Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden

microLotz · 18.12.2013, 19:38

Hallo Schrauber,

anbei die Log-Files zu den Programmen:

ESET:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=1e92cff954fbe94fb17ad05c56e29e07
# engine=16313
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-18 05:03:18
# local_time=2013-12-18 06:03:18 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 30229 139016048 0 0
# scanned=373966
# found=0
# cleaned=0
# scan_time=18078

SecurityCheck:

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.77  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
G Data InternetSecurity 2014   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Adobe Flash Player 11.9.900.170  
 Adobe Reader 10.1.8 Adobe Reader out of Date!  
 Mozilla Firefox (26.0) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Malwarebytes' Anti-Malware mbamscheduler.exe   
 G Data InternetSecurity Firewall GDFwSvcx64.exe 
 G Data InternetSecurity Firewall GDFirewallTray.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

FRST:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-12-2013 03
Ran by Sebastian (administrator) on SEBASTIAN-PC on 18-12-2013 19:31:06
Running from C:\Users\Sebastian\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Stefan Hirschmann) D:\Anwendungen\No Sleep\NoSleep_1.4.2.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\GdBgInx64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKBap64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [Launch LGDCore] - C:\Program Files\Common Files\Logitech\G-series Software\LGDCore.exe [1783296 2006-07-23] (Logitech Inc.)
HKLM\...\Run: [Launch LCDMon] - "C:\Program Files\Common Files\Logitech\LCD Manager\lcdmon.exe"
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [NoSleep!] - D:\Anwendungen\No Sleep\NoSleep_1.4.2.exe [374272 2012-09-16] (Stefan Hirschmann)
HKCU\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216 2011-12-05] (AMD)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation)
HKLM-x32\...\Run: [P17RunE] - C:\Windows\\SysWOW64\P17RunE.dll [14848 2008-03-28] (Creative Technology Ltd.)
HKLM-x32\...\Run: [NBAgent] - D:\Anwendungen\Nero 11\Nero 11\Nero BackItUp\NBAgent.exe [1492264 2011-11-18] (Nero AG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [UpdReg] - C:\Windows\Updreg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - D:\Anwendungen\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [G Data AntiVirus Tray] - C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe [1444472 2013-08-21] (G Data Software AG)
HKLM-x32\...\Run: [GDFirewallTray] - C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1854928 2013-03-22] (G Data Software AG)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1D66C8FF6EB9CE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Hosts: 127.0.0.1 update.sft-loader.de
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Sebastian\AppData\Roaming\Mozilla\Firefox\Profiles\61u2bfgx.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 - D:\Anwendungen\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - D:\Anwendungen\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - D:\Anwendungen\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

==================== Services (Whitelisted) =================

R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [1970296 2013-08-26] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [635000 2013-08-21] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [2562208 2013-10-15] (G Data Software AG)
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2942808 2013-10-17] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [695416 2013-08-22] (G Data Software AG)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [121344 2012-02-07] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [60248 2013-12-16] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [130392 2013-12-16] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [63320 2013-12-16] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64856 2013-12-16] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2013-12-16] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65368 2013-12-16] (G Data Software AG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S4 sptd; \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-18 19:19 - 2013-12-18 19:19 - 00001011 _____ C:\Users\Sebastian\Desktop\checkup.txt
2013-12-18 19:14 - 2013-12-18 19:15 - 00891200 _____ C:\Users\Sebastian\Desktop\SecurityCheck.exe
2013-12-18 18:22 - 2013-12-18 18:22 - 00001481 _____ C:\Users\Sebastian\Desktop\found.txt
2013-12-18 09:32 - 2013-12-18 12:06 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\avidemux
2013-12-16 14:41 - 2013-12-16 14:41 - 00000000 ____D C:\Users\Sebastian\Documents\Any Video Converter
2013-12-16 14:41 - 2013-12-16 14:41 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\AnvSoft
2013-12-16 14:34 - 2013-12-16 14:35 - 00000000 ____D C:\Users\Sebastian\Downloads\GData Internet Security
2013-12-16 14:33 - 2013-12-16 14:33 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\G Data
2013-12-16 14:33 - 2013-12-16 14:33 - 00000000 ____D C:\Users\Sebastian\AppData\Local\G DATA
2013-12-16 14:13 - 2013-12-16 14:13 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2013-12-16 14:13 - 2013-12-16 14:13 - 00019016 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2013-12-16 14:00 - 2013-12-16 14:00 - 00130392 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2013-12-16 14:00 - 2013-12-16 14:00 - 00065368 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2013-12-16 14:00 - 2013-12-16 14:00 - 00064856 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2013-12-16 14:00 - 2013-12-16 14:00 - 00060248 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2013-12-16 12:11 - 2013-12-18 19:31 - 00012890 _____ C:\Users\Sebastian\Desktop\FRST.txt
2013-12-16 12:11 - 2013-12-18 19:30 - 00000000 ____D C:\Users\Sebastian\Desktop\FRST-OlderVersion
2013-12-16 12:04 - 2013-12-16 12:04 - 00000841 _____ C:\Users\Sebastian\Desktop\JRT.txt
2013-12-16 11:59 - 2013-12-16 11:59 - 00000000 ____D C:\Windows\ERUNT
2013-12-16 11:57 - 2013-12-16 11:57 - 01034531 _____ (Thisisu) C:\Users\Sebastian\Desktop\JRT.exe
2013-12-16 11:55 - 2013-12-16 11:53 - 00001845 _____ C:\Users\Sebastian\Desktop\AdwCleaner[S0].txt
2013-12-16 11:47 - 2013-12-16 11:53 - 00000000 ____D C:\AdwCleaner
2013-12-16 11:46 - 2013-12-16 11:46 - 01226750 _____ C:\Users\Sebastian\Desktop\adwcleaner.exe
2013-12-16 11:35 - 2013-12-16 11:35 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Malwarebytes
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-16 11:35 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-16 11:30 - 2013-12-16 11:31 - 00000000 ____D C:\Users\Sebastian\Desktop\Trojaner
2013-12-15 21:27 - 2013-12-16 18:37 - 00000000 ____D C:\ProgramData\G DATA
2013-12-15 21:27 - 2013-12-16 14:00 - 00000000 ____D C:\Program Files (x86)\G Data
2013-12-15 16:56 - 2013-12-15 16:56 - 00000000 ____D C:\Users\Sebastian\AppData\Local\GHISLER
2013-12-15 16:55 - 2013-12-15 16:55 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2013-12-15 16:55 - 2013-12-15 16:55 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\GHISLER
2013-12-15 12:32 - 2013-12-15 12:32 - 00024762 _____ C:\ComboFix.txt
2013-12-15 12:25 - 2013-12-15 12:32 - 00000000 ____D C:\Qoobox
2013-12-15 12:25 - 2013-12-15 12:31 - 00000000 ____D C:\Windows\erdnt
2013-12-15 12:25 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-15 12:25 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-15 12:25 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-15 12:25 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-15 12:25 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-15 12:25 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-15 12:25 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-15 12:25 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-14 20:00 - 2013-12-14 20:00 - 00717952 _____ C:\Windows\Minidump\121413-8065-01.dmp
2013-12-14 18:57 - 2013-12-18 19:30 - 01929306 _____ (Farbar) C:\Users\Sebastian\Desktop\FRST64.exe
2013-12-14 18:57 - 2013-12-18 19:30 - 00000000 ____D C:\FRST
2013-12-14 18:54 - 2013-12-14 18:54 - 00000172 _____ C:\Users\Sebastian\defogger_reenable
2013-12-14 15:14 - 2013-12-14 15:15 - 00007774 _____ C:\Windows\IE11_main.log
2013-12-14 15:10 - 2013-12-14 15:56 - 00019592 _____ C:\Windows\IE10_main.log
2013-12-14 15:00 - 2013-12-14 15:01 - 00000000 ____D C:\Windows\system32\MRT
2013-12-12 12:21 - 2013-12-12 12:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 00:25 - 2013-12-12 00:25 - 00000000 ____D C:\Program Files (x86)\Samsung SSD Magician
2013-12-11 11:45 - 2013-12-11 11:45 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Apple Computer
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\Users\Sebastian\AppData\Local\Apple
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\ProgramData\Apple Computer
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\ProgramData\Apple
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-12-07 23:15 - 2013-12-07 23:17 - 00000000 ____D C:\Users\Sebastian\Documents\Einstellungsdatei von Fritz Box 7390 vom 07.12.2013
2013-12-04 21:34 - 2013-12-04 21:34 - 00055617 _____ C:\Windows\SysWOW64\CCCInstall_201312042134222142.log
2013-12-04 21:34 - 2013-12-04 21:34 - 00000000 ____D C:\ProgramData\ATI
2013-12-04 21:34 - 2013-12-04 21:34 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-12-03 16:10 - 2013-12-04 21:21 - 00000000 ____D C:\Users\Sebastian\Desktop\Verhandlungen
2013-12-03 14:18 - 2013-12-03 14:18 - 00000000 ____D C:\Users\Sebastian\Documents\WB Games
2013-12-03 14:17 - 2013-12-03 14:17 - 00000000 ____D C:\Program Files (x86)\AMD
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-11-29 18:54 - 2013-11-29 18:54 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-11-29 18:53 - 2013-11-29 18:53 - 00115512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2013-11-29 18:53 - 2013-11-29 18:53 - 00098496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2013-11-29 18:51 - 2013-11-29 18:51 - 01100728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 08412680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-11-29 18:49 - 2013-11-29 18:49 - 08287008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2013-11-29 18:48 - 2013-11-29 18:48 - 06630232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2013-11-29 18:47 - 2013-11-29 18:47 - 08927704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2013-11-29 18:46 - 2013-11-29 18:46 - 07751920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2013-11-29 18:39 - 2013-11-29 18:39 - 13201920 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-11-29 18:24 - 2013-11-29 18:24 - 00230912 _____ C:\Windows\system32\clinfo.exe
2013-11-29 18:24 - 2013-11-29 18:24 - 00100352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 29363712 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-11-29 18:21 - 2013-11-29 18:21 - 24846848 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-29 18:13 - 2013-11-29 18:13 - 00129536 _____ (AMD) C:\Windows\system32\coinst_13.25.18.dll
2013-11-29 18:00 - 2013-11-29 18:00 - 26350592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\system32\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-11-29 17:55 - 2013-11-29 17:55 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-11-29 17:54 - 2013-11-29 17:54 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-11-29 17:51 - 2013-11-29 17:51 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-11-29 17:42 - 2013-11-29 17:42 - 22156288 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00585216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-11-29 17:35 - 2013-11-29 17:35 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-11-29 17:34 - 2013-11-29 17:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-11-29 17:33 - 2013-11-29 17:33 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-11-29 17:22 - 2013-11-29 17:22 - 03399312 _____ C:\Windows\system32\atiumd6a.cap
2013-11-29 17:10 - 2013-11-29 17:10 - 03433360 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-11-29 17:05 - 2013-11-29 17:05 - 01145344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00825856 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00624128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-11-29 17:04 - 2013-11-29 17:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-11-29 17:00 - 2013-11-29 17:00 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-11-29 12:34 - 2013-11-29 12:34 - 00051200 _____ C:\Windows\system32\kdbsdk64.dll
2013-11-29 12:29 - 2013-11-29 12:29 - 00038912 _____ C:\Windows\SysWOW64\kdbsdk32.dll

==================== One Month Modified Files and Folders =======

2013-12-18 19:31 - 2013-12-16 12:11 - 00012890 _____ C:\Users\Sebastian\Desktop\FRST.txt
2013-12-18 19:30 - 2013-12-16 12:11 - 00000000 ____D C:\Users\Sebastian\Desktop\FRST-OlderVersion
2013-12-18 19:30 - 2013-12-14 18:57 - 01929306 _____ (Farbar) C:\Users\Sebastian\Desktop\FRST64.exe
2013-12-18 19:30 - 2013-12-14 18:57 - 00000000 ____D C:\FRST
2013-12-18 19:19 - 2013-12-18 19:19 - 00001011 _____ C:\Users\Sebastian\Desktop\checkup.txt
2013-12-18 19:17 - 2012-09-16 22:26 - 00000000 ____D C:\Users\Sebastian\Documents\Outlook-Dateien
2013-12-18 19:15 - 2013-12-18 19:14 - 00891200 _____ C:\Users\Sebastian\Desktop\SecurityCheck.exe
2013-12-18 18:28 - 2009-07-14 18:58 - 00770016 _____ C:\Windows\system32\perfh007.dat
2013-12-18 18:28 - 2009-07-14 18:58 - 00174334 _____ C:\Windows\system32\perfc007.dat
2013-12-18 18:28 - 2009-07-14 06:13 - 01797560 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-18 18:22 - 2013-12-18 18:22 - 00001481 _____ C:\Users\Sebastian\Desktop\found.txt
2013-12-18 14:04 - 2012-09-16 13:29 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-12-18 12:11 - 2012-09-16 21:44 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\vlc
2013-12-18 12:06 - 2013-12-18 09:32 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\avidemux
2013-12-18 12:02 - 2012-09-16 13:04 - 01633607 _____ C:\Windows\WindowsUpdate.log
2013-12-18 09:10 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-18 09:10 - 2009-07-14 05:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-18 09:03 - 2012-09-16 13:29 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-12-18 09:03 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-18 09:03 - 2009-07-14 05:51 - 00076702 _____ C:\Windows\setupact.log
2013-12-16 23:41 - 2013-09-27 21:05 - 00000000 ____D C:\Users\Sebastian\Documents\FIFA 14
2013-12-16 18:51 - 2012-09-16 17:01 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-16 18:51 - 2012-09-16 17:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-16 18:37 - 2013-12-15 21:27 - 00000000 ____D C:\ProgramData\G DATA
2013-12-16 14:41 - 2013-12-16 14:41 - 00000000 ____D C:\Users\Sebastian\Documents\Any Video Converter
2013-12-16 14:41 - 2013-12-16 14:41 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\AnvSoft
2013-12-16 14:35 - 2013-12-16 14:34 - 00000000 ____D C:\Users\Sebastian\Downloads\GData Internet Security
2013-12-16 14:33 - 2013-12-16 14:33 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\G Data
2013-12-16 14:33 - 2013-12-16 14:33 - 00000000 ____D C:\Users\Sebastian\AppData\Local\G DATA
2013-12-16 14:13 - 2013-12-16 14:13 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2013-12-16 14:13 - 2013-12-16 14:13 - 00019016 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2013-12-16 14:01 - 2012-09-16 14:03 - 00063320 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys
2013-12-16 14:00 - 2013-12-16 14:00 - 00130392 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2013-12-16 14:00 - 2013-12-16 14:00 - 00065368 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2013-12-16 14:00 - 2013-12-16 14:00 - 00064856 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2013-12-16 14:00 - 2013-12-16 14:00 - 00060248 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2013-12-16 14:00 - 2013-12-15 21:27 - 00000000 ____D C:\Program Files (x86)\G Data
2013-12-16 12:06 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-16 12:04 - 2013-12-16 12:04 - 00000841 _____ C:\Users\Sebastian\Desktop\JRT.txt
2013-12-16 11:59 - 2013-12-16 11:59 - 00000000 ____D C:\Windows\ERUNT
2013-12-16 11:57 - 2013-12-16 11:57 - 01034531 _____ (Thisisu) C:\Users\Sebastian\Desktop\JRT.exe
2013-12-16 11:53 - 2013-12-16 11:55 - 00001845 _____ C:\Users\Sebastian\Desktop\AdwCleaner[S0].txt
2013-12-16 11:53 - 2013-12-16 11:47 - 00000000 ____D C:\AdwCleaner
2013-12-16 11:46 - 2013-12-16 11:46 - 01226750 _____ C:\Users\Sebastian\Desktop\adwcleaner.exe
2013-12-16 11:35 - 2013-12-16 11:35 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Malwarebytes
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-16 11:35 - 2013-12-16 11:35 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-16 11:31 - 2013-12-16 11:30 - 00000000 ____D C:\Users\Sebastian\Desktop\Trojaner
2013-12-15 21:26 - 2012-09-16 13:04 - 00000000 ___RD C:\Users\Sebastian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-15 21:20 - 2013-01-26 19:36 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-15 21:15 - 2013-07-13 17:58 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\JAM Software
2013-12-15 21:13 - 2012-09-16 13:10 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-15 16:56 - 2013-12-15 16:56 - 00000000 ____D C:\Users\Sebastian\AppData\Local\GHISLER
2013-12-15 16:55 - 2013-12-15 16:55 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2013-12-15 16:55 - 2013-12-15 16:55 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\GHISLER
2013-12-15 12:33 - 2012-09-16 16:42 - 00194698 _____ C:\Windows\PFRO.log
2013-12-15 12:32 - 2013-12-15 12:32 - 00024762 _____ C:\ComboFix.txt
2013-12-15 12:32 - 2013-12-15 12:25 - 00000000 ____D C:\Qoobox
2013-12-15 12:31 - 2013-12-15 12:25 - 00000000 ____D C:\Windows\erdnt
2013-12-15 12:30 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-14 20:00 - 2013-12-14 20:00 - 00717952 _____ C:\Windows\Minidump\121413-8065-01.dmp
2013-12-14 20:00 - 2012-09-25 17:09 - 729686930 _____ C:\Windows\MEMORY.DMP
2013-12-14 20:00 - 2012-09-25 17:09 - 00000000 ____D C:\Windows\Minidump
2013-12-14 18:54 - 2013-12-14 18:54 - 00000172 _____ C:\Users\Sebastian\defogger_reenable
2013-12-14 18:54 - 2012-09-16 13:04 - 00000000 ____D C:\Users\Sebastian
2013-12-14 16:00 - 2012-09-16 20:57 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-14 15:58 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2013-12-14 15:56 - 2013-12-14 15:10 - 00019592 _____ C:\Windows\IE10_main.log
2013-12-14 15:16 - 2012-09-18 20:20 - 01770904 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-12-14 15:15 - 2013-12-14 15:14 - 00007774 _____ C:\Windows\IE11_main.log
2013-12-14 15:01 - 2013-12-14 15:00 - 00000000 ____D C:\Windows\system32\MRT
2013-12-14 14:59 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-13 23:36 - 2013-01-28 15:11 - 00000000 ____D C:\Users\Sebastian\Documents\Eintracht Frankfurt Museum
2013-12-12 12:49 - 2012-09-16 17:17 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-12 12:21 - 2013-12-12 12:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 00:25 - 2013-12-12 00:25 - 00000000 ____D C:\Program Files (x86)\Samsung SSD Magician
2013-12-11 13:39 - 2012-09-16 10:07 - 00000000 ____D C:\Users\Sebastian\Documents\Kreditkarte Rechnungen
2013-12-11 11:45 - 2013-12-11 11:45 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Apple Computer
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\Users\Sebastian\AppData\Local\Apple
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\ProgramData\Apple Computer
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\ProgramData\Apple
2013-12-10 11:31 - 2013-12-10 11:31 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-12-10 11:29 - 2012-09-16 20:15 - 00000000 ____D C:\Program Files\DivX
2013-12-10 11:29 - 2012-09-16 20:15 - 00000000 ____D C:\Program Files (x86)\DivX
2013-12-10 11:29 - 2012-09-16 20:09 - 00000000 ____D C:\ProgramData\DivX
2013-12-07 23:17 - 2013-12-07 23:15 - 00000000 ____D C:\Users\Sebastian\Documents\Einstellungsdatei von Fritz Box 7390 vom 07.12.2013
2013-12-04 21:34 - 2013-12-04 21:34 - 00055617 _____ C:\Windows\SysWOW64\CCCInstall_201312042134222142.log
2013-12-04 21:34 - 2013-12-04 21:34 - 00000000 ____D C:\ProgramData\ATI
2013-12-04 21:34 - 2013-12-04 21:34 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2013-12-04 21:34 - 2012-11-04 19:54 - 00000000 ____D C:\ProgramData\AMD
2013-12-04 21:34 - 2012-09-16 13:13 - 00000000 ____D C:\Program Files\ATI Technologies
2013-12-04 21:33 - 2012-09-17 09:03 - 00000000 ____D C:\AMD
2013-12-04 21:32 - 2013-04-26 16:51 - 00000000 ____D C:\ProgramData\Package Cache
2013-12-04 21:21 - 2013-12-03 16:10 - 00000000 ____D C:\Users\Sebastian\Desktop\Verhandlungen
2013-12-03 14:18 - 2013-12-03 14:18 - 00000000 ____D C:\Users\Sebastian\Documents\WB Games
2013-12-03 14:17 - 2013-12-03 14:17 - 00000000 ____D C:\Program Files (x86)\AMD
2013-12-03 14:17 - 2012-09-16 14:01 - 00000000 ____D C:\Users\Sebastian\AppData\Local\Downloaded Installations
2013-12-03 14:15 - 2012-09-18 16:23 - 00372479 _____ C:\Windows\DirectX.log
2013-12-01 14:42 - 2012-09-16 15:49 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2013-11-29 18:58 - 2013-11-29 18:58 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2013-11-29 18:55 - 2011-12-06 03:11 - 00143304 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2013-11-29 18:54 - 2013-11-29 18:54 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2013-11-29 18:53 - 2013-11-29 18:53 - 00115512 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2013-11-29 18:53 - 2013-11-29 18:53 - 00098496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2013-11-29 18:52 - 2011-12-06 04:16 - 01319064 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2013-11-29 18:51 - 2013-11-29 18:51 - 01100728 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2013-11-29 18:50 - 2013-11-29 18:50 - 08412680 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2013-11-29 18:50 - 2011-12-06 03:51 - 09764088 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2013-11-29 18:49 - 2013-11-29 18:49 - 08287008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2013-11-29 18:48 - 2013-11-29 18:48 - 06630232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2013-11-29 18:47 - 2013-11-29 18:47 - 08927704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2013-11-29 18:46 - 2013-11-29 18:46 - 07751920 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2013-11-29 18:39 - 2013-11-29 18:39 - 13201920 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2013-11-29 18:24 - 2013-11-29 18:24 - 00230912 _____ C:\Windows\system32\clinfo.exe
2013-11-29 18:24 - 2013-11-29 18:24 - 00100352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 29363712 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00086528 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode64.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OpenVideo.dll
2013-11-29 18:23 - 2013-11-29 18:23 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\OVDecode.dll
2013-11-29 18:21 - 2013-11-29 18:21 - 24846848 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00063488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2013-11-29 18:18 - 2013-11-29 18:18 - 00057344 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2013-11-29 18:13 - 2013-11-29 18:13 - 00129536 _____ (AMD) C:\Windows\system32\coinst_13.25.18.dll
2013-11-29 18:00 - 2013-11-29 18:00 - 26350592 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\SysWOW64\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00547408 _____ C:\Windows\system32\atiapfxx.blb
2013-11-29 17:55 - 2013-11-29 17:55 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2013-11-29 17:55 - 2013-11-29 17:55 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2013-11-29 17:55 - 2013-11-29 17:55 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2013-11-29 17:54 - 2013-11-29 17:54 - 15716352 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2013-11-29 17:51 - 2013-11-29 17:51 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2013-11-29 17:42 - 2013-11-29 17:42 - 22156288 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00585216 _____ (AMD) C:\Windows\system32\atieclxx.exe
2013-11-29 17:35 - 2013-11-29 17:35 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2013-11-29 17:35 - 2013-11-29 17:35 - 00031232 _____ (AMD) C:\Windows\system32\atimuixx.dll
2013-11-29 17:34 - 2013-11-29 17:34 - 00239616 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2013-11-29 17:33 - 2013-11-29 17:33 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2013-11-29 17:22 - 2013-11-29 17:22 - 03399312 _____ C:\Windows\system32\atiumd6a.cap
2013-11-29 17:10 - 2013-11-29 17:10 - 03433360 _____ C:\Windows\SysWOW64\atiumdva.cap
2013-11-29 17:05 - 2013-11-29 17:05 - 01145344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00825856 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00624128 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2013-11-29 17:04 - 2013-11-29 17:04 - 00100352 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00074752 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2013-11-29 17:04 - 2013-11-29 17:04 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2013-11-29 17:00 - 2013-11-29 17:00 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2013-11-29 12:34 - 2013-11-29 12:34 - 00051200 _____ C:\Windows\system32\kdbsdk64.dll
2013-11-29 12:29 - 2013-11-29 12:29 - 00038912 _____ C:\Windows\SysWOW64\kdbsdk32.dll
2013-11-21 16:14 - 2012-09-20 09:37 - 00000000 ____D C:\Users\Sebastian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-11-19 03:33 - 2012-09-16 14:42 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Some content of TEMP:
====================
C:\Users\Sebastian\AppData\Local\Temp\Quarantine.exe
C:\Users\Sebastian\AppData\Local\Temp\vlc-2.1.2-win32.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-10 12:54

==================== End Of Log ============================

--- --- ---

--- --- ---

Danke für die bisherige Hilfe. Probleme kann ich keine mehr feststellen. Das sich selbstständig öffnende Downloadfenster im Firefox ist seit Beginn der Maßnahmen ebenfalls nicht mehr aufgetreten.

Gruß
microLotz

Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden

Log-Analyse und Auswertung: Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden

Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden

Ähnliche Themen: Windows 7 x64: Firefox öffnet selbstständig Downloadfenster und will Datei downloaden