE11-Windows6.1.exe
2013-12-13 23:12 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\IIS Express
2013-12-13 23:07 - 2013-12-13 23:07 - 00027125 _____ C:\Users\Achim\Downloads\Addition.txt
2013-12-13 23:06 - 2013-12-13 23:06 - 00000000 ____D C:\Users\Achim\Downloads\FRST-OlderVersion
2013-12-13 23:06 - 2013-12-12 22:28 - 01060575 _____ (Farbar) C:\Users\Achim\Desktop\FRST.exe
2013-12-13 23:06 - 2013-12-12 22:28 - 00000000 ____D C:\FRST
2013-12-13 20:30 - 2013-12-13 20:30 - 00000000 ____D C:\Users\Achim\AppData\Local\{DBBE0DAE-37CF-4C2D-AE48-9D5281B2E5DA}
2013-12-13 17:57 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Users\Achim\AppData\Roaming\npm
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\nodejs
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\iisnode-dev
2013-12-13 17:55 - 2013-03-11 21:44 - 00000000 ____D C:\Windows\pss
2013-12-13 16:35 - 2013-03-06 11:54 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-13 16:33 - 2013-03-06 11:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\runphp
2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\Microsoft SDKs
2013-12-13 07:23 - 2013-12-13 07:23 - 00116384 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\wpilauncher.exe
2013-12-13 07:03 - 2009-07-14 10:03 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2013-12-13 06:58 - 2013-12-13 06:58 - 00000000 ____D C:\Users\Achim\AppData\Local\{C1DA257A-C66F-42C8-9BA0-6D840235018D}
2013-12-13 00:08 - 2013-03-06 11:33 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 22:18 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2013-12-12 22:14 - 2013-09-22 08:53 - 00000000 ____D C:\found.002
2013-12-12 22:14 - 2013-05-25 07:17 - 00000000 ____D C:\found.000
2013-12-12 22:12 - 2013-12-12 22:12 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Mozilla
2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 22:02 - 2013-03-07 23:42 - 00000000 ____D C:\Windows\Minidump
2013-12-12 21:55 - 2013-03-06 11:30 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-12 21:55 - 2013-03-06 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\Deployment
2013-12-12 21:50 - 2013-03-06 10:46 - 00000000 __SHD C:\Recovery
2013-12-12 21:33 - 2013-03-07 23:02 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-12-12 21:29 - 2013-12-12 21:22 - 00000000 ____D C:\ldiag
2013-12-12 21:22 - 2013-03-10 11:58 - 00000000 ____D C:\SWTOOLS
2013-12-12 21:06 - 2013-05-06 21:18 - 00000000 ____D C:\Users\Achim\Downloads\Grafik
2013-12-12 21:01 - 2013-12-07 11:37 - 00000000 ____D C:\Users\Achim\Documents\DriverGenius
2013-12-12 20:50 - 2013-12-12 20:50 - 00072892 _____ C:\Users\Achim\Desktop\GEORGE.html
2013-12-12 20:47 - 2013-12-12 20:47 - 00001022 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2013-12-12 20:47 - 2013-12-12 20:47 - 00000000 ____D C:\Program Files\CPUID
2013-12-12 19:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-12-12 19:37 - 2013-12-12 19:37 - 00003544 ____N C:\bootsqm.dat
2013-12-12 18:26 - 2013-12-12 18:26 - 00000000 ____D C:\Users\Achim\AppData\Local\{E10E834A-B165-4DA9-AB94-570C52339AFA}
2013-12-12 18:22 - 2013-03-06 10:51 - 01565170 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-12 18:18 - 2009-07-14 05:33 - 00515320 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 07:45 - 2013-12-12 07:45 - 00422914 _____ C:\Users\Achim\Documents\VHS-kaki-umschlag-2014.pptx
2013-12-12 07:35 - 2013-06-03 18:16 - 00002194 ____H C:\Users\Achim\Documents\Default.rdp
2013-12-12 07:07 - 2013-12-11 20:19 - 00000095 _____ C:\Users\Achim\Desktop\CMD-Archiv.txt
2013-12-12 06:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-12-12 00:11 - 2013-03-09 16:30 - 00000000 ____D C:\Users\Achim\Downloads\System
2013-12-11 20:23 - 2013-12-11 20:23 - 00059862 _____ C:\Windows\PFRO.log
2013-12-11 19:33 - 2013-03-06 11:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 19:33 - 2013-03-06 11:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 18:55 - 2013-12-11 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\Tvsukernel
2013-12-11 18:54 - 2013-12-11 18:54 - 00000000 ____D C:\Program Files\ThinkVantage
2013-12-11 18:52 - 2013-03-11 22:19 - 00000000 ____D C:\ProgramData\Lenovo
2013-12-11 18:49 - 2013-12-11 18:34 - 00007337 _____ C:\Windows\IE10_main.log
2013-12-11 18:42 - 2013-03-06 10:39 - 00000000 ____D C:\Windows\Panther
2013-12-11 18:36 - 2013-12-11 18:36 - 00000000 ____D C:\Users\Achim\AppData\Local\{E2D1553E-0F76-4874-B75C-9D76E8751983}
2013-12-11 18:36 - 2013-03-11 18:45 - 00000000 ____D C:\Users\Achim\AppData\Local\Windows Live Writer
2013-12-11 18:31 - 2013-03-16 09:38 - 00000000 ____D C:\Users\Achim\Desktop\Systemprogramme
2013-12-11 18:24 - 2013-12-11 18:24 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-12-11 18:24 - 2013-12-11 07:52 - 00034573 _____ C:\Windows\ie8_main.log
2013-12-11 18:17 - 2013-12-11 18:17 - 00000000 _____ C:\Windows\setuperr.log
2013-12-10 22:22 - 2013-03-10 19:03 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Skype
2013-12-10 22:06 - 2013-03-06 11:54 - 00000000 ____D C:\Program Files\Google
2013-12-10 22:05 - 2013-03-06 11:54 - 00000000 ____D C:\Users\Achim\AppData\Local\Google
2013-12-10 20:43 - 2013-03-06 11:16 - 00157928 _____ C:\Users\Achim\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-10 20:43 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-10 20:33 - 2013-12-10 20:33 - 00192888 _____ C:\Users\Achim\cc_20131210_203255.reg
2013-12-10 20:33 - 2013-03-06 10:46 - 00000000 ____D C:\Users\Achim
2013-12-10 20:26 - 2013-10-22 17:09 - 00000000 ____D C:\Users\Achim\AppData\Roaming\FileZilla
2013-12-10 19:57 - 2013-12-02 19:52 - 00000000 ____D C:\Users\Achim\AppData\Roaming\NCH Software
2013-12-10 19:57 - 2013-12-02 19:51 - 00000000 ____D C:\ProgramData\NCH Software
2013-12-10 19:57 - 2013-12-02 19:51 - 00000000 ____D C:\Program Files\NCH Software
2013-12-10 19:52 - 2013-12-10 19:52 - 00001356 _____ C:\Users\Achim\Desktop\CCleaner.exe - Verknüpfung.lnk
2013-12-10 19:15 - 2013-03-06 11:35 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-12-10 18:51 - 2013-12-10 18:51 - 00000000 ____D C:\Users\Achim\AppData\Local\{91763463-211A-4527-B882-B35102CF258A}
2013-12-09 23:05 - 2013-12-09 23:05 - 00000000 ____D C:\Program Files\AVM_update
2013-12-09 17:03 - 2013-12-09 17:03 - 00000000 ____D C:\Users\Achim\AppData\Local\{8465BFAE-761F-45B7-A165-2F207C12DCC8}
2013-12-08 19:25 - 2013-12-08 19:25 - 00000000 ____D C:\Users\Achim\AppData\Local\{5DE8D5F8-2105-4566-A3BA-04358E8A7289}
2013-12-08 17:07 - 2013-03-10 19:28 - 00000000 ____D C:\Users\Achim\.dreamstream
2013-12-08 15:02 - 2013-03-10 19:28 - 00000000 ____D C:\Users\Achim\.gstreamer-0.10
2013-12-08 14:00 - 2013-12-08 13:59 - 37059280 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE11_w7_Windows6.1-x86-de-de.exe
2013-12-08 11:42 - 2013-03-06 11:34 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Adobe
2013-12-08 11:33 - 2013-12-08 11:33 - 00659968 _____ C:\Users\Achim\Downloads\MicrosoftFixit50195.msi
2013-12-07 11:30 - 2013-09-22 09:14 - 00000000 ___RD C:\Users\Achim\Desktop\Multimedia
2013-12-07 10:51 - 2013-12-07 10:50 - 00000000 ____D C:\Users\Achim\AppData\Local\{73248BC2-7A96-4ABE-8A60-1483D1091D51}
2013-12-06 21:10 - 2013-07-12 20:41 - 00000000 _____ C:\Windows\system32\vireng.log
2013-12-06 19:57 - 2013-12-06 19:57 - 00000000 ____D C:\Users\Achim\AppData\Local\{15238591-D7D5-4729-AE47-B0C19B081F88}
2013-12-06 19:56 - 2013-03-07 18:23 - 00000000 ____D C:\ProgramData\Adobe
2013-12-05 19:40 - 2013-12-05 19:40 - 00000000 ____D C:\Users\Achim\AppData\Local\{7D47938A-4131-42E4-9835-A4AA50C8BC30}
2013-12-04 20:52 - 2013-12-04 20:52 - 00000000 ____D C:\Users\Achim\AppData\Local\{BB81DD55-396C-4CB5-9987-4D6599505CC8}
2013-12-04 20:43 - 2013-12-04 20:43 - 00000000 ____D C:\Users\Achim\AppData\Local\vsmedia.de
2013-12-04 20:39 - 2013-12-04 20:39 - 00001128 _____ C:\Users\Achim\Desktop\Continue Image Editor Installation.lnk
2013-12-04 20:05 - 2013-12-04 19:43 - 00000000 ____D C:\Users\Achim\Desktop\FP_2980_1
2013-12-04 07:35 - 2013-12-04 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{D64317D2-6704-4DFF-B1DC-4FC6C9D35CFE}
2013-12-04 07:01 - 2013-05-06 16:17 - 00000000 ___RD C:\Users\Achim\SkyDrive
2013-12-03 22:01 - 2013-03-06 11:03 - 00002043 _____ C:\Users\Public\Desktop\LANCOM Advanced VPN Client.lnk
2013-12-03 22:01 - 2009-07-14 03:04 - 00000521 _____ C:\Windows\win.ini
2013-12-03 17:59 - 2013-12-03 17:59 - 00000000 ____D C:\Users\Achim\AppData\Local\{1AF41660-AD34-48D4-8A36-7A760A548293}
2013-12-02 22:22 - 2013-03-07 23:05 - 00000000 ____D C:\Users\Achim\AppData\Local\Adobe
2013-12-02 22:14 - 2013-12-02 22:14 - 00000000 ____D C:\Users\Achim\AppData\Local\{1105C651-2A16-4FE7-BD70-B298078BF86F}
2013-12-02 22:00 - 2013-11-22 15:41 - 00000292 _____ C:\Users\Achim\AppData\Roaming\burnaware.ini
2013-12-01 18:54 - 2013-12-01 18:54 - 00001120 _____ C:\Users\Achim\Desktop\TeamViewer 8.lnk
2013-12-01 14:42 - 2013-03-06 21:17 - 88123800 ____N (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-01 09:10 - 2013-12-01 09:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{0E4F093B-18D9-4563-896D-BFD99F598C22}
2013-11-30 17:47 - 2013-11-30 17:47 - 22099928 _____ (DVDVideoSoft Ltd. ) C:\Users\Achim\Downloads\FreeDiscBurner-3.0.19.1125.exe
2013-11-30 11:47 - 2013-11-30 11:46 - 00000000 ____D C:\Users\Achim\AppData\Local\{EC8686D9-D1FC-48AE-BB6A-38FE540BAD42}
2013-11-29 18:55 - 2013-11-29 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\{59930784-6774-456E-9C09-4C3BEC76C278}
2013-11-28 19:10 - 2013-11-28 19:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{3128A4B2-EE2E-4A75-B3C8-61F98196943B}
2013-11-28 07:10 - 2013-11-28 07:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{416E6F95-46A3-48C0-8801-0CA0DA5B9D1B}
2013-11-27 19:49 - 2013-03-09 14:02 - 00000000 ____D C:\Users\Achim\AppData\Roaming\PingTesterDataBas
2013-11-27 18:12 - 2013-11-27 18:11 - 00000000 ____D C:\Users\Achim\AppData\Local\{DABA9068-D1EA-4E5A-9CD9-49E791E000CE}
2013-11-26 23:03 - 2013-11-26 23:04 - 00001774 _____ C:\Users\Achim\Desktop\qr_code_ohne_logo_plus_informationsmappe.zip
2013-11-26 20:39 - 2013-08-09 21:31 - 00000000 ____D C:\Users\Achim\AppData\Local\FreePDF_XP
2013-11-26 17:29 - 2013-11-26 17:29 - 00000000 ____D C:\Users\Achim\AppData\Local\{57C2A3E0-4208-4E77-A0B3-590638E0C6DA}
2013-11-26 07:42 - 2013-11-22 15:57 - 00011284 _____ C:\Users\Achim\Documents\Klassik-DB.xlsx
2013-11-25 21:36 - 2013-11-25 21:36 - 00000000 ____D C:\Users\Achim\AppData\Local\{DAAF6226-50BF-476F-867D-536E123ACE20}
2013-11-25 18:46 - 2013-11-25 18:46 - 00002161 _____ C:\Users\Achim\Desktop\Klassik-DB.xlsx - Verknüpfung.lnk
2013-11-25 07:00 - 2013-11-25 07:00 - 00000000 ____D C:\Users\Achim\AppData\Local\{E84B5DE1-1B75-4249-BE29-5896583A8F94}
2013-11-24 09:18 - 2013-11-24 09:17 - 00000000 ____D C:\Users\Achim\AppData\Local\{7613B49A-7575-4675-B410-8A94C8E1D1C2}
2013-11-23 19:26 - 2013-12-12 07:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-23 11:31 - 2013-11-23 11:30 - 00000000 ____D C:\Users\Achim\AppData\Local\{07AB9F67-046D-4651-A407-E9FF4CCE79A7}
2013-11-23 11:16 - 2013-11-23 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\libimobiledevice
2013-11-23 11:12 - 2013-11-23 11:12 - 00000000 ____D C:\Users\Achim\Documents\evasi0n-win-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-release
2013-11-22 14:23 - 2013-11-22 14:23 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spesoft Audio Converter
2013-11-22 14:22 - 2013-03-06 12:08 - 00000000 ___RD C:\Users\Achim\AppData\Roaming\Brother
2013-11-22 14:11 - 2013-11-22 14:11 - 00001829 _____ C:\Users\Achim\Desktop\P-touch Editor 5.0.lnk
2013-11-22 13:59 - 2013-11-22 13:59 - 00000000 ____D C:\Program Files\Common Files\Brother
2013-11-22 12:41 - 2013-11-22 12:41 - 00001271 _____ C:\Users\Achim\Desktop\Kufer-WEB-Zugangsdaten.txt - Verknüpfung.lnk
2013-11-22 12:28 - 2013-11-22 12:27 - 00000000 ____D C:\Users\Achim\AppData\Local\{CD813A04-B917-4D47-8713-1EF427C12C00}
2013-11-21 19:44 - 2013-11-21 19:44 - 00000000 ____D C:\Users\Achim\AppData\Local\{86EFDEDB-6E62-43B9-89FA-18B35D328DC5}
2013-11-21 07:35 - 2013-11-21 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{EA9FC986-450B-48AF-B133-D79D012AC790}
2013-11-20 07:35 - 2013-11-20 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{31DC784B-644F-4A12-B0B0-08DA5DE82850}
2013-11-19 07:00 - 2013-11-19 07:00 - 00000000 ____D C:\Users\Achim\AppData\Local\{8EBAA0DE-E38E-4695-A149-352C77218C92}
2013-11-19 03:33 - 2013-03-06 11:04 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-17 17:50 - 2013-11-17 17:50 - 00000000 ____D C:\Users\Achim\AppData\Local\{30E09A1C-77BD-42E9-B422-5D15346259F9}
2013-11-16 08:40 - 2013-11-16 08:40 - 00000000 ____D C:\Users\Achim\AppData\Local\{FA5FC6FE-11D0-4B24-9D67-062FEB1CEDCD}
2013-11-14 16:22 - 2013-11-14 16:22 - 00000000 ____D C:\Users\Achim\AppData\Local\{D660F8F1-43CC-42A5-B816-99CD9BEC8830}
2013-11-14 16:20 - 2013-03-07 07:32 - 00000000 ____D C:\Users\Achim\AppData\Roaming\KeePass
Files to move or delete:
====================
C:\Users\Achim\cc_20131210_203255.reg
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-11 22:24
==================== End Of Log ============================
|
|
14.12.2013, 16:08
| #9 | |
| /// the machine /// TB-Ausbilder | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
14.12.2013, 19:31
| #10 |
| | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Hallo guten Abend, jetzt komme ich schon besser zurecht mit dem Posten und der Analyse. Schon mal vielen Dank Viele Grüße Achim Code:
ATTFilter ComboFix 13-12-13.01 - Achim 14.12.2013 18:45:29.1.2 - x86
Microsoft Windows 7 Enterprise 6.1.7601.1.1252.49.1031.18.2047.794 [GMT 1:00]
ausgeführt von:: c:\users\Achim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WRB0LC45\ComboFix.exe
AV: Sophos Anti-Virus *Disabled/Updated* {65FBD860-96D8-75EF-C7ED-7BE27E6C498A}
FW: LANCOM Advanced VPN Client *Disabled* {BEB21647-135A-7893-42A0-BBC3960C218D}
SP: Sophos Anti-Virus *Disabled/Updated* {DE9A3984-B0E2-7A61-FD5D-409005EB0337}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Achim\AppData\Local\lame_enc.dll
c:\users\Achim\AppData\Local\no23xwrapper.dll
c:\users\Achim\AppData\Local\ogg.dll
c:\users\Achim\AppData\Local\Temp\_MEI49002\_ctypes.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\_elementtree.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\_hashlib.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\_multiprocessing.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\_socket.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\_ssl.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\msvcp100.dll
c:\users\Achim\AppData\Local\Temp\_MEI49002\msvcr100.dll
c:\users\Achim\AppData\Local\Temp\_MEI49002\pyexpat.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\pysqlite2._sqlite.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\python27.dll
c:\users\Achim\AppData\Local\Temp\_MEI49002\pythoncom27.dll
c:\users\Achim\AppData\Local\Temp\_MEI49002\PyWinTypes27.dll
c:\users\Achim\AppData\Local\Temp\_MEI49002\select.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\unicodedata.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\win32api.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\win32com.shell.shell.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\win32crypt.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\win32event.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\win32file.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\win32inet.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\win32pdh.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\win32process.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\win32profile.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\win32security.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\win32ts.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\windows._cacheinvalidation.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._controls_.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._core_.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._gdi_.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._html2.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._misc_.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._windows_.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._wizard.pyd
c:\users\Achim\AppData\Local\Temp\_MEI49002\wxbase294u_net_vc90.dll
c:\users\Achim\AppData\Local\Temp\_MEI49002\wxbase294u_vc90.dll
c:\users\Achim\AppData\Local\Temp\_MEI49002\wxmsw294u_adv_vc90.dll
c:\users\Achim\AppData\Local\Temp\_MEI49002\wxmsw294u_core_vc90.dll
c:\users\Achim\AppData\Local\Temp\_MEI49002\wxmsw294u_html_vc90.dll
c:\users\Achim\AppData\Local\Temp\_MEI49002\wxmsw294u_webview_vc90.dll
c:\users\Achim\AppData\Local\vorbisenc.dll
c:\users\Achim\AppData\Local\vorbisfile.dll
c:\windows\IsUn0407.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-11-14 bis 2013-12-14 ))))))))))))))))))))))))))))))
.
.
2013-12-13 23:06 . 2013-12-14 08:08 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FBDE6901-AD7F-4333-9F5C-28AE83103248}\offreg.dll
2013-12-13 22:35 . 2013-12-13 22:35 -------- d-----w- c:\windows\system32\wbem\en-US
2013-12-13 16:56 . 2013-12-13 22:12 -------- d-----w- c:\program files\IIS Express
2013-12-13 16:56 . 2013-12-13 16:56 -------- d-----w- c:\program files\iisnode-dev
2013-12-13 16:56 . 2013-12-13 16:56 -------- d-----w- c:\program files\nodejs
2013-12-13 16:56 . 2013-12-13 16:56 -------- d-----w- c:\users\Achim\AppData\Roaming\npm
2013-12-13 14:39 . 2013-11-08 01:15 7772552 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FBDE6901-AD7F-4333-9F5C-28AE83103248}\mpengine.dll
2013-12-13 06:25 . 2013-12-13 06:25 -------- d-----w- c:\program files\Microsoft SDKs
2013-12-13 06:25 . 2013-12-13 06:25 -------- d-----w- c:\program files\runphp
2013-12-13 06:24 . 2013-12-13 06:24 -------- d-----w- c:\program files\Microsoft
2013-12-12 21:28 . 2013-12-13 22:06 -------- d-----w- C:\FRST
2013-12-12 20:22 . 2013-12-12 20:29 -------- d-----w- C:\ldiag
2013-12-12 19:47 . 2013-12-12 19:47 -------- d-----w- c:\program files\CPUID
2013-12-12 06:58 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2013-12-12 06:58 . 2013-05-10 03:48 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2013-12-12 06:02 . 2013-10-30 02:19 301568 ----a-w- c:\windows\system32\msieftp.dll
2013-12-12 06:02 . 2013-10-19 01:36 159232 ----a-w- c:\windows\system32\imagehlp.dll
2013-12-12 06:02 . 2013-10-12 02:04 121856 ----a-w- c:\windows\system32\wshom.ocx
2013-12-12 06:02 . 2013-10-12 02:03 163840 ----a-w- c:\windows\system32\scrrun.dll
2013-12-12 06:02 . 2013-10-12 01:15 141824 ----a-w- c:\windows\system32\wscript.exe
2013-12-12 06:02 . 2013-11-23 18:26 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2013-12-12 06:02 . 2013-10-12 01:15 126976 ----a-w- c:\windows\system32\cscript.exe
2013-12-12 06:02 . 2013-11-12 02:07 2048 ----a-w- c:\windows\system32\tzres.dll
2013-12-12 06:02 . 2013-10-30 01:27 2349056 ----a-w- c:\windows\system32\win32k.sys
2013-12-12 06:02 . 2013-10-04 01:49 81408 ----a-w- c:\windows\system32\drivers\drmk.sys
2013-12-12 06:02 . 2013-10-04 01:17 177152 ----a-w- c:\windows\system32\drivers\portcls.sys
2013-12-11 17:55 . 2013-12-11 17:55 -------- d-----w- c:\users\Achim\AppData\Local\Tvsukernel
2013-12-11 17:24 . 2013-12-11 17:24 -------- d--h--w- c:\windows\msdownld.tmp
2013-12-10 19:33 . 2013-12-10 19:33 192888 ----a-w- c:\users\Achim\cc_20131210_203255.reg
2013-12-10 18:13 . 2010-10-22 01:00 480632 ------w- c:\windows\instwcli.dex
2013-12-09 22:07 . 2010-10-22 01:00 74240 ----a-w- c:\windows\system32\fwlanci.org
2013-12-09 22:05 . 2013-12-09 22:05 -------- d-----w- c:\program files\AVM_update
2013-12-04 19:43 . 2013-12-04 19:43 -------- d-----w- c:\users\Achim\AppData\Local\vsmedia.de
2013-12-02 18:52 . 2013-12-10 18:57 -------- d-----w- c:\users\Achim\AppData\Roaming\NCH Software
2013-12-02 18:51 . 2013-12-10 18:57 -------- d-----w- c:\programdata\NCH Software
2013-12-02 18:51 . 2013-12-10 18:57 -------- d-----w- c:\program files\NCH Software
2013-11-23 10:16 . 2013-11-23 10:16 -------- d-----w- c:\users\Achim\AppData\Local\libimobiledevice
2013-11-22 13:23 . 2013-11-22 13:23 -------- d-----w- c:\users\Achim\AppData\Roaming\Spesoft Audio Converter
2013-11-22 12:59 . 2013-11-22 12:59 -------- d-----w- c:\program files\Common Files\Brother
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-14 08:33 . 2013-03-06 10:34 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-12-14 08:33 . 2013-03-06 10:34 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-11-19 02:33 . 2013-03-06 10:04 230048 ------w- c:\windows\system32\MpSigStub.exe
2013-11-01 19:10 . 2013-03-06 10:20 86888 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2013-11-01 19:10 . 2013-03-06 10:20 53064 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll
2013-11-01 19:10 . 2013-03-06 10:20 31560 ----a-w- c:\windows\system32\LMIport.dll
2013-11-01 19:10 . 2013-03-06 10:20 85832 ----a-w- c:\windows\system32\LMIinit.dll
2013-10-29 13:07 . 2013-03-06 10:03 2069776 ----a-w- c:\windows\system32\NcpCredentialProvider.dll
2013-10-23 16:44 . 2013-03-06 10:20 86888 ----a-w- c:\windows\system32\LMIRfsClientNP.dll.000.bak
2013-10-23 16:44 . 2013-03-06 10:20 85832 ----a-w- c:\windows\system32\LMIinit.dll.000.bak
2013-10-12 02:03 . 2013-11-13 20:44 656896 ----a-w- c:\windows\system32\nshwfp.dll
2013-10-12 02:01 . 2013-11-13 20:44 679424 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-10-12 02:01 . 2013-11-13 20:44 216576 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-10-08 05:50 . 2013-10-20 19:19 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-10-05 19:57 . 2013-11-13 20:43 1168384 ----a-w- c:\windows\system32\crypt32.dll
2013-10-04 01:58 . 2013-11-13 20:44 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2013-10-04 01:56 . 2013-11-13 20:44 168960 ----a-w- c:\windows\system32\credui.dll
2013-10-04 01:56 . 2013-11-13 20:44 1796096 ----a-w- c:\windows\system32\authui.dll
2013-10-03 01:58 . 2013-11-13 20:44 305152 ----a-w- c:\windows\system32\gdi32.dll
2013-09-26 05:18 . 2013-09-26 05:18 0 --sh--w- c:\windows\S069F0100.tmp
2013-09-25 02:01 . 2013-11-13 20:44 136640 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-09-25 02:01 . 2013-11-13 20:44 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2013-09-25 01:57 . 2013-11-13 20:44 99840 ----a-w- c:\windows\system32\sspicli.dll
2013-09-25 01:57 . 2013-11-13 20:44 22016 ----a-w- c:\windows\system32\secur32.dll
2013-09-25 01:57 . 2013-11-13 20:44 247808 ----a-w- c:\windows\system32\schannel.dll
2013-09-25 01:56 . 2013-11-13 20:44 220160 ----a-w- c:\windows\system32\ncrypt.dll
2013-09-25 01:56 . 2013-11-13 20:44 1038848 ----a-w- c:\windows\system32\lsasrv.dll
2013-09-25 00:49 . 2013-11-13 20:44 22016 ----a-w- c:\windows\system32\lsass.exe
2013-09-25 00:49 . 2013-11-13 20:44 15872 ----a-w- c:\windows\system32\sspisrv.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-08-14 15:36 222832 ----a-w- c:\users\Achim\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-08-14 15:36 222832 ----a-w- c:\users\Achim\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-08-14 15:36 222832 ----a-w- c:\users\Achim\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Achim\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Achim\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-11 02:09 131248 ----a-w- c:\users\Achim\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-09-25 15:37 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-09-25 15:37 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-09-25 15:37 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-09-25 15:37 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-09-25 15:37 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-09-25 15:37 579024 ----a-w- c:\program files\Google\Drive\googledrivesync32.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\Achim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-12-05 1168896]
"Spotify"="c:\users\Achim\AppData\Roaming\Spotify\spotify.exe" [2013-12-05 5951488]
"ISUSPM"="c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2008-11-17 210208]
"iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-09-14 59720]
"GoogleDriveSync"="c:\program files\Google\Drive\googledrivesync.exe" [2013-09-25 20133824]
"AVMUSBFernanschluss"="c:\users\Achim\AppData\Local\Apps\2.0\VQ9HEPM4.KK8\OQATJMLW.1MX\frit..tion_1acae14e4778b8d2_0002.0003_7c9366a34786c7f9\AVMAutoStart.exe" [2013-07-13 139264]
.
c:\users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-11-1 29769432]
OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Sophos\SOPHOS~1\sophos_detoured.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService]
@="service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SophosAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-01-08 161536]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys [2010-10-22 4352]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
R3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys [2010-10-22 265088]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-12-13 108032]
R3 ncpfilt;LANCOM Filter;c:\windows\system32\DRIVERS\ncplelhp.sys [2013-09-11 87280]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
R3 RTL8192cu;NETGEAR WNA1000M N150 Wireless USB Micro Adapter;c:\windows\system32\DRIVERS\WNA1000M.sys [2011-02-21 734824]
R3 Ser2plx86;Prolific Serial port WDF driver;c:\windows\system32\DRIVERS\ser2pl.sys [2013-02-22 134144]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2013-04-12 104720]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
R3 vncserver;VNC Server;c:\program files\RealVNC\VNC Server\vncserver.exe [2013-03-04 3602752]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys [2009-07-14 20480]
R4 DcRaidMoSrv;Dawicontrol RAID Monitor Service V3.3.8.0;c:\program files\Dawicontrol GmbH\Dawicontrol RAID Monitor\RAIDservice.exe [2012-05-30 341504]
R4 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]
R4 SAVService;Sophos Anti-Virus;c:\program files\Sophos\Sophos Anti-Virus\SavService.exe [2013-05-17 206328]
R4 SophosBootDriver;SophosBootDriver;c:\windows\system32\DRIVERS\SophosBootDriver.sys [2011-10-23 22536]
R4 swi_service;Sophos Web Intelligence Service;c:\program files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [2013-09-17 3109880]
R4 swi_update;Sophos Web Intelligence Update;c:\programdata\Sophos\Web Intelligence\swi_update.exe [2013-05-17 1471992]
R4 tvnserver;TightVNC Server;c:\program files\TightVNC\tvnserver.exe [2013-07-19 1690096]
S0 DC300e;DC300e;c:\windows\system32\DRIVERS\DC300e.sys [2013-03-09 39872]
S1 SAVOnAccess;SAVOnAccess;c:\windows\system32\DRIVERS\savonaccess.sys [2013-05-17 132424]
S1 SKMScan;SKMScan;c:\windows\system32\DRIVERS\skmscan.sys [2013-05-17 33096]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2013-04-12 188176]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2013-04-12 94480]
S2 AXIS Camera Management;AXIS Camera Management;c:\program files\Axis Communications\AXIS Camera Management 4\AcmService.exe [2013-07-11 17920]
S2 LMIGuardianSvc;Support LogMeIn processes with quality assurance feedback;c:\program files\LogMeIn Ignition\LMIGuardianSvc.exe [2011-05-17 374160]
S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\RaInfo.sys [2013-05-23 13624]
S2 ncpclcfg;NCP Client Configuration Support;c:\program files\LANCOM\Advanced VPN Client\ncpclcfg.exe [2013-10-28 150800]
S2 ncprwsnt;NCP Client VPN und Dialing Service;c:\program files\LANCOM\Advanced VPN Client\ncprwsnt.exe [2013-11-08 1395464]
S2 NcpSec;NCP Client PKI Support;c:\program files\LANCOM\Advanced VPN Client\NCPSEC.EXE [2011-04-21 119808]
S2 PDFProFiltSrv;PDFProFiltSrv;c:\program files\Nuance\PDF Professional 6\PDFProFiltSrv.exe [2009-07-27 134944]
S2 SAVAdminService;Sophos Anti-Virus Statusreporter;c:\program files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [2013-05-17 290296]
S2 TeamViewer8;TeamViewer 8;c:\program files\TeamViewer\Version8\TeamViewer_Service.exe [2013-10-01 5087584]
S3 avmaura;AVM USB-Fernanschluss;c:\windows\system32\DRIVERS\avmaura.sys [2013-07-13 105728]
S3 ncplelhp;LANCOM Secure Client NDIS6 Driver;c:\windows\system32\DRIVERS\ncplelhp.sys [2013-09-11 87280]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2013-04-12 115984]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2012-01-25 319264]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
.
Inhalt des "geplante Tasks" Ordners
.
2013-12-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-06 08:33]
.
2013-12-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-03-06 10:54]
.
2013-12-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-03-06 10:54]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = https://www.google.de/
uInternet Settings,ProxyOverride = *.local
IE: Mit Nuance PDF Converter 6.0 öffnen - c:\program files\Nuance\PDF Professional 6\cnvres_ger.dll /100
IE: {{328ECD19-C167-40eb-A0C7-16FE7634105F} - {CC68A724-B5F7-4bd3-865C-7D97141A140F} - c:\program files\FRITZ!Box\AddOn (IE)\FBoxIESplitButton.dll
LSP: c:\programdata\Sophos\Web Intelligence\swi_ifslsp.dll
TCP: Interfaces\{1C2EF6A4-791E-4D02-B6D4-2358FABE2256}: NameServer = 192.168.178.1
DPF: {721700FE-7F0E-49C5-BDED-CA92B7CB1245} - hxxp://192.168.178.23:84/camclictrl.cab
DPF: {9464D0CA-5BD8-4175-AB33-A61A4A67AA97} - hxxp://192.168.178.23:84/camclictrl.cab
DPF: {9C3EFB8A-DC20-484B-B905-5E337A988C5D} - hxxp://192.168.178.20:81/LNetCam.cab
DPF: {B015B944-7316-49AE-AC84-ACCA9379EA32} - hxxp://192.168.178.25:82/IPCamPluginMJPEG.cab
FF - ProfilePath - c:\users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.de/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKCU-Run-D78C92992BD5DF6C33342FFA1CEF81EA1030193A._service_run - c:\program files\Google\Chrome\Application\chrome.exe
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\NCP engineering GmbH\NCP Secure Client\restricted*Path]
"NcpDb_Nonce"="azpqk8gm1A7GSrXbmRSMMLpoJR5HlKO"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(5788)
c:\program files\Common Files\Apple\Internet Services\ShellStreams.dll
c:\program files\Nuance\PDF Professional 6\bin\DirectShellExt.dll
c:\windows\System32\WSCM32.dll
c:\program files\TeraCopy\TeraCopyExt.dll
c:\program files\Nuance\PDF Professional 6\ShellExt60.dll
c:\program files\Nuance\PDF Professional 6\cnvres_ger.dll
c:\program files\7-Zip\7-zip.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\windows\system32\PrintIsolationHost.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Powerware\LanSafe\Bin\PowerMonitor.exe
c:\program files\LogMeIn\x86\RaMaint.exe
c:\windows\system32\locator.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\Powerware\LanSafe\Bin\LSTrayAgent.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\program files\Powerware\LanSafe\bin\xyntservice.exe
c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\TeamViewer\Version8\TeamViewer.exe
c:\windows\system32\taskhost.exe
c:\program files\Powerware\LanSafe\bin\httpserver.exe
c:\windows\system32\conhost.exe
c:\program files\TeamViewer\Version8\tv_w32.exe
c:\windows\system32\conhost.exe
c:\program files\Powerware\LanSafe\bin\status_glance.exe
c:\windows\system32\conhost.exe
c:\program files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
c:\program files\Common Files\Java\Java Update\jusched.exe
c:\program files\Nuance\PDF Professional 6\PdfPro6Hook.exe
c:\program files\LANCOM\Advanced VPN Client\NcpBudgetGui.exe
c:\program files\LogMeIn\x86\LogMeInSystray.exe
c:\program files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
c:\program files\Canon\Solution Menu EX\CNSEMAIN.EXE
c:\program files\Axis Communications\AXIS Camera Management 4\AcmAdmin.exe
c:\users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe
c:\program files\Microsoft Office\Office14\ONENOTEM.EXE
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\windows\system32\prevhost.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-12-14 19:26:27 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2013-12-14 18:26
.
Vor Suchlauf: 4.882.395.136 Bytes frei
Nach Suchlauf: 4.706.930.688 Bytes frei
.
- - End Of File - - 3CAB25BDF0CBB9F0D2961305E0B5355F
A36C5E4F47E84449FF07ED3517B43A31
|
|
15.12.2013, 08:06
| #11 |
| /// the machine /// TB-Ausbilder | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.12.2013, 13:24
| #12 |
| | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Guten Tag Schrauber, ich habe die Malewarebytes gescannt und sende schon mal das Protokoll. Bin mir nicht sicher ob ich wirklich alles Scanns löschen sollte, die rot markiert sind. Ich habe auch administrative Tools, welche ich beruflich nutze.Z.B. Lancom oder Radmin etc. Aber kann ich auch neu installieren keine Problem. Viele Grüße Achim Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.15.02 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 11.0.9600.16428 Achim :: GEORGE [Administrator] 15.12.2013 10:29:11 mbam-log-2013-12-15 (10-29-11).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 574744 Laufzeit: 1 Stunde(n), 58 Minute(n), 10 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 27 C:\Users\Achim\Downloads\Multimedia\FreeDiscBurner-3.0.19.1125.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\Users\Achim\Dropbox\Software\Netztools\wirelesskeyview.zip (PUP.WirelessKeyView) -> Keine Aktion durchgeführt. C:\Users\Achim\Software\Administrator-Tools\keyfinder\pantsoff.exe (PUP.Pantsoff.PasswordFinder) -> Keine Aktion durchgeführt. C:\Users\Achim\Software\Images\Imagebuilder\WUCDCreatorSetup-0.9.4\WUCDCreatorSetup-0.9.4.exe (PUP.Tool) -> Keine Aktion durchgeführt. C:\Users\Achim\Software\Netzwerk\WLAN\Monitoring\wirelessnetview_setup.exe (PUP.WirelessNetworkTool) -> Keine Aktion durchgeführt. C:\Users\Achim\Software\USB-Tools\Setup_USB\USB_MultiBoot_10.zip (PUP.PSWTool.ProductKey) -> Keine Aktion durchgeführt. D:\Dropbox\Software\Software\Netztools\wirelesskeyview.zip (PUP.WirelessKeyView) -> Keine Aktion durchgeführt. D:\Eigene Dateien\VHS\VHSKK-Archiv\KVP50\Software\Unattend\WUCDCreatorSetup-0.9.9\WUCDCreatorSetup-0.9.4.exe (PUP.Tool) -> Keine Aktion durchgeführt. D:\Eigene Dateien\EDV\Lancom\Lancomschulung_2008\pantsoff.exe (PUP.Pantsoff.PasswordFinder) -> Keine Aktion durchgeführt. D:\Eigene Dateien\EDV\Lancom\Lancomschulung_200905\pantsoff.exe (PUP.Pantsoff.PasswordFinder) -> Keine Aktion durchgeführt. D:\Eigene Dateien\EDV\Software\Images\Imagebuilder\WUCDCreatorSetup-0.9.4\WUCDCreatorSetup-0.9.4.exe (PUP.Tool) -> Keine Aktion durchgeführt. D:\Eigene Dateien\EDV\Software\Administrator-Tools\keyfinder\pantsoff.exe (PUP.Pantsoff.PasswordFinder) -> Keine Aktion durchgeführt. D:\Eigene Dateien\EDV\Software\Brennprogramme\FreeAudioCDBurner.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. D:\Eigene Dateien\EDV\Software\Netzwerk\WLAN\Monitoring\wirelessnetview_setup.exe (PUP.WirelessNetworkTool) -> Keine Aktion durchgeführt. D:\Eigene Dateien\EDV\Software\Treiber\Samsung_YP-R1\Samsung Kies.exe (PUP.Optional.Solimba) -> Keine Aktion durchgeführt. D:\Eigene Dateien\EDV\Software\USB-Tools\Setup_USB\USB_MultiBoot_10.zip (PUP.PSWTool.ProductKey) -> Keine Aktion durchgeführt. C:\Users\Achim\Software\Multimedia\Brennertools\Clone CD 4.4.3.1.0 + serial + keygen\SetupCloneCD 4.4.3.1.exe (Trojan.Agent.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Achim\Software\Netzwerk\httptunnel_setup.exe (Adware.BetterInternet) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Achim\Software\Netzwerk\Remote Control\Radmin 3.2 Remote Control With Crack.rar (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Achim\Software\Netzwerk\Remote Control\Radmin 3.2 Remote Control With Crack\NewTrialStop v1.1.rar (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt. D:\Eigene Dateien\Bilder\Animation&Clips\Bildschirmschoner\Kaminfeuer.exe (Adware.ADON) -> Erfolgreich gelöscht und in Quarantäne gestellt. D:\Eigene Dateien\Eigene Datenquellen\Kommunikation\Mobile & Smartphones\Sony_Ericson\MyPhoneExplorer_Setup_1.7.1.exe (Adware.ADON) -> Erfolgreich gelöscht und in Quarantäne gestellt. D:\Eigene Dateien\Sicherungen\Mobile-Datenträger\USB-Stick\USB- 8GB Hama\Software\System\Packer\WinACE WinRAR WinZip WinISO + password & cracker.zip (Malware.Packer.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt. D:\Eigene Dateien\EDV\Software\Multimedia\Brennertools\Clone CD 4.4.3.1.0 + serial + keygen\SetupCloneCD 4.4.3.1.exe (Trojan.Agent.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt. D:\Eigene Dateien\EDV\Software\Netzwerk\httptunnel_setup.exe (Adware.BetterInternet) -> Erfolgreich gelöscht und in Quarantäne gestellt. D:\Eigene Dateien\EDV\Software\Netzwerk\Remote Control\Radmin 3.2 Remote Control With Crack.rar (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt. D:\Eigene Dateien\EDV\Software\Netzwerk\Remote Control\Radmin 3.2 Remote Control With Crack\NewTrialStop v1.1.rar (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) AdWCleaner: ich habe jetzt die NCH Dateien oder Reg-Key ausgenommen den Rest gelöscht. NCH gehört zu der Lancom-Config. Mit den anderen Ergebnissen in der Registry konnte ich nichts anfangen. Viele Grüße Achim Code:
ATTFilter # AdwCleaner v3.015 - Bericht erstellt am 15/12/2013 um 13:00:31
# Updated 10/12/2013 von Xplode
# Betriebssystem : Windows 7 Enterprise Service Pack 1 (32 bits)
# Benutzername : Achim - GEORGE
# Gestartet von : C:\Users\Achim\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
[x] Nicht Gelöscht : C:\ProgramData\NCH Software
[x] Nicht Gelöscht : C:\Program Files\driver-soft
[x] Nicht Gelöscht : C:\Program Files\NCH Software
[x] Nicht Gelöscht : C:\Users\Achim\AppData\Roaming\NCH Software
[x] Nicht Gelöscht : C:\Windows\System32\Tasks\NCH Software
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\FLEXnet
[x] Nicht Gelöscht : HKCU\Software\NCH Software
Schlüssel Gelöscht : HKLM\Software\Conduit
[x] Nicht Gelöscht : HKLM\Software\NCH Software
[x] Nicht Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LanConfig
[x] Nicht Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Mozilla Firefox v23.0 (de)
[ Datei : C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [2013 octets] - [15/12/2013 12:44:17]
AdwCleaner[R1].txt - [2073 octets] - [15/12/2013 12:50:47]
AdwCleaner[S0].txt - [2018 octets] - [15/12/2013 13:00:31]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2078 octets] ##########
Code:
ATTFilter
Hallo,
jetzt das letzte Logfile von Junkware Rem.
viele Grüße Achim
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Enterprise x86
Ran by Achim on 15.12.2013 at 13:15:15,10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{02DD8284-A49F-43E5-9D84-CF19DC9AD21D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{27DE7D30-BCCD-44D1-ADCB-A74A4259EBEF}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3A0EFC4E-F167-4D0E-9C24-FC5519237993}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{55D63393-DB17-4A2B-9052-15D85B4B1344}
~~~ Files
Successfully deleted: [File] "C:\Users\Achim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\taskbar\startfenster.lnk"
Failed to delete: [File] "C:\Windows\system32\wscm32.dll"
Successfully deleted: [File] "C:\Windows\system32\wscm64.dll"
~~~ Folders
Successfully deleted: [Folder] "C:\Program Files\driver-soft"
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{02FF4F9A-C793-4E15-B0ED-968F74B3D202}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{07AB9F67-046D-4651-A407-E9FF4CCE79A7}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{07CF07C8-A2FF-4F44-86C5-FC9C6D93BA99}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{09C6F2EA-C122-416F-A596-537561D067AF}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{0AAB0561-13F0-474F-B7AF-8FB9622D816C}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{0E4F093B-18D9-4563-896D-BFD99F598C22}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1105C651-2A16-4FE7-BD70-B298078BF86F}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{11F0098B-239E-41F5-B15A-F2A0494B796B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{12CEE497-546F-4481-A446-961F6936ACCA}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{14B39092-85FA-49F0-BE92-0A7193D30ADD}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1507072E-9C79-4214-B428-EEF8D25C8C7B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{15238591-D7D5-4729-AE47-B0C19B081F88}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1889BCD1-8A7F-47BA-A43B-232CD2344860}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{198E128E-0EFE-4460-B0AC-01F876BC2CCB}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1A9563AF-8BA6-42D9-B650-14FE1877FA39}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1AF41660-AD34-48D4-8A36-7A760A548293}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1B02A2BA-E48B-4DD9-8176-CC5890297A53}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1B679731-CC2F-4E07-85AB-26566BD258AE}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1B9F801F-65B7-48B3-BD57-1CC8F54D0C5B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1BE525D9-A4B8-45E5-9193-38CF7A885E86}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1C538B7B-E789-43C1-BB1A-A0AEA78D59DE}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1C761308-8F78-4DD4-BB73-6E6DB9FBC61F}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2014C074-EBF0-4C0C-929E-207A32AB0DC1}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{205ACBB2-5134-4206-B724-FE94397EA622}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{20EE335E-15AE-4E25-95E0-B506EB734562}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{210F68B9-E925-47EE-B27E-78E0DBD85202}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{230A69BB-AC24-494D-97FB-6C27B14DBE6B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{24891B46-30C1-4C52-8F0F-F76FE728E34E}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{274B2C62-ADAB-4EF1-AAD2-9639E92F8DE4}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{289232CA-64EA-4496-B512-F763A3B7CD0F}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2A39A0BF-52CA-4CB1-A31E-86A8A4AB9EF6}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2B28669F-7494-47F8-BA71-8BF3B0EBFE48}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2BCD4384-F2FC-4DCB-97DF-038D9E7B9AC4}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2C2739FB-BC09-46C8-93DE-C51E519DA94F}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2C7B258B-7FD6-4597-96FA-F686392AA9C3}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2CA680CD-23BB-48C0-9672-6B1F4922E206}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2CD3EC02-0137-4BFF-ACE1-4B1ED627D40F}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2DEE1F1F-20E0-4A42-8423-C28FB1A68531}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2F698C05-7998-48D9-B4BC-0413121904DA}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2FA67400-595C-43A9-8019-133A214BA239}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2FDBA244-B67A-4353-A333-767E761D0910}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2FE3C742-C302-47A7-9B08-827F1A5D881A}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{30056A4F-887E-4030-AB50-2BE04101818F}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{302A60E8-15A0-4979-B355-97A39C4F13F0}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{30E09A1C-77BD-42E9-B422-5D15346259F9}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{3128A4B2-EE2E-4A75-B3C8-61F98196943B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{312B7D02-BBEE-4A5B-B713-B2FC8BD75426}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{31DC784B-644F-4A12-B0B0-08DA5DE82850}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{344EC5D0-F854-44DD-B594-7AE0C05C9E33}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{356F216B-1013-4F24-9AF3-1B4EC98939D5}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{36315D45-C468-4222-A490-BA63827AF278}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{368D32F8-01AC-4DDD-A641-241F530C11A2}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{37EE02AB-D2C0-4D6F-A659-CE2496A6F7CC}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{3983CF62-7A99-417C-9F7C-1385AD103CDA}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{3A8937AF-97F5-4F21-AB6A-E93FA2769F69}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{3D028883-18A9-4578-8823-219FE3B6F20C}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{4097809C-FE95-4DCE-9574-9C1A2F956254}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{416E6F95-46A3-48C0-8801-0CA0DA5B9D1B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{425A0F43-FF00-4384-9D0B-9EEE4CA77674}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{44F87AD6-3360-48E2-BFDB-4260F6662EDA}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{451D172C-403C-47F3-8D84-A6B781ECC971}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{4679E110-9887-40CD-A734-946F079741F4}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{46FB6120-F071-4478-8B23-946E518D5481}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{47CF8AA9-3F32-4D7C-88FC-EF8DEA1F71B8}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{499DB3F9-A14D-478F-A96E-BE67C6008AA6}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{49ADAF55-DD7D-454D-B75B-826088E0663E}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{4A2094A7-FD08-4815-85ED-B872DD1BE3E5}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{4DC945BD-EE77-4E26-8782-28F1432F2C6B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{4F9C98EE-54C7-40CF-A45F-17B83023760A}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{527FC730-BCCA-4A1C-84B4-76A2039E5187}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{542773FA-220A-4602-90E8-8E368D88A816}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{548FBD25-0BE7-461D-AEEC-A5AB189FF8DB}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{56D28441-29B1-4595-9B7B-085335EA0164}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{57C2A3E0-4208-4E77-A0B3-590638E0C6DA}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{59930784-6774-456E-9C09-4C3BEC76C278}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5A960DA0-E63E-4144-BB77-0CD0F3D1D7AC}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5C3CF234-FFAE-44B9-835E-942C98B4FED6}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5D4C811F-D924-4FB5-A770-B21631CE48E0}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5D8CCCAB-448C-4300-B8FA-0AB3AFCB0E1A}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5DD2C5F9-8998-4140-A953-C3CE2591D091}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5DE8D5F8-2105-4566-A3BA-04358E8A7289}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5EE7E9A1-4325-4C4B-91DF-6224B097270C}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{632F16DC-CC68-4D64-9E88-430CA0FA2F69}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{63B3FACF-82FF-4A47-90A8-A13D9BB33241}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{646D5236-F748-455D-9006-1EDEBB28CB2A}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{64A3BBBD-E4EE-4C01-8C2C-77E1776002E5}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{64B6DB5E-D1E3-4773-A43D-594D48068E1E}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{65478AD9-5109-4DC3-A0E0-79551EA0967C}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{657BDD32-6C69-4EB6-8EF5-D4C931678421}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{657C6677-B40E-47BA-AD94-37A8AB620870}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{66D5CD69-0174-48BA-8DA3-DB49CB4C88B6}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{67793097-7003-4402-A192-96ABA840E6FB}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{68D5DDC0-A3D9-4687-9D71-026DF26E2B7C}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{68D611EA-8CB9-4A5E-B524-BB0F6243926A}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{6ABBA195-82D8-4E5D-8BA1-BA61BED57DD8}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{6C70A72E-0015-4E0A-8893-C746F5E2F86B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{6EF5C770-094D-4C98-8978-EA87516F9D29}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{70370004-F7A5-4B63-8987-A146FAD3586D}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{717B350F-2E65-4B4D-AB49-9A83143D116B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{71A558CE-F818-40AC-AA93-AB44757EF5FB}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{71A8D102-D0CA-4F05-AC99-198447807C27}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{72C67495-5366-4144-B5BB-E04FBE4EEC07}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{73248BC2-7A96-4ABE-8A60-1483D1091D51}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{74806CE5-E98F-46D8-8D93-4906E3EBF40F}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7613B49A-7575-4675-B410-8A94C8E1D1C2}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{76911A3E-746B-4812-AEA2-111C7A60D11A}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{78341F2B-7C3E-4F7A-A04C-F5C612D9E798}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7A0B4DFB-36B1-452E-818D-53B7C84CB779}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7C06A0B9-ECB4-4C62-885D-65ACF9DA08E2}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7D47938A-4131-42E4-9835-A4AA50C8BC30}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7DAF2C73-A072-42CF-A001-0C9079144746}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7DCCE21F-FD7C-4934-977B-AD2328D163BB}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7FD35153-D52F-49F0-A84F-98E07C4C9D40}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{8385BE4C-45B4-48F9-A867-C86099ECD5EB}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{83E9971F-D4A4-49FD-89F3-1D1FA64DF269}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{843E0648-58B7-4265-ABA3-8926D3A4E9A0}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{8465BFAE-761F-45B7-A165-2F207C12DCC8}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{84C82291-1110-49F6-B46C-E8314BE7B1FC}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{85DA34DD-4EE3-47A8-A8A2-3DA91E85C6D1}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{85E62991-11A0-42D6-BAA2-940A70DE249F}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{860E2A54-89F9-489C-94F3-BA1CC63A1399}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{865DDC6B-8B01-4211-B90B-45FA490B2DD0}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{86EFDEDB-6E62-43B9-89FA-18B35D328DC5}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{89BA9B14-C2C2-4B6B-8CC4-B96B24DE043D}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{8B50B85F-A6F0-4EF3-BD09-A477807BBFC3}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{8D1D08D7-4494-4499-B148-BB6D270085C9}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{8EBAA0DE-E38E-4695-A149-352C77218C92}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9068C431-9DD6-4CB9-9C45-25D6160567B5}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{91763463-211A-4527-B882-B35102CF258A}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{924A7878-0F14-4EFF-83D8-2CC437A796F6}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9449FE15-CBC0-4A65-8BA7-AA3C6FF3FEAB}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{95B893EE-9C5B-44DB-B45A-E43EA0D0E664}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{99D1129E-7D23-4312-8283-9FCE2FDB0924}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9A20FE6B-445A-4391-B9BE-9B85B58C7075}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9A7DAD58-0B12-4EB5-BA6F-9A293FFC98CD}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9A7EBE40-BECE-4074-884C-2CC387AC76A6}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9DB6FAD1-68F2-471F-B8F8-3C67D127C92C}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{A213A7BC-2AC1-47BA-ABEA-65568173D87D}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{A50B7E98-EC28-4AF1-B48F-002DA2FD17A2}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{A5D00684-C659-44CC-BE23-E891C394BFE4}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{A6FA656D-BFB9-4F84-9935-E188A87A508B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{A7402562-465E-4A84-A784-A3CEF649531C}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AA17ECD2-2BF9-4396-B616-87EAB131B3FA}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AA1D3B8B-8B21-476C-8F8D-70592512D49E}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AADB2210-B4D7-437F-973D-E8F0FC5F6BDF}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AB5D0B85-ADAB-4FC0-AFCD-0ACE118FF62B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AC87DEF0-6E18-43C6-BAE6-3715C69ABCD7}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AD0E33DE-E155-4DBB-AA07-C7CD66742CFC}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AD0E42DE-7138-4DBC-9B4E-3393B9C2E028}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AD385422-EE66-4407-8C5E-7F2F5079D2F7}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AE21D1BF-CCEF-4FE5-A9C6-07BEB4262A4A}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AE322729-CDDE-4D3B-A073-15A9FC193DD7}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AFC29F13-AA9D-477B-867D-E75B15FA868C}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B0EF7C8D-208C-4B10-807C-A8362282382E}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B1A9BB1F-8AD4-4F0E-9272-891040AFF3EF}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B1F900E7-51AA-4B8F-AA00-862EC6732201}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B209390F-7DC1-46A5-9CEC-0276ADDDF9FC}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B2BDF7E0-1915-45FA-A66F-B514451CA469}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B4E13DF9-4314-4FE8-BC82-99A50A4A9DFA}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B5AA3394-FE14-4BE2-A365-E14F28B97CDB}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B6043DD9-A9AE-449E-9707-D7545A26AE24}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BA512F6F-711C-49C7-B1B4-6812E3737075}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BB81DD55-396C-4CB5-9987-4D6599505CC8}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BC5F8293-B81A-4665-BBBB-2B8917D67206}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BC94E718-DFD2-415E-94D4-1668850D51B5}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BCE3A198-6C11-4FC8-87FF-91EAD809B2CD}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BFEC13D4-3C82-4274-AA85-39281C995B46}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BFEF113A-26C1-4E24-96DC-42569058B001}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C0B4C685-9B53-46BF-B64F-8D2CBCD4359C}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C1DA257A-C66F-42C8-9BA0-6D840235018D}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C4679834-3434-471C-A451-F574F0C46F76}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C4904E14-4507-4DB2-8B4D-1E7E478D56C9}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C5520CB0-A3CC-41AA-B5BA-42937C3E9F1B}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C5F6506A-8988-4867-AF7A-802E67FAA594}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C7B662BD-57CA-4F4B-AECC-B485A6E975B4}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{CB245A3E-D215-4AC7-9964-1E5B6EBE368A}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{CD813A04-B917-4D47-8713-1EF427C12C00}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{CE58D2CE-D295-4913-BA87-0D8097365F1E}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D0662934-E9DD-4BEE-88BE-8467B88DBC5D}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D0D3D9C7-1E54-4049-819C-97AF3ACA8B3F}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D10BD8F7-B560-445A-B3A1-2C9938AAE189}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D41832F3-C8D5-4185-8CDE-173F1A1511B3}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D50457FD-4817-4B12-A68A-CB7826575D56}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D5E1C1CC-827F-4AE5-AB47-406739801B94}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D64317D2-6704-4DFF-B1DC-4FC6C9D35CFE}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D660F8F1-43CC-42A5-B816-99CD9BEC8830}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D732676C-F139-48E0-B541-821BCF8405B0}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D9480935-C2CD-435B-B0C4-A5327AEBD822}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DA891977-AD27-4877-ACD7-78DB00167FFE}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DAAF6226-50BF-476F-867D-536E123ACE20}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DABA9068-D1EA-4E5A-9CD9-49E791E000CE}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DBBE0DAE-37CF-4C2D-AE48-9D5281B2E5DA}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DBF2E742-02B0-4049-B6AE-2556881F4224}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DBF4C0AB-2335-4DF5-BEEF-22F39FE3265A}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DDBC17F7-7B78-432C-AEB4-67C89BEBEB27}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DDC21B7F-FE09-422C-A7C7-F4DC020D4F3E}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E0F73BCF-4546-442D-BA51-10572D411BEC}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E10E834A-B165-4DA9-AB94-570C52339AFA}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E12889DD-7730-4A23-A73D-4A495CEEBBD5}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E249F7E7-4041-4BB1-AE2A-89BB66B56777}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E2BDA137-7B28-427F-A8D4-27BE3599DA8A}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E2D1553E-0F76-4874-B75C-9D76E8751983}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E32484B0-4EAC-4ABB-BB4F-2DC03E743570}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E330E9CF-0DDA-4BC1-962A-B96272FD5D89}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E46A7047-407F-4CC8-8A81-8D6EAB793FCC}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E55829BA-6236-4703-A27F-1622CEAC12CD}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E5623AA6-DA92-4B35-B38B-22BBAA17EB7E}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E584E2F1-C6DA-4948-82DC-66773F60F46D}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E657F8F7-26F6-4457-8C62-735E21588C99}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E6DB3028-98CA-4884-9C15-8F5E5CAB8D79}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E84B5DE1-1B75-4249-BE29-5896583A8F94}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E87B477E-66B2-4C59-B1EF-A215B436D064}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E9C949CE-3DE9-41B6-8F83-D1C7467B6C6C}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EA69DA05-D99C-4FD9-9F86-E6819C373F57}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EA9FC986-450B-48AF-B133-D79D012AC790}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EAB90A71-307B-4335-BE2C-6FC713F533D7}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EB001120-4130-4293-AB26-CD4F70D8E37E}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EB512AA5-64D0-4823-8859-2C04D910E362}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EC7C2A56-34BD-4C82-8F4C-B617E8A50408}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EC8686D9-D1FC-48AE-BB6A-38FE540BAD42}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F27DB56E-81F8-4505-8194-92711E582E09}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F2F865F0-CB3C-4D3F-A5AB-C398BF74A104}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F375F557-1243-4475-A2C2-A2DCD7145E94}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F87F7CE5-5E6E-4676-8D9B-5C7D53D52F1E}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F89CC813-5B78-4910-A2BA-3AA00CF8AE93}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F9DA8166-5F40-4FB5-8884-8A661E9AE782}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{FA5FC6FE-11D0-4B24-9D67-062FEB1CEDCD}
Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{FB0C23BC-7BD7-4E3B-B6D9-85982D2FA5E2}
~~~ FireFox
Emptied folder: C:\Users\Achim\AppData\Roaming\mozilla\firefox\profiles\191fagwf.default\minidumps [2 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.12.2013 at 13:17:50,75
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
16.12.2013, 08:41
| #13 |
| /// the machine /// TB-Ausbilder | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Ja was Du kennst kannste rausnehmen ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
17.12.2013, 07:55
| #14 |
| | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 Hallo Schreiber, ich hatte beim Download von Eset Smartinstaller die Fehlermeldung,die ich auch beim Internet-Explorer erhalte. "Internetexplorer hat ein Problem...". Nur beim Firefox in abgeänderter Form und hatte jetzt den Security Check vorgezogen und sende erst mal das Logfile. Momentan läuft jetzt jedoch der Scan vom Eset-Smartinstaller und hat 2 Infektionen bislang gefunden. Bis morgen Viele Grüße Achim Code:
ATTFilter Results of screen317's Security Check version 0.99.77
Windows 7 Service Pack 1 x86 (UAC is enabled)
``````````````Antivirus/Firewall Check:``````````````
Sophos Anti-Virus
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
CCleaner
Java 7 Update 45
Adobe Flash Player 11.9.900.170
Mozilla Firefox 23.0 Firefox out of Date!
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C:
````````````````````End of Log``````````````````````
hatte den Rechner die ganze Nacht durch gescannt und habe jetzt das Logfile: ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=9e350b8f15f07e40aa0585b4ed1a1426 # engine=16289 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-12-17 05:16:06 # local_time=2013-12-17 06:16:06 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776573 100 94 44159 138888557 0 0 # compatibility_mode=8449 16775166 50 93 44480 67871684 37267 0 # scanned=352886 # found=5 # cleaned=0 # scan_time=38892 sh=9656EF4E921F06EA5186907822419A2C54F7959A ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Achim\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\75e4e68a-44d5baa5" sh=3448412B5AC95AE687852AA1270F05C0BC65E7B5 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Achim\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\4e413706-3eb8d15f" sh=25659F3A88FE5FAC28CBB6F1F1F11AB17AB8277D ft=0 fh=0000000000000000 vn="Win32/Bagle.UN worm" ac=I fn="D:\Eigene Dateien\Sicherungen\DB-Konfigurationen\VHSKK\Wechseldatenträger (M)\VHSKK-Anwendungen\System\Packer\WinRAR v3.20 German.zip" sh=25659F3A88FE5FAC28CBB6F1F1F11AB17AB8277D ft=0 fh=0000000000000000 vn="Win32/Bagle.UN worm" ac=I fn="D:\Eigene Dateien\Sicherungen\Mobile-Datenträger\USB-Stick\USB-VHS-4GB-rot\Wechseldatenträger (H)\VHSKK-Anwendungen\System\Packer\WinRAR v3.20 German.zip" sh=F8AE3582A3ED05994D9BF3F2FA9807CAE2D0A312 ft=1 fh=32d8f13a7cfc7c55 vn="Win32/RiskWare.PsShutdown.232 application" ac=I fn="D:\Eigene Dateien\VHS\VHSKK-Archiv\KVP50\Software\Tools\Hotfixes_all\XP_Update_2.6.exe" Viele Grüße Achim Hallo Schrauber, jetzt erst noch mal der Sacn-Log: Hatte I-Netexplorer installiert und Rechner läuft optimal, aber dann die Meldung:Internet-Explorer hat ein Problem festgestellt und muss geschlossen werden.Es wird nach einer Lösing gesucht.... FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-12-2013 01
Ran by Achim (administrator) on GEORGE on 17-12-2013 07:46:38
Running from C:\Users\Achim\Downloads\Antivir\Trojan
Microsoft Windows 7 Enterprise Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(Eaton Corporation) C:\Program Files\Powerware\LanSafe\Bin\PowerMonitor.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn Ignition\LMIGuardianSvc.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\ramaint.exe
(NCP engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\ncpclcfg.exe
(NCP Engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\ncprwsnt.exe
() C:\Program Files\LANCOM\Advanced VPN Client\NCPSEC.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PDF Professional 6\PDFProFiltSrv.exe
(Microsoft Corporation) C:\Windows\System32\Locator.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Axis Communications) C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files\Powerware\LanSafe\Bin\LSTrayAgent.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeIn.exe
(Eaton Corporation) C:\Program Files\Powerware\LanSafe\Bin\XYNTService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Powerware) C:\Program Files\Powerware\LanSafe\Bin\httpserver.exe
(Powerware) C:\Program Files\Powerware\LanSafe\Bin\status_glance.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
(Spotify Ltd) C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Achim\AppData\Roaming\Spotify\spotify.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Dropbox, Inc.) C:\Users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(AVM Berlin) C:\Users\Achim\AppData\Local\Apps\2.0\YNXPA4GH.66H\K0GCG6C7.7CZ\frit..tion_1acae14e4778b8d2_0002.0003_7c9366a34786c7f9\fritzbox-usb-fernanschluss.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_11_9_900_170_ActiveX.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [LogMeIn GUI] - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [63048 2012-11-29] (LogMeIn, Inc.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-05] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\Achim\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-05] (Spotify Ltd)
HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [210208 2008-11-17] (Acresso Corporation)
HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)
HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20133824 2013-09-25] (Google)
HKCU\...\Run: [AVMUSBFernanschluss] - C:\Users\Achim\AppData\Local\Apps\2.0\YNXPA4GH.66H\K0GCG6C7.7CZ\frit..tion_1acae14e4778b8d2_0002.0003_7c9366a34786c7f9\AVMAutoStart.exe [139264 2013-12-14] (AVM Berlin)
AppInit_DLLs: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll [ 2013-05-17] (Sophos Limited)
Startup: C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF75D143CF3FACE01
BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files\Nuance\PDF Professional 6\bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: FRITZ!Box Addon BHO - {C0C86BBE-9509-4296-8459-FDBFDAF4B673} - C:\Program Files\FRITZ!Box\AddOn (IE)\FBoxIESplitButton.dll (AVM Berlin)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab
DPF: {7191F0AC-D686-46A8-BFCC-EA61778C74DD} hxxp://192.168.178.54/aplugLite.cab
DPF: {721700FE-7F0E-49C5-BDED-CA92B7CB1245} hxxp://192.168.178.23:84/camclictrl.cab
DPF: {82E5DF24-51E8-47CD-864A-F4BD5005AA73} https://www.icloud.com/system/iCloud.cab
DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} hxxp://192.168.178.50/activex/AxisCamControl.cab
DPF: {9464D0CA-5BD8-4175-AB33-A61A4A67AA97} hxxp://192.168.178.23:84/camclictrl.cab
DPF: {9C3EFB8A-DC20-484B-B905-5E337A988C5D} hxxp://192.168.178.20:81/LNetCam.cab
DPF: {B015B944-7316-49AE-AC84-ACCA9379EA32} hxxp://192.168.178.25:82/IPCamPluginMJPEG.cab
DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Winsock: Catalog9 47 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)
Tcpip\..\Interfaces\{1C2EF6A4-791E-4D02-B6D4-2358FABE2256}: [NameServer]192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @TRENDnet.com/CameraPlugin - C:\Program Files\TRENDnet\Plugin\npcamstreamctrl.dll (TRENDnet)
FF Plugin: ZEON/PDF,version=2.0 - C:\Program Files\Nuance\PDF Professional 6\bin\nppdf.dll (Zeon Corporation)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: nuance - C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default\Extensions\nuance@pdf6
FF HKLM\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF Extension: Wondershare Video Converter Ultimate - C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
========================== Services (Whitelisted) =================
R2 AXIS Camera Management; C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmService.exe [17920 2013-07-11] (Axis Communications)
S4 DcRaidMoSrv; C:\Program Files\Dawicontrol GmbH\Dawicontrol RAID Monitor\RAIDservice.exe [341504 2012-05-30] (Dawicontrol GmbH)
S4 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG)
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®)
R2 LanSafe PM; C:\Program Files\Powerware\LanSafe\Bin\PowerMonitor.exe [532480 2009-12-05] (Eaton Corporation)
R3 LanSafe Process Manager; C:\Program Files\Powerware\LanSafe\bin\xyntservice.exe [49152 2009-12-02] (Eaton Corporation)
R2 LMIGuardianSvc; C:\Program Files\LogMeIn Ignition\LMIGuardianSvc.exe [374160 2011-05-17] (LogMeIn, Inc.)
R2 ncpclcfg; C:\Program Files\LANCOM\Advanced VPN Client\ncpclcfg.exe [150800 2013-10-28] (NCP engineering GmbH)
R2 ncprwsnt; C:\Program Files\LANCOM\Advanced VPN Client\ncprwsnt.exe [1395464 2013-11-08] (NCP Engineering GmbH)
R2 NcpSec; C:\Program Files\LANCOM\Advanced VPN Client\NCPSEC.EXE [119808 2011-04-21] ()
R2 PDFProFiltSrv; C:\Program Files\Nuance\PDF Professional 6\PDFProFiltSrv.exe [134944 2009-07-27] (Nuance Communications, Inc.)
S4 SAVAdminService; C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [290296 2013-05-17] (Sophos Limited)
S4 SAVService; C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe [206328 2013-05-17] (Sophos Limited)
S4 Sophos AutoUpdate Service; C:\Program Files\Sophos\AutoUpdate\ALsvc.exe [237048 2013-01-11] (Sophos Limited)
S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22888 2013-09-17] ()
S4 swi_service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [3109880 2013-09-17] (Sophos Limited)
S2 swi_update; C:\ProgramData\Sophos\Web Intelligence\swi_update.exe [1471992 2013-05-17] (Sophos Limited)
S4 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [1690096 2013-07-19] (GlavSoft LLC.)
S3 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [3602752 2013-03-04] (RealVNC Ltd)
==================== Drivers (Whitelisted) ====================
S3 61883; C:\Windows\System32\DRIVERS\61883.sys [46976 2009-07-14] (Microsoft Corporation)
R3 avmaura; C:\Windows\System32\DRIVERS\avmaura.sys [105728 2013-07-13] (AVM Berlin)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)
R0 DC300e; C:\Windows\System32\DRIVERS\DC300e.sys [39872 2013-03-09] (Dawicontrol GmbH)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [25160 2007-08-07] (Elaborate Bytes AG)
R3 ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [11984 2007-02-16] (Elaborate Bytes AG)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2010-10-22] (AVM GmbH)
S3 ncpfilt; C:\Windows\System32\DRIVERS\ncplelhp.sys [87280 2013-09-11] (NCP Engineering GmbH)
R3 ncplelhp; C:\Windows\System32\DRIVERS\ncplelhp.sys [87280 2013-09-11] (NCP Engineering GmbH)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\WNA1000M.sys [734824 2011-02-21] (Realtek Semiconductor Corporation )
R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [132424 2013-05-17] (Sophos Limited)
S3 Ser2plx86; C:\Windows\System32\DRIVERS\ser2pl.sys [134144 2013-02-22] (Prolific Technology Inc.)
R0 Si3132r5; C:\Windows\System32\DRIVERS\Si3132r5.sys [215856 2007-06-01] (Silicon Image, Inc)
R0 SiFilter; C:\Windows\System32\DRIVERS\SiWinAcc.sys [17328 2007-05-25] (Silicon Image, Inc.)
R0 SiRemFil; C:\Windows\System32\DRIVERS\SiRemFil.sys [12464 2007-05-25] (Silicon Image, Inc.)
R1 SKMScan; C:\Windows\System32\DRIVERS\skmscan.sys [33096 2013-05-17] (Sophos Limited)
S4 SophosBootDriver; C:\Windows\System32\DRIVERS\SophosBootDriver.sys [22536 2011-10-23] (Sophos Plc)
R3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [4608 2013-03-04] (RealVNC Ltd.)
S3 catchme; \??\C:\Users\Achim\AppData\Local\Temp\catchme.sys [x]
S4 LMIRfsClientNP; No ImagePath
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-17 07:46 - 2013-12-17 07:46 - 00000000 ____D C:\FRST
2013-12-17 07:41 - 2013-12-17 07:41 - 00000000 ____D C:\Users\Achim\Downloads\Win7
2013-12-17 07:38 - 2013-12-17 07:38 - 00001409 _____ C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-17 06:47 - 2013-12-17 06:49 - 00000000 ____D C:\Windows\rescache
2013-12-16 20:49 - 2013-12-16 20:49 - 12344320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-16 20:49 - 2013-12-16 20:49 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-16 20:49 - 2013-12-16 20:49 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-16 20:49 - 2013-12-16 20:49 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-16 20:49 - 2013-12-16 20:49 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-16 20:49 - 2013-12-16 20:49 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-16 20:43 - 2013-12-16 20:53 - 00004281 _____ C:\Windows\IE9_main.log
2013-12-16 20:42 - 2013-12-16 20:42 - 18690352 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE9-Windows7-x86-deu.exe
2013-12-16 18:57 - 2013-12-16 18:57 - 00000000 ____D C:\Users\Achim\AppData\Local\{CDB2A70E-C29F-4706-9289-6A96FF188945}
2013-12-15 14:25 - 2013-12-15 14:26 - 00043067 _____ C:\Windows\iis7.log
2013-12-15 14:21 - 2013-12-15 14:21 - 00000000 ____D C:\Windows\system32\BestPractices
2013-12-15 14:21 - 2013-12-15 14:21 - 00000000 ____D C:\inetpub
2013-12-15 13:15 - 2013-12-15 13:15 - 00000000 ____D C:\Windows\ERUNT
2013-12-15 10:23 - 2013-12-15 10:23 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Achim\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-15 10:17 - 2013-12-15 10:19 - 00000000 ____D C:\Users\Achim\Downloads\Internetexplorer
2013-12-14 19:41 - 2013-12-14 19:41 - 00000807 _____ C:\Windows\avmacc.log
2013-12-14 18:43 - 2013-12-14 19:26 - 00000000 ____D C:\Qoobox
2013-12-14 18:43 - 2013-12-14 19:24 - 00000000 ____D C:\Windows\erdnt
2013-12-14 18:43 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-14 18:43 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-14 18:43 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-14 18:43 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-14 18:43 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-14 18:43 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-14 18:43 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-14 18:43 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-13 23:33 - 2013-12-13 23:33 - 00889416 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\dotNetFx40_Full_setup.exe
2013-12-13 23:32 - 2013-12-13 23:32 - 24805592 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\Windows-KB890830-V5.7.exe
2013-12-13 23:06 - 2013-12-13 23:06 - 00000000 ____D C:\Users\Achim\Downloads\FRST-OlderVersion
2013-12-13 17:56 - 2013-12-13 23:12 - 00000000 ____D C:\Program Files\IIS Express
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Users\Achim\AppData\Roaming\npm
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\nodejs
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\iisnode-dev
2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\runphp
2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\Microsoft SDKs
2013-12-13 07:23 - 2013-12-13 07:23 - 00116384 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\wpilauncher.exe
2013-12-12 22:12 - 2013-12-12 22:12 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Mozilla
2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 21:22 - 2013-12-12 21:29 - 00000000 ____D C:\ldiag
2013-12-12 20:50 - 2013-12-12 20:50 - 00072892 _____ C:\Users\Achim\Desktop\GEORGE.html
2013-12-12 20:47 - 2013-12-12 20:47 - 00000000 ____D C:\Program Files\CPUID
2013-12-12 07:45 - 2013-12-12 07:45 - 00422914 _____ C:\Users\Achim\Documents\VHS-kaki-umschlag-2014.pptx
2013-12-12 00:20 - 2013-12-13 23:31 - 00026640 _____ C:\Windows\IE11_main.log
2013-12-11 20:23 - 2013-12-17 07:31 - 00067218 _____ C:\Windows\PFRO.log
2013-12-11 20:19 - 2013-12-12 07:07 - 00000095 _____ C:\Users\Achim\Desktop\CMD-Archiv.txt
2013-12-11 18:55 - 2013-12-11 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\Tvsukernel
2013-12-11 18:54 - 2013-12-11 18:54 - 00000000 ____D C:\Program Files\ThinkVantage
2013-12-11 18:34 - 2013-12-11 18:49 - 00007337 _____ C:\Windows\IE10_main.log
2013-12-11 18:24 - 2013-12-11 18:24 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-12-11 18:17 - 2013-12-17 07:31 - 00002309 _____ C:\Windows\setupact.log
2013-12-11 18:17 - 2013-12-11 18:17 - 00000000 _____ C:\Windows\setuperr.log
2013-12-11 07:52 - 2013-12-11 18:24 - 00034573 _____ C:\Windows\ie8_main.log
2013-12-10 20:33 - 2013-12-10 20:33 - 00192888 _____ C:\Users\Achim\cc_20131210_203255.reg
2013-12-10 19:52 - 2013-12-10 19:52 - 00001356 _____ C:\Users\Achim\Desktop\CCleaner.exe - Verknüpfung.lnk
2013-12-10 19:13 - 2010-10-22 02:00 - 00480632 ____N (AVM Berlin) C:\Windows\instwcli.dex
2013-12-09 23:07 - 2010-10-22 02:00 - 00074240 _____ (AVM Berlin) C:\Windows\system32\fwlanci.org
2013-12-09 23:05 - 2013-12-09 23:05 - 00000000 ____D C:\Program Files\AVM_update
2013-12-07 11:37 - 2013-12-12 21:01 - 00000000 ____D C:\Users\Achim\Documents\DriverGenius
2013-12-04 20:43 - 2013-12-04 20:43 - 00000000 ____D C:\Users\Achim\AppData\Local\vsmedia.de
2013-12-04 20:39 - 2013-12-04 20:39 - 00001128 _____ C:\Users\Achim\Desktop\Continue Image Editor Installation.lnk
2013-12-04 19:43 - 2013-12-04 20:05 - 00000000 ____D C:\Users\Achim\Desktop\FP_2980_1
2013-12-02 19:52 - 2013-12-10 19:57 - 00000000 ____D C:\Users\Achim\AppData\Roaming\NCH Software
2013-12-02 19:51 - 2013-12-10 19:57 - 00000000 ____D C:\ProgramData\NCH Software
2013-12-02 19:51 - 2013-12-10 19:57 - 00000000 ____D C:\Program Files\NCH Software
2013-12-01 18:54 - 2013-12-01 18:54 - 00001120 _____ C:\Users\Achim\Desktop\TeamViewer 8.lnk
2013-11-26 23:04 - 2013-11-26 23:03 - 00001774 _____ C:\Users\Achim\Desktop\qr_code_ohne_logo_plus_informationsmappe.zip
2013-11-25 18:46 - 2013-11-25 18:46 - 00002161 _____ C:\Users\Achim\Desktop\Klassik-DB.xlsx - Verknüpfung.lnk
2013-11-23 11:16 - 2013-11-23 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\libimobiledevice
2013-11-23 11:12 - 2013-11-23 11:12 - 00000000 ____D C:\Users\Achim\Documents\evasi0n-win-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-release
2013-11-22 15:57 - 2013-11-26 07:42 - 00011284 _____ C:\Users\Achim\Documents\Klassik-DB.xlsx
2013-11-22 15:41 - 2013-12-02 22:00 - 00000292 _____ C:\Users\Achim\AppData\Roaming\burnaware.ini
2013-11-22 14:23 - 2013-11-22 14:23 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spesoft Audio Converter
2013-11-22 14:11 - 2013-11-22 14:11 - 00001829 _____ C:\Users\Achim\Desktop\P-touch Editor 5.0.lnk
2013-11-22 13:59 - 2013-11-22 13:59 - 00000000 ____D C:\Program Files\Common Files\Brother
2013-11-22 12:41 - 2013-11-22 12:41 - 00001271 _____ C:\Users\Achim\Desktop\Kufer-WEB-Zugangsdaten.txt - Verknüpfung.lnk
==================== One Month Modified Files and Folders =======
2013-12-17 07:46 - 2013-12-17 07:46 - 00000000 ____D C:\FRST
2013-12-17 07:41 - 2013-12-17 07:41 - 00000000 ____D C:\Users\Achim\Downloads\Win7
2013-12-17 07:41 - 2013-03-09 16:30 - 00000000 ____D C:\Users\Achim\Downloads\System
2013-12-17 07:40 - 2013-03-06 10:51 - 01786372 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-17 07:39 - 2013-03-15 19:57 - 00000000 ___RD C:\Users\Achim\Dropbox
2013-12-17 07:39 - 2013-03-15 19:54 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Dropbox
2013-12-17 07:39 - 2013-03-06 10:43 - 02074641 _____ C:\Windows\WindowsUpdate.log
2013-12-17 07:38 - 2013-12-17 07:38 - 00001409 _____ C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-17 07:38 - 2013-07-11 18:42 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spotify
2013-12-17 07:38 - 2013-03-16 11:48 - 00000000 ___RD C:\Users\Achim\Google Drive
2013-12-17 07:37 - 2013-03-06 11:54 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-17 07:37 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-12-17 07:35 - 2013-03-06 11:54 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-17 07:33 - 2013-03-06 11:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-17 07:31 - 2013-12-11 20:23 - 00067218 _____ C:\Windows\PFRO.log
2013-12-17 07:31 - 2013-12-11 18:17 - 00002309 _____ C:\Windows\setupact.log
2013-12-17 07:31 - 2013-08-09 15:10 - 00000000 ____D C:\ProgramData\firebird
2013-12-17 07:31 - 2013-03-06 11:20 - 00000000 ____D C:\ProgramData\LogMeIn
2013-12-17 07:31 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-17 07:21 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-12-17 07:15 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\inetsrv
2013-12-17 06:49 - 2013-12-17 06:47 - 00000000 ____D C:\Windows\rescache
2013-12-16 22:28 - 2013-04-15 18:08 - 00000000 ____D C:\Users\Achim\AppData\Local\6CE0D6AC-6EB9-4808-A530-20BD3892313C.aplzod
2013-12-16 20:53 - 2013-12-16 20:43 - 00004281 _____ C:\Windows\IE9_main.log
2013-12-16 20:49 - 2013-12-16 20:49 - 12344320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-16 20:49 - 2013-12-16 20:49 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-16 20:49 - 2013-12-16 20:49 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-16 20:49 - 2013-12-16 20:49 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-16 20:49 - 2013-12-16 20:49 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-16 20:49 - 2013-12-16 20:49 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-16 20:49 - 2013-12-16 20:49 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-16 20:49 - 2013-12-16 20:49 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-16 20:42 - 2013-12-16 20:42 - 18690352 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE9-Windows7-x86-deu.exe
2013-12-16 19:07 - 2013-03-09 16:30 - 00000000 ____D C:\Users\Achim\Downloads\Antivir
2013-12-16 18:57 - 2013-12-16 18:57 - 00000000 ____D C:\Users\Achim\AppData\Local\{CDB2A70E-C29F-4706-9289-6A96FF188945}
2013-12-16 18:56 - 2009-07-14 05:34 - 00015264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-16 18:56 - 2009-07-14 05:34 - 00015264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-16 18:53 - 2013-07-11 18:42 - 00000000 ____D C:\Users\Achim\AppData\Local\Spotify
2013-12-15 14:26 - 2013-12-15 14:25 - 00043067 _____ C:\Windows\iis7.log
2013-12-15 14:24 - 2009-07-14 05:33 - 00515320 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-15 14:21 - 2013-12-15 14:21 - 00000000 ____D C:\Windows\system32\BestPractices
2013-12-15 14:21 - 2013-12-15 14:21 - 00000000 ____D C:\inetpub
2013-12-15 13:52 - 2013-03-06 10:46 - 00000000 ____D C:\Users\Achim
2013-12-15 13:43 - 2013-03-16 09:38 - 00000000 ____D C:\Users\Achim\Desktop\Systemprogramme
2013-12-15 13:38 - 2013-03-10 19:03 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Skype
2013-12-15 13:15 - 2013-12-15 13:15 - 00000000 ____D C:\Windows\ERUNT
2013-12-15 13:01 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\LiveKernelReports
2013-12-15 12:35 - 2013-03-09 16:30 - 00000000 ____D C:\Users\Achim\Downloads\Netzwerk
2013-12-15 12:10 - 2013-08-25 07:52 - 00001490 _____ C:\Users\Achim\AppData\Local\RecConfig.xml
2013-12-15 10:23 - 2013-12-15 10:23 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Achim\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-15 10:19 - 2013-12-15 10:17 - 00000000 ____D C:\Users\Achim\Downloads\Internetexplorer
2013-12-15 10:18 - 2013-08-03 13:22 - 00000000 ____D C:\Users\Achim\Downloads\Multimedia
2013-12-15 10:18 - 2013-03-09 16:32 - 00000000 ____D C:\Users\Achim\Downloads\Druck&Scan
2013-12-15 09:57 - 2013-03-06 11:20 - 00086888 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIRfsClientNP.dll
2013-12-15 09:57 - 2013-03-06 11:20 - 00085832 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIinit.dll
2013-12-15 09:57 - 2013-03-06 11:20 - 00031560 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIport.dll
2013-12-15 09:57 - 2013-03-06 11:19 - 00000000 ____D C:\Program Files\LogMeIn
2013-12-14 19:41 - 2013-12-14 19:41 - 00000807 _____ C:\Windows\avmacc.log
2013-12-14 19:41 - 2013-03-06 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\Deployment
2013-12-14 19:26 - 2013-12-14 18:43 - 00000000 ____D C:\Qoobox
2013-12-14 19:26 - 2013-03-06 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\Apps\2.0
2013-12-14 19:26 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2013-12-14 19:26 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2013-12-14 19:24 - 2013-12-14 18:43 - 00000000 ____D C:\Windows\erdnt
2013-12-14 19:22 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini
2013-12-14 09:33 - 2013-03-06 11:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-14 09:33 - 2013-03-06 11:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-13 23:33 - 2013-12-13 23:33 - 00889416 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\dotNetFx40_Full_setup.exe
2013-12-13 23:32 - 2013-12-13 23:32 - 24805592 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\Windows-KB890830-V5.7.exe
2013-12-13 23:31 - 2013-12-12 00:20 - 00026640 _____ C:\Windows\IE11_main.log
2013-12-13 23:12 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\IIS Express
2013-12-13 23:06 - 2013-12-13 23:06 - 00000000 ____D C:\Users\Achim\Downloads\FRST-OlderVersion
2013-12-13 17:57 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Users\Achim\AppData\Roaming\npm
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\nodejs
2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\iisnode-dev
2013-12-13 17:55 - 2013-03-11 21:44 - 00000000 ____D C:\Windows\pss
2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\runphp
2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\Microsoft SDKs
2013-12-13 07:23 - 2013-12-13 07:23 - 00116384 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\wpilauncher.exe
2013-12-13 07:03 - 2009-07-14 10:03 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2013-12-13 00:08 - 2013-03-06 11:33 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 22:18 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2013-12-12 22:12 - 2013-12-12 22:12 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Mozilla
2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 22:02 - 2013-03-07 23:42 - 00000000 ____D C:\Windows\Minidump
2013-12-12 21:55 - 2013-03-06 11:30 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-12 21:50 - 2013-03-06 10:46 - 00000000 ____D C:\Recovery
2013-12-12 21:33 - 2013-03-07 23:02 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-12-12 21:29 - 2013-12-12 21:22 - 00000000 ____D C:\ldiag
2013-12-12 21:22 - 2013-03-10 11:58 - 00000000 ____D C:\SWTOOLS
2013-12-12 21:06 - 2013-05-06 21:18 - 00000000 ____D C:\Users\Achim\Downloads\Grafik
2013-12-12 21:01 - 2013-12-07 11:37 - 00000000 ____D C:\Users\Achim\Documents\DriverGenius
2013-12-12 20:50 - 2013-12-12 20:50 - 00072892 _____ C:\Users\Achim\Desktop\GEORGE.html
2013-12-12 20:47 - 2013-12-12 20:47 - 00000000 ____D C:\Program Files\CPUID
2013-12-12 07:45 - 2013-12-12 07:45 - 00422914 _____ C:\Users\Achim\Documents\VHS-kaki-umschlag-2014.pptx
2013-12-12 07:35 - 2013-06-03 18:16 - 00002194 ____H C:\Users\Achim\Documents\Default.rdp
2013-12-12 07:07 - 2013-12-11 20:19 - 00000095 _____ C:\Users\Achim\Desktop\CMD-Archiv.txt
2013-12-12 06:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-12-11 18:55 - 2013-12-11 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\Tvsukernel
2013-12-11 18:54 - 2013-12-11 18:54 - 00000000 ____D C:\Program Files\ThinkVantage
2013-12-11 18:52 - 2013-03-11 22:19 - 00000000 ____D C:\ProgramData\Lenovo
2013-12-11 18:49 - 2013-12-11 18:34 - 00007337 _____ C:\Windows\IE10_main.log
2013-12-11 18:42 - 2013-03-06 10:39 - 00000000 ____D C:\Windows\Panther
2013-12-11 18:36 - 2013-03-11 18:45 - 00000000 ____D C:\Users\Achim\AppData\Local\Windows Live Writer
2013-12-11 18:24 - 2013-12-11 18:24 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-12-11 18:24 - 2013-12-11 07:52 - 00034573 _____ C:\Windows\ie8_main.log
2013-12-11 18:17 - 2013-12-11 18:17 - 00000000 _____ C:\Windows\setuperr.log
2013-12-10 22:06 - 2013-03-06 11:54 - 00000000 ____D C:\Program Files\Google
2013-12-10 22:05 - 2013-03-06 11:54 - 00000000 ____D C:\Users\Achim\AppData\Local\Google
2013-12-10 20:43 - 2013-03-06 11:16 - 00157928 _____ C:\Users\Achim\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-10 20:43 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-10 20:33 - 2013-12-10 20:33 - 00192888 _____ C:\Users\Achim\cc_20131210_203255.reg
2013-12-10 20:26 - 2013-10-22 17:09 - 00000000 ____D C:\Users\Achim\AppData\Roaming\FileZilla
2013-12-10 19:57 - 2013-12-02 19:52 - 00000000 ____D C:\Users\Achim\AppData\Roaming\NCH Software
2013-12-10 19:57 - 2013-12-02 19:51 - 00000000 ____D C:\ProgramData\NCH Software
2013-12-10 19:57 - 2013-12-02 19:51 - 00000000 ____D C:\Program Files\NCH Software
2013-12-10 19:52 - 2013-12-10 19:52 - 00001356 _____ C:\Users\Achim\Desktop\CCleaner.exe - Verknüpfung.lnk
2013-12-10 19:15 - 2013-03-06 11:35 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-12-09 23:05 - 2013-12-09 23:05 - 00000000 ____D C:\Program Files\AVM_update
2013-12-08 17:07 - 2013-03-10 19:28 - 00000000 ____D C:\Users\Achim\.dreamstream
2013-12-08 15:02 - 2013-03-10 19:28 - 00000000 ____D C:\Users\Achim\.gstreamer-0.10
2013-12-08 11:42 - 2013-03-06 11:34 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Adobe
2013-12-07 11:30 - 2013-09-22 09:14 - 00000000 ___RD C:\Users\Achim\Desktop\Multimedia
2013-12-06 21:10 - 2013-07-12 20:41 - 00000000 _____ C:\Windows\system32\vireng.log
2013-12-06 19:56 - 2013-03-07 18:23 - 00000000 ____D C:\ProgramData\Adobe
2013-12-04 20:43 - 2013-12-04 20:43 - 00000000 ____D C:\Users\Achim\AppData\Local\vsmedia.de
2013-12-04 20:39 - 2013-12-04 20:39 - 00001128 _____ C:\Users\Achim\Desktop\Continue Image Editor Installation.lnk
2013-12-04 20:05 - 2013-12-04 19:43 - 00000000 ____D C:\Users\Achim\Desktop\FP_2980_1
2013-12-04 07:01 - 2013-05-06 16:17 - 00000000 ___RD C:\Users\Achim\SkyDrive
2013-12-03 22:01 - 2013-03-06 11:03 - 00002043 _____ C:\Users\Public\Desktop\LANCOM Advanced VPN Client.lnk
2013-12-03 22:01 - 2009-07-14 03:04 - 00000521 _____ C:\Windows\win.ini
2013-12-02 22:22 - 2013-03-07 23:05 - 00000000 ____D C:\Users\Achim\AppData\Local\Adobe
2013-12-02 22:00 - 2013-11-22 15:41 - 00000292 _____ C:\Users\Achim\AppData\Roaming\burnaware.ini
2013-12-01 18:54 - 2013-12-01 18:54 - 00001120 _____ C:\Users\Achim\Desktop\TeamViewer 8.lnk
2013-12-01 14:42 - 2013-03-06 21:17 - 88123800 ____N (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-27 19:49 - 2013-03-09 14:02 - 00000000 ____D C:\Users\Achim\AppData\Roaming\PingTesterDataBas
2013-11-26 23:03 - 2013-11-26 23:04 - 00001774 _____ C:\Users\Achim\Desktop\qr_code_ohne_logo_plus_informationsmappe.zip
2013-11-26 20:39 - 2013-08-09 21:31 - 00000000 ____D C:\Users\Achim\AppData\Local\FreePDF_XP
2013-11-26 07:42 - 2013-11-22 15:57 - 00011284 _____ C:\Users\Achim\Documents\Klassik-DB.xlsx
2013-11-25 18:46 - 2013-11-25 18:46 - 00002161 _____ C:\Users\Achim\Desktop\Klassik-DB.xlsx - Verknüpfung.lnk
2013-11-23 11:16 - 2013-11-23 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\libimobiledevice
2013-11-23 11:12 - 2013-11-23 11:12 - 00000000 ____D C:\Users\Achim\Documents\evasi0n-win-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-release
2013-11-22 14:23 - 2013-11-22 14:23 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spesoft Audio Converter
2013-11-22 14:22 - 2013-03-06 12:08 - 00000000 ___RD C:\Users\Achim\AppData\Roaming\Brother
2013-11-22 14:11 - 2013-11-22 14:11 - 00001829 _____ C:\Users\Achim\Desktop\P-touch Editor 5.0.lnk
2013-11-22 13:59 - 2013-11-22 13:59 - 00000000 ____D C:\Program Files\Common Files\Brother
2013-11-22 12:41 - 2013-11-22 12:41 - 00001271 _____ C:\Users\Achim\Desktop\Kufer-WEB-Zugangsdaten.txt - Verknüpfung.lnk
2013-11-19 03:33 - 2013-03-06 11:04 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
Files to move or delete:
====================
C:\Users\Achim\cc_20131210_203255.reg
Some content of TEMP:
====================
C:\Users\Achim\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-11 22:24
==================== End Of Log ============================
--- --- --- --- --- --- Hallo hier ist noch der addition.txtFRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-12-2013 01
Ran by Achim at 2013-12-17 07:47:17
Running from C:\Users\Achim\Downloads\Antivir\Trojan
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Sophos Anti-Virus (Disabled - Up to date) {65FBD860-96D8-75EF-C7ED-7BE27E6C498A}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Sophos Anti-Virus (Disabled - Up to date) {DE9A3984-B0E2-7A61-FD5D-409005EB0337}
FW: LANCOM Advanced VPN Client (Disabled) {BEB21647-135A-7893-42A0-BBC3960C218D}
==================== Installed Programs ======================
7-Zip 9.20
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170)
Any Video Converter 5.0.5
Apple Application Support (Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (Version: 2.1.3.127)
AVM FRITZ!Box AddOn (IE) (Version: 1.7.0)
AXIS Camera Companion 2.1 (Version: 2.1.14)
AXIS Camera Management 4.00 (Version: 4.00.064)
AXIS IP JumpStarter
AXIS Media Control Embedded
AXIS Media Control Embedded Installer (Version: 6.3.100)
BiAdmin
Bonjour (Version: 3.0.0.10)
camerastreamcontrol (Version: 1.0.7316)
Canon IJ Network Scanner Selector EX
Canon IJ Network Tool (Version: 3.1.1)
Canon Inkjet Printer Driver Add-On Module
Canon iP4200
Canon Kurzwahlprogramm (Version: 1.3.0)
Canon MP Navigator EX 5.1
Canon MX430 series MP Drivers
Canon MX430 series On-screen Manual
Canon My Printer
Canon Solution Menu EX
CCleaner (Version: 4.00)
CDBurnerXP (Version: 4.5.2.4291)
CD-LabelPrint
CloneDVD2OEM
ContentSAFER for Wizmax
CPUID CPU-Z 1.67.1
D3DX10 (Version: 15.4.2368.0902)
Dawicontrol RAID Monitor (Version: 3.3.9)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
DocWallet (HKCU Version: 2.0.0.9873)
dreamboxEDIT -- The one and only settings editor for your Dreambox
DreamStream E2 (Version: 0.4.0 (Beta 14a))
Driver Genius Professional Edition
Dropbox (HKCU Version: 2.4.6)
DVD Shrink 3.2 deutsch (DeCSS-frei)
elmeg WIN-Tools V7.63 (Version: 7.63.0000)
EVEREST Home Edition v2.20 (Version: 2.20)
Evernote v. 4.6.6 (Version: 4.6.6.8360)
ffdshow [rev 2033] [2008-07-05] (Version: 1.0)
FileZilla Client 3.7.3 (Version: 3.7.3)
Firebird SQL Server - MAGIX Edition (Version: 2.1.27.0)
FreePDF (Remove only)
FRITZ!Box USB-Fernanschluss (HKCU Version: 2.3.1.0)
Fwink (Version: 1.0.96)
Google Drive (Version: 1.12.5329.1887)
Google Update Helper (Version: 1.3.22.3)
GPL Ghostscript (Version: 9.04)
HyperTerminal Private Edition v7.0
iCloud (Version: 3.0.2.163)
IIS 8.0 Express (Version: 8.0.1557)
IIS Express Application Compatibility Database for x86
iisnode for iis 7.x dev package (Version: 0.1.21.0)
IrfanView (remove only) (Version: 4.35)
ISO Recorder (Version: 3.0.0)
iTunes (Version: 11.1.3.8)
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
Junk Mail filter update (Version: 15.4.3502.0922)
KeePass Password Safe 2.22
LANCOM Advanced VPN Client (Version: 2.32 Build 160)
LANconfig (Version: 8.82.44.0)
LANmonitor/WLANmonitor (Version: 8.82.20.0)
LanSafe (Version: 6.0.4)
Lenovo System Update (Version: 5.03.0005)
LogMeIn (Version: 4.1.2651)
LogMeIn Ignition (Version: 1.2.264)
MAGIX Screenshare (Version: 4.3.6.1987)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6)
MAGIX Video deluxe 17 Premium (Version: 10.0.1.14)
Marvell Miniport Driver (Version: 11.45.3.3)
MEDION GoPal Assistant (Version: 6.3.1.12905)
Medion GoPal Assistant 4.00.0044 (Version: 4.0.44.0)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Outlook Connector (Version: 14.0.6123.5001)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (Version: 14.0.5120.5000)
Microsoft SkyDrive (HKCU Version: 17.0.2015.0811)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Web Platform Installer 4.6 (Version: 4.0.40719.0)
Morgan Multimedia Motion JPEG Codec 3.0.0.9 (Version: 3.0.0.9)
Mozilla Firefox 23.0 (x86 de) (Version: 23.0)
mRemoteNG (Version: 1.70.4814.21440)
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Native Instruments Traktor DJ Player
No23 Recorder (Version: 2.1.0.3)
node.js (Version: 0.6.20)
Nuance PDF Professional 6 (Version: 6.00.3201)
NVIDIA Grafiktreiber 307.83 (Version: 307.83)
NVIDIA Install Application (Version: 2.1002.109.706)
NVIDIA Systemsteuerung 307.83 (Version: 307.83)
NVIDIA Update 1.10.8 (Version: 1.10.8)
NVIDIA Update Components (Version: 1.10.8)
Oracle VM VirtualBox 4.2.12 (Version: 4.2.12)
pcwSIcons 2
PDAViewer
Ping tester
QuickTime (Version: 7.74.80.86)
Realtek High Definition Audio Driver (Version: 6.0.1.6662)
RedMon - Redirection Port Monitor
Revo Uninstaller Pro 3.0.7 (Version: 3.0.7)
Scansoft PDF Professional
SecurView Pro 2.1.2 (Version: 2.1.2)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
SetupWizard (Version: 1.0.3604)
Skype™ 6.1 (Version: 6.1.129)
Sophos Anti-Virus (Version: 10.3.1)
Sophos AutoUpdate (Version: 2.9.0.344)
Spesoft Audio Converter 1.90
Spotify (HKCU Version: 0.9.6.81.gd359a796)
swMSM (Version: 12.0.0.1)
System Migration Assistant (Version: 6.00.0009)
System Requirements Lab for Intel (Version: 4.5.13.0)
TeamViewer 8 (Version: 8.0.22298)
TeraCopy 2.27
TightVNC (Version: 2.7.10.0)
Total Commander (Remove or Repair) (Version: 8.01)
UBitMenuDE (Version: 01.04)
Update for Microsoft .NET Framework 4.5 (KB2750147) (Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (Version: 1)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition
VideoLAN VLC media player 0.8.6i (Version: 0.8.6i)
VisionGS BE
Visual Watermark 2.9.34
VNC Mirror Driver 1.8.0 (Version: 1.8.0)
VNC Printer Driver 1.8.0 (Version: 1.8.0)
VNC Server 5.0.5 (Version: 5.0.5)
VNC Viewer 5.0.5 (Version: 5.0.5)
VS 2008 CRT Package (Version: 1.1.0)
Windows 7 USB/DVD Download Tool (Version: 1.0.30)
Windows Azure Authoring Tools - v2.2 (Version: 2.2.6492.2)
Windows Azure Storage Tools - v2.2 (Version: 2.2.0.0)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Mobile Device Center Driver Update (Version: 6.1.6965.0)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0)
Wondershare Video Converter Ultimate(Build 6.6.0.5) (Version: 6.6.0.5)
Xilisoft iPhone to PC Copy (Version: 5.5.1.20130920)
XMedia Recode Version 3.1.6.6 (Version: 3.1.6.6)
==================== Restore Points =========================
15-12-2013 12:31:08 Windows Modules Installer
15-12-2013 12:31:46 Windows Modules Installer
15-12-2013 12:50:14 Revo Uninstaller Pro's restore point - Malwarebytes Anti-Malware Version 1.75.0.1300
15-12-2013 12:54:38 Revo Uninstaller Pro's restore point - Microsoft Office Proof (French) 2010
15-12-2013 12:54:51 Supprimé Microsoft Office Proof (French) 2010
16-12-2013 19:47:29 Windows Modules Installer
17-12-2013 06:14:32 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:04 - 2013-12-14 19:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0CAB94CE-A9C1-4CDC-98B0-FC25BE25495F} - System32\Tasks\{2003F68E-45F7-4F36-BD75-A8443664497C} => C:\Users\Achim\Downloads\APC-Smart-UAS750i\PCPEInstaller.exe
Task: {1B6D75AE-EF44-438F-8892-B1CC6082567F} - System32\Tasks\{411FCCF8-75C0-42DF-B5A9-C00E5DC28090} => C:\Users\Achim\Downloads\APC-Smart-UAS750i\PCPEInstaller.exe
Task: {2D651CA5-640B-4494-B153-F72C05CD5493} - System32\Tasks\{9388E8B2-4B0A-4CE8-99E1-349BA535C24F} => C:\SWTOOLS\DRIVERS\AUDIO\v7aud12us17\Setup.exe [2005-11-14] (Macrovision Corporation)
Task: {355C99FE-A554-4188-8DF0-C2E3B247DD53} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)
Task: {582558E5-8067-4152-BBFA-699D57D61E37} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files\Lenovo\System Update\tvsuShim.exe [2013-09-17] ()
Task: {5FD76A49-E787-48D4-8886-E4DA61359BFD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-06] (Google Inc.)
Task: {6BEC2CBE-EEA8-4BA4-B8D7-4E0575502D9F} - System32\Tasks\{C8A84A64-D446-495A-807E-F9060E3215D9} => C:\Users\Achim\Downloads\APC-Smart-UAS750i\PCPEInstaller.exe
Task: {8EF03B67-DA26-4060-8A5D-0CB4A0E2F979} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-14] (Adobe Systems Incorporated)
Task: {D0C618F7-F4FC-4DEF-BEC4-522CAFCFD190} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {D626F050-AFAA-43CD-9182-8D50D56131AE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-06] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-04-20 10:07 - 2011-10-26 16:41 - 00305664 _____ () C:\Program Files\TeraCopy\TeraCopyExt.dll
2013-08-07 20:25 - 2013-08-07 20:25 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2013-07-11 18:42 - 2013-12-05 07:19 - 36967424 _____ () C:\Users\Achim\AppData\Roaming\Spotify\Data\libcef.dll
2013-09-14 00:51 - 2013-09-14 00:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 00:50 - 2013-09-14 00:50 - 01242952 _____ () C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Achim\AppData\Roaming\Dropbox\bin\libcef.dll
2013-12-17 07:38 - 2013-12-17 07:38 - 00098816 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32api.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00110080 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\pywintypes27.dll
2013-12-17 07:38 - 2013-12-17 07:38 - 00364544 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\pythoncom27.dll
2013-12-17 07:38 - 2013-12-17 07:38 - 00044032 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_socket.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 01153024 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_ssl.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00320512 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32com.shell.shell.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00711680 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_hashlib.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 01175040 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._core_.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00805888 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._gdi_.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00811008 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._windows_.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 01062400 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._controls_.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00735232 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._misc_.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00128512 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_elementtree.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00127488 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\pyexpat.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00557056 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\pysqlite2._sqlite.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00087040 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_ctypes.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00119808 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32file.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00108544 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32security.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00018432 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32event.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00038912 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32inet.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00122368 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._wizard.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00686080 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\unicodedata.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00026624 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_multiprocessing.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00070656 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._html2.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00010240 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\select.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00025600 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32pdh.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00504832 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\windows._cacheinvalidation.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00011264 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32crypt.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00035840 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32process.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00017408 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32profile.pyd
2013-12-17 07:38 - 2013-12-17 07:38 - 00022528 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32ts.pyd
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:0574215C
AlternateDataStreams: C:\ProgramData\TEMP:527B6DAD
AlternateDataStreams: C:\ProgramData\TEMP:8E55808C
AlternateDataStreams: C:\ProgramData\TEMP:D95ACC7D
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service"
==================== Faulty Device Manager Devices =============
Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service:
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
Name: VirtualBox Host-Only Ethernet Adapter
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (12/17/2013 07:45:27 AM) (Source: Windows Search Service) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (12/17/2013 07:45:27 AM) (Source: Windows Search Service) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=3800} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (12/17/2013 07:45:27 AM) (Source: ESENT) (User: )
Description: Windows (4052) Windows: Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 203456512 (0x000000000c208000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [c9d2362da3693e4f:028bfd74a48eb01e:0000000000001840:10d4ef2b10f418ca], die tatsächliche Prüfsumme [c9c73638ed3bbf65:02defd21ea893161:0000000000001840:10d4ef2b10f418ca]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.
Error: (12/17/2013 07:45:14 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 9.0.8112.16526, Zeitstempel: 0x52855173
Name des fehlerhaften Moduls: MSHTML.dll, Version: 9.0.8112.16526, Zeitstempel: 0x528558ea
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00417455
ID des fehlerhaften Prozesses: 0x14f0
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3
Error: (12/17/2013 06:47:13 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/16/2013 07:28:05 PM) (Source: Winlogon) (User: )
Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
Error: (12/16/2013 07:27:42 PM) (Source: Winlogon) (User: )
Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
Error: (12/16/2013 07:27:16 PM) (Source: Winlogon) (User: )
Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
Error: (12/16/2013 07:26:47 PM) (Source: Winlogon) (User: )
Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
Error: (12/16/2013 07:25:50 PM) (Source: Winlogon) (User: )
Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
System errors:
=============
Error: (12/17/2013 07:44:49 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 51. Der interne Fehlerstatus lautet: 805.
Error: (12/17/2013 07:44:49 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 51. Der interne Fehlerstatus lautet: 805.
Error: (12/17/2013 07:44:49 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 51. Der interne Fehlerstatus lautet: 805.
Error: (12/17/2013 07:43:34 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 51. Der interne Fehlerstatus lautet: 805.
Error: (12/17/2013 07:43:34 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 51. Der interne Fehlerstatus lautet: 805.
Error: (12/17/2013 07:32:23 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (12/17/2013 07:21:32 AM) (Source: DCOM) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}
Error: (12/16/2013 07:29:28 PM) (Source: TermDD) (User: )
Description: Die RDP-Protokollkomponente "DATA ENCRYPTION" hat einen Fehler im Protokollablauf festgestellt und die Clientverbindung getrennt.
Error: (12/16/2013 06:49:51 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (12/15/2013 08:19:15 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
Error: (12/17/2013 07:45:27 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt
Error: (12/17/2013 07:45:27 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
3800
Error: (12/17/2013 07:45:27 AM) (Source: ESENT)(User: )
Description: Windows4052Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb203456512 (0x000000000c208000)32768 (0x00008000)-1018 (0xfffffc06)[c9d2362da3693e4f:028bfd74a48eb01e:0000000000001840:10d4ef2b10f418ca][c9c73638ed3bbf65:02defd21ea893161:0000000000001840:10d4ef2b10f418ca]6208 (0x1840)
Error: (12/17/2013 07:45:14 AM) (Source: Application Error)(User: )
Description: iexplore.exe9.0.8112.1652652855173MSHTML.dll9.0.8112.16526528558eac00000050041745514f001cefaf358e48e06C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dllc831f814-66e6-11e3-87ad-001e909e0c7e
Error: (12/17/2013 06:47:13 AM) (Source: SideBySide)(User: )
Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Canon\mp navigator ex 5.1\mpnmlif64.exe
Error: (12/16/2013 07:28:05 PM) (Source: Winlogon)(User: )
Description:
Error: (12/16/2013 07:27:42 PM) (Source: Winlogon)(User: )
Description:
Error: (12/16/2013 07:27:16 PM) (Source: Winlogon)(User: )
Description:
Error: (12/16/2013 07:26:47 PM) (Source: Winlogon)(User: )
Description:
Error: (12/16/2013 07:25:50 PM) (Source: Winlogon)(User: )
Description:
CodeIntegrity Errors:
===================================
Date: 2013-12-16 22:28:30.492
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sirenacm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-16 22:28:30.414
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-04 22:52:02.185
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sirenacm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-12-04 22:52:02.107
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-27 18:50:44.302
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sirenacm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-09-27 18:50:44.179
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-30 17:02:24.521
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sirenacm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-06-30 17:02:24.383
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-03-08 20:05:37.900
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-03-08 19:26:17.899
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 66%
Total physical RAM: 2047.24 MB
Available physical RAM: 683.92 MB
Total Pagefile: 7300.86 MB
Available Pagefile: 5758.57 MB
Total Virtual: 2047.88 MB
Available Virtual: 1899.67 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:146.39 GB) (Free:2.01 GB) NTFS
Drive d: () (Fixed) (Total:785.03 GB) (Free:32.38 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E535C9BE)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=146 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=785 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
18.12.2013, 08:45
| #15 |
| /// the machine /// TB-Ausbilder | Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 hi, Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Downloade dir bitte Windows Repair (All In One) von hier.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 |
| abgesicherten, absturz, anderen, angezeigt, bluescreen, bluescreen win7, cpu, explorer, firefox, funktionen, guten, installiert, interne, internet, internet explorer, internet-explorer, internetexplorer, memory management, modus, rechner, sophos, stürzt, test, verschiedene, versionen, win, windows, windows 7 |
Linear-Darstellung
