| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Infizierte Registrierungsschlüssel sowie suspicious.cloud.9.Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
18.12.2013, 18:30
| #1 |
 |  Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. Hi, folgendes Problem, nachdem mir immer mal mein Word abgestürzt ist, hab ich über Malwarebytes mehrere infizierte Regsitrierungsschlüssel gefunden. Ich habe adwcleaner und JRT schon drüberlaufenlassen, was sicher nicht clever war, weil ich FRST.exe vergessen hatte..  Hier die Files in chronologischer Reihenfolge: Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.18.05 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 11.0.9600.16476 Mü :: MÜ-PC [Administrator] Schutz: Aktiviert 18.12.2013 16:01:18 mbam-log-2013-12-18 (16-01-18).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|I:\|K:\|L:\|Z:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 46165 Laufzeit: 11 Minute(n), 31 Sekunde(n) [Abgebrochen] Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 61 HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachine (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{8B218A5F-1A3D-4347-94EF-A79575EB8094} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{0D89DE71-3D99-4288-84DC-F18F1047A7D8} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\DealPlyLive.OneClickCtrl.9 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\DealPlyLive.Update3WebControl.3 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{9BDB5E09-4BBA-4422-8C2B-529B281C32B8} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{C536F080-57B7-46D6-8894-C647553F2889} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\DealPlyLive.OneClickProcessLauncherMachine.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\DealPlyLive.OneClickProcessLauncherMachine (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C536F080-57B7-46D6-8894-C647553F2889} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{CA5D945F-E738-4D0B-A0B5-25AC51C64659} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\DealPlyLiveUpdate.CoreClass.1 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\DealPlyLiveUpdate.CoreClass (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{F7698761-4ABA-45C2-A5BB-D2163922C725} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\DealPlyLiveUpdate.Update3WebSvc.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{FFCC53E6-2655-47FC-A89B-54E8D7F305D1} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\DealPlyLiveUpdate.Update3WebMachine.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCR\DealPlyLiveUpdate.Update3WebMachine (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Keine Aktion durchgeführt. HKCR\AppID\{80FABB17-63AF-4655-9F07-B6509EE37AF2} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{80FABB17-63AF-4655-9F07-B6509EE37AF2} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.OnDemandCOMClassSvc.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.OnDemandCOMClassSvc (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\AppID\{F48FC5B2-094A-44C7-B48C-289738C9582D} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{F48FC5B2-094A-44C7-B48C-289738C9582D} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3COMClassService.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3COMClassService (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{1E0C9B2A-6447-452C-B012-2314A0C29412} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachineFallback (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{34A8CEB6-89BB-49F1-B5E4-0D0D6C21F3B1} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CredentialDialogMachine.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CredentialDialogMachine (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{3A4DBD3A-98CC-41CE-AD21-352D42B6F754} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CoCreateAsync.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CoCreateAsync (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{4F8A50F6-69DE-4BE3-A33A-A1079B9AC0DB} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3WebMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3WebMachineFallback (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{501CB57A-D4E2-4855-96AD-EDB0A9083395} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CoreMachineClass.1 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.CoreMachineClass (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{6FF2C4DD-77A4-4BB5-BA4C-B42DEFBF9137} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.ProcessLauncher.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.ProcessLauncher (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\CLSID\{83ABA270-8390-4CA6-AE48-FC089F55629E} (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachine.1.0 (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\DealPlyLiveUpdate.Update3WebSvc (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 6 C:\Program Files\DealPlyLive\Update\1.3.23.0\psmachine.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. C:\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt. C:\$Recycle.Bin\S-1-5-21-2663372261-765519811-3386082939-1001\$R8RZBD1.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\$Recycle.Bin\S-1-5-21-2663372261-765519811-3386082939-1001\$RYLB7H6.exe (PUP.Optional.Softonic) -> Keine Aktion durchgeführt. C:\$Recycle.Bin\S-1-5-21-2663372261-765519811-3386082939-1001\$RFZH9T7.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\$Recycle.Bin\S-1-5-21-2663372261-765519811-3386082939-1001\$R6P79JD\PhotoshopPortable\App\PhotoshopCS6\amtlib.dll (PUP.RiskwareTool.CK) -> Keine Aktion durchgeführt. (Ende) Code:
ATTFilter # AdwCleaner v3.015 - Bericht erstellt am 18/12/2013 um 16:26:38
# Updated 10/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : Mü - MÜ-PC
# Gestartet von : C:\Users\Mü\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\DealPlyLive
Ordner Gelöscht : C:\Program Files\DealPlyLive
Ordner Gelöscht : C:\Users\Mü\AppData\Local\DealPlyLive
Ordner Gelöscht : C:\Users\Mü\AppData\Local\filetypeassistant
Ordner Gelöscht : C:\Users\MF414~1\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\Mü\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Mü\AppData\Roaming\DealPly
Ordner Gelöscht : C:\Users\Mü\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Mü\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Mü\AppData\Roaming\Mozilla\Firefox\Profiles\8adqg96g.default-1371571406636\Extensions\{e53a26f5-7199-4a5b-86f5-d2e86854b979}
Ordner Gelöscht : C:\Users\Mü\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejnmnhkgiphcaeefbaooconkceehicfi
Datei Gelöscht : C:\Users\Mü\AppData\Roaming\Mozilla\Firefox\Profiles\8adqg96g.default-1371571406636\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\Dealply
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{20BFAF32-ABF7-4BE0-8E9A-CB5287C658B8}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{20BFAF32-ABF7-4BE0-8E9A-CB5287C658B8}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{242C0ECF-6AD7-4D01-80EF-FE9455EDEA92}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\dealplylive.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLive.OneClickCtrl.9
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLive.OneClickProcessLauncherMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLive.OneClickProcessLauncherMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLive.Update3WebControl.3
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.coreclass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.CoreClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.ondemandcomclassmachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3webmachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3webmachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3websvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dealplylive.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=3
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=9
Schlüssel Gelöscht : HKCU\Software\53558d8ab76eba41
Schlüssel Gelöscht : HKLM\SOFTWARE\53558d8ab76eba41
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-live-mail-2012_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-live-mail-2012_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{0D89DE71-3D99-4288-84DC-F18F1047A7D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8B218A5F-1A3D-4347-94EF-A79575EB8094}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9BDB5E09-4BBA-4422-8C2B-529B281C32B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C536F080-57B7-46D6-8894-C647553F2889}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CA5D945F-E738-4D0B-A0B5-25AC51C64659}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F7698761-4ABA-45C2-A5BB-D2163922C725}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FFCC53E6-2655-47FC-A89B-54E8D7F305D1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C536F080-57B7-46D6-8894-C647553F2889}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\DataMngr
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\DealPlyLive
Schlüssel Gelöscht : HKCU\Software\delta LTD
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\DealPlyLive
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\Software\InstallIQ
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v25.0.1 (de)
[ Datei : C:\Users\Mü\AppData\Roaming\Mozilla\Firefox\Profiles\8adqg96g.default-1371571406636\prefs.js ]
*************************
AdwCleaner[R0].txt - [13693 octets] - [18/12/2013 16:23:59]
AdwCleaner[S0].txt - [13468 octets] - [18/12/2013 16:26:38]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13529 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x86
Ran by M on 18.12.2013 at 16:34:12,24
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2663372261-765519811-3386082939-1001\Software\sweetim
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\M\AppData\Roaming\mozilla\firefox\profiles\8adqg96g.default-1371571406636\minidumps [43 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 18.12.2013 at 16:41:41,67
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-12-2013 03
Ran by Mü (administrator) on MÜ-PC on 18-12-2013 17:10:28
Running from C:\Users\Mü\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe
(devolo AG) C:\Program Files\devolo\dlan\devolonetsvc.exe
() C:\Program Files\Canon\IJPLM\ijplmsvc.exe
(CyberGhost S.R.L.) C:\Program Files\CyberGhost 5\CyberGhost.exe
(Dropbox, Inc.) C:\Users\Mü\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\N360.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Symantec Corporation) C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\N360.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
==================== Registry (Whitelisted) ==================
HKCU\...\Run: [CyberGhost] - C:\Program Files\CyberGhost 5\CyberGhost.exe [361072 2013-12-17] (CyberGhost S.R.L.)
MountPoints2: {2f045804-6325-11e3-bcf9-00238b1c50ea} - H:\CDCheck.exe
MountPoints2: {e4068ce1-66f2-11e3-acb6-00238b1c50ea} - J:\CDCheck.exe
IFEO\skype.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
Lsa: [Notification Packages]
Startup: C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Mü\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x32F1B5760306CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\IPS\IPSBHO.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Mü\AppData\Roaming\Mozilla\Firefox\Profiles\8adqg96g.default-1371571406636
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Mü\AppData\Roaming\Mozilla\Firefox\Profiles\8adqg96g.default-1371571406636\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
========================== Services (Whitelisted) =================
R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (LSI Corporation)
S2 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [393032 2013-05-13] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [384840 2013-05-13] (BlueStack Systems, Inc.)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [63600 2013-12-17] (CyberGhost S.R.L)
R2 DevoloNetworkService; C:\Program Files\devolo\dlan\devolonetsvc.exe [3526136 2013-08-27] (devolo AG)
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [255376 2012-04-05] (Acer Incorporated)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 N360; C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\diMaster.dll [567600 2013-10-08] (Symantec Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1729336 2013-12-10] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus.sys [14336 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag.sys [20736 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps.sys [20096 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem.sys [25088 2012-03-02] (LG Electronics Inc.)
R1 BHDrvx86; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20131203.001\BHDrvx86.sys [1098968 2013-12-03] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [63816 2013-05-13] (BlueStack Systems)
R1 ccSet_N360; C:\Windows\system32\drivers\N360\1501000.012\ccSetx86.sys [127064 2013-09-26] (Symantec Corporation)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-12-12] (Disc Soft Ltd)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-12-15] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-12-15] (Symantec Corporation)
R1 IDSVix86; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20131217.001\IDSvix86.sys [394456 2013-12-16] (Symantec Corporation)
R2 int15; C:\Windows\system32\drivers\int15.sys [69632 2008-03-12] ()
R3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [48640 2009-08-23] (Atheros Communications, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20131217.025\NAVENG.SYS [93272 2013-12-15] (Symantec Corporation)
R3 NAVEX15; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20131217.025\NAVEX15.SYS [1612376 2013-12-15] (Symantec Corporation)
R2 NPF_devolo; C:\Windows\system32\drivers\npf_devolo.sys [35840 2013-08-27] (CACE Technologies)
R3 nuvotoncir; C:\Windows\System32\DRIVERS\nuvotoncir.sys [44544 2009-06-24] (Nuvoton Technology Corporation)
S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [159776 2009-06-24] (Realtek Semiconductor Corp.)
R1 SRTSP; C:\Windows\System32\Drivers\N360\1501000.012\SRTSP.SYS [651352 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360\1501000.012\SRTSPX.SYS [32344 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360\1501000.012\SYMDS.SYS [367704 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360\1501000.012\SYMEFA.SYS [935512 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142936 2013-12-16] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360\1501000.012\Ironx86.SYS [206936 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360\1501000.012\SYMNETS.SYS [446552 2013-09-26] (Symantec Corporation)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [31360 2013-02-08] (The OpenVPN Project)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-09-19] (TuneUp Software)
S3 winbondcir; C:\Windows\System32\DRIVERS\winbondcir.sys [43008 2007-03-28] (Winbond Electronics Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-18 17:10 - 2013-12-18 17:10 - 00013367 _____ C:\Users\Mü\Desktop\FRST.txt
2013-12-18 17:10 - 2013-12-18 17:10 - 00000000 ____D C:\FRST
2013-12-18 16:55 - 2013-12-18 16:55 - 01062259 _____ (Farbar) C:\Users\Mü\Desktop\FRST.exe
2013-12-18 16:41 - 2013-12-18 16:41 - 00000954 _____ C:\Users\Mü\Desktop\JRT.txt
2013-12-18 16:34 - 2013-12-18 16:34 - 00000000 ____D C:\Windows\ERUNT
2013-12-18 16:30 - 2013-12-18 16:30 - 00013610 _____ C:\Users\Mü\Desktop\AdwCleaner[S0].txt
2013-12-18 16:21 - 2013-12-18 16:21 - 01034531 _____ (Thisisu) C:\Users\Mü\Desktop\JRT.exe
2013-12-18 16:20 - 2013-12-18 16:31 - 00000000 ____D C:\AdwCleaner
2013-12-18 16:19 - 2013-12-18 16:20 - 01226750 _____ C:\Users\Mü\Desktop\adwcleaner.exe
2013-12-18 15:57 - 2013-12-18 15:57 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 15:57 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-18 15:53 - 2013-12-18 15:53 - 00614784 _____ C:\Users\Mü\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2013-12-18 15:47 - 2013-12-18 15:52 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-12-18 15:46 - 2013-12-18 15:46 - 02365840 _____ C:\Users\Mü\Downloads\SecurityTaskManager_Setup.exe
2013-12-18 13:55 - 2013-12-18 13:55 - 00000000 ____D C:\Users\Mü\AppData\Local\@ByELDI
2013-12-18 13:05 - 2013-02-03 22:50 - 00000000 ____D C:\Windows\Re-Aktivierung
2013-12-18 12:44 - 2013-12-18 12:44 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-12-18 12:42 - 2013-12-18 12:43 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-18 12:39 - 2013-12-18 12:39 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2013-12-18 12:37 - 2013-12-18 12:37 - 00000000 __RHD C:\MSOCache
2013-12-18 10:58 - 2013-12-18 10:58 - 00000000 ____D C:\Users\Mü\Downloads\Remove office 2007
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Sun
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Oracle
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\Program Files\Common Files\Java
2013-12-18 10:02 - 2013-12-18 10:02 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-12-18 10:02 - 2013-12-18 10:02 - 00000000 ____D C:\Program Files\Java
2013-12-18 10:00 - 2013-12-18 10:00 - 00915368 _____ (Oracle Corporation) C:\Users\Mü\Downloads\jxpiinstall.exe
2013-12-18 09:58 - 2013-12-18 10:09 - 00003134 _____ C:\Users\Mü\Documents\KartenY.odb
2013-12-18 09:38 - 2013-12-18 09:56 - 00868352 _____ C:\Users\Mü\Documents\KartenY.accdb
2013-12-17 20:13 - 2013-12-17 20:16 - 00000000 ____D C:\Users\Mü\AppData\Local\Cimaware
2013-12-17 18:28 - 2013-12-17 18:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\OpenOffice
2013-12-17 18:27 - 2013-12-17 18:27 - 00001074 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-12-17 18:26 - 2013-12-17 18:26 - 00000000 ____D C:\Program Files\OpenOffice 4
2013-12-17 18:19 - 2013-12-17 18:20 - 00614784 _____ C:\Users\Mü\Downloads\OpenOffice - CHIP-Downloader.exe
2013-12-17 17:55 - 2013-12-17 17:58 - 77738888 _____ (Microsoft Corporation) C:\Users\Mü\Downloads\ExcelViewer.exe
2013-12-17 17:05 - 2013-12-18 11:10 - 00000000 ____D C:\Program Files\MSECache
2013-12-17 16:28 - 2013-12-17 16:31 - 06713344 _____ C:\Users\Mü\Documents\KartenY.xls
2013-12-17 13:14 - 2013-12-17 14:04 - 00000000 ____D C:\Program Files\SpeedFan
2013-12-17 13:13 - 2013-12-17 13:14 - 00000045 _____ C:\Windows\system32\initdebug.nfo
2013-12-17 09:43 - 2013-12-17 09:43 - 00001192 _____ C:\Users\Mü\Desktop\Die Siedler 7.lnk
2013-12-17 09:29 - 2013-12-17 09:29 - 00000000 ____D C:\Users\Mü\Documents\My Games
2013-12-17 09:28 - 2013-12-17 09:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-17 09:27 - 2013-12-17 09:27 - 00042891 _____ C:\Windows\DirectX.log
2013-12-17 09:27 - 2013-12-17 09:27 - 00002103 _____ C:\Users\Mü\Desktop\Age of Empires III.lnk
2013-12-17 09:27 - 2013-12-17 09:27 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2013-12-16 15:51 - 2013-12-17 09:14 - 00002417 _____ C:\Users\Public\Desktop\Norton 360.lnk
2013-12-13 22:54 - 2013-12-18 13:39 - 00000000 ____D C:\Users\Mü\AppData\Local\Microsoft_Corporation
2013-12-13 22:54 - 2013-12-13 22:54 - 00000000 ____D C:\Program Files\Monreale Enterprises LLC
2013-12-13 21:55 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 21:55 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 21:55 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-13 21:55 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-13 21:55 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-13 21:55 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 21:55 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 21:55 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-13 21:55 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-13 21:55 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 21:55 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-13 21:55 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-13 21:55 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 21:55 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 21:55 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 21:55 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 21:55 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-13 21:55 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 21:55 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 21:49 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-13 21:49 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-13 21:45 - 2013-12-13 21:46 - 08610888 _____ (CyberGhost S.R.L. ) C:\Users\Mü\Downloads\CG_5.0.10.10.exe
2013-12-12 18:03 - 2013-12-18 08:56 - 00000000 ____D C:\Users\Mü\Documents\Settlers7
2013-12-12 17:36 - 2013-12-12 18:15 - 00000000 ____D C:\Users\Mü\AppData\Local\CyberGhost
2013-12-12 17:35 - 2013-12-18 16:12 - 00000000 ____D C:\Program Files\CyberGhost 5
2013-12-12 17:35 - 2013-12-13 21:47 - 00001881 _____ C:\Users\Mü\Desktop\CyberGhost 5.lnk
2013-12-12 17:35 - 2013-12-12 17:36 - 00000000 ____D C:\Program Files\TAP-Windows
2013-12-12 16:19 - 2013-12-12 16:19 - 01038704 _____ (Amazon Services LLC) C:\Users\Mü\Downloads\Die_Siedler_7_PC_Downloader.exe
2013-12-12 15:58 - 2013-12-12 15:58 - 00107888 _____ (Sony DADC Austria AG.) C:\Windows\system32\CmdLineExt.dll
2013-12-12 15:57 - 2013-12-12 15:57 - 00001306 _____ C:\Windows\DIFx.log
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Windows\system32\AGEIA
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Program Files\AGEIA Technologies
2013-12-12 15:49 - 2013-12-12 15:49 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-12-12 14:21 - 2013-12-12 15:16 - 00000000 ____D C:\Users\Mü\AppData\Local\Ubisoft Game Launcher
2013-12-12 13:26 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-12-12 13:26 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-12-12 13:26 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-12-12 13:26 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-12-12 13:26 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-12-12 13:26 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-12-12 13:26 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-12-12 13:26 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-12-12 13:26 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-12-12 13:26 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-12-12 13:26 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-12-12 13:26 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-12-12 13:26 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-12-12 13:26 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-12-12 13:26 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-12-12 13:26 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-12-12 13:26 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-12-12 13:26 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-12-12 13:26 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-12-12 13:26 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-12-12 13:26 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-12-12 13:26 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-12-12 13:26 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-12-12 13:26 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-12-12 13:26 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-12-12 13:26 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-12-12 13:25 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-12-12 13:25 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-12-12 13:25 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-12-12 13:25 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-12-12 13:25 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-12-12 13:25 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-12-12 13:25 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-12-12 13:25 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-12-12 13:25 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-12-12 13:25 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-12-12 13:25 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-12-12 13:25 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-12-12 13:25 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-12-12 13:25 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-12-12 13:25 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-12-12 13:25 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-12-12 13:25 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-12-12 13:25 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-12-12 13:25 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-12-12 13:25 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-12-12 13:25 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-12-12 13:25 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-12-12 13:25 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-12-12 13:25 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-12-12 13:25 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-12-12 13:25 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-12-12 13:25 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-12-12 13:25 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-12-12 13:25 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-12-12 13:25 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-12-12 13:25 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-12-12 13:25 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-12-12 13:25 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-12-12 13:25 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-12-12 13:25 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-12-12 13:25 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-12-12 13:25 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-12-12 13:25 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-12-12 13:25 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-12-12 13:25 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-12-12 13:25 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-12-12 13:25 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-12-12 13:19 - 2013-12-12 17:46 - 00000000 ____D C:\Program Files\Ubisoft
2013-12-12 13:16 - 2013-12-10 18:43 - 00022328 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-12 13:13 - 2013-12-12 13:18 - 00000000 ____D C:\Users\Mü\AppData\Roaming\DAEMON Tools Lite
2013-12-12 13:13 - 2013-12-12 13:13 - 00243128 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-12-12 13:13 - 2013-12-12 13:13 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2013-12-12 13:12 - 2013-12-12 13:18 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-12-12 13:11 - 2013-12-12 13:11 - 13485616 _____ (Disc Soft Ltd) C:\Users\Mü\Downloads\DTLite4481-0347.exe
2013-12-12 13:10 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 13:10 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 13:10 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 13:10 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 13:10 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 13:10 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 13:10 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 13:10 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 13:10 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 13:10 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 13:10 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-09 18:44 - 2013-12-09 18:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-09 18:44 - 2013-12-09 18:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-09 18:44 - 2013-12-09 18:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-09 18:44 - 2013-12-09 18:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-09 18:43 - 2013-12-09 18:48 - 00010464 _____ C:\Windows\IE11_main.log
2013-12-09 17:51 - 2013-12-09 17:51 - 00002376 _____ C:\Users\Mü\AppData\Local\recently-used.xbel
2013-12-09 17:29 - 2013-12-09 17:30 - 00000000 ____D C:\Users\Mü\AppData\Local\gtk-2.0
2013-12-09 17:22 - 2013-12-09 17:22 - 00000000 ____D C:\Users\Mü\.thumbnails
2013-12-09 17:13 - 2013-12-09 17:52 - 00000000 ____D C:\Users\Mü\.gimp-2.8
2013-12-09 17:07 - 2013-12-09 17:10 - 00000000 ____D C:\Program Files\GIMP 2
2013-12-09 17:01 - 2013-12-09 17:03 - 90396104 _____ (The GIMP Team ) C:\Users\Mü\Downloads\gimp-2.8.10-setup.exe
2013-12-06 19:07 - 2011-11-29 15:06 - 32596208 _____ (Nero AG) C:\Users\Mü\Downloads\nero11infotool-11.0.00500.exe
2013-12-04 18:23 - 2013-12-04 18:23 - 02833752 _____ C:\Users\Mü\Downloads\XYplorer_13.40_Install_CHIP.exe
2013-12-01 15:37 - 2013-12-01 16:05 - 00000000 ____D C:\Users\Mü\Documents\Freemake
2013-12-01 15:36 - 2013-12-01 16:05 - 00000000 ____D C:\ProgramData\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00001278 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Program Files\Freemake
2013-12-01 14:59 - 2013-12-01 14:59 - 33253288 _____ (DVDVideoSoft Ltd. ) C:\Users\Mü\Downloads\FreeVideoToDVDConverter.exe
2013-12-01 14:12 - 2013-12-01 14:12 - 00001895 _____ C:\Users\Mü\Desktop\CDBurnerXP.lnk
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Program Files\CDBurnerXP
2013-12-01 14:11 - 2013-12-01 14:11 - 04985608 _____ (Canneverbe Limited ) C:\Users\Mü\Downloads\cdbxp_setup_4.5.2.4291_minimal.exe
2013-12-01 14:08 - 2013-12-01 14:08 - 01271872 _____ (Ellora Assets Corporation ) C:\Users\Mü\Downloads\FreemakeVideoConverterSetup.exe
2013-11-18 16:21 - 2013-12-03 17:48 - 00000000 ____D C:\Users\Mü\Desktop\Ebay
2013-11-18 10:32 - 2013-12-18 12:43 - 00000000 ____D C:\Program Files\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2013-12-18 17:10 - 2013-12-18 17:10 - 00013367 _____ C:\Users\Mü\Desktop\FRST.txt
2013-12-18 17:10 - 2013-12-18 17:10 - 00000000 ____D C:\FRST
2013-12-18 17:02 - 2013-04-08 16:02 - 00000380 _____ C:\Windows\Tasks\Final Media Player Update Checker.job
2013-12-18 16:55 - 2013-12-18 16:55 - 01062259 _____ (Farbar) C:\Users\Mü\Desktop\FRST.exe
2013-12-18 16:53 - 2009-07-14 05:34 - 00013216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-18 16:53 - 2009-07-14 05:34 - 00013216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-18 16:51 - 2013-02-08 13:45 - 01647120 _____ C:\Windows\WindowsUpdate.log
2013-12-18 16:48 - 2013-10-28 16:04 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Dropbox
2013-12-18 16:47 - 2013-10-28 16:08 - 00000000 ___RD C:\Users\Mü\Dropbox
2013-12-18 16:47 - 2013-02-09 13:39 - 00047154 _____ C:\Windows\setupact.log
2013-12-18 16:47 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-18 16:41 - 2013-12-18 16:41 - 00000954 _____ C:\Users\Mü\Desktop\JRT.txt
2013-12-18 16:41 - 2013-02-08 15:41 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-18 16:41 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-12-18 16:34 - 2013-12-18 16:34 - 00000000 ____D C:\Windows\ERUNT
2013-12-18 16:31 - 2013-12-18 16:20 - 00000000 ____D C:\AdwCleaner
2013-12-18 16:30 - 2013-12-18 16:30 - 00013610 _____ C:\Users\Mü\Desktop\AdwCleaner[S0].txt
2013-12-18 16:21 - 2013-12-18 16:21 - 01034531 _____ (Thisisu) C:\Users\Mü\Desktop\JRT.exe
2013-12-18 16:20 - 2013-12-18 16:19 - 01226750 _____ C:\Users\Mü\Desktop\adwcleaner.exe
2013-12-18 16:12 - 2013-12-12 17:35 - 00000000 ____D C:\Program Files\CyberGhost 5
2013-12-18 16:12 - 2013-05-28 17:59 - 00000000 ____D C:\Program Files\BlueStacks
2013-12-18 15:57 - 2013-12-18 15:57 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 15:53 - 2013-12-18 15:53 - 00614784 _____ C:\Users\Mü\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2013-12-18 15:52 - 2013-12-18 15:47 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-12-18 15:46 - 2013-12-18 15:46 - 02365840 _____ C:\Users\Mü\Downloads\SecurityTaskManager_Setup.exe
2013-12-18 15:46 - 2013-02-08 13:55 - 00006248 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-18 15:41 - 2013-06-27 16:29 - 00000000 ____D C:\Users\Mü\AppData\Local\CrashDumps
2013-12-18 15:38 - 2013-06-02 19:21 - 00000000 ____D C:\Windows\pss
2013-12-18 15:34 - 2013-02-12 08:45 - 02575206 _____ C:\Windows\PFRO.log
2013-12-18 13:55 - 2013-12-18 13:55 - 00000000 ____D C:\Users\Mü\AppData\Local\@ByELDI
2013-12-18 13:47 - 2013-02-09 13:38 - 00465960 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-18 13:39 - 2013-12-13 22:54 - 00000000 ____D C:\Users\Mü\AppData\Local\Microsoft_Corporation
2013-12-18 13:05 - 2013-02-11 09:46 - 00117528 _____ C:\Users\Mü\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-18 12:57 - 2013-02-08 17:43 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-18 12:44 - 2013-12-18 12:44 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-12-18 12:44 - 2009-07-14 09:57 - 00000000 ____D C:\Windows\ShellNew
2013-12-18 12:44 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-18 12:43 - 2013-12-18 12:42 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-18 12:43 - 2013-11-18 10:32 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-18 12:43 - 2013-02-08 17:02 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-12-18 12:42 - 2013-02-08 17:43 - 00000000 ____D C:\Program Files\Microsoft Office
2013-12-18 12:41 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-18 12:41 - 2009-07-14 03:04 - 00000478 _____ C:\Windows\win.ini
2013-12-18 12:39 - 2013-12-18 12:39 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2013-12-18 12:37 - 2013-12-18 12:37 - 00000000 __RHD C:\MSOCache
2013-12-18 11:10 - 2013-12-17 17:05 - 00000000 ____D C:\Program Files\MSECache
2013-12-18 11:07 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\MSBuild
2013-12-18 10:58 - 2013-12-18 10:58 - 00000000 ____D C:\Users\Mü\Downloads\Remove office 2007
2013-12-18 10:42 - 2013-04-08 16:02 - 00000000 ____D C:\Program Files\File Type Assistant
2013-12-18 10:09 - 2013-12-18 09:58 - 00003134 _____ C:\Users\Mü\Documents\KartenY.odb
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Sun
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Oracle
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\Program Files\Common Files\Java
2013-12-18 10:02 - 2013-12-18 10:02 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-12-18 10:02 - 2013-12-18 10:02 - 00000000 ____D C:\Program Files\Java
2013-12-18 10:00 - 2013-12-18 10:00 - 00915368 _____ (Oracle Corporation) C:\Users\Mü\Downloads\jxpiinstall.exe
2013-12-18 09:56 - 2013-12-18 09:38 - 00868352 _____ C:\Users\Mü\Documents\KartenY.accdb
2013-12-18 09:39 - 2013-02-08 17:43 - 00000000 ____D C:\Users\Mü\AppData\Local\Microsoft Help
2013-12-18 08:56 - 2013-12-12 18:03 - 00000000 ____D C:\Users\Mü\Documents\Settlers7
2013-12-18 08:53 - 2013-02-08 16:13 - 00000000 ____D C:\Users\Mü\AppData\Local\Windows Live
2013-12-17 20:16 - 2013-12-17 20:13 - 00000000 ____D C:\Users\Mü\AppData\Local\Cimaware
2013-12-17 18:28 - 2013-12-17 18:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\OpenOffice
2013-12-17 18:27 - 2013-12-17 18:27 - 00001074 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-12-17 18:26 - 2013-12-17 18:26 - 00000000 ____D C:\Program Files\OpenOffice 4
2013-12-17 18:20 - 2013-12-17 18:19 - 00614784 _____ C:\Users\Mü\Downloads\OpenOffice - CHIP-Downloader.exe
2013-12-17 17:59 - 2013-02-09 12:53 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Skype
2013-12-17 17:58 - 2013-12-17 17:55 - 77738888 _____ (Microsoft Corporation) C:\Users\Mü\Downloads\ExcelViewer.exe
2013-12-17 16:31 - 2013-12-17 16:28 - 06713344 _____ C:\Users\Mü\Documents\KartenY.xls
2013-12-17 16:29 - 2013-02-08 13:50 - 00000000 ____D C:\Users\Mü
2013-12-17 14:04 - 2013-12-17 13:14 - 00000000 ____D C:\Program Files\SpeedFan
2013-12-17 13:14 - 2013-12-17 13:13 - 00000045 _____ C:\Windows\system32\initdebug.nfo
2013-12-17 12:48 - 2013-04-03 15:28 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-12-17 09:43 - 2013-12-17 09:43 - 00001192 _____ C:\Users\Mü\Desktop\Die Siedler 7.lnk
2013-12-17 09:29 - 2013-12-17 09:29 - 00000000 ____D C:\Users\Mü\Documents\My Games
2013-12-17 09:28 - 2013-12-17 09:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-17 09:28 - 2013-02-12 12:03 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-12-17 09:27 - 2013-12-17 09:27 - 00042891 _____ C:\Windows\DirectX.log
2013-12-17 09:27 - 2013-12-17 09:27 - 00002103 _____ C:\Users\Mü\Desktop\Age of Empires III.lnk
2013-12-17 09:27 - 2013-12-17 09:27 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2013-12-17 09:24 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Microsoft Games
2013-12-17 09:21 - 2013-02-12 12:03 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2013-12-17 09:14 - 2013-12-16 15:51 - 00002417 _____ C:\Users\Public\Desktop\Norton 360.lnk
2013-12-17 09:14 - 2013-04-03 15:27 - 00000000 ____D C:\Windows\system32\Drivers\N360
2013-12-16 15:53 - 2013-02-08 14:15 - 00000000 ____D C:\ProgramData\Norton
2013-12-16 15:51 - 2013-04-03 15:28 - 00142936 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS
2013-12-16 15:51 - 2013-04-03 15:28 - 00008194 _____ C:\Windows\system32\Drivers\SYMEVENT.CAT
2013-12-16 15:50 - 2013-04-03 15:27 - 00000000 ____D C:\Program Files\Norton 360 Premier Edition
2013-12-16 15:40 - 2013-04-03 14:24 - 00000000 ____D C:\Users\Public\Downloads\Norton
2013-12-16 10:32 - 2013-08-19 16:36 - 00000000 ____D C:\Windows\system32\MRT
2013-12-13 23:04 - 2013-09-25 12:15 - 00000000 ____D C:\Users\Mü\AppData\Roaming\vlc
2013-12-13 22:54 - 2013-12-13 22:54 - 00000000 ____D C:\Program Files\Monreale Enterprises LLC
2013-12-13 21:58 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-12-13 21:49 - 2013-02-08 20:15 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 21:47 - 2013-12-12 17:35 - 00001881 _____ C:\Users\Mü\Desktop\CyberGhost 5.lnk
2013-12-13 21:46 - 2013-12-13 21:45 - 08610888 _____ (CyberGhost S.R.L. ) C:\Users\Mü\Downloads\CG_5.0.10.10.exe
2013-12-12 18:15 - 2013-12-12 17:36 - 00000000 ____D C:\Users\Mü\AppData\Local\CyberGhost
2013-12-12 17:46 - 2013-12-12 13:19 - 00000000 ____D C:\Program Files\Ubisoft
2013-12-12 17:36 - 2013-12-12 17:35 - 00000000 ____D C:\Program Files\TAP-Windows
2013-12-12 16:19 - 2013-12-12 16:19 - 01038704 _____ (Amazon Services LLC) C:\Users\Mü\Downloads\Die_Siedler_7_PC_Downloader.exe
2013-12-12 15:58 - 2013-12-12 15:58 - 00107888 _____ (Sony DADC Austria AG.) C:\Windows\system32\CmdLineExt.dll
2013-12-12 15:57 - 2013-12-12 15:57 - 00001306 _____ C:\Windows\DIFx.log
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Windows\system32\AGEIA
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Program Files\AGEIA Technologies
2013-12-12 15:49 - 2013-12-12 15:49 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-12-12 15:16 - 2013-12-12 14:21 - 00000000 ____D C:\Users\Mü\AppData\Local\Ubisoft Game Launcher
2013-12-12 13:18 - 2013-12-12 13:13 - 00000000 ____D C:\Users\Mü\AppData\Roaming\DAEMON Tools Lite
2013-12-12 13:18 - 2013-12-12 13:12 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-12-12 13:16 - 2013-02-09 10:53 - 00000000 ____D C:\Program Files\TuneUp Utilities 2013
2013-12-12 13:13 - 2013-12-12 13:13 - 00243128 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-12-12 13:13 - 2013-12-12 13:13 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2013-12-12 13:11 - 2013-12-12 13:11 - 13485616 _____ (Disc Soft Ltd) C:\Users\Mü\Downloads\DTLite4481-0347.exe
2013-12-11 16:41 - 2013-02-08 15:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 16:41 - 2013-02-08 15:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-10 18:43 - 2013-12-12 13:16 - 00022328 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-10 18:43 - 2013-02-09 12:30 - 00030520 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-12-10 18:43 - 2013-02-09 10:53 - 00032568 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-12-10 15:45 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-10 15:05 - 2013-04-26 13:49 - 00000000 ____D C:\Users\Mü\AppData\Local\Canon Easy-PhotoPrint EX
2013-12-10 14:59 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-09 18:48 - 2013-12-09 18:43 - 00010464 _____ C:\Windows\IE11_main.log
2013-12-09 18:44 - 2013-12-09 18:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-09 18:44 - 2013-12-09 18:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-09 18:44 - 2013-12-09 18:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-09 18:44 - 2013-12-09 18:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-09 17:52 - 2013-12-09 17:13 - 00000000 ____D C:\Users\Mü\.gimp-2.8
2013-12-09 17:51 - 2013-12-09 17:51 - 00002376 _____ C:\Users\Mü\AppData\Local\recently-used.xbel
2013-12-09 17:30 - 2013-12-09 17:29 - 00000000 ____D C:\Users\Mü\AppData\Local\gtk-2.0
2013-12-09 17:22 - 2013-12-09 17:22 - 00000000 ____D C:\Users\Mü\.thumbnails
2013-12-09 17:16 - 2013-04-10 14:35 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-12-09 17:10 - 2013-12-09 17:07 - 00000000 ____D C:\Program Files\GIMP 2
2013-12-09 17:03 - 2013-12-09 17:01 - 90396104 _____ (The GIMP Team ) C:\Users\Mü\Downloads\gimp-2.8.10-setup.exe
2013-12-09 16:29 - 2013-03-18 16:40 - 00000000 ____D C:\Users\Mü\AppData\Roaming\dvdcss
2013-12-04 18:23 - 2013-12-04 18:23 - 02833752 _____ C:\Users\Mü\Downloads\XYplorer_13.40_Install_CHIP.exe
2013-12-03 17:48 - 2013-11-18 16:21 - 00000000 ____D C:\Users\Mü\Desktop\Ebay
2013-12-01 21:39 - 2013-02-08 19:42 - 00000000 ____D C:\Users\Mü\AppData\Roaming\FileZilla
2013-12-01 16:05 - 2013-12-01 15:37 - 00000000 ____D C:\Users\Mü\Documents\Freemake
2013-12-01 16:05 - 2013-12-01 15:36 - 00000000 ____D C:\ProgramData\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00001278 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Program Files\Freemake
2013-12-01 15:01 - 2013-02-08 19:18 - 00000000 ____D C:\Users\Mü\AppData\Roaming\DVDVideoSoft
2013-12-01 15:01 - 2013-02-08 19:18 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-12-01 15:01 - 2013-02-08 19:18 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-12-01 14:59 - 2013-12-01 14:59 - 33253288 _____ (DVDVideoSoft Ltd. ) C:\Users\Mü\Downloads\FreeVideoToDVDConverter.exe
2013-12-01 14:12 - 2013-12-01 14:12 - 00001895 _____ C:\Users\Mü\Desktop\CDBurnerXP.lnk
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Program Files\CDBurnerXP
2013-12-01 14:11 - 2013-12-01 14:11 - 04985608 _____ (Canneverbe Limited ) C:\Users\Mü\Downloads\cdbxp_setup_4.5.2.4291_minimal.exe
2013-12-01 14:08 - 2013-12-01 14:08 - 01271872 _____ (Ellora Assets Corporation ) C:\Users\Mü\Downloads\FreemakeVideoConverterSetup.exe
2013-12-01 13:27 - 2013-02-09 12:08 - 00000000 ____D C:\Users\Mü\AppData\Local\Adobe
2013-12-01 13:26 - 2013-02-21 13:04 - 00000000 ____D C:\Users\Mü\AppData\Local\QuickPar
2013-11-30 12:04 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-26 11:11 - 2013-12-13 21:55 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-13 21:55 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-13 21:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-13 21:55 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-13 21:55 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-13 21:55 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-13 21:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-13 21:55 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-13 21:55 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-13 21:55 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-13 21:55 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-13 21:55 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-13 21:55 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-13 21:55 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-13 21:55 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-13 21:55 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-13 21:55 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-13 21:55 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-13 21:55 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-23 19:26 - 2013-12-12 13:10 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-18 15:31 - 2013-02-08 16:06 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
Some content of TEMP:
====================
C:\Users\Mü\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\Mü\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Mü\AppData\Local\Temp\sfextra.dll
C:\Users\Mü\AppData\Local\Temp\uninst1.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-10 15:37
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- --- --- --- --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 18-12-2013 03
Ran by Mü at 2013-12-18 17:11:24
Running from C:\Users\Mü\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Norton 360 Premier Edition (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton 360 Premier Edition (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton 360 Premier Edition (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
==================== Installed Programs ======================
Acer Crystal Eye Webcam (Version: 5.2.7.1)
Acer Updater (Version: 1.02.3502)
Adobe AIR (Version: 3.7.0.1530)
Adobe AIR Free Download Packages
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05)
Age of Empires III (Version: 1.00.0000)
Alle meine Passworte 3.21
Alt.Binz 0.39.4 (Version: 0.39.4)
AMD USB Filter Driver (Version: 1.0.13.88)
ATI Catalyst Install Manager (Version: 3.0.741.0)
BlueStacks App Player (Version: 0.7.12.896)
BlueStacks Notification Center (Version: 0.7.12.896)
calibre (Version: 1.5.0)
Canon Easy-PhotoPrint EX
Canon Easy-WebPrint EX
Canon IJ Network Scanner Selector EX
Canon IJ Network Tool (Version: 3.1.1)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program
Canon MG5300 series Benutzerregistrierung
Canon MG5300 series MP Drivers
Canon MG5300 series On-screen Manual
Canon MP Navigator EX 5.0
Canon My Printer
Canon Solution Menu EX
Captcha Brotherhood (Version: 1.1.9)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Core Implementation (Version: 2009.0813.2131.36817)
Catalyst Control Center Graphics Full Existing (Version: 2009.0813.2131.36817)
Catalyst Control Center Graphics Full New (Version: 2009.0813.2131.36817)
Catalyst Control Center Graphics Light (Version: 2009.0813.2131.36817)
Catalyst Control Center InstallProxy (Version: 2009.0813.2131.36817)
Catalyst Control Center Localization All (Version: 2009.0813.2131.36817)
CCC Help Chinese Standard (Version: 2009.0813.2130.36817)
CCC Help Chinese Traditional (Version: 2009.0813.2130.36817)
CCC Help Czech (Version: 2009.0813.2130.36817)
CCC Help Danish (Version: 2009.0813.2130.36817)
CCC Help Dutch (Version: 2009.0813.2130.36817)
CCC Help English (Version: 2009.0813.2130.36817)
CCC Help Finnish (Version: 2009.0813.2130.36817)
CCC Help French (Version: 2009.0813.2130.36817)
CCC Help German (Version: 2009.0813.2130.36817)
CCC Help Greek (Version: 2009.0813.2130.36817)
CCC Help Hungarian (Version: 2009.0813.2130.36817)
CCC Help Italian (Version: 2009.0813.2130.36817)
CCC Help Japanese (Version: 2009.0813.2130.36817)
CCC Help Korean (Version: 2009.0813.2130.36817)
CCC Help Norwegian (Version: 2009.0813.2130.36817)
CCC Help Polish (Version: 2009.0813.2130.36817)
CCC Help Portuguese (Version: 2009.0813.2130.36817)
CCC Help Russian (Version: 2009.0813.2130.36817)
CCC Help Spanish (Version: 2009.0813.2130.36817)
CCC Help Swedish (Version: 2009.0813.2130.36817)
CCC Help Thai (Version: 2009.0813.2130.36817)
CCC Help Turkish (Version: 2009.0813.2130.36817)
ccc-core-static (Version: 2009.0813.2131.36817)
ccc-utility (Version: 2009.0813.2131.36817)
CDBurnerXP (Version: 4.5.2.4291)
Citavi (Version: 3.4.0.2)
Compatibility Pack für 2007 Office System (Version: 12.0.6514.5001)
Conflicted Copy Pro (Version: 1.0.0)
CrystalDiskInfo 5.6.2 (Version: 5.6.2)
CyberGhost 5
D3DX10 (Version: 15.4.2368.0902)
DAEMON Tools Lite (Version: 4.48.1.0347)
devolo dLAN Cockpit (Version: 4.1.3.0)
Die Siedler 7 (Version: 1.12.1396)
dreamboxEDIT -- The one and only settings editor for your Dreambox
DreamStream E2 (Version: 0.4.0 (Beta 14a))
Dropbox (HKCU Version: 2.4.6)
DVD Flick 1.3.0.7 (Version: 1.3.0.7)
FileZilla Client 3.7.3 (Version: 3.7.3)
Final Media Player 2012 (Version: 2012.10.9.0)
Fingerprint Solution (Version: 6.1.56.0)
Free DVD Video Burner version 3.2.7.1125 (Version: 3.2.7.1125)
Free Studio version 2013 (Version: 6.0.0.128)
Free Video to DVD Converter version 5.0.31.1125 (Version: 5.0.31.1125)
Freemake Video Converter Version 4.1.1 (Version: 4.1.1)
GIMP 2.8.10 (Version: 2.8.10)
Google Update Helper (Version: 1.3.23.0)
HTC BMP USB Driver (Version: 1.0.5375)
HTC Driver Installer (Version: 4.0.1.001)
ImgBurn (Version: 2.5.8.0)
IPTInstaller (Version: 4.0.8)
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
JDownloader 0.9 (Version: 0.9)
Junk Mail filter update (Version: 16.4.3505.0912)
Launch Manager (Version: 3.0.02)
LG United Mobile Driver (Version: 3.8.1)
LSI HDA Modem (Version: 2.2.96)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (Version: 10.0.40820)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (Version: 10.0.40825)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU (Version: 10.0.40820)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (Version: 10.0.40820)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
Mozilla Firefox 25.0.1 (x86 de) (Version: 25.0.1)
Mozilla Maintenance Service (Version: 25.0.1)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT110 (Version: 16.4.1108.0727)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
NAVIGON Fresh 3.3.2 (Version: 3.3.2)
Norton 360 (Version: 21.1.0.18)
Nuvoton CIR Device Driver (Version: 8.60.1000)
NVIDIA PhysX v8.04.25 (Version: 8.04.25)
OpenOffice 4.0.1 (Version: 4.01.9714)
Origin (Version: 9.1.15.109)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017)
PDF-Viewer (Version: 2.5.211.0)
PreReq (Version: 6.2.4.0)
QuickPar 0.9 (Version: 0.9)
Realtek High Definition Audio Driver (Version: 6.0.1.5888)
Skype™ 6.5 (Version: 6.5.158)
TAP-Windows 9.9.2 (Version: 9.9.2)
TuneUp Utilities 2013 (Version: 13.0.4000.179)
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.4000.179)
Ubisoft Game Launcher (Version: 1.0.0.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
Update for Microsoft Office 2013 (KB2726961) 32-Bit Edition
Update for Microsoft Office 2013 (KB2752100) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760311) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760621) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760624) 32-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2726947) 32-Bit Edition
Update for Microsoft SharePoint Workspace 2013 (KB2760358) 32-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2751994) 32-Bit Edition
Update for Microsoft Word 2013 (KB2738044) 32-Bit Edition
Update for Microsoft Word 2013 (KB2752073) 32-Bit Edition
VLC media player 2.0.8 (Version: 2.0.8)
Windows Live Communications Platform (Version: 16.4.3505.0912)
Windows Live Essentials (Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (Version: 16.4.3505.0912)
Windows Live Mail (Version: 16.4.3505.0912)
Windows Live MIME IFilter (Version: 16.4.3505.0912)
Windows Live Photo Common (Version: 16.4.3505.0912)
Windows Live PIMT Platform (Version: 16.4.3505.0912)
Windows Live SOXE (Version: 16.4.3505.0912)
Windows Live SOXE Definitions (Version: 16.4.3505.0912)
Windows Live UX Platform (Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912)
Windows Live Writer (Version: 16.4.3505.0912)
Windows Live Writer Resources (Version: 16.4.3505.0912)
WinRAR 4.20 (32-Bit) (Version: 4.20.0)
Xvid 1.2.2 final uninstall (Version: 1.2)
==================== Restore Points =========================
==================== Hosts content: ==========================
2013-05-17 13:19 - 2013-05-17 13:20 - 00000856 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
==================== Scheduled Tasks (whitelisted) =============
Task: {474B966F-CB91-48A2-87E2-D3419F23134A} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {48A690CE-9861-4CF4-8FEA-0D87865FBE26} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2013-12-10] (TuneUp Software)
Task: {4F8208F6-73A1-44D2-9F6C-48348141C663} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {627062B5-C96C-401D-AEE0-FF5DD70B2EA1} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\symerr.exe [2013-08-01] (Symantec Corporation)
Task: {67A9DF2B-11DD-4133-9E93-4D63C8F88935} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2663372261-765519811-3386082939-1001
Task: {6E55C109-597D-4127-9334-ADD3D127E2D7} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\WSCStub.exe [2013-10-08] (Symantec Corporation)
Task: {77B34AE5-A27E-4311-AADB-AC3B6F4A8E38} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\microsoft shared\OFFICE15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {7DA1CD5B-AE9B-492A-BCC1-97FF97BAA4C4} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {802482A5-4498-4C12-8BEF-09838D6D9960} - System32\Tasks\Final Media Player Update Checker => C:\Program Files\FinalMediaPlayer\FMPCheckForUpdates.exe [2013-03-25] (Bitberry Software)
Task: {854D2218-69B4-4E58-B7D3-B3DB80DBC30A} - System32\Tasks\Auto Re-Aktivierung => C:\Windows\Re-Aktivierung\TriggerKMS.exe [2013-01-23] ()
Task: {9D1760DD-235A-4163-8BA1-78214C098799} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\symerr.exe [2013-08-01] (Symantec Corporation)
Task: {B6897450-0F78-4510-B308-111243520904} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Mü-PC-Mü Mü-PC => C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE [2012-10-01] (Microsoft Corporation)
Task: {BA07D331-8464-40F1-96F3-FF46FBECE930} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {D6C2C9A3-CD96-4544-A95D-5459490BFD78} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {E70C4A0C-BFB6-4375-BC1E-5E07C103B0BB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {EB57043A-6910-4B24-915E-F309BC924C1D} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {EFF163C8-46E1-42A8-BB61-6D5C53344785} - System32\Tasks\elevated_Integrator_1~PUENUT1~ARGORPC => C:\Program Files\TuneUp Utilities 2013\Integrator.exe [2013-12-10] (TuneUp Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Final Media Player Update Checker.job => C:\Program Files\FinalMediaPlayer\FMPCheckForUpdates.exe
==================== Loaded Modules (whitelisted) =============
2013-08-07 20:25 - 2013-08-07 20:25 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2013-12-13 21:47 - 2013-11-26 09:52 - 00032768 _____ () C:\Program Files\CyberGhost 5\de\CyberGhost.resources.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Mü\AppData\Roaming\Dropbox\bin\libcef.dll
2013-11-18 10:32 - 2013-11-18 10:32 - 03363952 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-05-22 14:18 - 2013-05-22 14:18 - 00122880 _____ () C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox\components\CitaviPickerCommunication.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/18/2013 04:47:41 PM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
System errors:
=============
Error: (12/18/2013 04:47:41 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Microsoft Office Sessions:
=========================
Error: (12/18/2013 04:47:41 PM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
==================== Memory info ===========================
Percentage of memory in use: 44%
Total physical RAM: 3294.36 MB
Available physical RAM: 1814.46 MB
Total Pagefile: 6587.01 MB
Available Pagefile: 4978.03 MB
Total Virtual: 2047.88 MB
Available Virtual: 1906.41 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:226.53 GB) (Free:172.72 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:465.76 GB) (Free:293.12 GB) NTFS
Drive e: () (Fixed) (Total:221.5 GB) (Free:221.4 GB) NTFS
Drive i: (ext. FP 200GB Studium EHS) (Fixed) (Total:232.88 GB) (Free:232.74 GB) NTFS
Drive k: (ext. FP 500GB grau) (Fixed) (Total:465.76 GB) (Free:330.75 GB) NTFS
Drive l: (ext. FP 1000GB schwarz) (Fixed) (Total:931.51 GB) (Free:32.82 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E20EC200)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=227 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=222 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=5 GB) - (Type=12)
========================================================
Disk: 1 (Size: 466 GB) (Disk ID: F65A8C13)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 3 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: 3AFD1B49)
Partition 1: (Not Active) - (Size=233 GB) - (Type=07 NTFS)
========================================================
Disk: 4 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: 5B2CC482)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 5 (Size: 932 GB) (Disk ID: E8900690)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Hier noch der Log von Antivirus, mit der Suspicious.Cloud.9 Code:
ATTFilter Kategorie: Behobene Sicherheitsrisiken
Datum/Uhrzeit,Risiko,Aktivität,Status,Empfohlene Aktion,Pfad - Dateiname
18.12.2013 16:31:49,Hoch,quarantine.exe (Suspicious.Cloud.9) erkannt von Auto-Protect,Isoliert,Behoben - Keine Aktion erforderlich,c:\users\mü\appdata\local\temp\quarantine.exe
18.12.2013 16:23:50,Hoch,quarantine.exe (Suspicious.Cloud.9) erkannt von Auto-Protect,Blockiert,Behoben - Keine Aktion erforderlich,
18.12.2013 16:21:30,Hoch,quarantine.exe (Suspicious.Cloud.9) erkannt von Auto-Protect,Isoliert,Behoben - Keine Aktion erforderlich,c:\users\mü\appdata\local\temp\quarantine.exe
28.11.2013 16:25:06,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
28.11.2013 13:31:41,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
28.10.2013 14:23:16,Gering,background.js (Adware.DealPly) erkannt von Virenscanner,Isoliert,Behoben - Keine Aktion erforderlich,c:\users\mü\appdata\local\google\chrome\user data\default\extensions\ejnmnhkgiphcaeefbaooconkceehicfi\3.5.0.0_0\background.js
28.10.2013 13:40:56,Gering,Adware.DealPly erkannt von Virenscanner,Isoliert,Behoben - Keine Aktion erforderlich,c:\program files\dealply\dealply.xpi
28.10.2013 13:30:21,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
26.10.2013 08:31:08,Gering,goopdate.dll (Adware.BL) erkannt von Auto-Protect,Isoliert,Behoben - Keine Aktion erforderlich,c:\program files\dealplylive\update\1.3.23.0\goopdate.dll
04.10.2013 12:48:01,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
27.09.2013 13:36:37,Gering,dealplylivehandler.exe (Adware.BL) erkannt von Auto-Protect,Isoliert,Behoben - Keine Aktion erforderlich,c:\program files\dealplylive\update\1.3.23.0\dealplylivehandler.exe
27.09.2013 13:31:53,Gering,dealplylive.exe (Adware.BL) erkannt von Auto-Protect,Isoliert,Behoben - Keine Aktion erforderlich,c:\program files\dealplylive\update\dealplylive.exe
11.09.2013 12:12:37,Mittel,patch.dll (WS.Reputation.1) erkannt von Download-Insight,Isoliert,Behoben - Keine Aktion erforderlich,d:\downloads\dungeon keeper 2\patch.dll
11.09.2013 12:11:37,Mittel,patch.dll (WS.Reputation.1) erkannt von Download-Insight,Isoliert,Behoben - Keine Aktion erforderlich,d:\downloads\dungeon keeper 2\patch.dll
11.09.2013 12:11:33,Mittel,dkii-dx.exe (WS.Reputation.1) erkannt von Download-Insight,Isoliert,Behoben - Keine Aktion erforderlich,d:\downloads\dungeon keeper 2\dkii-dx.exe
11.09.2013 10:37:46,Mittel,patch.dll (WS.Reputation.1) erkannt von Download-Insight,Isoliert,Behoben - Keine Aktion erforderlich,d:\downloads\dungeon keeper 2\patch.dll
11.09.2013 10:37:44,Mittel,goggame.dll (WS.Reputation.1) erkannt von Download-Insight,Isoliert,Behoben - Keine Aktion erforderlich,d:\downloads\dungeon keeper 2\goggame.dll
11.09.2013 10:37:42,Mittel,dkii-dx.exe (WS.Reputation.1) erkannt von Download-Insight,Isoliert,Behoben - Keine Aktion erforderlich,d:\downloads\dungeon keeper 2\dkii-dx.exe
31.08.2013 10:53:59,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
27.08.2013 13:09:46,Hoch,WS.Viral.1 erkannt von E-Mail-Scanner,Isoliert,Behoben - Keine Aktion erforderlich,forderung der stornierten zahlung ihrer bestellung 23.08.2013.zip
03.08.2013 08:39:20,Hoch,lkcvxpeq.exe.part (Trojan.ADH) erkannt von Download-Insight,Isoliert,Behoben - Keine Aktion erforderlich,c:\users\mü\appdata\local\temp\lkcvxpeq.exe.part
01.08.2013 09:38:31,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
05.07.2013 19:25:19,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
04.06.2013 14:19:48,Hoch,simpsons tapped out v4.2.4_androidmegacity.blogspot.com.apk.exe (SecurityRisk.Downldr) erkannt von Download-Insight,Isoliert,Behoben - Keine Aktion erforderlich,c:\users\mü\downloads\simpsons tapped out v4.2.4_androidmegacity.blogspot.com.apk.exe
04.06.2013 14:19:46,Hoch,f57d4d01 (SecurityRisk.Downldr) erkannt von Download-Insight,Isoliert,Behoben - Keine Aktion erforderlich,c:\users\mü\appdata\local\mozilla\firefox\profiles\9yfi2xu0.default\cache\f\3e\f57d4d01
04.06.2013 14:19:21,Hoch,9rmnuj9n.exe.part (SecurityRisk.Downldr) erkannt von Download-Insight,Isoliert,Behoben - Keine Aktion erforderlich,c:\users\mü\appdata\local\temp\9rmnuj9n.exe.part
04.06.2013 14:07:41,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
04.06.2013 11:41:24,Gering,browserprotect.dll (Adware.GoonSquad) erkannt von Auto-Protect,Isoliert,Behoben - Keine Aktion erforderlich,c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.dll
01.06.2013 14:53:55,Gering,browserprotect.exe (Adware.GoonSquad) erkannt von Auto-Protect,Isoliert,Behoben - Keine Aktion erforderlich,c:\programdata\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.exe
21.05.2013 18:35:53,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
17.04.2013 16:44:02,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
15.03.2013 19:43:33,Hoch,"Risiken in der komprimierten Datei \"4630798848_0fc137a36e.rar\" erkannt von Virenscanner",Isoliert,Behoben - Keine Aktion erforderlich,c:\$recycle.bin\s-1-5-21-2663372261-765519811-3386082939-1001\$rz8tqv9\4630798848_0fc137a36e.rar
15.03.2013 19:43:33,Hoch,"Risiken in der komprimierten Datei \"$rcgqo3z.zip\" erkannt von Virenscanner",Isoliert,Behoben - Keine Aktion erforderlich,c:\$recycle.bin\s-1-5-21-2663372261-765519811-3386082939-1001\$rcgqo3z.zip
15.03.2013 19:43:32,Hoch,"Risiken in der komprimierten Datei \"$r6hd57x.rar\" erkannt von Virenscanner",Isoliert,Behoben - Keine Aktion erforderlich,d:\$recycle.bin\s-1-5-21-2663372261-765519811-3386082939-1001\$r6hd57x.rar
15.03.2013 18:37:29,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
06.03.2013 17:00:40,Gering,nc.exe (NetCat) erkannt von Auto-Protect,Isoliert,Behoben - Keine Aktion erforderlich,c:\users\mü\downloads\router\fritz!box\nc.exe
13.02.2013 17:39:18,Gering,Tracking Cookies erkannt von Virenscanner,Entfernt,Behoben - Keine Aktion erforderlich,
Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.18.05 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 11.0.9600.16476 Mü :: MÜ-PC [Administrator] Schutz: Aktiviert 18.12.2013 17:44:29 mbam-log-2013-12-18 (17-44-29).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 210515 Laufzeit: 15 Minute(n), 40 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 5 C:\$Recycle.Bin\S-1-5-21-2663372261-765519811-3386082939-1001\$R8RZBD1.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\$Recycle.Bin\S-1-5-21-2663372261-765519811-3386082939-1001\$RYLB7H6.exe (PUP.Optional.Softonic) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\$Recycle.Bin\S-1-5-21-2663372261-765519811-3386082939-1001\$RFZH9T7.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Mü\Downloads\DTLite4481-0347.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Mü\Downloads\FreemakeVideoConverterSetup.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende)  Der vollständige Systemscan läuft gerade und hat nach 20 Minuten wieder 62 infizierte Objekte... |
|
18.12.2013, 19:03
| #2 |
| /// the machine /// TB-Ausbilder    | Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. Hi,
__________________dann warte ich mal auf das Log von dem Scan 
__________________ |
|
19.12.2013, 18:36
| #3 |
| | Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. 18.12.13 20:00Uhr
__________________Hi schrauber, vielen Dank für deine Hilfe! Hier der Scan, die Dateien die gefunden wurden waren schon in Quarantäne von adwcleaner.. Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.18.05 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 11.0.9600.16476 Mü :: MÜ-PC [Administrator] Schutz: Aktiviert 18.12.2013 18:09:13 mbam-log-2013-12-18 (18-09-13).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|I:\|K:\|L:\|Z:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 386220 Laufzeit: 2 Stunde(n), 2 Minute(n), 32 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 63 C:\$Recycle.Bin\S-1-5-21-2663372261-765519811-3386082939-1001\$R6P79JD\PhotoshopPortable\App\PhotoshopCS6\amtlib.dll (PUP.RiskwareTool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\DealPlyLiveBroker.exe.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\DealPlyLiveOnDemand.exe.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_bg.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_bn.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_ca.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_cs.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_da.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_de.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_el.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_en-GB.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_en.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_es-419.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_es.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_et.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_fa.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_fi.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_fil.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_gu.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_hi.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_hr.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_hu.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_id.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_is.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_it.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_iw.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_ja.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_kn.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_ko.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_lt.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_lv.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_ml.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_mr.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_am.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_nl.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_no.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_pl.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_pt-BR.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_pt-PT.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_ro.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_ru.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_sk.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_sl.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_sr.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_sv.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_sw.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_ta.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_te.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_th.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_tr.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_uk.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_ur.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_vi.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_zh-CN.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_zh-TW.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\psmachine.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\psuser.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_ar.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_fr.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Program Files\DealPlyLive\Update\1.3.23.0\goopdateres_ms.dll.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\AdwCleaner\Quarantine\C\Users\Mü\AppData\Roaming\OpenCandy\EC6B6C83BB774C728AD6F918BF7147CD\dp.exe.vir (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. K:\MÜ-PC\Backup Set 2013-12-11 184241\Backup Files 2013-12-12 131230\Backup files 1.zip (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-12-2013 03
Ran by Mü (administrator) on MÜ-PC on 18-12-2013 20:25:48
Running from C:\Users\Mü\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe
(devolo AG) C:\Program Files\devolo\dlan\devolonetsvc.exe
() C:\Program Files\Canon\IJPLM\ijplmsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\N360.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Symantec Corporation) C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\N360.exe
(CyberGhost S.R.L.) C:\Program Files\CyberGhost 5\CyberGhost.exe
(Dropbox, Inc.) C:\Users\Mü\AppData\Roaming\Dropbox\bin\Dropbox.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
(The OpenVPN Project) C:\Program Files\CyberGhost 5\Data\OpenVPN\openvpn.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
==================== Registry (Whitelisted) ==================
HKCU\...\Run: [CyberGhost] - C:\Program Files\CyberGhost 5\CyberGhost.exe [361072 2013-12-17] (CyberGhost S.R.L.)
MountPoints2: {2f045804-6325-11e3-bcf9-00238b1c50ea} - H:\CDCheck.exe
MountPoints2: {e4068ce1-66f2-11e3-acb6-00238b1c50ea} - J:\CDCheck.exe
IFEO\skype.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
Lsa: [Notification Packages]
Startup: C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Mü\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x32F1B5760306CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\IPS\IPSBHO.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{34B64262-1E22-47F6-977C-1707012A8262}: [NameServer]79.141.167.14,79.141.160.23
Tcpip\..\Interfaces\{3C9C37A4-0F7C-4F25-9C08-F6BF1240452D}: [NameServer]79.141.167.14,79.141.160.23
FireFox:
========
FF ProfilePath: C:\Users\Mü\AppData\Roaming\Mozilla\Firefox\Profiles\8adqg96g.default-1371571406636
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Mü\AppData\Roaming\Mozilla\Firefox\Profiles\8adqg96g.default-1371571406636\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
========================== Services (Whitelisted) =================
R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (LSI Corporation)
S2 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [393032 2013-05-13] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [384840 2013-05-13] (BlueStack Systems, Inc.)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [63600 2013-12-17] (CyberGhost S.R.L)
R2 DevoloNetworkService; C:\Program Files\devolo\dlan\devolonetsvc.exe [3526136 2013-08-27] (devolo AG)
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [255376 2012-04-05] (Acer Incorporated)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 N360; C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\diMaster.dll [567600 2013-10-08] (Symantec Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1729336 2013-12-10] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus.sys [14336 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag.sys [20736 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps.sys [20096 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem.sys [25088 2012-03-02] (LG Electronics Inc.)
R1 BHDrvx86; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20131203.001\BHDrvx86.sys [1098968 2013-12-03] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [63816 2013-05-13] (BlueStack Systems)
R1 ccSet_N360; C:\Windows\system32\drivers\N360\1501000.012\ccSetx86.sys [127064 2013-09-26] (Symantec Corporation)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-12-12] (Disc Soft Ltd)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-12-15] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-12-15] (Symantec Corporation)
R1 IDSVix86; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20131217.001\IDSvix86.sys [394456 2013-12-16] (Symantec Corporation)
R2 int15; C:\Windows\system32\drivers\int15.sys [69632 2008-03-12] ()
R3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [48640 2009-08-23] (Atheros Communications, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2013-12-18] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20131218.002\NAVENG.SYS [93272 2013-12-15] (Symantec Corporation)
R3 NAVEX15; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20131218.002\NAVEX15.SYS [1612376 2013-12-15] (Symantec Corporation)
R2 NPF_devolo; C:\Windows\system32\drivers\npf_devolo.sys [35840 2013-08-27] (CACE Technologies)
R3 nuvotoncir; C:\Windows\System32\DRIVERS\nuvotoncir.sys [44544 2009-06-24] (Nuvoton Technology Corporation)
S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [159776 2009-06-24] (Realtek Semiconductor Corp.)
R1 SRTSP; C:\Windows\System32\Drivers\N360\1501000.012\SRTSP.SYS [651352 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360\1501000.012\SRTSPX.SYS [32344 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360\1501000.012\SYMDS.SYS [367704 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360\1501000.012\SYMEFA.SYS [935512 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142936 2013-12-16] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360\1501000.012\Ironx86.SYS [206936 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360\1501000.012\SYMNETS.SYS [446552 2013-09-26] (Symantec Corporation)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [31360 2013-02-08] (The OpenVPN Project)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-09-19] (TuneUp Software)
S3 winbondcir; C:\Windows\System32\DRIVERS\winbondcir.sys [43008 2007-03-28] (Winbond Electronics Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-18 20:21 - 2013-12-18 20:21 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-12-18 17:38 - 2013-12-18 17:38 - 00012760 _____ C:\Users\Mü\Desktop\Behobene Sicherheitsrisiken.txt
2013-12-18 17:11 - 2013-12-18 17:11 - 00018516 _____ C:\Users\Mü\Desktop\Addition.txt
2013-12-18 17:10 - 2013-12-18 20:25 - 00013835 _____ C:\Users\Mü\Desktop\FRST.txt
2013-12-18 17:10 - 2013-12-18 17:10 - 00000000 ____D C:\FRST
2013-12-18 16:55 - 2013-12-18 16:55 - 01062259 _____ (Farbar) C:\Users\Mü\Desktop\FRST.exe
2013-12-18 16:41 - 2013-12-18 16:41 - 00000954 _____ C:\Users\Mü\Desktop\JRT.txt
2013-12-18 16:34 - 2013-12-18 16:34 - 00000000 ____D C:\Windows\ERUNT
2013-12-18 16:30 - 2013-12-18 16:30 - 00013610 _____ C:\Users\Mü\Desktop\AdwCleaner[S0].txt
2013-12-18 16:21 - 2013-12-18 16:21 - 01034531 _____ (Thisisu) C:\Users\Mü\Desktop\JRT.exe
2013-12-18 16:20 - 2013-12-18 16:31 - 00000000 ____D C:\AdwCleaner
2013-12-18 16:19 - 2013-12-18 16:20 - 01226750 _____ C:\Users\Mü\Desktop\adwcleaner.exe
2013-12-18 15:57 - 2013-12-18 15:57 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 15:57 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-18 15:53 - 2013-12-18 15:53 - 00614784 _____ C:\Users\Mü\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2013-12-18 15:47 - 2013-12-18 15:52 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-12-18 15:46 - 2013-12-18 15:46 - 02365840 _____ C:\Users\Mü\Downloads\SecurityTaskManager_Setup.exe
2013-12-18 13:55 - 2013-12-18 13:55 - 00000000 ____D C:\Users\Mü\AppData\Local\@ByELDI
2013-12-18 13:05 - 2013-02-03 22:50 - 00000000 ____D C:\Windows\Re-Aktivierung
2013-12-18 12:44 - 2013-12-18 12:44 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-12-18 12:42 - 2013-12-18 12:43 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-18 12:39 - 2013-12-18 12:39 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2013-12-18 12:37 - 2013-12-18 12:37 - 00000000 __RHD C:\MSOCache
2013-12-18 10:58 - 2013-12-18 10:58 - 00000000 ____D C:\Users\Mü\Downloads\Remove office 2007
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Sun
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Oracle
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\Program Files\Common Files\Java
2013-12-18 10:02 - 2013-12-18 10:02 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-12-18 10:02 - 2013-12-18 10:02 - 00000000 ____D C:\Program Files\Java
2013-12-18 10:00 - 2013-12-18 10:00 - 00915368 _____ (Oracle Corporation) C:\Users\Mü\Downloads\jxpiinstall.exe
2013-12-18 09:58 - 2013-12-18 10:09 - 00003134 _____ C:\Users\Mü\Documents\KartenY.odb
2013-12-18 09:38 - 2013-12-18 18:51 - 01454080 _____ C:\Users\Mü\Documents\KartenY.accdb
2013-12-17 20:13 - 2013-12-17 20:16 - 00000000 ____D C:\Users\Mü\AppData\Local\Cimaware
2013-12-17 18:28 - 2013-12-17 18:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\OpenOffice
2013-12-17 18:27 - 2013-12-17 18:27 - 00001074 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-12-17 18:26 - 2013-12-17 18:26 - 00000000 ____D C:\Program Files\OpenOffice 4
2013-12-17 18:19 - 2013-12-17 18:20 - 00614784 _____ C:\Users\Mü\Downloads\OpenOffice - CHIP-Downloader.exe
2013-12-17 17:55 - 2013-12-17 17:58 - 77738888 _____ (Microsoft Corporation) C:\Users\Mü\Downloads\ExcelViewer.exe
2013-12-17 17:05 - 2013-12-18 11:10 - 00000000 ____D C:\Program Files\MSECache
2013-12-17 16:28 - 2013-12-17 16:31 - 06713344 _____ C:\Users\Mü\Documents\KartenY.xls
2013-12-17 13:14 - 2013-12-17 14:04 - 00000000 ____D C:\Program Files\SpeedFan
2013-12-17 13:13 - 2013-12-17 13:14 - 00000045 _____ C:\Windows\system32\initdebug.nfo
2013-12-17 09:43 - 2013-12-17 09:43 - 00001192 _____ C:\Users\Mü\Desktop\Die Siedler 7.lnk
2013-12-17 09:29 - 2013-12-17 09:29 - 00000000 ____D C:\Users\Mü\Documents\My Games
2013-12-17 09:28 - 2013-12-17 09:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-17 09:27 - 2013-12-17 09:27 - 00042891 _____ C:\Windows\DirectX.log
2013-12-17 09:27 - 2013-12-17 09:27 - 00002103 _____ C:\Users\Mü\Desktop\Age of Empires III.lnk
2013-12-17 09:27 - 2013-12-17 09:27 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2013-12-16 15:51 - 2013-12-17 09:14 - 00002417 _____ C:\Users\Public\Desktop\Norton 360.lnk
2013-12-13 22:54 - 2013-12-18 13:39 - 00000000 ____D C:\Users\Mü\AppData\Local\Microsoft_Corporation
2013-12-13 21:55 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 21:55 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 21:55 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-13 21:55 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-13 21:55 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-13 21:55 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 21:55 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 21:55 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-13 21:55 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-13 21:55 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 21:55 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-13 21:55 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-13 21:55 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 21:55 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 21:55 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 21:55 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 21:55 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-13 21:55 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 21:55 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 21:49 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-13 21:49 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-13 21:45 - 2013-12-13 21:46 - 08610888 _____ (CyberGhost S.R.L. ) C:\Users\Mü\Downloads\CG_5.0.10.10.exe
2013-12-12 18:03 - 2013-12-18 17:49 - 00000000 ____D C:\Users\Mü\Documents\Settlers7
2013-12-12 17:36 - 2013-12-12 18:15 - 00000000 ____D C:\Users\Mü\AppData\Local\CyberGhost
2013-12-12 17:35 - 2013-12-18 19:25 - 00000000 ____D C:\Program Files\CyberGhost 5
2013-12-12 17:35 - 2013-12-13 21:47 - 00001881 _____ C:\Users\Mü\Desktop\CyberGhost 5.lnk
2013-12-12 17:35 - 2013-12-12 17:36 - 00000000 ____D C:\Program Files\TAP-Windows
2013-12-12 16:19 - 2013-12-12 16:19 - 01038704 _____ (Amazon Services LLC) C:\Users\Mü\Downloads\Die_Siedler_7_PC_Downloader.exe
2013-12-12 15:58 - 2013-12-12 15:58 - 00107888 _____ (Sony DADC Austria AG.) C:\Windows\system32\CmdLineExt.dll
2013-12-12 15:57 - 2013-12-12 15:57 - 00001306 _____ C:\Windows\DIFx.log
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Windows\system32\AGEIA
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Program Files\AGEIA Technologies
2013-12-12 15:49 - 2013-12-12 15:49 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-12-12 14:21 - 2013-12-12 15:16 - 00000000 ____D C:\Users\Mü\AppData\Local\Ubisoft Game Launcher
2013-12-12 13:26 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-12-12 13:26 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-12-12 13:26 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-12-12 13:26 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-12-12 13:26 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-12-12 13:26 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-12-12 13:26 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-12-12 13:26 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-12-12 13:26 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-12-12 13:26 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-12-12 13:26 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-12-12 13:26 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-12-12 13:26 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-12-12 13:26 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-12-12 13:26 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-12-12 13:26 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-12-12 13:26 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-12-12 13:26 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-12-12 13:26 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-12-12 13:26 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-12-12 13:26 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-12-12 13:26 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-12-12 13:26 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-12-12 13:26 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-12-12 13:26 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-12-12 13:26 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-12-12 13:25 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-12-12 13:25 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-12-12 13:25 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-12-12 13:25 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-12-12 13:25 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-12-12 13:25 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-12-12 13:25 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-12-12 13:25 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-12-12 13:25 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-12-12 13:25 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-12-12 13:25 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-12-12 13:25 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-12-12 13:25 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-12-12 13:25 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-12-12 13:25 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-12-12 13:25 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-12-12 13:25 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-12-12 13:25 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-12-12 13:25 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-12-12 13:25 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-12-12 13:25 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-12-12 13:25 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-12-12 13:25 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-12-12 13:25 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-12-12 13:25 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-12-12 13:25 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-12-12 13:25 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-12-12 13:25 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-12-12 13:25 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-12-12 13:25 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-12-12 13:25 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-12-12 13:25 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-12-12 13:25 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-12-12 13:25 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-12-12 13:25 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-12-12 13:25 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-12-12 13:25 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-12-12 13:25 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-12-12 13:25 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-12-12 13:25 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-12-12 13:25 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-12-12 13:25 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-12-12 13:19 - 2013-12-12 17:46 - 00000000 ____D C:\Program Files\Ubisoft
2013-12-12 13:16 - 2013-12-10 18:43 - 00022328 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-12 13:13 - 2013-12-12 13:18 - 00000000 ____D C:\Users\Mü\AppData\Roaming\DAEMON Tools Lite
2013-12-12 13:13 - 2013-12-12 13:13 - 00243128 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-12-12 13:13 - 2013-12-12 13:13 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2013-12-12 13:12 - 2013-12-12 13:18 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-12-12 13:10 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 13:10 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 13:10 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 13:10 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 13:10 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 13:10 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 13:10 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 13:10 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 13:10 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 13:10 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 13:10 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-09 18:44 - 2013-12-09 18:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-09 18:44 - 2013-12-09 18:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-09 18:44 - 2013-12-09 18:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-09 18:44 - 2013-12-09 18:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-09 18:43 - 2013-12-09 18:48 - 00010464 _____ C:\Windows\IE11_main.log
2013-12-09 17:51 - 2013-12-09 17:51 - 00002376 _____ C:\Users\Mü\AppData\Local\recently-used.xbel
2013-12-09 17:29 - 2013-12-09 17:30 - 00000000 ____D C:\Users\Mü\AppData\Local\gtk-2.0
2013-12-09 17:22 - 2013-12-09 17:22 - 00000000 ____D C:\Users\Mü\.thumbnails
2013-12-09 17:13 - 2013-12-09 17:52 - 00000000 ____D C:\Users\Mü\.gimp-2.8
2013-12-09 17:07 - 2013-12-09 17:10 - 00000000 ____D C:\Program Files\GIMP 2
2013-12-09 17:01 - 2013-12-09 17:03 - 90396104 _____ (The GIMP Team ) C:\Users\Mü\Downloads\gimp-2.8.10-setup.exe
2013-12-06 19:07 - 2011-11-29 15:06 - 32596208 _____ (Nero AG) C:\Users\Mü\Downloads\nero11infotool-11.0.00500.exe
2013-12-04 18:23 - 2013-12-04 18:23 - 02833752 _____ C:\Users\Mü\Downloads\XYplorer_13.40_Install_CHIP.exe
2013-12-01 15:37 - 2013-12-01 16:05 - 00000000 ____D C:\Users\Mü\Documents\Freemake
2013-12-01 15:36 - 2013-12-01 16:05 - 00000000 ____D C:\ProgramData\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00001278 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Program Files\Freemake
2013-12-01 14:59 - 2013-12-01 14:59 - 33253288 _____ (DVDVideoSoft Ltd. ) C:\Users\Mü\Downloads\FreeVideoToDVDConverter.exe
2013-12-01 14:12 - 2013-12-01 14:12 - 00001895 _____ C:\Users\Mü\Desktop\CDBurnerXP.lnk
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Program Files\CDBurnerXP
2013-12-01 14:11 - 2013-12-01 14:11 - 04985608 _____ (Canneverbe Limited ) C:\Users\Mü\Downloads\cdbxp_setup_4.5.2.4291_minimal.exe
2013-11-18 16:21 - 2013-12-03 17:48 - 00000000 ____D C:\Users\Mü\Desktop\Ebay
2013-11-18 10:32 - 2013-12-18 19:25 - 00000000 ____D C:\Program Files\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2013-12-18 20:26 - 2013-12-18 17:10 - 00013835 _____ C:\Users\Mü\Desktop\FRST.txt
2013-12-18 20:21 - 2013-12-18 20:21 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2013-12-18 20:21 - 2013-10-28 16:08 - 00000000 ___RD C:\Users\Mü\Dropbox
2013-12-18 20:21 - 2013-10-28 16:04 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Dropbox
2013-12-18 20:20 - 2013-04-08 16:02 - 00000380 _____ C:\Windows\Tasks\Final Media Player Update Checker.job
2013-12-18 20:20 - 2013-02-12 08:45 - 02597402 _____ C:\Windows\PFRO.log
2013-12-18 20:20 - 2013-02-09 13:39 - 00047266 _____ C:\Windows\setupact.log
2013-12-18 20:20 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-18 20:19 - 2013-02-08 13:45 - 01730545 _____ C:\Windows\WindowsUpdate.log
2013-12-18 20:18 - 2009-07-14 09:57 - 00000000 ____D C:\Windows\ShellNew
2013-12-18 19:41 - 2013-02-08 15:41 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-18 19:25 - 2013-12-12 17:35 - 00000000 ____D C:\Program Files\CyberGhost 5
2013-12-18 19:25 - 2013-11-18 10:32 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-18 19:25 - 2013-05-28 17:59 - 00000000 ____D C:\Program Files\BlueStacks
2013-12-18 18:51 - 2013-12-18 09:38 - 01454080 _____ C:\Users\Mü\Documents\KartenY.accdb
2013-12-18 18:45 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-12-18 18:12 - 2009-07-14 05:34 - 00013216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-18 18:12 - 2009-07-14 05:34 - 00013216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-18 18:00 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\twain_32
2013-12-18 17:49 - 2013-12-12 18:03 - 00000000 ____D C:\Users\Mü\Documents\Settlers7
2013-12-18 17:38 - 2013-12-18 17:38 - 00012760 _____ C:\Users\Mü\Desktop\Behobene Sicherheitsrisiken.txt
2013-12-18 17:11 - 2013-12-18 17:11 - 00018516 _____ C:\Users\Mü\Desktop\Addition.txt
2013-12-18 17:10 - 2013-12-18 17:10 - 00000000 ____D C:\FRST
2013-12-18 16:55 - 2013-12-18 16:55 - 01062259 _____ (Farbar) C:\Users\Mü\Desktop\FRST.exe
2013-12-18 16:41 - 2013-12-18 16:41 - 00000954 _____ C:\Users\Mü\Desktop\JRT.txt
2013-12-18 16:34 - 2013-12-18 16:34 - 00000000 ____D C:\Windows\ERUNT
2013-12-18 16:31 - 2013-12-18 16:20 - 00000000 ____D C:\AdwCleaner
2013-12-18 16:30 - 2013-12-18 16:30 - 00013610 _____ C:\Users\Mü\Desktop\AdwCleaner[S0].txt
2013-12-18 16:21 - 2013-12-18 16:21 - 01034531 _____ (Thisisu) C:\Users\Mü\Desktop\JRT.exe
2013-12-18 16:20 - 2013-12-18 16:19 - 01226750 _____ C:\Users\Mü\Desktop\adwcleaner.exe
2013-12-18 15:57 - 2013-12-18 15:57 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 15:53 - 2013-12-18 15:53 - 00614784 _____ C:\Users\Mü\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2013-12-18 15:52 - 2013-12-18 15:47 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-12-18 15:46 - 2013-12-18 15:46 - 02365840 _____ C:\Users\Mü\Downloads\SecurityTaskManager_Setup.exe
2013-12-18 15:46 - 2013-02-08 13:55 - 00006248 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-18 15:41 - 2013-06-27 16:29 - 00000000 ____D C:\Users\Mü\AppData\Local\CrashDumps
2013-12-18 15:38 - 2013-06-02 19:21 - 00000000 ____D C:\Windows\pss
2013-12-18 13:55 - 2013-12-18 13:55 - 00000000 ____D C:\Users\Mü\AppData\Local\@ByELDI
2013-12-18 13:47 - 2013-02-09 13:38 - 00465960 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-18 13:39 - 2013-12-13 22:54 - 00000000 ____D C:\Users\Mü\AppData\Local\Microsoft_Corporation
2013-12-18 13:05 - 2013-02-11 09:46 - 00117528 _____ C:\Users\Mü\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-18 12:57 - 2013-02-08 17:43 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-18 12:44 - 2013-12-18 12:44 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-12-18 12:44 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-18 12:43 - 2013-12-18 12:42 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-18 12:43 - 2013-02-08 17:02 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-12-18 12:42 - 2013-02-08 17:43 - 00000000 ____D C:\Program Files\Microsoft Office
2013-12-18 12:41 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-18 12:41 - 2009-07-14 03:04 - 00000478 _____ C:\Windows\win.ini
2013-12-18 12:39 - 2013-12-18 12:39 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2013-12-18 12:37 - 2013-12-18 12:37 - 00000000 __RHD C:\MSOCache
2013-12-18 11:10 - 2013-12-17 17:05 - 00000000 ____D C:\Program Files\MSECache
2013-12-18 11:07 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\MSBuild
2013-12-18 10:58 - 2013-12-18 10:58 - 00000000 ____D C:\Users\Mü\Downloads\Remove office 2007
2013-12-18 10:42 - 2013-04-08 16:02 - 00000000 ____D C:\Program Files\File Type Assistant
2013-12-18 10:09 - 2013-12-18 09:58 - 00003134 _____ C:\Users\Mü\Documents\KartenY.odb
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Sun
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Oracle
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\Program Files\Common Files\Java
2013-12-18 10:02 - 2013-12-18 10:02 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-12-18 10:02 - 2013-12-18 10:02 - 00000000 ____D C:\Program Files\Java
2013-12-18 10:00 - 2013-12-18 10:00 - 00915368 _____ (Oracle Corporation) C:\Users\Mü\Downloads\jxpiinstall.exe
2013-12-18 09:39 - 2013-02-08 17:43 - 00000000 ____D C:\Users\Mü\AppData\Local\Microsoft Help
2013-12-18 08:53 - 2013-02-08 16:13 - 00000000 ____D C:\Users\Mü\AppData\Local\Windows Live
2013-12-17 20:16 - 2013-12-17 20:13 - 00000000 ____D C:\Users\Mü\AppData\Local\Cimaware
2013-12-17 18:28 - 2013-12-17 18:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\OpenOffice
2013-12-17 18:27 - 2013-12-17 18:27 - 00001074 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-12-17 18:26 - 2013-12-17 18:26 - 00000000 ____D C:\Program Files\OpenOffice 4
2013-12-17 18:20 - 2013-12-17 18:19 - 00614784 _____ C:\Users\Mü\Downloads\OpenOffice - CHIP-Downloader.exe
2013-12-17 17:59 - 2013-02-09 12:53 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Skype
2013-12-17 17:58 - 2013-12-17 17:55 - 77738888 _____ (Microsoft Corporation) C:\Users\Mü\Downloads\ExcelViewer.exe
2013-12-17 16:31 - 2013-12-17 16:28 - 06713344 _____ C:\Users\Mü\Documents\KartenY.xls
2013-12-17 16:29 - 2013-02-08 13:50 - 00000000 ____D C:\Users\Mü
2013-12-17 14:04 - 2013-12-17 13:14 - 00000000 ____D C:\Program Files\SpeedFan
2013-12-17 13:14 - 2013-12-17 13:13 - 00000045 _____ C:\Windows\system32\initdebug.nfo
2013-12-17 12:48 - 2013-04-03 15:28 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-12-17 09:43 - 2013-12-17 09:43 - 00001192 _____ C:\Users\Mü\Desktop\Die Siedler 7.lnk
2013-12-17 09:29 - 2013-12-17 09:29 - 00000000 ____D C:\Users\Mü\Documents\My Games
2013-12-17 09:28 - 2013-12-17 09:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-17 09:28 - 2013-02-12 12:03 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-12-17 09:27 - 2013-12-17 09:27 - 00042891 _____ C:\Windows\DirectX.log
2013-12-17 09:27 - 2013-12-17 09:27 - 00002103 _____ C:\Users\Mü\Desktop\Age of Empires III.lnk
2013-12-17 09:27 - 2013-12-17 09:27 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2013-12-17 09:24 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Microsoft Games
2013-12-17 09:21 - 2013-02-12 12:03 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2013-12-17 09:14 - 2013-12-16 15:51 - 00002417 _____ C:\Users\Public\Desktop\Norton 360.lnk
2013-12-17 09:14 - 2013-04-03 15:27 - 00000000 ____D C:\Windows\system32\Drivers\N360
2013-12-16 15:53 - 2013-02-08 14:15 - 00000000 ____D C:\ProgramData\Norton
2013-12-16 15:51 - 2013-04-03 15:28 - 00142936 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS
2013-12-16 15:51 - 2013-04-03 15:28 - 00008194 _____ C:\Windows\system32\Drivers\SYMEVENT.CAT
2013-12-16 15:50 - 2013-04-03 15:27 - 00000000 ____D C:\Program Files\Norton 360 Premier Edition
2013-12-16 15:40 - 2013-04-03 14:24 - 00000000 ____D C:\Users\Public\Downloads\Norton
2013-12-16 10:32 - 2013-08-19 16:36 - 00000000 ____D C:\Windows\system32\MRT
2013-12-13 23:04 - 2013-09-25 12:15 - 00000000 ____D C:\Users\Mü\AppData\Roaming\vlc
2013-12-13 21:58 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-12-13 21:49 - 2013-02-08 20:15 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 21:47 - 2013-12-12 17:35 - 00001881 _____ C:\Users\Mü\Desktop\CyberGhost 5.lnk
2013-12-13 21:46 - 2013-12-13 21:45 - 08610888 _____ (CyberGhost S.R.L. ) C:\Users\Mü\Downloads\CG_5.0.10.10.exe
2013-12-12 18:15 - 2013-12-12 17:36 - 00000000 ____D C:\Users\Mü\AppData\Local\CyberGhost
2013-12-12 17:46 - 2013-12-12 13:19 - 00000000 ____D C:\Program Files\Ubisoft
2013-12-12 17:36 - 2013-12-12 17:35 - 00000000 ____D C:\Program Files\TAP-Windows
2013-12-12 16:19 - 2013-12-12 16:19 - 01038704 _____ (Amazon Services LLC) C:\Users\Mü\Downloads\Die_Siedler_7_PC_Downloader.exe
2013-12-12 15:58 - 2013-12-12 15:58 - 00107888 _____ (Sony DADC Austria AG.) C:\Windows\system32\CmdLineExt.dll
2013-12-12 15:57 - 2013-12-12 15:57 - 00001306 _____ C:\Windows\DIFx.log
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Windows\system32\AGEIA
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Program Files\AGEIA Technologies
2013-12-12 15:49 - 2013-12-12 15:49 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-12-12 15:16 - 2013-12-12 14:21 - 00000000 ____D C:\Users\Mü\AppData\Local\Ubisoft Game Launcher
2013-12-12 13:18 - 2013-12-12 13:13 - 00000000 ____D C:\Users\Mü\AppData\Roaming\DAEMON Tools Lite
2013-12-12 13:18 - 2013-12-12 13:12 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-12-12 13:16 - 2013-02-09 10:53 - 00000000 ____D C:\Program Files\TuneUp Utilities 2013
2013-12-12 13:13 - 2013-12-12 13:13 - 00243128 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-12-12 13:13 - 2013-12-12 13:13 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2013-12-11 16:41 - 2013-02-08 15:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 16:41 - 2013-02-08 15:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-10 18:43 - 2013-12-12 13:16 - 00022328 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-10 18:43 - 2013-02-09 12:30 - 00030520 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-12-10 18:43 - 2013-02-09 10:53 - 00032568 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-12-10 15:45 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-10 15:05 - 2013-04-26 13:49 - 00000000 ____D C:\Users\Mü\AppData\Local\Canon Easy-PhotoPrint EX
2013-12-10 14:59 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-09 18:48 - 2013-12-09 18:43 - 00010464 _____ C:\Windows\IE11_main.log
2013-12-09 18:44 - 2013-12-09 18:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-09 18:44 - 2013-12-09 18:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-09 18:44 - 2013-12-09 18:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-09 18:44 - 2013-12-09 18:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-09 17:52 - 2013-12-09 17:13 - 00000000 ____D C:\Users\Mü\.gimp-2.8
2013-12-09 17:51 - 2013-12-09 17:51 - 00002376 _____ C:\Users\Mü\AppData\Local\recently-used.xbel
2013-12-09 17:30 - 2013-12-09 17:29 - 00000000 ____D C:\Users\Mü\AppData\Local\gtk-2.0
2013-12-09 17:22 - 2013-12-09 17:22 - 00000000 ____D C:\Users\Mü\.thumbnails
2013-12-09 17:16 - 2013-04-10 14:35 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-12-09 17:10 - 2013-12-09 17:07 - 00000000 ____D C:\Program Files\GIMP 2
2013-12-09 17:03 - 2013-12-09 17:01 - 90396104 _____ (The GIMP Team ) C:\Users\Mü\Downloads\gimp-2.8.10-setup.exe
2013-12-09 16:29 - 2013-03-18 16:40 - 00000000 ____D C:\Users\Mü\AppData\Roaming\dvdcss
2013-12-04 18:23 - 2013-12-04 18:23 - 02833752 _____ C:\Users\Mü\Downloads\XYplorer_13.40_Install_CHIP.exe
2013-12-03 17:48 - 2013-11-18 16:21 - 00000000 ____D C:\Users\Mü\Desktop\Ebay
2013-12-01 21:39 - 2013-02-08 19:42 - 00000000 ____D C:\Users\Mü\AppData\Roaming\FileZilla
2013-12-01 16:05 - 2013-12-01 15:37 - 00000000 ____D C:\Users\Mü\Documents\Freemake
2013-12-01 16:05 - 2013-12-01 15:36 - 00000000 ____D C:\ProgramData\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00001278 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Program Files\Freemake
2013-12-01 15:01 - 2013-02-08 19:18 - 00000000 ____D C:\Users\Mü\AppData\Roaming\DVDVideoSoft
2013-12-01 15:01 - 2013-02-08 19:18 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-12-01 15:01 - 2013-02-08 19:18 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-12-01 14:59 - 2013-12-01 14:59 - 33253288 _____ (DVDVideoSoft Ltd. ) C:\Users\Mü\Downloads\FreeVideoToDVDConverter.exe
2013-12-01 14:12 - 2013-12-01 14:12 - 00001895 _____ C:\Users\Mü\Desktop\CDBurnerXP.lnk
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Program Files\CDBurnerXP
2013-12-01 14:11 - 2013-12-01 14:11 - 04985608 _____ (Canneverbe Limited ) C:\Users\Mü\Downloads\cdbxp_setup_4.5.2.4291_minimal.exe
2013-12-01 13:27 - 2013-02-09 12:08 - 00000000 ____D C:\Users\Mü\AppData\Local\Adobe
2013-12-01 13:26 - 2013-02-21 13:04 - 00000000 ____D C:\Users\Mü\AppData\Local\QuickPar
2013-11-30 12:04 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-26 11:11 - 2013-12-13 21:55 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-13 21:55 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-13 21:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-13 21:55 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-13 21:55 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-13 21:55 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-13 21:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-13 21:55 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-13 21:55 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-13 21:55 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-13 21:55 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-13 21:55 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-13 21:55 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-13 21:55 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-13 21:55 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-13 21:55 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-13 21:55 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-13 21:55 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-13 21:55 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-23 19:26 - 2013-12-12 13:10 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-18 15:31 - 2013-02-08 16:06 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
Some content of TEMP:
====================
C:\Users\Mü\AppData\Local\Temp\RtkBtMnt.exe
C:\Users\Mü\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Mü\AppData\Local\Temp\sfextra.dll
C:\Users\Mü\AppData\Local\Temp\uninst1.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-10 15:37
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- --- *Update* 19.12.13 12:00 Uhr Soweit funktioniert grade alles, Word stürzt auch nicht mehr ab.. *Update* 19.12.13 18:41 Uhr Jetzt hängt sich PC beim hochfahren aber sporadisch auf.. Warum ändert sich die Zeit meines Beitrages eigentlich, wenn ich unten auf Antworten klicke und die Antwort wird an den ursprünglichen einfach angefügt? Wenn ich editiere ändert sie sich nicht. Eigentlich ist dieser Thread vom 18.12... Geändert von Mü83 (19.12.2013 um 18:49 Uhr) |
|
20.12.2013, 11:28
| #4 |
| /// the machine /// TB-Ausbilder | Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. Hi, ja immer wen Du was dazu postest wird das rein editiert durch die Software des Forums, und sieht für mich dann aus als wäre es ein neuer post, du rutschst also in meinem Kontrollzentrum nach oben. Logs sehen gut aus. Ich würd den TuneUp Müll entsorgen und den Speed dann nochmal testen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
20.12.2013, 11:36
| #5 |
| | Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. Ok. Vielen Dank! Hast du zufällig eine Erklärung warum sich der Pc jetzt öfter aufhängt? Also wenn ich den jetzt nach längerer Zeit neu starte (morgens) fährt der sich beim ersten Versuch fest, dann hilft nur noch ein beherzter Druck auf die Powertaste, weil nichts mehr funktioniert. Kann es sein, dass sich irgendwas in der Registrierung zerschossen hat, weil ja der Befall größtenteils dort war? Danke nochmals für deine Hilfe.. |
|
21.12.2013, 12:01
| #6 |
| /// the machine /// TB-Ausbilder | Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. Da war nur Adware drauf. Entweder ist dein Windows verbogen oder Hardware. Downloade dir bitte Windows Repair (All In One) von hier.
ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. |
|
23.12.2013, 16:34
| #7 |
| | Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. Hi, hier die Logs: ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=1e3e3a14b3795f4d9fa94d729ccc8369
# engine=16370
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-23 11:44:03
# local_time=2013-12-23 12:44:03 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=3592 16777213 100 90 16750 138461539 0 0
# compatibility_mode=5893 16776574 100 94 14244773 139430234 0 0
# scanned=162874
# found=0
# cleaned=0
# scan_time=9171
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=1e3e3a14b3795f4d9fa94d729ccc8369
# engine=16370
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-23 03:11:17
# local_time=2013-12-23 04:11:17 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=3592 16777213 100 90 29184 138473973 0 0
# compatibility_mode=5893 16776574 100 94 14257207 139442668 0 0
# scanned=191949
# found=0
# cleaned=0
# scan_time=12358
Code:
ATTFilter Results of screen317's Security Check version 0.99.77 Windows 7 Service Pack 1 x86 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Norton 360 Premier Edition WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 TuneUp Utilities 2013 TuneUp Utilities Language Pack (de-DE) CCleaner Java 7 Update 45 Adobe Flash Player 11.9.900.170 Adobe Reader XI Mozilla Firefox (26.0) ````````Process Check: objlist.exe by Laurent```````` `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-12-2013 01
Ran by Mü (administrator) on MÜ-PC on 23-12-2013 16:31:34
Running from C:\Users\Mü\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe
(CyberGhost S.R.L.) C:\Program Files\CyberGhost 5\CyberGhost.exe
(Dropbox, Inc.) C:\Users\Mü\AppData\Roaming\Dropbox\bin\Dropbox.exe
(devolo AG) C:\Program Files\devolo\dlan\devolonetsvc.exe
() C:\Program Files\Canon\IJPLM\ijplmsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Symantec Corporation) C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\N360.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Symantec Corporation) C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\N360.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [UnlockerAssistant] - C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKCU\...\Run: [CyberGhost] - C:\Program Files\CyberGhost 5\CyberGhost.exe [361072 2013-12-17] (CyberGhost S.R.L.)
MountPoints2: {2f045804-6325-11e3-bcf9-00238b1c50ea} - H:\CDCheck.exe
MountPoints2: {e4068ce1-66f2-11e3-acb6-00238b1c50ea} - J:\CDCheck.exe
IFEO\skype.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
Lsa: [Notification Packages]
Startup: C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Mü\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x32F1B5760306CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
BHO: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\IPS\IPSBHO.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Mü\AppData\Roaming\Mozilla\Firefox\Profiles\8adqg96g.default-1371571406636
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 - C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Mü\AppData\Roaming\Mozilla\Firefox\Profiles\8adqg96g.default-1371571406636\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
========================== Services (Whitelisted) =================
R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (LSI Corporation)
S2 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [393032 2013-05-13] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [384840 2013-05-13] (BlueStack Systems, Inc.)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [63600 2013-12-17] (CyberGhost S.R.L)
R2 DevoloNetworkService; C:\Program Files\devolo\dlan\devolonetsvc.exe [3526136 2013-08-27] (devolo AG)
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-07] ()
R2 Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [255376 2012-04-05] (Acer Incorporated)
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 N360; C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\diMaster.dll [567600 2013-10-08] (Symantec Corporation)
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1729336 2013-12-10] (TuneUp Software)
==================== Drivers (Whitelisted) ====================
S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus.sys [14336 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag.sys [20736 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps.sys [20096 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem.sys [25088 2012-03-02] (LG Electronics Inc.)
R1 BHDrvx86; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\BASHDefs\20131203.001\BHDrvx86.sys [1098968 2013-12-03] (Symantec Corporation)
R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [63816 2013-05-13] (BlueStack Systems)
R1 ccSet_N360; C:\Windows\system32\drivers\N360\1501000.012\ccSetx86.sys [127064 2013-09-26] (Symantec Corporation)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-12-12] (Disc Soft Ltd)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-12-15] (Symantec Corporation)
U3 EraserUtilDrv11312; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11312.sys [108120 2013-12-15] (Symantec Corporation)
R1 IDSVix86; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\IPSDefs\20131220.001\IDSvix86.sys [394456 2013-12-16] (Symantec Corporation)
R2 int15; C:\Windows\system32\drivers\int15.sys [69632 2008-03-12] ()
R3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [48640 2009-08-23] (Atheros Communications, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20131222.006\NAVENG.SYS [93272 2013-12-15] (Symantec Corporation)
R3 NAVEX15; C:\Program Files\Norton 360 Premier Edition\NortonData\21.1.0.18\Definitions\VirusDefs\20131222.006\NAVEX15.SYS [1612376 2013-12-15] (Symantec Corporation)
R2 NPF_devolo; C:\Windows\system32\drivers\npf_devolo.sys [35840 2013-08-27] (CACE Technologies)
R3 nuvotoncir; C:\Windows\System32\DRIVERS\nuvotoncir.sys [44544 2009-06-24] (Nuvoton Technology Corporation)
S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [159776 2009-06-24] (Realtek Semiconductor Corp.)
R1 SRTSP; C:\Windows\System32\Drivers\N360\1501000.012\SRTSP.SYS [651352 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360\1501000.012\SRTSPX.SYS [32344 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360\1501000.012\SYMDS.SYS [367704 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360\1501000.012\SYMEFA.SYS [935512 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142936 2013-12-16] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360\1501000.012\Ironx86.SYS [206936 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360\1501000.012\SYMNETS.SYS [446552 2013-09-26] (Symantec Corporation)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [31360 2013-02-08] (The OpenVPN Project)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-09-19] (TuneUp Software)
S3 winbondcir; C:\Windows\System32\DRIVERS\winbondcir.sys [43008 2007-03-28] (Winbond Electronics Corporation)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] ()
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-23 16:31 - 2013-12-23 16:31 - 00013326 _____ C:\Users\Mü\Desktop\FRST.txt
2013-12-23 16:31 - 2013-12-23 16:31 - 00000000 ____D C:\Users\Mü\Desktop\FRST-OlderVersion
2013-12-23 16:30 - 2013-12-23 16:30 - 00000875 _____ C:\Users\Mü\Desktop\Security Checkcheckup.txt
2013-12-23 10:17 - 2013-12-23 10:17 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2013-12-23 10:17 - 2013-12-23 10:17 - 00000000 ____D C:\Program Files\Unlocker
2013-12-23 10:16 - 2013-12-23 10:16 - 01078591 _____ C:\Users\Mü\Downloads\Unlocker1.9.2.exe
2013-12-23 10:11 - 2013-12-23 10:11 - 00891200 _____ C:\Users\Mü\Desktop\SecurityCheck.exe
2013-12-23 10:07 - 2013-12-23 10:07 - 02347384 _____ (ESET) C:\Users\Mü\Downloads\esetsmartinstaller_enu.exe
2013-12-23 10:05 - 2013-12-23 10:05 - 00000352 _____ C:\Windows\PFRO.log
2013-12-23 09:57 - 2013-12-23 10:03 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-12-23 09:56 - 2013-12-23 09:56 - 00000207 _____ C:\Windows\tweaking.com-regbackup-MÜ-PC-Microsoft-Windows-7-Home-Premium-(32-bit).dat
2013-12-23 09:55 - 2013-12-23 09:55 - 00000000 ____D C:\RegBackup
2013-12-23 09:35 - 2013-12-23 09:35 - 00003280 ____N C:\bootsqm.dat
2013-12-23 08:04 - 2013-12-23 10:05 - 00000168 _____ C:\Windows\setupact.log
2013-12-23 08:04 - 2013-12-23 08:04 - 00000000 _____ C:\Windows\setuperr.log
2013-12-21 12:57 - 2013-12-21 14:32 - 00000000 ____D C:\Users\MSSQL$BNICE_SQL
2013-12-21 12:57 - 2013-12-21 12:57 - 00000020 ___SH C:\Users\MSSQL$BNICE_SQL\ntuser.ini
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\Startmenü
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\Netzwerkumgebung
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\Druckumgebung
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\Documents\Eigene Musik
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\Documents\Eigene Bilder
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\AppData\Local\Verlauf
2013-12-21 12:57 - 2013-03-07 10:42 - 00000000 ____D C:\Users\MSSQL$BNICE_SQL\AppData\Roaming\Macromedia
2013-12-21 12:57 - 2013-02-09 08:53 - 00000000 ____D C:\Users\MSSQL$BNICE_SQL\AppData\Local\Microsoft Help
2013-12-21 12:57 - 2009-07-14 05:42 - 00000000 ___RD C:\Users\MSSQL$BNICE_SQL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-21 12:57 - 2009-07-14 05:37 - 00000000 ___RD C:\Users\MSSQL$BNICE_SQL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-21 12:56 - 2012-02-11 10:08 - 00147032 _____ (Microsoft Corporation) C:\Windows\system32\hadrres.dll
2013-12-21 12:56 - 2012-02-11 10:08 - 00069208 _____ (Microsoft Corporation) C:\Windows\system32\fssres.dll
2013-12-21 10:10 - 2013-12-21 10:10 - 00000000 ____D C:\Users\Mü\AppData\Local\bNICE
2013-12-21 10:09 - 2013-12-21 10:09 - 00028398 _____ C:\Users\Mü\Documents\cc_20131221_100913.reg
2013-12-21 10:09 - 2013-12-21 10:09 - 00000000 ____D C:\Users\Public\Documents\bNICE
2013-12-21 09:41 - 2013-12-21 09:47 - 00000000 ____D C:\Program Files\CCleaner
2013-12-21 09:41 - 2013-12-21 09:41 - 00000965 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-21 09:38 - 2009-07-21 03:04 - 00050200 _____ (Microsoft Corporation) C:\Windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-21 09:24 - 2013-12-21 09:24 - 22517954 _____ C:\Users\Mü\Downloads\bnice_setup.exe
2013-12-21 09:11 - 2013-12-21 09:12 - 03541544 _____ (Piriform Ltd) C:\Users\Mü\Downloads\ccsetup408_slim.exe
2013-12-21 09:11 - 2013-12-21 09:11 - 00007597 _____ C:\Users\Mü\AppData\Local\Resmon.ResmonCfg
2013-12-20 18:31 - 2013-12-20 18:31 - 00001668 _____ C:\Users\Mü\Documents\Neue Datenbank.odb
2013-12-20 17:17 - 2013-12-20 17:38 - 00019537 _____ C:\Users\Mü\Documents\TermineDB.odb
2013-12-20 11:25 - 2013-12-20 11:25 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-20 11:21 - 2013-12-20 11:30 - 00000000 ____D C:\SUCCESSCONTROL
2013-12-20 11:19 - 2013-12-20 11:30 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin
2013-12-20 11:19 - 2013-12-20 11:19 - 00000000 ____D C:\Program Files\Steppat GmbH - D 55743 Idar-Oberstein
2013-12-20 11:16 - 2013-12-20 11:16 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Steppat GmbH - D 55743 Idar-Oberstein
2013-12-20 11:15 - 2013-12-20 11:16 - 19820232 _____ (Steppat GmbH - D 55743 Idar-Oberstein) C:\Users\Mü\Downloads\sc4-setup.exe
2013-12-18 17:10 - 2013-12-23 16:31 - 00000000 ____D C:\FRST
2013-12-18 16:55 - 2013-12-23 16:31 - 01061231 _____ (Farbar) C:\Users\Mü\Desktop\FRST.exe
2013-12-18 16:34 - 2013-12-18 16:34 - 00000000 ____D C:\Windows\ERUNT
2013-12-18 16:21 - 2013-12-18 16:21 - 01034531 _____ (Thisisu) C:\Users\Mü\Desktop\JRT.exe
2013-12-18 16:20 - 2013-12-20 17:59 - 00000000 ____D C:\AdwCleaner
2013-12-18 16:19 - 2013-12-18 16:20 - 01226750 _____ C:\Users\Mü\Desktop\adwcleaner.exe
2013-12-18 15:57 - 2013-12-18 15:57 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 15:57 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-18 15:53 - 2013-12-18 15:53 - 00614784 _____ C:\Users\Mü\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2013-12-18 15:47 - 2013-12-18 15:52 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-12-18 15:46 - 2013-12-18 15:46 - 02365840 _____ C:\Users\Mü\Downloads\SecurityTaskManager_Setup.exe
2013-12-18 13:55 - 2013-12-18 13:55 - 00000000 ____D C:\Users\Mü\AppData\Local\@ByELDI
2013-12-18 13:05 - 2013-02-03 22:50 - 00000000 ____D C:\Windows\Re-Aktivierung
2013-12-18 12:44 - 2013-12-18 12:44 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-12-18 12:42 - 2013-12-21 14:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-18 12:39 - 2013-12-18 12:39 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2013-12-18 12:37 - 2013-12-18 12:37 - 00000000 __RHD C:\MSOCache
2013-12-18 10:58 - 2013-12-18 10:58 - 00000000 ____D C:\Users\Mü\Downloads\Remove office 2007
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Sun
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Oracle
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\Program Files\Common Files\Java
2013-12-18 10:02 - 2013-12-18 10:02 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-12-18 10:02 - 2013-12-18 10:02 - 00000000 ____D C:\Program Files\Java
2013-12-18 10:00 - 2013-12-18 10:00 - 00915368 _____ (Oracle Corporation) C:\Users\Mü\Downloads\jxpiinstall.exe
2013-12-17 20:13 - 2013-12-17 20:16 - 00000000 ____D C:\Users\Mü\AppData\Local\Cimaware
2013-12-17 18:28 - 2013-12-17 18:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\OpenOffice
2013-12-17 18:27 - 2013-12-17 18:27 - 00001074 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-12-17 18:26 - 2013-12-17 18:26 - 00000000 ____D C:\Program Files\OpenOffice 4
2013-12-17 18:19 - 2013-12-17 18:20 - 00614784 _____ C:\Users\Mü\Downloads\OpenOffice - CHIP-Downloader.exe
2013-12-17 17:55 - 2013-12-17 17:58 - 77738888 _____ (Microsoft Corporation) C:\Users\Mü\Downloads\ExcelViewer.exe
2013-12-17 17:05 - 2013-12-18 11:10 - 00000000 ____D C:\Program Files\MSECache
2013-12-17 16:28 - 2013-12-17 16:31 - 06713344 _____ C:\Users\Mü\Documents\KartenY.xls
2013-12-17 13:14 - 2013-12-17 14:04 - 00000000 ____D C:\Program Files\SpeedFan
2013-12-17 13:13 - 2013-12-17 13:14 - 00000045 _____ C:\Windows\system32\initdebug.nfo
2013-12-17 09:43 - 2013-12-17 09:43 - 00001192 _____ C:\Users\Mü\Desktop\Die Siedler 7.lnk
2013-12-17 09:29 - 2013-12-17 09:29 - 00000000 ____D C:\Users\Mü\Documents\My Games
2013-12-17 09:28 - 2013-12-17 09:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-17 09:27 - 2013-12-17 09:27 - 00002103 _____ C:\Users\Mü\Desktop\Age of Empires III.lnk
2013-12-17 09:27 - 2013-12-17 09:27 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2013-12-13 22:54 - 2013-12-18 13:39 - 00000000 ____D C:\Users\Mü\AppData\Local\Microsoft_Corporation
2013-12-13 21:55 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-13 21:55 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-13 21:55 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-13 21:55 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-13 21:55 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-13 21:55 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-13 21:55 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-13 21:55 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-13 21:55 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-13 21:55 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-13 21:55 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-13 21:55 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-13 21:55 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-13 21:55 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-13 21:55 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-13 21:55 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-13 21:55 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-13 21:55 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-13 21:55 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 21:49 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-13 21:49 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-13 21:45 - 2013-12-13 21:46 - 08610888 _____ (CyberGhost S.R.L. ) C:\Users\Mü\Downloads\CG_5.0.10.10.exe
2013-12-12 18:03 - 2013-12-23 11:39 - 00000000 ____D C:\Users\Mü\Documents\Settlers7
2013-12-12 17:36 - 2013-12-12 18:15 - 00000000 ____D C:\Users\Mü\AppData\Local\CyberGhost
2013-12-12 17:35 - 2013-12-23 08:28 - 00000000 ____D C:\Program Files\CyberGhost 5
2013-12-12 17:35 - 2013-12-12 17:36 - 00000000 ____D C:\Program Files\TAP-Windows
2013-12-12 16:19 - 2013-12-12 16:19 - 01038704 _____ (Amazon Services LLC) C:\Users\Mü\Downloads\Die_Siedler_7_PC_Downloader.exe
2013-12-12 15:58 - 2013-12-12 15:58 - 00107888 _____ (Sony DADC Austria AG.) C:\Windows\system32\CmdLineExt.dll
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Windows\system32\AGEIA
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Program Files\AGEIA Technologies
2013-12-12 15:49 - 2013-12-12 15:49 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-12-12 14:21 - 2013-12-12 15:16 - 00000000 ____D C:\Users\Mü\AppData\Local\Ubisoft Game Launcher
2013-12-12 13:26 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-12-12 13:26 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-12-12 13:26 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-12-12 13:26 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-12-12 13:26 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-12-12 13:26 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-12-12 13:26 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-12-12 13:26 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-12-12 13:26 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-12-12 13:26 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-12-12 13:26 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-12-12 13:26 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-12-12 13:26 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-12-12 13:26 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-12-12 13:26 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-12-12 13:26 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-12-12 13:26 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-12-12 13:26 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-12-12 13:26 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-12-12 13:26 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-12-12 13:26 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-12-12 13:26 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-12-12 13:26 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-12-12 13:26 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-12-12 13:26 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-12-12 13:26 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-12-12 13:26 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-12-12 13:26 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-12-12 13:25 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-12-12 13:25 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-12-12 13:25 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-12-12 13:25 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-12-12 13:25 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-12-12 13:25 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-12-12 13:25 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-12-12 13:25 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-12-12 13:25 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-12-12 13:25 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-12-12 13:25 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-12-12 13:25 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-12-12 13:25 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-12-12 13:25 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-12-12 13:25 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-12-12 13:25 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-12-12 13:25 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-12-12 13:25 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-12-12 13:25 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-12-12 13:25 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-12-12 13:25 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-12-12 13:25 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-12-12 13:25 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-12-12 13:25 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-12-12 13:25 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-12-12 13:25 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-12-12 13:25 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-12-12 13:25 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-12-12 13:25 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-12-12 13:25 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-12-12 13:25 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-12-12 13:25 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-12-12 13:25 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-12-12 13:25 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-12-12 13:25 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-12-12 13:25 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-12-12 13:25 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-12-12 13:25 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-12-12 13:25 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-12-12 13:25 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-12-12 13:25 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-12-12 13:25 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-12-12 13:19 - 2013-12-12 17:46 - 00000000 ____D C:\Program Files\Ubisoft
2013-12-12 13:16 - 2013-12-10 18:43 - 00022328 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-12 13:13 - 2013-12-21 09:55 - 00000000 ____D C:\Users\Mü\AppData\Roaming\DAEMON Tools Lite
2013-12-12 13:13 - 2013-12-12 13:13 - 00243128 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-12-12 13:13 - 2013-12-12 13:13 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2013-12-12 13:12 - 2013-12-12 13:18 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-12-12 13:10 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 13:10 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 13:10 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 13:10 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 13:10 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 13:10 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 13:10 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 13:10 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 13:10 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 13:10 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 13:10 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-09 18:44 - 2013-12-09 18:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-09 18:44 - 2013-12-09 18:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-09 18:44 - 2013-12-09 18:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-09 18:44 - 2013-12-09 18:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-09 17:51 - 2013-12-09 17:51 - 00002376 _____ C:\Users\Mü\AppData\Local\recently-used.xbel
2013-12-09 17:29 - 2013-12-09 17:30 - 00000000 ____D C:\Users\Mü\AppData\Local\gtk-2.0
2013-12-09 17:22 - 2013-12-09 17:22 - 00000000 ____D C:\Users\Mü\.thumbnails
2013-12-09 17:13 - 2013-12-09 17:52 - 00000000 ____D C:\Users\Mü\.gimp-2.8
2013-12-09 17:07 - 2013-12-09 17:10 - 00000000 ____D C:\Program Files\GIMP 2
2013-12-09 17:01 - 2013-12-09 17:03 - 90396104 _____ (The GIMP Team ) C:\Users\Mü\Downloads\gimp-2.8.10-setup.exe
2013-12-06 19:07 - 2011-11-29 15:06 - 32596208 _____ (Nero AG) C:\Users\Mü\Downloads\nero11infotool-11.0.00500.exe
2013-12-04 18:23 - 2013-12-04 18:23 - 02833752 _____ C:\Users\Mü\Downloads\XYplorer_13.40_Install_CHIP.exe
2013-12-01 15:37 - 2013-12-01 16:05 - 00000000 ____D C:\Users\Mü\Documents\Freemake
2013-12-01 15:36 - 2013-12-01 16:05 - 00000000 ____D C:\ProgramData\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00001278 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Program Files\Freemake
2013-12-01 14:59 - 2013-12-01 14:59 - 33253288 _____ (DVDVideoSoft Ltd. ) C:\Users\Mü\Downloads\FreeVideoToDVDConverter.exe
2013-12-01 14:12 - 2013-12-01 14:12 - 00001895 _____ C:\Users\Mü\Desktop\CDBurnerXP.lnk
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Program Files\CDBurnerXP
2013-12-01 14:11 - 2013-12-01 14:11 - 04985608 _____ (Canneverbe Limited ) C:\Users\Mü\Downloads\cdbxp_setup_4.5.2.4291_minimal.exe
==================== One Month Modified Files and Folders =======
2013-12-23 16:31 - 2013-12-23 16:31 - 00013326 _____ C:\Users\Mü\Desktop\FRST.txt
2013-12-23 16:31 - 2013-12-23 16:31 - 00000000 ____D C:\Users\Mü\Desktop\FRST-OlderVersion
2013-12-23 16:31 - 2013-12-18 17:10 - 00000000 ____D C:\FRST
2013-12-23 16:31 - 2013-12-18 16:55 - 01061231 _____ (Farbar) C:\Users\Mü\Desktop\FRST.exe
2013-12-23 16:30 - 2013-12-23 16:30 - 00000875 _____ C:\Users\Mü\Desktop\Security Checkcheckup.txt
2013-12-23 16:23 - 2013-02-08 13:45 - 01183850 _____ C:\Windows\WindowsUpdate.log
2013-12-23 15:41 - 2013-02-08 15:41 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-23 14:33 - 2013-02-08 17:43 - 00000000 ____D C:\Users\Mü\AppData\Local\Microsoft Help
2013-12-23 14:11 - 2013-06-27 16:29 - 00000000 ____D C:\Users\Mü\AppData\Local\CrashDumps
2013-12-23 11:39 - 2013-12-12 18:03 - 00000000 ____D C:\Users\Mü\Documents\Settlers7
2013-12-23 10:17 - 2013-12-23 10:17 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2013-12-23 10:17 - 2013-12-23 10:17 - 00000000 ____D C:\Program Files\Unlocker
2013-12-23 10:16 - 2013-12-23 10:16 - 01078591 _____ C:\Users\Mü\Downloads\Unlocker1.9.2.exe
2013-12-23 10:12 - 2013-02-08 13:55 - 00006248 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-23 10:11 - 2013-12-23 10:11 - 00891200 _____ C:\Users\Mü\Desktop\SecurityCheck.exe
2013-12-23 10:11 - 2009-07-14 05:34 - 00013216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-23 10:11 - 2009-07-14 05:34 - 00013216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-23 10:07 - 2013-12-23 10:07 - 02347384 _____ (ESET) C:\Users\Mü\Downloads\esetsmartinstaller_enu.exe
2013-12-23 10:06 - 2013-10-28 16:08 - 00000000 ___RD C:\Users\Mü\Dropbox
2013-12-23 10:06 - 2013-10-28 16:04 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Dropbox
2013-12-23 10:05 - 2013-12-23 10:05 - 00000352 _____ C:\Windows\PFRO.log
2013-12-23 10:05 - 2013-12-23 08:04 - 00000168 _____ C:\Windows\setupact.log
2013-12-23 10:05 - 2013-04-08 16:02 - 00000380 _____ C:\Windows\Tasks\Final Media Player Update Checker.job
2013-12-23 10:05 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-23 10:03 - 2013-12-23 09:57 - 00181064 _____ (Sysinternals) C:\Windows\PSEXESVC.EXE
2013-12-23 09:56 - 2013-12-23 09:56 - 00000207 _____ C:\Windows\tweaking.com-regbackup-MÜ-PC-Microsoft-Windows-7-Home-Premium-(32-bit).dat
2013-12-23 09:55 - 2013-12-23 09:55 - 00000000 ____D C:\RegBackup
2013-12-23 09:35 - 2013-12-23 09:35 - 00003280 ____N C:\bootsqm.dat
2013-12-23 09:17 - 2013-09-25 12:15 - 00000000 ____D C:\Users\Mü\AppData\Roaming\vlc
2013-12-23 08:28 - 2013-12-12 17:35 - 00000000 ____D C:\Program Files\CyberGhost 5
2013-12-23 08:27 - 2013-05-28 17:59 - 00000000 ____D C:\Program Files\BlueStacks
2013-12-23 08:04 - 2013-12-23 08:04 - 00000000 _____ C:\Windows\setuperr.log
2013-12-21 14:37 - 2013-12-18 12:42 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-21 14:37 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-21 14:32 - 2013-12-21 12:57 - 00000000 ____D C:\Users\MSSQL$BNICE_SQL
2013-12-21 13:37 - 2013-02-08 19:42 - 00000000 ____D C:\Users\Mü\AppData\Roaming\FileZilla
2013-12-21 13:35 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-12-21 12:57 - 2013-12-21 12:57 - 00000020 ___SH C:\Users\MSSQL$BNICE_SQL\ntuser.ini
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\Startmenü
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\Netzwerkumgebung
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\Druckumgebung
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\Documents\Eigene Musik
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\Documents\Eigene Bilder
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-21 12:57 - 2013-12-21 12:57 - 00000000 _SHDL C:\Users\MSSQL$BNICE_SQL\AppData\Local\Verlauf
2013-12-21 10:57 - 2013-05-14 16:17 - 00000000 ____D C:\Program Files\Alt.Binz
2013-12-21 10:10 - 2013-12-21 10:10 - 00000000 ____D C:\Users\Mü\AppData\Local\bNICE
2013-12-21 10:09 - 2013-12-21 10:09 - 00028398 _____ C:\Users\Mü\Documents\cc_20131221_100913.reg
2013-12-21 10:09 - 2013-12-21 10:09 - 00000000 ____D C:\Users\Public\Documents\bNICE
2013-12-21 09:55 - 2013-12-12 13:13 - 00000000 ____D C:\Users\Mü\AppData\Roaming\DAEMON Tools Lite
2013-12-21 09:54 - 2013-02-08 13:41 - 00000000 ____D C:\Windows\Panther
2013-12-21 09:47 - 2013-12-21 09:41 - 00000000 ____D C:\Program Files\CCleaner
2013-12-21 09:41 - 2013-12-21 09:41 - 00000965 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-12-21 09:24 - 2013-12-21 09:24 - 22517954 _____ C:\Users\Mü\Downloads\bnice_setup.exe
2013-12-21 09:12 - 2013-12-21 09:11 - 03541544 _____ (Piriform Ltd) C:\Users\Mü\Downloads\ccsetup408_slim.exe
2013-12-21 09:11 - 2013-12-21 09:11 - 00007597 _____ C:\Users\Mü\AppData\Local\Resmon.ResmonCfg
2013-12-21 09:08 - 2013-02-08 16:13 - 00000000 ____D C:\Users\Mü\AppData\Local\Windows Live
2013-12-20 18:31 - 2013-12-20 18:31 - 00001668 _____ C:\Users\Mü\Documents\Neue Datenbank.odb
2013-12-20 18:01 - 2013-02-08 16:06 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-20 17:59 - 2013-12-18 16:20 - 00000000 ____D C:\AdwCleaner
2013-12-20 17:38 - 2013-12-20 17:17 - 00019537 _____ C:\Users\Mü\Documents\TermineDB.odb
2013-12-20 11:30 - 2013-12-20 11:21 - 00000000 ____D C:\SUCCESSCONTROL
2013-12-20 11:30 - 2013-12-20 11:19 - 00000000 __SHD C:\Windows\system32\AI_RecycleBin
2013-12-20 11:25 - 2013-12-20 11:25 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-20 11:19 - 2013-12-20 11:19 - 00000000 ____D C:\Program Files\Steppat GmbH - D 55743 Idar-Oberstein
2013-12-20 11:16 - 2013-12-20 11:16 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Steppat GmbH - D 55743 Idar-Oberstein
2013-12-20 11:16 - 2013-12-20 11:15 - 19820232 _____ (Steppat GmbH - D 55743 Idar-Oberstein) C:\Users\Mü\Downloads\sc4-setup.exe
2013-12-19 19:24 - 2013-02-08 17:43 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-19 19:18 - 2009-07-14 03:04 - 00000478 _____ C:\Windows\win.ini
2013-12-19 18:57 - 2013-02-08 17:02 - 00000000 ____D C:\Program Files\Microsoft.NET
2013-12-19 18:36 - 2013-10-28 16:05 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-12-18 20:20 - 2009-07-14 09:57 - 00000000 ____D C:\Windows\ShellNew
2013-12-18 18:06 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\twain_32
2013-12-18 16:34 - 2013-12-18 16:34 - 00000000 ____D C:\Windows\ERUNT
2013-12-18 16:21 - 2013-12-18 16:21 - 01034531 _____ (Thisisu) C:\Users\Mü\Desktop\JRT.exe
2013-12-18 16:20 - 2013-12-18 16:19 - 01226750 _____ C:\Users\Mü\Desktop\adwcleaner.exe
2013-12-18 15:57 - 2013-12-18 15:57 - 00001067 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-18 15:57 - 2013-12-18 15:57 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-12-18 15:53 - 2013-12-18 15:53 - 00614784 _____ C:\Users\Mü\Downloads\Malwarebytes Anti Malware - CHIP-Downloader.exe
2013-12-18 15:52 - 2013-12-18 15:47 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-12-18 15:46 - 2013-12-18 15:46 - 02365840 _____ C:\Users\Mü\Downloads\SecurityTaskManager_Setup.exe
2013-12-18 15:38 - 2013-06-02 19:21 - 00000000 ____D C:\Windows\pss
2013-12-18 13:55 - 2013-12-18 13:55 - 00000000 ____D C:\Users\Mü\AppData\Local\@ByELDI
2013-12-18 13:47 - 2013-02-09 13:38 - 00465960 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-18 13:39 - 2013-12-13 22:54 - 00000000 ____D C:\Users\Mü\AppData\Local\Microsoft_Corporation
2013-12-18 13:05 - 2013-02-11 09:46 - 00117528 _____ C:\Users\Mü\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-18 12:44 - 2013-12-18 12:44 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2013-12-18 12:42 - 2013-02-08 17:43 - 00000000 ____D C:\Program Files\Microsoft Office
2013-12-18 12:41 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-18 12:39 - 2013-12-18 12:39 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
2013-12-18 12:37 - 2013-12-18 12:37 - 00000000 __RHD C:\MSOCache
2013-12-18 11:10 - 2013-12-17 17:05 - 00000000 ____D C:\Program Files\MSECache
2013-12-18 11:07 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\MSBuild
2013-12-18 10:58 - 2013-12-18 10:58 - 00000000 ____D C:\Users\Mü\Downloads\Remove office 2007
2013-12-18 10:42 - 2013-04-08 16:02 - 00000000 ____D C:\Program Files\File Type Assistant
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Sun
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\ProgramData\Oracle
2013-12-18 10:03 - 2013-12-18 10:03 - 00000000 ____D C:\Program Files\Common Files\Java
2013-12-18 10:02 - 2013-12-18 10:02 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-12-18 10:02 - 2013-12-18 10:02 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-12-18 10:02 - 2013-12-18 10:02 - 00000000 ____D C:\Program Files\Java
2013-12-18 10:00 - 2013-12-18 10:00 - 00915368 _____ (Oracle Corporation) C:\Users\Mü\Downloads\jxpiinstall.exe
2013-12-17 20:16 - 2013-12-17 20:13 - 00000000 ____D C:\Users\Mü\AppData\Local\Cimaware
2013-12-17 18:28 - 2013-12-17 18:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\OpenOffice
2013-12-17 18:27 - 2013-12-17 18:27 - 00001074 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-12-17 18:26 - 2013-12-17 18:26 - 00000000 ____D C:\Program Files\OpenOffice 4
2013-12-17 18:20 - 2013-12-17 18:19 - 00614784 _____ C:\Users\Mü\Downloads\OpenOffice - CHIP-Downloader.exe
2013-12-17 17:59 - 2013-02-09 12:53 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Skype
2013-12-17 17:58 - 2013-12-17 17:55 - 77738888 _____ (Microsoft Corporation) C:\Users\Mü\Downloads\ExcelViewer.exe
2013-12-17 16:31 - 2013-12-17 16:28 - 06713344 _____ C:\Users\Mü\Documents\KartenY.xls
2013-12-17 16:29 - 2013-02-08 13:50 - 00000000 ____D C:\Users\Mü
2013-12-17 14:04 - 2013-12-17 13:14 - 00000000 ____D C:\Program Files\SpeedFan
2013-12-17 13:14 - 2013-12-17 13:13 - 00000045 _____ C:\Windows\system32\initdebug.nfo
2013-12-17 12:48 - 2013-04-03 15:28 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-12-17 09:43 - 2013-12-17 09:43 - 00001192 _____ C:\Users\Mü\Desktop\Die Siedler 7.lnk
2013-12-17 09:29 - 2013-12-17 09:29 - 00000000 ____D C:\Users\Mü\Documents\My Games
2013-12-17 09:28 - 2013-12-17 09:28 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-17 09:28 - 2013-02-12 12:03 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-12-17 09:27 - 2013-12-17 09:27 - 00002103 _____ C:\Users\Mü\Desktop\Age of Empires III.lnk
2013-12-17 09:27 - 2013-12-17 09:27 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Games
2013-12-17 09:24 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Microsoft Games
2013-12-17 09:21 - 2013-02-12 12:03 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2013-12-17 09:14 - 2013-04-03 15:27 - 00000000 ____D C:\Windows\system32\Drivers\N360
2013-12-16 15:53 - 2013-02-08 14:15 - 00000000 ____D C:\ProgramData\Norton
2013-12-16 15:51 - 2013-04-03 15:28 - 00142936 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS
2013-12-16 15:51 - 2013-04-03 15:28 - 00008194 _____ C:\Windows\system32\Drivers\SYMEVENT.CAT
2013-12-16 15:50 - 2013-04-03 15:27 - 00000000 ____D C:\Program Files\Norton 360 Premier Edition
2013-12-16 15:40 - 2013-04-03 14:24 - 00000000 ____D C:\Users\Public\Downloads\Norton
2013-12-16 10:32 - 2013-08-19 16:36 - 00000000 ____D C:\Windows\system32\MRT
2013-12-13 21:58 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-12-13 21:49 - 2013-02-08 20:15 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 21:46 - 2013-12-13 21:45 - 08610888 _____ (CyberGhost S.R.L. ) C:\Users\Mü\Downloads\CG_5.0.10.10.exe
2013-12-12 18:15 - 2013-12-12 17:36 - 00000000 ____D C:\Users\Mü\AppData\Local\CyberGhost
2013-12-12 17:46 - 2013-12-12 13:19 - 00000000 ____D C:\Program Files\Ubisoft
2013-12-12 17:36 - 2013-12-12 17:35 - 00000000 ____D C:\Program Files\TAP-Windows
2013-12-12 16:19 - 2013-12-12 16:19 - 01038704 _____ (Amazon Services LLC) C:\Users\Mü\Downloads\Die_Siedler_7_PC_Downloader.exe
2013-12-12 15:58 - 2013-12-12 15:58 - 00107888 _____ (Sony DADC Austria AG.) C:\Windows\system32\CmdLineExt.dll
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Windows\system32\AGEIA
2013-12-12 15:57 - 2013-12-12 15:57 - 00000000 ____D C:\Program Files\AGEIA Technologies
2013-12-12 15:49 - 2013-12-12 15:49 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-12-12 15:16 - 2013-12-12 14:21 - 00000000 ____D C:\Users\Mü\AppData\Local\Ubisoft Game Launcher
2013-12-12 13:18 - 2013-12-12 13:12 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2013-12-12 13:16 - 2013-02-09 10:53 - 00000000 ____D C:\Program Files\TuneUp Utilities 2013
2013-12-12 13:13 - 2013-12-12 13:13 - 00243128 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2013-12-12 13:13 - 2013-12-12 13:13 - 00000000 ____D C:\Program Files\DAEMON Tools Lite
2013-12-11 16:41 - 2013-02-08 15:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 16:41 - 2013-02-08 15:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-10 18:43 - 2013-12-12 13:16 - 00022328 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-10 18:43 - 2013-02-09 12:30 - 00030520 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-12-10 18:43 - 2013-02-09 10:53 - 00032568 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2013-12-10 15:45 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-10 15:05 - 2013-04-26 13:49 - 00000000 ____D C:\Users\Mü\AppData\Local\Canon Easy-PhotoPrint EX
2013-12-10 14:59 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-09 18:44 - 2013-12-09 18:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-09 18:44 - 2013-12-09 18:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-09 18:44 - 2013-12-09 18:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-09 18:44 - 2013-12-09 18:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-09 18:44 - 2013-12-09 18:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-09 18:44 - 2013-12-09 18:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-09 17:52 - 2013-12-09 17:13 - 00000000 ____D C:\Users\Mü\.gimp-2.8
2013-12-09 17:51 - 2013-12-09 17:51 - 00002376 _____ C:\Users\Mü\AppData\Local\recently-used.xbel
2013-12-09 17:30 - 2013-12-09 17:29 - 00000000 ____D C:\Users\Mü\AppData\Local\gtk-2.0
2013-12-09 17:22 - 2013-12-09 17:22 - 00000000 ____D C:\Users\Mü\.thumbnails
2013-12-09 17:16 - 2013-04-10 14:35 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-12-09 17:10 - 2013-12-09 17:07 - 00000000 ____D C:\Program Files\GIMP 2
2013-12-09 17:03 - 2013-12-09 17:01 - 90396104 _____ (The GIMP Team ) C:\Users\Mü\Downloads\gimp-2.8.10-setup.exe
2013-12-09 16:29 - 2013-03-18 16:40 - 00000000 ____D C:\Users\Mü\AppData\Roaming\dvdcss
2013-12-04 18:23 - 2013-12-04 18:23 - 02833752 _____ C:\Users\Mü\Downloads\XYplorer_13.40_Install_CHIP.exe
2013-12-03 17:48 - 2013-11-18 16:21 - 00000000 ____D C:\Users\Mü\Desktop\Ebay
2013-12-01 16:05 - 2013-12-01 15:37 - 00000000 ____D C:\Users\Mü\Documents\Freemake
2013-12-01 16:05 - 2013-12-01 15:36 - 00000000 ____D C:\ProgramData\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00001278 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-12-01 15:36 - 2013-12-01 15:36 - 00000000 ____D C:\Program Files\Freemake
2013-12-01 15:01 - 2013-02-08 19:18 - 00000000 ____D C:\Users\Mü\AppData\Roaming\DVDVideoSoft
2013-12-01 15:01 - 2013-02-08 19:18 - 00000000 ____D C:\Program Files\DVDVideoSoft
2013-12-01 15:01 - 2013-02-08 19:18 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2013-12-01 14:59 - 2013-12-01 14:59 - 33253288 _____ (DVDVideoSoft Ltd. ) C:\Users\Mü\Downloads\FreeVideoToDVDConverter.exe
2013-12-01 14:12 - 2013-12-01 14:12 - 00001895 _____ C:\Users\Mü\Desktop\CDBurnerXP.lnk
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Users\Mü\AppData\Roaming\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-12-01 14:12 - 2013-12-01 14:12 - 00000000 ____D C:\Program Files\CDBurnerXP
2013-12-01 14:11 - 2013-12-01 14:11 - 04985608 _____ (Canneverbe Limited ) C:\Users\Mü\Downloads\cdbxp_setup_4.5.2.4291_minimal.exe
2013-12-01 13:27 - 2013-02-09 12:08 - 00000000 ____D C:\Users\Mü\AppData\Local\Adobe
2013-12-01 13:26 - 2013-02-21 13:04 - 00000000 ____D C:\Users\Mü\AppData\Local\QuickPar
2013-11-30 12:04 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-26 11:11 - 2013-12-13 21:55 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-13 21:55 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-13 21:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-13 21:55 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-13 21:55 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-13 21:55 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-13 21:55 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-13 21:55 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-13 21:55 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-13 21:55 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-13 21:55 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-13 21:55 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-13 21:55 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-13 21:55 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-13 21:55 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-13 21:55 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-13 21:55 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-13 21:55 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-13 21:55 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-23 19:26 - 2013-12-12 13:10 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
Some content of TEMP:
====================
C:\Users\Mü\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-10 15:37
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22-12-2013 01
Ran by Mü at 2013-12-23 16:32:35
Running from C:\Users\Mü\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Norton 360 Premier Edition (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton 360 Premier Edition (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton 360 Premier Edition (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
==================== Installed Programs ======================
Acer Crystal Eye Webcam (Version: 5.2.7.1)
Acer Updater (Version: 1.02.3502)
Adobe AIR (Version: 3.7.0.1530)
Adobe AIR Free Download Packages
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (Version: 11.9.900.170)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05)
Age of Empires III (Version: 1.00.0000)
Alle meine Passworte 3.21
Alt.Binz 0.39.4 (Version: 0.39.4)
AMD USB Filter Driver (Version: 1.0.13.88)
ATI Catalyst Install Manager (Version: 3.0.741.0)
BlueStacks App Player (Version: 0.7.12.896)
BlueStacks Notification Center (Version: 0.7.12.896)
calibre (Version: 1.5.0)
Canon Easy-PhotoPrint EX
Canon Easy-WebPrint EX
Canon IJ Network Scanner Selector EX
Canon IJ Network Tool (Version: 3.1.1)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program
Canon MG5300 series Benutzerregistrierung
Canon MG5300 series MP Drivers
Canon MG5300 series On-screen Manual
Canon MP Navigator EX 5.0
Canon My Printer
Canon Solution Menu EX
Captcha Brotherhood (Version: 1.1.9)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Core Implementation (Version: 2009.0813.2131.36817)
Catalyst Control Center Graphics Full Existing (Version: 2009.0813.2131.36817)
Catalyst Control Center Graphics Full New (Version: 2009.0813.2131.36817)
Catalyst Control Center Graphics Light (Version: 2009.0813.2131.36817)
Catalyst Control Center InstallProxy (Version: 2009.0813.2131.36817)
Catalyst Control Center Localization All (Version: 2009.0813.2131.36817)
CCC Help Chinese Standard (Version: 2009.0813.2130.36817)
CCC Help Chinese Traditional (Version: 2009.0813.2130.36817)
CCC Help Czech (Version: 2009.0813.2130.36817)
CCC Help Danish (Version: 2009.0813.2130.36817)
CCC Help Dutch (Version: 2009.0813.2130.36817)
CCC Help English (Version: 2009.0813.2130.36817)
CCC Help Finnish (Version: 2009.0813.2130.36817)
CCC Help French (Version: 2009.0813.2130.36817)
CCC Help German (Version: 2009.0813.2130.36817)
CCC Help Greek (Version: 2009.0813.2130.36817)
CCC Help Hungarian (Version: 2009.0813.2130.36817)
CCC Help Italian (Version: 2009.0813.2130.36817)
CCC Help Japanese (Version: 2009.0813.2130.36817)
CCC Help Korean (Version: 2009.0813.2130.36817)
CCC Help Norwegian (Version: 2009.0813.2130.36817)
CCC Help Polish (Version: 2009.0813.2130.36817)
CCC Help Portuguese (Version: 2009.0813.2130.36817)
CCC Help Russian (Version: 2009.0813.2130.36817)
CCC Help Spanish (Version: 2009.0813.2130.36817)
CCC Help Swedish (Version: 2009.0813.2130.36817)
CCC Help Thai (Version: 2009.0813.2130.36817)
CCC Help Turkish (Version: 2009.0813.2130.36817)
ccc-core-static (Version: 2009.0813.2131.36817)
ccc-utility (Version: 2009.0813.2131.36817)
CCleaner (Version: 4.08)
CDBurnerXP (Version: 4.5.2.4291)
Citavi (Version: 3.4.0.2)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
CrystalDiskInfo 5.6.2 (Version: 5.6.2)
CyberGhost 5
D3DX10 (Version: 15.4.2368.0902)
DAEMON Tools Lite (Version: 4.48.1.0347)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition
devolo dLAN Cockpit (Version: 4.1.3.0)
Die Siedler 7 (Version: 1.12.1396)
dreamboxEDIT -- The one and only settings editor for your Dreambox
DreamStream E2 (Version: 0.4.0 (Beta 14a))
Dropbox (HKCU Version: 2.4.10)
DVD Flick 1.3.0.7 (Version: 1.3.0.7)
FileZilla Client 3.7.3 (Version: 3.7.3)
Final Media Player 2012 (Version: 2012.10.9.0)
Fingerprint Solution (Version: 6.1.56.0)
Free DVD Video Burner version 3.2.7.1125 (Version: 3.2.7.1125)
Free Studio version 2013 (Version: 6.0.0.128)
Free Video to DVD Converter version 5.0.31.1125 (Version: 5.0.31.1125)
Freemake Video Converter Version 4.1.1 (Version: 4.1.1)
GIMP 2.8.10 (Version: 2.8.10)
Google Update Helper (Version: 1.3.23.0)
HTC BMP USB Driver (Version: 1.0.5375)
HTC Driver Installer (Version: 4.0.1.001)
ImgBurn (Version: 2.5.8.0)
IPTInstaller (Version: 4.0.8)
Java 7 Update 45 (Version: 7.0.450)
Java Auto Updater (Version: 2.1.9.8)
JDownloader 0.9 (Version: 0.9)
Junk Mail filter update (Version: 16.4.3505.0912)
Launch Manager (Version: 3.0.02)
LG United Mobile Driver (Version: 3.8.1)
LSI HDA Modem (Version: 2.2.96)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017)
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (Version: 10.0.40820)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (Version: 10.0.40825)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU (Version: 10.0.40820)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (Version: 10.0.40820)
Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017)
Mozilla Firefox 26.0 (x86 de) (Version: 26.0)
Mozilla Maintenance Service (Version: 26.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT110 (Version: 16.4.1108.0727)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
NAVIGON Fresh 3.3.2 (Version: 3.3.2)
Norton 360 (Version: 21.1.0.18)
Nuvoton CIR Device Driver (Version: 8.60.1000)
NVIDIA PhysX v8.04.25 (Version: 8.04.25)
OpenOffice 4.0.1 (Version: 4.01.9714)
Origin (Version: 9.1.15.109)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017)
PDF-Viewer (Version: 2.5.211.0)
PreReq (Version: 6.2.4.0)
QuickPar 0.9 (Version: 0.9)
Realtek High Definition Audio Driver (Version: 6.0.1.5888)
Skype™ 6.5 (Version: 6.5.158)
TAP-Windows 9.9.2 (Version: 9.9.2)
TuneUp Utilities 2013 (Version: 13.0.4000.179)
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.4000.179)
Ubisoft Game Launcher (Version: 1.0.0.0)
Unlocker 1.9.2 (Version: 1.9.2)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (Version: 3)
Update for Microsoft Access 2013 (KB2768008) 32-Bit Edition
Update for Microsoft Access 2013 (KB2827233) 32-Bit Edition
Update for Microsoft InfoPath 2013 (KB2837648) 32-Bit Edition
Update for Microsoft Lync 2013 (KB2817678) 32-Bit Edition
Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition
Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition
Update for Microsoft Office 2013 (KB2738038) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760242) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760267) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760539) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760553) 32-Bit Edition
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition
Update for Microsoft Office 2013 (KB2767845) 32-Bit Edition
Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817314) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817490) 32-Bit Edition
Update for Microsoft Office 2013 (KB2817626) 32-Bit Edition
Update for Microsoft Office 2013 (KB2826004) 32-Bit Edition
Update for Microsoft Office 2013 (KB2827225) 32-Bit Edition
Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition
Update for Microsoft Office 2013 (KB2827230) 32-Bit Edition
Update for Microsoft Office 2013 (KB2827239) 32-Bit Edition
Update for Microsoft Office 2013 (KB2837626) 32-Bit Edition
Update for Microsoft Office 2013 (KB2837637) 32-Bit Edition
Update for Microsoft Office 2013 (KB2837638) 32-Bit Edition
Update for Microsoft Office 2013 (KB2837655) 32-Bit Edition
Update for Microsoft Office 2013 (KB2850066) 32-Bit Edition
Update for Microsoft OneNote 2013 (KB2850063) 32-Bit Edition
Update for Microsoft PowerPoint 2013 (KB2767850) 32-Bit Edition
Update for Microsoft Publisher 2013 (KB2837635) 32-Bit Edition
Update for Microsoft SkyDrive Pro (KB2817495) 32-Bit Edition
Update for Microsoft SkyDrive Pro (KB2837652) 32-Bit Edition
Update for Microsoft Visio 2013 (KB2817306) 32-Bit Edition
Update for Microsoft Visio Viewer 2013 (KB2768338) 32-Bit Edition
Update for Microsoft Word 2013 (KB2837647) 32-Bit Edition
Update for Microsoft Word 2013 (KB2850060) 32-Bit Edition
VLC media player 2.0.8 (Version: 2.0.8)
Windows Live Communications Platform (Version: 16.4.3505.0912)
Windows Live Essentials (Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (Version: 16.4.3505.0912)
Windows Live Mail (Version: 16.4.3505.0912)
Windows Live MIME IFilter (Version: 16.4.3505.0912)
Windows Live Photo Common (Version: 16.4.3505.0912)
Windows Live PIMT Platform (Version: 16.4.3505.0912)
Windows Live SOXE (Version: 16.4.3505.0912)
Windows Live SOXE Definitions (Version: 16.4.3505.0912)
Windows Live UX Platform (Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (Version: 16.4.3505.0912)
Windows Live Writer (Version: 16.4.3505.0912)
Windows Live Writer Resources (Version: 16.4.3505.0912)
WinRAR 4.20 (32-Bit) (Version: 4.20.0)
Xvid 1.2.2 final uninstall (Version: 1.2)
==================== Restore Points =========================
19-12-2013 12:00:32 Windows-Sicherung
19-12-2013 17:51:25 Windows Update
20-12-2013 10:18:12 SUCCESSCONTROL CRM wird installiert
20-12-2013 10:21:09 SUCCESSCONTROL CRM wird installiert
20-12-2013 10:30:23 SUCCESSCONTROL CRM wird entfernt
20-12-2013 12:00:19 Windows-Sicherung
21-12-2013 08:41:39 bNICE_CRM wird installiert
21-12-2013 12:00:46 Windows-Sicherung
21-12-2013 12:00:47 SQL Server-Browser für SQL Server 2012 wurde entfernt.
21-12-2013 12:24:13 Entfernte Microsoft SQL Server 2008 Native Client
23-12-2013 07:15:14 Windows-Sicherung
23-12-2013 08:20:41 Microsoft SQL Server 2012 Native Client wurde entfernt.
23-12-2013 08:23:54 bNICE_CRM wird entfernt
23-12-2013 08:54:53 Tweaking.com - Windows Repair
23-12-2013 12:02:18 Windows-Sicherung
==================== Hosts content: ==========================
2013-05-17 13:19 - 2013-05-17 13:20 - 00000856 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
==================== Scheduled Tasks (whitelisted) =============
Task: {14E5FDC2-F945-4862-9144-B267ADFE5A39} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {474B966F-CB91-48A2-87E2-D3419F23134A} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {48A690CE-9861-4CF4-8FEA-0D87865FBE26} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2013\OneClick.exe [2013-12-10] (TuneUp Software)
Task: {4F8208F6-73A1-44D2-9F6C-48348141C663} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {627062B5-C96C-401D-AEE0-FF5DD70B2EA1} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\symerr.exe [2013-08-01] (Symantec Corporation)
Task: {67A9DF2B-11DD-4133-9E93-4D63C8F88935} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2663372261-765519811-3386082939-1001
Task: {6E55C109-597D-4127-9334-ADD3D127E2D7} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\WSCStub.exe [2013-10-08] (Symantec Corporation)
Task: {77B34AE5-A27E-4311-AADB-AC3B6F4A8E38} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\microsoft shared\OFFICE15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {7DA1CD5B-AE9B-492A-BCC1-97FF97BAA4C4} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {802482A5-4498-4C12-8BEF-09838D6D9960} - System32\Tasks\Final Media Player Update Checker => C:\Program Files\FinalMediaPlayer\FMPCheckForUpdates.exe [2013-03-25] (Bitberry Software)
Task: {854D2218-69B4-4E58-B7D3-B3DB80DBC30A} - System32\Tasks\Auto Re-Aktivierung => C:\Windows\Re-Aktivierung\TriggerKMS.exe [2013-01-23] ()
Task: {9D1760DD-235A-4163-8BA1-78214C098799} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files\Norton 360 Premier Edition\Engine\21.1.0.18\symerr.exe [2013-08-01] (Symantec Corporation)
Task: {BA07D331-8464-40F1-96F3-FF46FBECE930} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {D6C2C9A3-CD96-4544-A95D-5459490BFD78} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {E70C4A0C-BFB6-4375-BC1E-5E07C103B0BB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: {EB57043A-6910-4B24-915E-F309BC924C1D} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {EFF163C8-46E1-42A8-BB61-6D5C53344785} - System32\Tasks\elevated_Integrator_1~PUENUT1~ARGORPC => C:\Program Files\TuneUp Utilities 2013\Integrator.exe [2013-12-10] (TuneUp Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Final Media Player Update Checker.job => C:\Program Files\FinalMediaPlayer\FMPCheckForUpdates.exe
==================== Loaded Modules (whitelisted) =============
2010-07-04 22:32 - 2010-07-04 22:32 - 00004608 _____ () C:\Program Files\Unlocker\UnlockerHook.dll
2013-08-07 20:25 - 2013-08-07 20:25 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2013-12-13 21:47 - 2013-11-26 09:52 - 00032768 _____ () C:\Program Files\CyberGhost 5\de\CyberGhost.resources.dll
2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Mü\AppData\Roaming\Dropbox\bin\libcef.dll
2013-12-20 11:25 - 2013-12-20 11:25 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-05-22 14:18 - 2013-05-22 14:18 - 00122880 _____ () C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox\components\CitaviPickerCommunication.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/23/2013 02:11:17 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe, Version: 11.9.900.170, Zeitstempel: 0x529b79bf
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x5fc592cd
ID des fehlerhaften Prozesses: 0x15a0
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_170.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe1
Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_170.exe2
Berichtskennung: FlashPlayerPlugin_11_9_900_170.exe3
Error: (12/23/2013 02:11:12 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe, Version: 11.9.900.170, Zeitstempel: 0x529b79bf
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x5fc592cd
ID des fehlerhaften Prozesses: 0x600
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_170.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe1
Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_170.exe2
Berichtskennung: FlashPlayerPlugin_11_9_900_170.exe3
Error: (12/23/2013 02:11:06 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe, Version: 11.9.900.170, Zeitstempel: 0x529b79bf
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x5fc592cd
ID des fehlerhaften Prozesses: 0x12e8
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_170.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe1
Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_170.exe2
Berichtskennung: FlashPlayerPlugin_11_9_900_170.exe3
Error: (12/23/2013 02:11:01 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe, Version: 11.9.900.170, Zeitstempel: 0x529b79bf
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x5fc592cd
ID des fehlerhaften Prozesses: 0x1514
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_170.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe1
Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_170.exe2
Berichtskennung: FlashPlayerPlugin_11_9_900_170.exe3
Error: (12/23/2013 02:10:51 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe, Version: 11.9.900.170, Zeitstempel: 0x529b79bf
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x5fc592cd
ID des fehlerhaften Prozesses: 0x1650
Startzeit der fehlerhaften Anwendung: 0xFlashPlayerPlugin_11_9_900_170.exe0
Pfad der fehlerhaften Anwendung: FlashPlayerPlugin_11_9_900_170.exe1
Pfad des fehlerhaften Moduls: FlashPlayerPlugin_11_9_900_170.exe2
Berichtskennung: FlashPlayerPlugin_11_9_900_170.exe3
Error: (12/23/2013 10:12:09 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (12/23/2013 10:12:09 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (12/23/2013 10:12:09 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (12/23/2013 10:06:12 AM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (12/23/2013 09:37:13 AM) (Source: BstHdAndroidSvc) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
System errors:
=============
Error: (12/23/2013 10:06:12 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (12/23/2013 09:37:13 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (12/23/2013 08:05:00 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (12/21/2013 02:32:46 PM) (Source: Service Control Manager) (User: )
Description: Dienst "SQL Server (BNICE_SQL)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (12/21/2013 09:04:53 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (12/21/2013 09:04:19 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 21.12.2013 um 09:02:13 unerwartet heruntergefahren.
Error: (12/21/2013 08:42:31 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SENS erreicht.
Error: (12/21/2013 08:42:01 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Dnscache erreicht.
Error: (12/21/2013 08:41:31 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Schedule erreicht.
Error: (12/21/2013 08:41:01 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst LanmanWorkstation erreicht.
Microsoft Office Sessions:
=========================
Error: (12/23/2013 02:11:17 PM) (Source: Application Error)(User: )
Description: FlashPlayerPlugin_11_9_900_170.exe11.9.900.170529b79bfunknown0.0.0.000000000c00000055fc592cd15a001ceffe0771421eeC:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exeunknownb4f38c72-6bd3-11e3-8421-00238b1c50ea
Error: (12/23/2013 02:11:12 PM) (Source: Application Error)(User: )
Description: FlashPlayerPlugin_11_9_900_170.exe11.9.900.170529b79bfunknown0.0.0.000000000c00000055fc592cd60001ceffe0738b484aC:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exeunknownb169a14e-6bd3-11e3-8421-00238b1c50ea
Error: (12/23/2013 02:11:06 PM) (Source: Application Error)(User: )
Description: FlashPlayerPlugin_11_9_900_170.exe11.9.900.170529b79bfunknown0.0.0.000000000c00000055fc592cd12e801ceffe07085a855C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exeunknownae66244b-6bd3-11e3-8421-00238b1c50ea
Error: (12/23/2013 02:11:01 PM) (Source: Application Error)(User: )
Description: FlashPlayerPlugin_11_9_900_170.exe11.9.900.170529b79bfunknown0.0.0.000000000c00000055fc592cd151401ceffe06d71622cC:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exeunknownab5aded9-6bd3-11e3-8421-00238b1c50ea
Error: (12/23/2013 02:10:51 PM) (Source: Application Error)(User: )
Description: FlashPlayerPlugin_11_9_900_170.exe11.9.900.170529b79bfunknown0.0.0.000000000c00000055fc592cd165001ceffe06369eb9dC:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exeunknowna5010a08-6bd3-11e3-8421-00238b1c50ea
Error: (12/23/2013 10:12:09 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: WmiApRplWmiApRpl8F20300004D070000
Error: (12/23/2013 10:12:09 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (12/23/2013 10:12:09 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)
Description: Performance1637070000000000000000000009030000
Error: (12/23/2013 10:06:12 AM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (12/23/2013 09:37:13 AM) (Source: BstHdAndroidSvc)(User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
==================== Memory info ===========================
Percentage of memory in use: 45%
Total physical RAM: 3294.36 MB
Available physical RAM: 1790.87 MB
Total Pagefile: 6587.01 MB
Available Pagefile: 4792.99 MB
Total Virtual: 2047.88 MB
Available Virtual: 1921.79 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:226.53 GB) (Free:172.6 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:465.76 GB) (Free:310.98 GB) NTFS
Drive e: () (Fixed) (Total:221.5 GB) (Free:221.4 GB) NTFS
Drive g: (INTENSO) (Removable) (Total:14.83 GB) (Free:14.78 GB) FAT32
Drive i: (ext. FP 200GB Studium EHS) (Fixed) (Total:232.88 GB) (Free:232.75 GB) NTFS
Drive k: (ext. FP 500GB grau) (Fixed) (Total:465.76 GB) (Free:305.95 GB) NTFS
Drive l: (ext. FP 1000GB schwarz) (Fixed) (Total:931.51 GB) (Free:46.69 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E20EC200)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=227 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=222 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=5 GB) - (Type=12)
========================================================
Disk: 1 (Size: 466 GB) (Disk ID: F65A8C13)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 3 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: 3AFD1B49)
Partition 1: (Not Active) - (Size=233 GB) - (Type=07 NTFS)
========================================================
Disk: 4 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: 5B2CC482)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
========================================================
Disk: 5 (Size: 932 GB) (Disk ID: E8900690)
Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)
========================================================
Disk: 6 (MBR Code: Windows XP) (Size: 15 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=15 GB) - (Type=0C)
==================== End Of Log ============================
Frohe Weihnachten Dir! |
|
24.12.2013, 10:38
| #8 |
| /// the machine /// TB-Ausbilder | Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. Fertig Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
24.12.2013, 11:25
| #9 |
| | Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. Super.. Der hatte sich heute wieder festgefahren, aber ich geh da erstmal auf Ursachenforschung. Dir vielen Dank für deine Hilfe und nochmals frohe Weihnachten und guten Rutsch! Kannst das Abo löschen.. |
|
24.12.2013, 11:36
| #10 |
| /// the machine /// TB-Ausbilder | Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Infizierte Registrierungsschlüssel sowie suspicious.cloud.9. |
| abgebrochen, adblock, administrator, anti-malware, appdata, autostart, bluestacks, branding, canon, cyberghost, dateien, desktop, device driver, dvdvideosoft ltd., explorer, free download, gelöscht, infizierte, malwarebytes, microsoft, office 2013, plug-in, problem, pup.optional.dealply.a, pup.optional.delta.a, pup.optional.iminent.a, pup.optional.opencandy, pup.optional.softonic, pup.riskwaretool.ck, registrierungsdatenbank, software, suspicious.cloud.9, system32, tracker, word 2013 |
Linear-Darstellung
