Hier geht gar nichts mehr...--.-- (Virus, CPU-Auslastung 100%)

Katzenauge88 · 13.12.2013, 23:46

Hallo,
Wir haben riesen Probleme mit unserem Laptop,
Der hatte schon immer ein paar Macken in letzter Zeit aber seit dem letzten Update geht fast gar nichts mehr, die CPU-Auslastung ist fast ständig bei 100 % vor allem sobald man ein Programm öffnet...
Der PC hat Windows 7
...hoffe ihr könnt uns helfen, wir wissen nicht mehr weiter...
Liebe Grüße

schrauber · 14.12.2013, 06:44

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Katzenauge88 · 14.12.2013, 20:16

Hi,
danke schonmal für die schnelle Antwort...
Also der FRST läuft seit ca. ner halben Stunde, und seit ca. 20 min. steht da:
Getting Office Sessions Errors: 2323
und ich habe das Gefühl es geht nicht weiter...obwohl das Programm noch läuft...
kommt da noch was oder hängt das Programm?
Liebe Grüsse

Hi,
danke schonmal für die schnelle Antwort...
Also der FRST läuft seit ca. ner halben Stunde, und seit ca. 20 min. steht da:
Getting Office Sessions Errors: 2323
und ich habe das Gefühl es geht nicht weiter...obwohl das Programm noch läuft...
kommt da noch was oder hängt das Programm?
Liebe Grüsse

schrauber · 15.12.2013, 08:09

Abbrechen, FRST öffnen, Haken raus bei Additional und nochmal scannen.

Katzenauge88 · 15.12.2013, 11:36

Hi, hier die Textdatei vom Scan:

schrauber · 15.12.2013, 19:35

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Katzenauge88 · 16.12.2013, 00:36

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-12-2013 01
Ran by Konny (administrator) on BFG-NOTEBOOK on 15-12-2013 11:33:11
Running from C:\Users\Konny\Music\alt\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stacsv64.exe
(Hewlett-Packard) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(AVerMedia) C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe
() C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
() C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
() C:\Program Files (x86)\Verbindungsassistent\WTGService.exe
(CyberLink Corp.) C:\Program Files (x86)\Hewlett-Packard\Media\Live TV\TVAgent.exe
(CyberLink) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
(AVerMedia TECHNOLOGIES, Inc.) C:\Program Files (x86)\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
() C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe
(Macrovision Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\agent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-03-23] (IDT, Inc.)
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2009-08-20] (Hewlett-Packard Company)
HKCU\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1685048 2009-09-29] (Hewlett-Packard)
HKCU\...\Run: [Facebook Update] - C:\Users\Konny\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-06-29] (Facebook Inc.)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [249856 2005-08-11] (Macrovision Corporation)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\system: [DisableChangePassword] 0
MountPoints2: {45aeae26-f6d9-11df-acb0-c80aa9232f38} - G:\SETUP.EXE
MountPoints2: {6805abc4-c497-11df-8b8f-c80aa9232f38} - G:\AutoRun.exe
MountPoints2: {6805abc7-c497-11df-8b8f-c80aa9232f38} - I:\AutoRun.exe
MountPoints2: {72c4a760-3784-11e0-afa0-c80aa9232f38} - H:\AutoRun.exe
MountPoints2: {72c4a762-3784-11e0-afa0-c80aa9232f38} - I:\AutoRun.exe
MountPoints2: {85f05611-c434-11df-82bd-c80aa9232f38} - G:\AutoRun.exe
MountPoints2: {85f0561d-c434-11df-82bd-c80aa9232f38} - I:\AutoRun.exe
MountPoints2: {be4f9c06-e22c-11e1-b758-c80aa9232f38} - I:\AutoRun.exe
MountPoints2: {f55d6203-6f5e-11e1-a15d-c80aa9232f38} - I:\ZTE_Handset_USB_Driver.exe
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-08-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [WirelessAssistant] - C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [498744 2009-07-23] (Hewlett-Packard)
HKLM-x32\...\Run: [ISUSScheduler] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2005-08-11] (Macrovision Corporation)
HKLM-x32\...\Run: [WorksFUD] - C:\Program Files (x86)\Microsoft Works\wkfud.exe [24576 2000-07-12] (Microsoft® Corporation)
HKLM-x32\...\Run: [Microsoft Works Portfolio] - C:\Program Files (x86)\Microsoft Works\WksSb.exe [1099104 2007-06-21] (Microsoft® Corporation)
HKLM-x32\...\Run: [Microsoft Works Update Detection] - C:\Program Files (x86)\Microsoft Works\WkDetect.exe [28739 2000-07-21] (Microsoft® Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-14] (Avira Operations GmbH & Co. KG)
AppInit_DLLs-x32: c:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll [ ] ()
Startup: C:\Users\Konny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Konny\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Restore = hxxp://de.ask.com/?l=dis&o=APN10013&gct=hp
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&AF=110000&babsrc=SP_ss&mntrId=d8b73e3e000000000000f67bcb33bf4b
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&AF=110000&babsrc=SP_ss&mntrId=d8b73e3e000000000000f67bcb33bf4b
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = hxxp://www.daemon-search.com/search/web?q={searchTerms}
SearchScopes: HKCU - {EF6997EA-2E61-4589-9213-79D0E4CA3560} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=NCH2&o=APN10013&src=kw&q={searchTerms}&locale=&apn_ptnrs=^ACC&apn_dtid=^YYYYYY^YY^DE&apn_uid=8c903f25-1aa7-4743-a4ca-f496591527ad&apn_sauid=3052BF66-C4E7-4740-8AA0-01A0864435BD
BHO: No Name - {11111111-1111-1111-1111-110411181156} -  No File
BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} -  No File
BHO-x32: No Name - {2EECD738-5844-4a99-B4B6-146BF802613B} -  No File
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKLM - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} -  No File
Toolbar: HKLM-x32 - No Name - {98889811-442D-49dd-99D7-DC866BE87DBC} -  No File
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} -  No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default
FF user.js: detected! => C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\user.js
FF NewTab: hxxp://www.searchgol.com/?babsrc=NT_ss&mntrId=D8B7F67BCB33BF4B&affID=119357&tt=160913_c3&tsp=5015
FF SearchEngineOrder.1: Ask.com
FF Homepage: hxxp://www.soccerway.com/
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.13.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Konny\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\daemon-search.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-17.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-18.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-19.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-20.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: LyriXeeker-1 - C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com
FF Extension: Delta Toolbar - C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\Extensions\ffxtlbr@delta.com
FF Extension: TVU Web Player - C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\Extensions\firefox@tvunetworks.com
FF Extension: Yahoo! Toolbar - C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF Extension: ICQ Toolbar - C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: DVDVideoSoftTB  - C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\Extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
FF Extension: 									 em:name="Free YouTube Download (Free Studio) Menu" - C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
FF Extension: abb - C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\Extensions\abb@amazon.com.xpi
FF Extension: DVDVideoSoft Menu - C:\Users\Konny\AppData\Roaming\Mozilla\Firefox\Profiles\0135udn6.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}

Chrome: 
=======
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Extension: (Google Docs) - C:\Users\Konny\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Konny\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Konny\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Konny\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Konny\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Konny\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [89600 2009-03-02] (Andrea Electronics Corporation)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-11-14] (Avira Operations GmbH & Co. KG)
R2 AVerRemote; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerRemote.exe [352256 2008-06-05] (AVerMedia)
R2 AVerScheduleService; C:\Program Files (x86)\Common Files\AVerMedia\Service\AVerScheduleService.exe [409600 2008-07-14] ()
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe [247808 2010-03-23] (IDT, Inc.)
R2 WTGService; C:\Program Files (x86)\Verbindungsassistent\WTGService.exe [296400 2009-03-03] ()
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [x]

==================== Drivers (Whitelisted) ====================

S3 AVerAF15; C:\Windows\System32\Drivers\AVerAF15.sys [306688 2008-07-04] (AVerMedia TECHNOLOGIES, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-14] (Avira Operations GmbH & Co. KG)
R3 debutfilter; C:\Windows\System32\DRIVERS\debutfilterx64.sys [32024 2013-03-11] ()
S3 hwdatacard; C:\Windows\SysWow64\DRIVERS\ewusbmdm.sys [115328 2008-07-24] (Huawei Technologies Co., Ltd.)
S3 massfilter_hs; C:\Windows\System32\drivers\massfilter_hs.sys [18456 2011-03-07] (HandSet Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-11-23] ()
U3 ah0az7b4; C:\Windows\System32\Drivers\ah0az7b4.sys [0 ] (Microsoft Corporation)
S3 massfilter; system32\drivers\massfilter.sys [x]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [x]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [x]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-15 11:31 - 2013-12-15 11:31 - 00000056 _____ C:\Windows\setupact.log
2013-12-15 11:31 - 2013-12-15 11:31 - 00000000 _____ C:\Windows\setuperr.log
2013-12-14 13:35 - 2013-12-14 18:49 - 00000000 ____D C:\FRST
2013-12-13 23:51 - 2013-12-13 23:52 - 00000000 ____D C:\Users\Konny\Desktop\Ma 13.12
2013-12-13 10:34 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-13 10:34 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-13 10:34 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-13 10:34 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-13 10:29 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 10:29 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 10:29 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-13 10:29 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-13 10:29 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-13 10:29 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-13 10:29 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 10:29 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 10:29 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-13 10:29 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-13 10:29 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-13 10:29 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 10:29 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-13 10:29 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-13 10:29 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 10:29 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-13 10:29 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-13 10:29 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 10:29 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-13 10:29 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-13 10:29 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-13 10:29 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 10:29 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 10:29 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-13 10:29 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-13 10:29 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 10:29 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 10:29 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-13 10:29 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-13 10:29 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-13 10:29 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-12 10:02 - 2013-12-12 10:02 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-12 09:56 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-12 09:56 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 09:56 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 09:56 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-12 09:56 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 09:56 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-12 09:56 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 09:56 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 09:56 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-12 09:56 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 09:56 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 09:56 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-12 09:56 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-12 09:56 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 09:56 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 09:56 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-12 09:56 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-12 09:56 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 09:56 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-11 00:12 - 2013-12-11 17:53 - 00000000 ____D C:\Users\Konny\Desktop\Einleitungskarte
2013-12-10 23:56 - 2013-12-10 23:56 - 00050736 _____ C:\Users\Konny\.recently-used.xbel
2013-12-05 19:54 - 2013-12-05 20:23 - 00000000 ____D C:\Users\Konny\Desktop\GZ-FAZIES
2013-12-03 14:09 - 2013-12-13 23:52 - 00000000 ____D C:\Users\Konny\Desktop\Bohrungen
2013-12-02 00:25 - 2013-12-02 00:25 - 00992359 _____ C:\Users\Konny\Desktop\CA_28.10.2013_fertig für graphen...xlsx
2013-12-01 12:31 - 2013-12-13 23:51 - 00000000 ____D C:\Users\Konny\Desktop\Fazies_Fertig_1.12.13
2013-11-30 12:35 - 2013-11-30 21:06 - 00000000 ____D C:\Users\Konny\Desktop\Cluster 6m
2013-11-29 17:06 - 2013-12-01 12:32 - 00000000 ____D C:\Users\Konny\Desktop\bilder
2013-11-27 18:56 - 2013-12-13 22:30 - 00000000 ____D C:\Users\Konny\Desktop\Vor Festplatte
2013-11-27 10:12 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-11-27 10:06 - 2013-11-27 10:06 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-27 10:06 - 2013-11-27 10:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-27 10:06 - 2013-11-27 10:06 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-27 10:06 - 2013-11-27 10:06 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-27 10:06 - 2013-11-27 10:06 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-27 10:06 - 2013-11-27 10:06 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-27 10:06 - 2013-11-27 10:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-18 22:11 - 2013-11-19 00:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-18 21:57 - 2013-11-26 10:15 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-18 21:57 - 2013-11-18 21:57 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2013-11-16 13:29 - 2013-12-12 22:51 - 00000000 ____D C:\Users\Konny\Desktop\Karbonatgehalt Results

==================== One Month Modified Files and Folders =======

2013-12-15 11:31 - 2013-12-15 11:31 - 00000056 _____ C:\Windows\setupact.log
2013-12-15 11:31 - 2013-12-15 11:31 - 00000000 _____ C:\Windows\setuperr.log
2013-12-15 11:31 - 2013-09-24 09:26 - 00000292 _____ C:\Windows\Tasks\DigitalSite.job
2013-12-15 11:31 - 2010-12-22 19:37 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-15 10:30 - 2013-09-24 09:30 - 00001296 _____ C:\Windows\Tasks\LyriXeeker-1-updater.job
2013-12-15 10:30 - 2013-09-24 09:30 - 00001100 _____ C:\Windows\Tasks\LyriXeeker-1-enabler.job
2013-12-15 10:30 - 2013-09-24 09:28 - 00001200 _____ C:\Windows\Tasks\LyriXeeker-1-codedownloader.job
2013-12-15 10:27 - 2013-11-05 18:48 - 01188490 _____ C:\Windows\WindowsUpdate.log
2013-12-15 10:27 - 2013-09-24 09:27 - 00001834 _____ C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job
2013-12-15 10:27 - 2013-06-29 15:22 - 00000928 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-657172037-2925371940-663002708-1001UA.job
2013-12-15 10:26 - 2013-09-24 09:26 - 00001910 _____ C:\Windows\Tasks\LyriXeeker-1-chromeinstaller.job
2013-12-15 02:38 - 2010-07-18 15:58 - 00000000 ____D C:\Users\Konny\AppData\Roaming\Skype
2013-12-14 20:00 - 2010-12-22 19:37 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-14 18:49 - 2013-12-14 13:35 - 00000000 ____D C:\FRST
2013-12-14 18:43 - 2009-07-14 05:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-14 18:43 - 2009-07-14 05:45 - 00023024 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-14 18:39 - 2009-11-14 09:10 - 05036320 _____ C:\Windows\system32\perfh007.dat
2013-12-14 18:39 - 2009-11-14 09:10 - 01533084 _____ C:\Windows\system32\perfc007.dat
2013-12-14 18:39 - 2009-07-14 06:13 - 00005382 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-14 18:35 - 2012-01-13 19:26 - 00000000 ____D C:\Users\Konny\AppData\Roaming\Dropbox
2013-12-14 18:34 - 2012-01-13 19:29 - 00000000 ___RD C:\Users\Konny\Dropbox
2013-12-14 18:32 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-14 13:34 - 2012-06-25 20:04 - 00003946 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{341DA24D-5A20-4B0C-BE26-AF41735D2FFD}
2013-12-14 00:18 - 2013-05-25 10:42 - 00000000 ____D C:\Users\Konny\Desktop\Two and a half men
2013-12-13 23:54 - 2009-11-14 01:48 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-12-13 23:52 - 2013-12-13 23:51 - 00000000 ____D C:\Users\Konny\Desktop\Ma 13.12
2013-12-13 23:52 - 2013-12-03 14:09 - 00000000 ____D C:\Users\Konny\Desktop\Bohrungen
2013-12-13 23:51 - 2013-12-01 12:31 - 00000000 ____D C:\Users\Konny\Desktop\Fazies_Fertig_1.12.13
2013-12-13 23:37 - 2012-04-03 17:48 - 00000206 _____ C:\Windows\Wininit.ini
2013-12-13 23:26 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-13 22:47 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-13 22:43 - 2009-07-14 05:45 - 00537800 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-13 22:30 - 2013-11-27 18:56 - 00000000 ____D C:\Users\Konny\Desktop\Vor Festplatte
2013-12-13 16:27 - 2013-06-29 15:22 - 00000906 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-657172037-2925371940-663002708-1001Core.job
2013-12-13 14:23 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-13 10:32 - 2009-11-14 01:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 22:51 - 2013-11-16 13:29 - 00000000 ____D C:\Users\Konny\Desktop\Karbonatgehalt Results
2013-12-12 10:02 - 2013-12-12 10:02 - 00002212 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-11 17:53 - 2013-12-11 00:12 - 00000000 ____D C:\Users\Konny\Desktop\Einleitungskarte
2013-12-10 23:56 - 2013-12-10 23:56 - 00050736 _____ C:\Users\Konny\.recently-used.xbel
2013-12-10 23:56 - 2011-11-07 18:43 - 00000000 ____D C:\Users\Konny\AppData\Roaming\gtk-2.0
2013-12-10 23:56 - 2010-07-16 11:46 - 00000000 ____D C:\Users\Konny
2013-12-10 23:45 - 2011-11-07 18:36 - 00000000 ____D C:\Users\Konny\.gimp-2.6
2013-12-10 15:27 - 2013-09-07 12:02 - 00001483 _____ C:\Users\Konny\gsview32.ini
2013-12-07 19:55 - 2010-12-22 19:37 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-07 19:55 - 2010-12-22 19:37 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-05 20:23 - 2013-12-05 19:54 - 00000000 ____D C:\Users\Konny\Desktop\GZ-FAZIES
2013-12-05 12:53 - 2013-10-28 17:48 - 00000042 _____ C:\Users\Konny\Documents\pastsetup.txt
2013-12-05 09:30 - 2013-10-05 09:48 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-03 11:56 - 2012-02-27 12:15 - 00000000 ____D C:\Users\Konny\Desktop\Master
2013-12-03 09:54 - 2013-09-26 17:18 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-02 00:25 - 2013-12-02 00:25 - 00992359 _____ C:\Users\Konny\Desktop\CA_28.10.2013_fertig für graphen...xlsx
2013-12-01 23:13 - 2013-03-18 11:22 - 00000000 ____D C:\Users\Konny\Desktop\Masterworksheets 9.13
2013-12-01 12:32 - 2013-11-29 17:06 - 00000000 ____D C:\Users\Konny\Desktop\bilder
2013-12-01 12:29 - 2010-11-30 11:23 - 00483328 ___SH C:\Users\Konny\Thumbs.db
2013-11-30 21:06 - 2013-11-30 12:35 - 00000000 ____D C:\Users\Konny\Desktop\Cluster 6m
2013-11-30 19:13 - 2011-03-25 20:14 - 00000000 ____D C:\Windows\Minidump
2013-11-29 14:01 - 2011-11-07 18:37 - 00000000 ____D C:\Users\Konny\.thumbnails
2013-11-27 12:54 - 2012-03-09 09:04 - 00001421 _____ C:\Users\Konny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-27 12:49 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-27 10:06 - 2013-11-27 10:06 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-27 10:06 - 2013-11-27 10:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-27 10:06 - 2013-11-27 10:06 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-27 10:06 - 2013-11-27 10:06 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-27 10:06 - 2013-11-27 10:06 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-27 10:06 - 2013-11-27 10:06 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-27 10:06 - 2013-11-27 10:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-27 10:06 - 2013-11-27 10:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-27 10:06 - 2013-11-27 10:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-26 12:54 - 2013-12-13 10:29 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 11:19 - 2013-12-13 10:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 11:18 - 2013-12-13 10:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 11:11 - 2013-12-13 10:29 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-26 10:48 - 2013-12-13 10:29 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 10:46 - 2013-12-13 10:29 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 10:41 - 2013-12-13 10:29 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 10:29 - 2013-12-13 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 10:27 - 2013-12-13 10:29 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 10:23 - 2013-12-13 10:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-26 10:21 - 2013-12-13 10:29 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 10:18 - 2013-12-13 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 10:18 - 2013-12-13 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 10:16 - 2013-12-13 10:29 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 10:15 - 2013-11-18 21:57 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-26 10:15 - 2010-07-18 15:57 - 00000000 ____D C:\ProgramData\Skype
2013-11-26 09:57 - 2013-12-13 10:29 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 09:38 - 2013-12-13 10:29 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-26 09:38 - 2013-12-13 10:29 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-26 09:35 - 2013-12-13 10:29 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:32 - 2013-12-13 10:29 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-26 09:28 - 2013-12-13 10:29 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-26 09:16 - 2013-12-13 10:29 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-26 09:02 - 2013-12-13 10:29 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:48 - 2013-12-13 10:29 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 08:32 - 2013-12-13 10:29 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-26 08:26 - 2013-12-13 10:29 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-26 08:07 - 2013-12-13 10:29 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:40 - 2013-12-13 10:29 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-26 07:34 - 2013-12-13 10:29 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:34 - 2013-12-13 10:29 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-26 07:33 - 2013-12-13 10:29 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-26 07:27 - 2013-12-13 10:29 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-23 19:26 - 2013-12-12 09:56 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-11-23 18:47 - 2013-12-12 09:56 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-20 15:26 - 2012-01-22 18:56 - 00003186 _____ C:\Windows\System32\Tasks\HPCeeScheduleForKonny
2013-11-20 15:26 - 2012-01-22 18:56 - 00000332 _____ C:\Windows\Tasks\HPCeeScheduleForKonny.job
2013-11-19 09:23 - 2012-04-25 17:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-19 00:01 - 2013-11-18 22:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-18 21:57 - 2013-11-18 21:57 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2013-11-17 12:59 - 2013-09-24 14:10 - 00000000 ____D C:\Users\Konny\Desktop\Karten

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.1572.dll


Some content of TEMP:
====================
C:\Users\Konny\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2012-08-02 22:37

==================== End Of Log ============================

--- --- ---

schrauber · 16.12.2013, 12:18

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

15.12.2013, 08:09	#4
schrauber /// the machine /// TB-Ausbilder	Hier geht gar nichts mehr...--.-- (Virus, CPU-Auslastung 100%) Abbrechen, FRST öffnen, Haken raus bei Additional und nochmal scannen. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Hier geht gar nichts mehr...--.-- (Virus, CPU-Auslastung 100%)

Plagegeister aller Art und deren Bekämpfung: Hier geht gar nichts mehr...--.-- (Virus, CPU-Auslastung 100%)