| |
| |||||||
Log-Analyse und Auswertung: Avira Antivirus Suite zeigt TR/Dofton.aouma, WORM/Gamarue.O.4 und TR/Patched.Ren.GenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
13.12.2013, 17:05
| #1 |
 |  Avira Antivirus Suite zeigt TR/Dofton.aouma, WORM/Gamarue.O.4 und TR/Patched.Ren.Gen Hallo zusammen, seit kurzem zeigt mir Avira Antivirus Suite immer wieder Sicherheitshinweise an, dass eine Datei den Virus TR/Patched.Ren.Gen enthält. Entfernen hat nichts geholfen und seit kurzem befinden sich zusätzlich im Quarantäne-Ordner auch TR/Dofton.aouma und WORM/Gamarue.O.4. Wenn ich eine Prüfung des Systems starte, wird mir der TR/Patched.Ren.Gen allerdings nicht angezeigt, sondern kein Virusfund gemeldet. Zusatzinfo, weiß nicht, ob sie relevant ist: Vor einem Monat hat Antivir ADWARE/Adware.Gen2 in die Quarantäne geschoben. Weiß nicht, ob es es vielleicht einen Zusammenhang gibt. Ich bin gerade in der Türkei an der Universität, muss oft USB-Sticks am Laptop verwenden und glaube, dass die Sicherheitstandards hier deutlich geringer sind. Ich habe seitdem nichts unternommen und mich an die Anleitung hier vom Trojaner-Board gehalten. Allerdings habe ich sowohl beim Durchführen von FRST (hier ist zumindest noch ein Logfile entstanden) als auch von GMER eine Fehlermeldung erhalten und beides konnte nicht zu Ende geführt werden. Ich bin leider nicht sehr technisch begabt, deswegen hoffe ich, dass meine Beschreibung vorerst ausreicht. Gerne versorge ich euch mit weiteren Daten, wenn ihr mir sagt, was ihr braucht. Schon mal ein großes Dankeschön!!! Ich hoffe, mir kann jemand helfen! Maxi Logfile defogger_disable Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:20 on 13/12/2013 (Gina)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-12-2013 01
Ran by Gina (administrator) on GINA-PC on 13-12-2013 17:36:36
Running from C:\Users\Gina\Desktop
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f6ef8056\stacsv.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f6ef8056\AEstSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
() C:\Program Files\ShrewSoft\VPN Client\dtpd.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
() C:\Program Files\ShrewSoft\VPN Client\iked.exe
() C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareService.exe
(pdfforge GbR) C:\Program Files\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files\PDF Architect\ConversionService.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
() C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
() C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Creative Technology Ltd.) C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Lavasoft) C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe
(Lavasoft) C:\ProgramData\Search Protection\SearchProtection.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareTray.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Spotify Ltd) C:\Users\Gina\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Western Digital Technologies, Inc.) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(Dropbox, Inc.) C:\Users\Gina\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1422632 2008-12-01] (Synaptics, Inc.)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Dell Webcam Central] - C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe [442536 2008-11-11] (Creative Technology Ltd.)
HKLM\...\Run: [dellsupportcenter] - "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AppleSyncNotifier] - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-10-06] (Apple Inc.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2011-10-24] (Apple Inc.)
HKLM\...\Run: [ISW] - C:\Program Files\CheckPoint\ZAForceField\ForceField.exe /icon="hidden"
HKLM\...\Run: [ZoneAlarm Installer] - "C:\Program Files\CheckPoint\Install\Launcher.exe" "C:\Program Files\CheckPoint\Install\Install.exe" /r /c "C:\Program Files\CheckPoint\Install\Install.xml"
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM\...\Run: [Ad-Aware Browsing Protection] - C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe [559696 2013-09-27] (Lavasoft)
HKLM\...\Run: [Search Protection] - C:\ProgramData\Search Protection\SearchProtection.exe [943016 2013-06-13] (Lavasoft)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareTray.exe [3540312 2013-12-11] ()
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [483428 2009-03-20] (IDT, Inc.)
Winlogon\Notify\GoToAssist: C:\Program Files\Citrix\GoToAssist\514\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
HKCU\...\Run: [Facebook Update] - C:\Users\Gina\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-07-12] (Facebook Inc.)
HKCU\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311152 2013-09-04] (Samsung Electronics Co., Ltd.)
HKCU\...\Run: [KiesPDLR] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1564528 2013-09-04] (Samsung)
HKCU\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-09-04] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Gina\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-11-16] (Spotify Ltd)
MountPoints2: G - G:\AutoRun.exe
MountPoints2: {1ea68678-bcce-11de-90dc-002219f0931d} - G:\AutoRun.exe
MountPoints2: {90ca070d-b2a0-11de-b8f1-002219f0931d} - G:\AutoRun.exe
MountPoints2: {90ca070f-b2a0-11de-b8f1-002219f0931d} - G:\AutoRun.exe
MountPoints2: {d559252b-f0c8-11de-b2f6-002219f0931d} - G:\LaunchU3.exe -a
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Gina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Gina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Gina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_7&idate=2013-11-19&ent=hp&u=D4EBE6E7D5C48BB49C9451528BC72646
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8
URLSearchHook: HKCU - (No Name) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - No File
SearchScopes: HKLM - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550
SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550
SearchScopes: HKCU - DefaultScope {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_7&idate=2013-11-19&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_7&idate=2013-11-19&hsimp=yhs-lavasoft&ent=ch&q={searchTerms}
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550
BHO: DKB-Cashback - {11111111-1111-1111-1111-110111611150} - C:\Program Files\DKB-Cashback\DKB-Cashback.dll (dkbbrowserextension)
BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll ()
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: ZoneAlarm Security Engine Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
Toolbar: HKLM - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files\PDF Architect\PDFIEPlugin.dll (pdfforge GbR)
Toolbar: HKLM - Ad-Aware Security Add-on - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Program Files\Lavasoft\AdAware SecureSearch Toolbar\adawareDx.dll ()
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
Toolbar: HKCU - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} - No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
FireFox:
========
FF ProfilePath: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default
FF user.js: detected! => C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\user.js
FF Homepage: about:home
FF Keyword.URL: hxxp://securedsearch2.lavasoft.com/results.php?pr=vmn&id=adawaretb&v=3_7&idate=__installtime__&hsimp=yhs-lavasoft&ent=bs&q=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @checkpoint.com/FFApi - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll No File
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Gina\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\11-suche.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\ecosia.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icq-search.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-17.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\adawaretb.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DKB-Cashback - C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\Extensions\crossriderapp16150@crossrider.com
FF Extension: Move Media Player - C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\Extensions\moveplayer@movenetworks.com
FF Extension: No Name - C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\Extensions\staged
FF Extension: FireShot - C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
FF Extension: Ad-Aware Security Add-on - C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\Extensions\{87934c42-161d-45bc-8cef-ef18abe2a30c}
FF Extension: amznUWL2 - C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\Extensions\amznUWL2@amazon.com.xpi
FF Extension: toolbar - C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\Extensions\toolbar@web.de.xpi
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
FF Extension: Adblock Plus - C:\Users\Gina\AppData\Roaming\Mozilla\Firefox\Profiles\p7rwwps0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: ICQ Toolbar - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\TrustChecker
FF HKLM\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files\PDF Architect\FFPDFArchitectExt
========================== Services (Whitelisted) =================
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f6ef8056\aestsrv.exe [81920 2009-03-20] (Andrea Electronics Corporation)
R2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc.exe [896056 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528616 2010-09-27] (Cisco Systems, Inc.)
R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2008-12-18] (Stardock Corporation)
R2 dtpd; C:\Program Files\ShrewSoft\VPN Client\dtpd.exe [54544 2010-10-08] ()
R2 iked; C:\Program Files\ShrewSoft\VPN Client\iked.exe [726288 2010-10-08] ()
R2 ipsecd; C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe [541968 2010-10-08] ()
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5152.0\AdAwareService.exe [494136 2013-12-11] ()
R2 PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_f6ef8056\STacSV.exe [254042 2009-03-20] (IDT, Inc.)
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [238592 2011-03-09] (WDC)
R2 WDFME; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe [1060864 2011-03-09] ()
R2 WDSC; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe [484352 2011-03-09] ()
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
R2 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [308859 2010-09-27] (Cisco Systems, Inc.)
R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-04-18] ()
R3 OA008Ufd; C:\Windows\System32\DRIVERS\OA008Ufd.sys [133472 2009-02-10] (Creative Technology Ltd.)
R3 OA008Vid; C:\Windows\System32\DRIVERS\OA008Vid.sys [271616 2009-02-10] (Creative Technology Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [340624 2013-07-17] (BitDefender S.R.L.)
R1 vflt; C:\Windows\System32\DRIVERS\vfilter.sys [17920 2010-09-02] (Shrew Soft Inc)
S3 vnet; C:\Windows\System32\DRIVERS\virtualnet.sys [13824 2010-09-02] (Shrew Soft Inc)
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S0 Lbd; system32\DRIVERS\Lbd.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
S3 PCD5SRVC{3F6A8B78-EC003E00-05040104}; \??\C:\PROGRA~1\DELLSU~1\HWDiag\bin\PCD5SRVC.pkms [x]
S3 PCDSRVC{5B8A2B68-04D6B966-06020200}_0; \??\c:\program files\my dell\pcdsrvc.pkms [x]
S3 vsdatant7; System32\drivers\vsdatant.win7.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-13 17:29 - 2013-12-13 17:29 - 00000000 ____D C:\Users\Gina\Desktop\FRST-OlderVersion
2013-12-13 17:21 - 2013-12-13 17:37 - 00026726 _____ C:\Users\Gina\Desktop\FRST.txt
2013-12-13 17:21 - 2013-12-13 17:29 - 00000000 ____D C:\FRST
2013-12-13 17:20 - 2013-12-13 17:20 - 00000470 _____ C:\Users\Gina\Desktop\defogger_disable.log
2013-12-13 17:20 - 2013-12-13 17:20 - 00000000 _____ C:\Users\Gina\defogger_reenable
2013-12-12 17:14 - 2013-12-12 17:14 - 00377856 _____ C:\Users\Gina\Desktop\gmer_2.1.19163.exe
2013-12-12 17:13 - 2013-12-13 17:36 - 01060575 _____ (Farbar) C:\Users\Gina\Desktop\FRST.exe
2013-12-12 17:12 - 2013-12-12 17:12 - 00050477 _____ C:\Users\Gina\Desktop\Defogger.exe
2013-12-12 10:50 - 2013-12-12 10:50 - 14085040 _____ C:\Users\Gina\Desktop\AVSUPINF.zip
2013-12-12 10:16 - 2013-12-12 10:16 - 01300824 _____ C:\Users\Gina\Desktop\avira_support_collector_de.exe
2013-12-11 22:43 - 2013-11-15 01:13 - 12344320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 22:43 - 2013-11-15 00:50 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 22:43 - 2013-11-15 00:50 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 22:43 - 2013-11-15 00:43 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 22:43 - 2013-11-15 00:42 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 22:43 - 2013-11-15 00:42 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 22:43 - 2013-11-15 00:41 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-11 22:43 - 2013-11-15 00:40 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 22:43 - 2013-11-15 00:38 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-11 22:43 - 2013-11-15 00:38 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-11 22:43 - 2013-11-15 00:38 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 22:43 - 2013-11-15 00:37 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-11 22:43 - 2013-11-15 00:36 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 22:43 - 2013-11-15 00:36 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-11 22:43 - 2013-11-15 00:35 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 22:43 - 2013-11-15 00:32 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 21:33 - 2013-12-13 17:27 - 00002210 _____ C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2013-12-11 21:16 - 2013-12-11 21:16 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2013-12-11 21:08 - 2013-12-11 21:08 - 00000000 ____D C:\Users\Gina\AppData\Roaming\Lavasoft
2013-12-11 13:54 - 2013-12-11 13:54 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-11 10:38 - 2013-10-30 04:12 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\SysFxUI.dll
2013-12-11 10:38 - 2013-10-30 03:43 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 10:38 - 2013-10-30 02:43 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 10:38 - 2013-10-30 02:35 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 10:38 - 2013-10-11 04:08 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 10:38 - 2013-10-11 04:08 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 10:38 - 2013-10-11 04:08 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wshcon.dll
2013-12-11 10:38 - 2013-10-11 02:35 - 00155648 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 10:38 - 2013-10-11 02:35 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 10:37 - 2013-10-22 09:19 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-10 15:36 - 2013-12-10 16:10 - 01093632 _____ C:\Users\Gina\Documents\Weller904-Midterm2.accdb
2013-12-10 14:01 - 2013-12-10 15:36 - 00487424 _____ C:\Users\Gina\Documents\Datenbank5.accdb
2013-12-09 09:10 - 2013-12-09 21:14 - 00536576 _____ C:\Users\Gina\Documents\Datenbank4.accdb
2013-12-03 14:26 - 2013-12-10 13:53 - 01310720 _____ C:\Users\Gina\Documents\Datenbank3.accdb
2013-11-26 16:15 - 2013-12-03 14:16 - 00503808 _____ C:\Users\Gina\Documents\Datenbank2.accdb
2013-11-26 14:10 - 2013-12-09 09:56 - 00876544 _____ C:\Users\Gina\Documents\Datenbank1.accdb
2013-11-26 14:01 - 2013-11-26 18:58 - 00000435 _____ C:\Users\Gina\Desktop\Izmir - Verknüpfung.lnk
2013-11-20 09:23 - 2013-11-20 09:23 - 00000000 ____D C:\ProgramData\Oracle
2013-11-20 09:23 - 2013-11-20 09:23 - 00000000 ____D C:\Program Files\Common Files\Java
2013-11-20 09:22 - 2013-10-08 07:50 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-11-20 09:22 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-11-20 09:22 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-11-20 09:22 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-11-20 09:21 - 2013-11-20 09:22 - 00004874 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log
2013-11-19 23:15 - 2013-12-11 21:41 - 00000000 ____D C:\Users\Gina\AppData\Roaming\LavasoftStatistics
2013-11-19 22:17 - 2013-11-21 12:28 - 00000000 ____D C:\ProgramData\Search Protection
2013-11-19 22:17 - 2013-11-19 22:17 - 00000000 ____D C:\Users\Gina\AppData\Roaming\SecureSearch
2013-11-19 22:17 - 2013-11-19 22:17 - 00000000 ____D C:\Users\Gina\AppData\Local\adawarebp
2013-11-19 22:17 - 2013-11-19 22:17 - 00000000 ____D C:\ProgramData\blekko toolbars
2013-11-19 22:17 - 2013-11-19 22:17 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-11-19 22:17 - 2013-11-19 22:17 - 00000000 ____D C:\Program Files\Toolbar Cleaner
2013-11-14 21:37 - 2013-11-14 22:09 - 00008955 _____ C:\Users\Gina\Desktop\Masterarbeit.xlsx
2013-11-13 09:20 - 2013-10-11 04:08 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-11-13 09:20 - 2013-10-11 04:07 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 09:20 - 2013-10-11 02:39 - 00218228 _____ C:\Windows\system32\WFP.TMF
2013-11-13 09:20 - 2013-10-03 14:45 - 00993792 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-11-13 09:20 - 2013-10-03 14:45 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
==================== One Month Modified Files and Folders =======
2013-12-13 17:37 - 2013-12-13 17:21 - 00026726 _____ C:\Users\Gina\Desktop\FRST.txt
2013-12-13 17:36 - 2013-12-12 17:13 - 01060575 _____ (Farbar) C:\Users\Gina\Desktop\FRST.exe
2013-12-13 17:32 - 2009-05-22 19:51 - 01129402 _____ C:\Windows\WindowsUpdate.log
2013-12-13 17:29 - 2013-12-13 17:29 - 00000000 ____D C:\Users\Gina\Desktop\FRST-OlderVersion
2013-12-13 17:29 - 2013-12-13 17:21 - 00000000 ____D C:\FRST
2013-12-13 17:29 - 2013-03-21 20:27 - 00000000 ____D C:\Users\Gina\Desktop\Master
2013-12-13 17:29 - 2011-03-31 18:57 - 00000000 ___RD C:\Users\Gina\Dropbox
2013-12-13 17:29 - 2011-03-31 18:55 - 00000000 ____D C:\Users\Gina\AppData\Roaming\Dropbox
2013-12-13 17:27 - 2013-12-11 21:33 - 00002210 _____ C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
2013-12-13 17:26 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-13 17:26 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-13 17:26 - 2006-11-02 14:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-13 17:25 - 2006-11-02 15:01 - 00032534 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-13 17:20 - 2013-12-13 17:20 - 00000470 _____ C:\Users\Gina\Desktop\defogger_disable.log
2013-12-13 17:20 - 2013-12-13 17:20 - 00000000 _____ C:\Users\Gina\defogger_reenable
2013-12-13 17:20 - 2009-08-20 13:01 - 00000000 ____D C:\Users\Gina\AppData\Roaming\Skype
2013-12-13 17:20 - 2009-06-04 22:25 - 00000000 ____D C:\Users\Gina
2013-12-13 17:07 - 2013-07-11 17:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-13 16:40 - 2009-06-19 16:40 - 00000474 _____ C:\Windows\Tasks\Ad-Aware Update (Weekly).job
2013-12-13 16:20 - 2011-07-06 23:16 - 00001134 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2962632003-3063588377-2204991782-1000UA.job
2013-12-13 10:20 - 2011-07-06 23:16 - 00001112 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2962632003-3063588377-2204991782-1000Core.job
2013-12-13 09:51 - 2009-05-23 01:29 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-13 09:11 - 2012-04-24 20:29 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-13 00:52 - 2013-09-29 17:34 - 00000000 ____D C:\Users\Gina\Desktop\Bilder Izmir
2013-12-12 17:14 - 2013-12-12 17:14 - 00377856 _____ C:\Users\Gina\Desktop\gmer_2.1.19163.exe
2013-12-12 17:12 - 2013-12-12 17:12 - 00050477 _____ C:\Users\Gina\Desktop\Defogger.exe
2013-12-12 11:57 - 2013-01-10 20:07 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-12 11:57 - 2013-01-10 20:07 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-12 10:50 - 2013-12-12 10:50 - 14085040 _____ C:\Users\Gina\Desktop\AVSUPINF.zip
2013-12-12 10:16 - 2013-12-12 10:16 - 01300824 _____ C:\Users\Gina\Desktop\avira_support_collector_de.exe
2013-12-12 09:42 - 2006-11-02 14:47 - 00379496 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 22:47 - 2013-09-02 23:43 - 00000000 ____D C:\Windows\system32\MRT
2013-12-11 22:44 - 2006-11-02 12:24 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-12-11 21:41 - 2013-11-19 23:15 - 00000000 ____D C:\Users\Gina\AppData\Roaming\LavasoftStatistics
2013-12-11 21:16 - 2013-12-11 21:16 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2013-12-11 21:08 - 2013-12-11 21:08 - 00000000 ____D C:\Users\Gina\AppData\Roaming\Lavasoft
2013-12-11 17:49 - 2008-01-21 09:16 - 01454146 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-11 13:54 - 2013-12-11 13:54 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-10 22:12 - 2013-03-18 08:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-10 22:12 - 2011-12-18 12:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-10 16:10 - 2013-12-10 15:36 - 01093632 _____ C:\Users\Gina\Documents\Weller904-Midterm2.accdb
2013-12-10 16:10 - 2011-05-25 20:58 - 00034105 _____ C:\Windows\setupact.log
2013-12-10 15:36 - 2013-12-10 14:01 - 00487424 _____ C:\Users\Gina\Documents\Datenbank5.accdb
2013-12-10 13:53 - 2013-12-03 14:26 - 01310720 _____ C:\Users\Gina\Documents\Datenbank3.accdb
2013-12-09 21:14 - 2013-12-09 09:10 - 00536576 _____ C:\Users\Gina\Documents\Datenbank4.accdb
2013-12-09 09:56 - 2013-11-26 14:10 - 00876544 _____ C:\Users\Gina\Documents\Datenbank1.accdb
2013-12-08 00:37 - 2013-10-04 22:35 - 00000000 ____D C:\Users\Gina\AppData\Roaming\Spotify
2013-12-07 23:59 - 2013-11-05 13:00 - 00000389 _____ C:\Users\Gina\Desktop\notizen.txt
2013-12-07 13:34 - 2009-06-13 22:20 - 00000000 ___RD C:\Users\Gina\Desktop\Regina
2013-12-06 20:38 - 2013-10-04 22:36 - 00000000 ____D C:\Users\Gina\AppData\Local\Spotify
2013-12-03 14:16 - 2013-11-26 16:15 - 00503808 _____ C:\Users\Gina\Documents\Datenbank2.accdb
2013-11-26 18:58 - 2013-11-26 14:01 - 00000435 _____ C:\Users\Gina\Desktop\Izmir - Verknüpfung.lnk
2013-11-26 15:05 - 2009-07-26 13:18 - 00000000 ____D C:\Users\Gina\AppData\Local\Microsoft Games
2013-11-26 10:06 - 2011-04-28 21:10 - 00000000 ___RD C:\Program Files\Skype
2013-11-26 10:06 - 2009-08-20 13:01 - 00000000 ____D C:\ProgramData\Skype
2013-11-21 12:28 - 2013-11-19 22:17 - 00000000 ____D C:\ProgramData\Search Protection
2013-11-20 09:31 - 2009-06-13 22:19 - 00000000 ____D C:\Users\Gina\AppData\Local\Adobe
2013-11-20 09:23 - 2013-11-20 09:23 - 00000000 ____D C:\ProgramData\Oracle
2013-11-20 09:23 - 2013-11-20 09:23 - 00000000 ____D C:\Program Files\Common Files\Java
2013-11-20 09:22 - 2013-11-20 09:21 - 00004874 _____ C:\Windows\system32\jupdate-1.7.0_45-b18.log
2013-11-20 09:22 - 2009-05-23 01:05 - 00000000 ____D C:\Program Files\Java
2013-11-19 22:18 - 2009-06-19 16:25 - 00000000 ____D C:\Program Files\Lavasoft
2013-11-19 22:17 - 2013-11-19 22:17 - 00000000 ____D C:\Users\Gina\AppData\Roaming\SecureSearch
2013-11-19 22:17 - 2013-11-19 22:17 - 00000000 ____D C:\Users\Gina\AppData\Local\adawarebp
2013-11-19 22:17 - 2013-11-19 22:17 - 00000000 ____D C:\ProgramData\blekko toolbars
2013-11-19 22:17 - 2013-11-19 22:17 - 00000000 ____D C:\ProgramData\Ad-Aware Browsing Protection
2013-11-19 22:17 - 2013-11-19 22:17 - 00000000 ____D C:\Program Files\Toolbar Cleaner
2013-11-19 22:11 - 2009-06-19 16:25 - 00000000 ____D C:\ProgramData\Lavasoft
2013-11-17 21:54 - 2013-05-04 14:54 - 00000000 ____D C:\Users\Gina\Desktop\Handy
2013-11-16 20:04 - 2013-05-23 14:00 - 00000000 ____D C:\Program Files\My Dell
2013-11-16 20:04 - 2009-05-23 01:18 - 00000000 ____D C:\ProgramData\PCDr
2013-11-15 01:13 - 2013-12-11 22:43 - 12344320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-15 00:50 - 2013-12-11 22:43 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-15 00:50 - 2013-12-11 22:43 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-15 00:43 - 2013-12-11 22:43 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-15 00:42 - 2013-12-11 22:43 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-15 00:42 - 2013-12-11 22:43 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-15 00:41 - 2013-12-11 22:43 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-15 00:40 - 2013-12-11 22:43 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-15 00:38 - 2013-12-11 22:43 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-15 00:38 - 2013-12-11 22:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-15 00:38 - 2013-12-11 22:43 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-15 00:37 - 2013-12-11 22:43 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-15 00:36 - 2013-12-11 22:43 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-15 00:36 - 2013-12-11 22:43 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-15 00:35 - 2013-12-11 22:43 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-15 00:32 - 2013-12-11 22:43 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-14 22:09 - 2013-11-14 21:37 - 00008955 _____ C:\Users\Gina\Desktop\Masterarbeit.xlsx
2013-11-14 09:43 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-11-14 09:10 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\de-DE
|
| Themen zu Avira Antivirus Suite zeigt TR/Dofton.aouma, WORM/Gamarue.O.4 und TR/Patched.Ren.Gen |
| .dll, adblock, administrator, adobe, adobe flash player, adware/adware.gen2, antivirus, avira, converter, defender, entfernen, explorer, firefox, flash player, homepage, install.exe, logfile, opera, plug-in, pup.optional.crossrider.a, registry, software, spotify web helper, tr/dofton.aouma, tr/patched.ren.gen, windows, worm/gamarue.o.4. |
Baum-Darstellung