| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: win7 64bit: malwarebyte meldet InfektionenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
21.12.2013, 15:06
| #1 |
 |  win7 64bit: malwarebyte meldet Infektionen Hallo, ein scan mit malwarebyte meldet Infektionen: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.20.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16750 user :: USER-TOSH [Administrator] 20.12.2013 15:13:31 MBAM-log-2013-12-20 (16-57-14).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|F:\|L:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 521370 Laufzeit: 32 Minute(n), 15 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 5 HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\BabylonToolbar (PUP.Optional.BabylonToolBar.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt. HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Google\Chrome\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf (PUP.Optional.SpeedAnalysis2.A) -> Keine Aktion durchgeführt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 1 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.StartPage) -> Bösartig: (hxxp://www2.delta-search.com/?affID=119677&babsrc=HP_ss&mntrId=765988532E772D39) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. Infizierte Verzeichnisse: 7 C:\Users\user\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Roaming\SpeedAnalysis2 (PUP.Optional.SpeedAnalysis.A) -> Keine Aktion durchgeführt. C:\Users\Klaus\AppData\Roaming\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Roaming\File Scout (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Local\Temp\mt_ffx\Delta (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Local\Temp\mt_ffx\Delta\delta (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.16.16 (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt. Infizierte Dateien: 20 C:\Users\Klaus\AppData\Local\Temp\M1BNT0oO.exe.part (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt. C:\Users\Klaus\Downloads\BestCodecsPackSetup(1).exe (Adware.InstallBrain) -> Keine Aktion durchgeführt. C:\Users\Klaus\Downloads\BestCodecsPackSetup.exe (Adware.InstallBrain) -> Keine Aktion durchgeführt. C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_foxit-reader.exe (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt. C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_mobile-atlas-creator.exe (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt. C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_pdfcreator.exe (PUP.Optional.Softonic.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7R6U3LAP\MyPhoneExplorer_v2_5185[1].exe (PUP.Optional.InstallMonetizer.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UJ1Q8ZPT\pack[1].7z (PUP.Optional.PerformerSoft.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Local\Temp\Сodec Performer803601.exe (Adware.InstallBrain) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Local\Temp\A885D2CB-BAB0-7891-B618-477089D08B9A\Setup.exe (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Local\Temp\A885D2CB-BAB0-7891-B618-477089D08B9A\Latest\CrxInstaller.dll (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Local\Temp\A885D2CB-BAB0-7891-B618-477089D08B9A\Latest\MyBabylonTB.exe (PUP.Optional.Delta) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Local\Temp\A885D2CB-BAB0-7891-B618-477089D08B9A\Latest\Setup.exe (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Roaming\File Scout\filescout.exe (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Roaming\SpeedAnalysis2\speedanalysis.crx (PUP.Optional.SpeedAnalysis.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Roaming\speedanalysis.ico (PUP.Optional.SpeedAnalysis2.A) -> Keine Aktion durchgeführt. C:\Users\Klaus\AppData\Roaming\PerformerSoft\PC Performer\log_04-26-2013.log (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt. C:\Users\Klaus\AppData\Roaming\PerformerSoft\PC Performer\eng_rcp.dat (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt. C:\Users\user\AppData\Roaming\File Scout\uninst.exe (PUP.Optional.FileScout.A) -> Keine Aktion durchgeführt. (Ende) Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-12-2013 02
Ran by Klaus (ATTENTION: The logged in user is not administrator) on USER-TOSH on 21-12-2013 14:11:19
Running from C:\Users\Klaus\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
() C:\Program Files\TOSHIBA\FlashCards\Hotkey\TCrdKBB.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Spigot, Inc.) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Klaus\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\widimon\widimon.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
() C:\nxp\LPCXpresso_4.1.5_219\lpcxpresso\lpcxpresso.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
() C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Reader.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
() C:\Program Files (x86)\Bazaar\tbzrcache.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [] - [x]
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12856936 2011-09-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-17] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-04] (Synaptics Incorporated)
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [590256 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [981888 2011-08-03] (TOSHIBA Corporation)
HKLM\...\Run: [BatteryManager] - C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe [285608 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1544624 2011-08-23] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [712096 2011-08-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710560 2011-06-10] (TOSHIBA Corporation)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-06-01] (Intel(R) Corporation)
HKLM\...\Run: [TosVolRegulator] - C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosNC] - C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe [598448 2011-06-28] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38824 2011-06-28] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [Toshiba Registration] - C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-10-16] (Toshiba Europe GmbH)
HKLM\...\Runonce: [MSPCLOCK] - rundll32.exe streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000}
HKLM\...\Runonce: [MSPQM] - rundll32.exe streamci,StreamingDeviceSetup {DDF4358E-BB2C-11D0-A42F-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196}
HKLM\...\Runonce: [MSKSSRV] - rundll32.exe streamci,StreamingDeviceSetup {96E080C7-143C-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196}
HKLM\...\Runonce: [MSTEE.CxTransform] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},C:\windows\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [MSTEE.Splitter] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},C:\windows\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [WDM_DRMKAUD] - rundll32.exe streamci,StreamingDeviceSetup {EEC12DB6-AD9C-4168-8658-B03DAEF417FE},{ABD61E00-9350-47e2-A632-4438B90C6641},{FFBB6E3F-CCFE-4D84-90D9-421418B03A8E},C:\windows\inf\WDMAUDIO.inf,WDM_DRMKAUD.Interface.Install
HKLM-x32\...\RunOnce: [aswAhAScr.dll] - "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\AhAScr.dll" [169824 2013-12-09] (AVAST Software)
HKLM-x32\...\RunOnce: [aswasOutExt.dll] - "C:\Program Files\AVAST Software\Avast\aswRegSvr.exe" "C:\Program Files\AVAST Software\Avast\asOutExt.dll" [418560 2013-12-09] (AVAST Software)
HKLM-x32\...\RunOnce: [aswasOutExt64.dll] - "C:\Program Files\AVAST Software\Avast\aswRegSvr64.exe" "C:\Program Files\AVAST Software\Avast\asOutExt64.dll" [450008 2013-12-09] (AVAST Software)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
MountPoints2: {0fb0090c-7bf3-11e2-a5e9-fa81d59540b0} - E:\SETUP.EXE
MountPoints2: {b98a5166-32d8-11e1-93c9-88532e772d38} - D:\autorun.exe
MountPoints2: {cd3dfb00-f336-11e1-84a3-005056c00008} - D:\shelexec.exe start.htm
HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1409424 2011-06-29] (Nero AG)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ITSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-02] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [TOSDCR] - C:\Program Files (x86)\TOSHIBA\PasswordUtility\TOSDCR.exe [169296 2007-08-28] ()
HKLM-x32\...\Run: [ToshibaServiceStation] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-12] (TOSHIBA Corporation)
HKLM-x32\...\Run: [TSleepSrv] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [252792 2010-06-05] (TOSHIBA)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [SearchSettings] - C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [983904 2012-04-23] (Spigot, Inc.)
HKLM-x32\...\Run: [Reader Application Helper] - C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [898952 2012-11-08] (Sony Corporation)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\1ce4d5d5-40dd-4876-9601-c3e8eda25bfa.exe [180184 2013-12-05] (AVAST Software)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-09] (AVAST Software)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Users\Klaus\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {1A4B5EEF-3962-42D1-8CA8-4A6AF1796564} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{33822A57-F00C-4F8D-BC78-8B65AE4DDCDC}: [NameServer]0.0.0.0
FireFox:
========
FF ProfilePath: C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\fsm3yj81.default-1386322393877
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @sony.com/ReaderDesktop - C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
CHR RestoreOnStartup: "hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.200.2) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U20) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (DocuCom PDF Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (WildTangent Games App Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Extension: (YouTube) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (avast! WebRep) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0
CHR Extension: (Google Wallet) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [dgjkhjdcljddbedokogakmmdjgnbeanf] - C:\Users\user\AppData\Roaming\SpeedAnalysis2\speedanalysis.crx
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-09] (AVAST Software)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9663848 2011-04-10] (DisplayLink Corp.)
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [69192 2013-10-11] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Guard Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R2 irstrtsv; C:\windows\SysWow64\irstrtsv.exe [184320 2011-07-07] (Intel Corporation)
R2 lmhosts; C:\Windows\system32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-06-01] ()
R2 NlaSvc; C:\Windows\System32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013\RpcAgentSrv.exe [68760 2008-11-04] (SiSoftware)
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
R2 vmware-converter-agent; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter-a.exe [423536 2011-08-19] (VMware, Inc.)
R2 vmware-converter-server; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [423536 2011-08-19] (VMware, Inc.)
R2 vmware-converter-worker; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [423536 2011-08-19] (VMware, Inc.)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [38984 2013-12-09] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [84328 2013-12-09] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [92544 2013-12-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-09] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1032416 2013-12-09] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [409832 2013-12-09] (AVAST Software)
R1 aswTdi; C:\windows\system32\drivers\aswTdi.sys [65264 2013-12-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-09] ()
S3 bmdrvr; C:\Windows\SysWow64\drivers\bmdrvr.sys [74352 2011-03-15] (VMware, Inc.)
S3 cpuz135; C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [23816 2012-02-07] (CPUID)
S3 dfu; C:\Windows\System32\drivers\MassDfu64.sys [15360 2011-12-12] (Philips PTCL)
S3 DisplayLinkUsbPort; C:\Windows\System32\DRIVERS\DisplayLinkUsbPort_5.6.31854.0.sys [17408 2011-04-10] (hxxp://libusb-win32.sourceforge.net)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48200 2013-09-04] ()
R2 hhdserhelp; C:\windows\system32\drivers\hhdserhelp.sys [20776 2011-08-16] (HHD Software Ltd.)
R3 hhdserial64; C:\Windows\System32\DRIVERS\hhdserial64.sys [42280 2011-08-16] (HHD Software Ltd.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 pwdrvio; C:\windows\system32\pwdrvio.sys [19032 2013-01-11] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12384 2013-01-11] ()
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254976 2010-08-31] (Jungo)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-21 14:11 - 2013-12-21 14:11 - 00025431 _____ C:\Users\Klaus\Downloads\FRST.txt
2013-12-21 14:11 - 2013-12-21 14:11 - 00000000 ____D C:\FRST
2013-12-21 14:10 - 2013-12-21 14:10 - 00000470 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-12-21 14:10 - 2013-12-21 14:10 - 00000000 _____ C:\Users\user\defogger_reenable
2013-12-21 13:38 - 2013-12-21 13:38 - 02193141 _____ (Farbar) C:\Users\Klaus\Downloads\FRST64.exe
2013-12-21 13:37 - 2013-12-21 13:37 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-12-21 13:33 - 2013-12-21 13:34 - 00377856 _____ C:\Users\Klaus\Downloads\tg2fpwht.exe
2013-12-21 13:32 - 2013-12-21 13:33 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf(1).exe
2013-12-21 13:31 - 2013-12-21 13:31 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf.exe
2013-12-21 13:30 - 2013-12-21 13:31 - 00000000 ____D C:\Users\Klaus\Documents\VirenKram
2013-12-20 16:58 - 2013-12-20 16:58 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-12-20 16:58 - 2013-12-20 16:58 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-20 14:33 - 2013-12-20 14:33 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-12-20 14:33 - 2013-12-20 14:33 - 00001132 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-20 14:33 - 2013-12-20 14:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-20 14:33 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-12-20 12:40 - 2013-12-20 12:52 - 00002029 _____ C:\Users\Klaus\Desktop\CringStart.lnk
2013-12-20 12:19 - 2013-12-20 12:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-19 17:10 - 2012-06-05 12:35 - 00001963 _____ C:\Users\Klaus\Desktop\DOSBox 0.74.lnk
2013-12-19 17:09 - 2013-12-19 17:27 - 00000000 ____D C:\CONTEXT4
2013-12-19 13:14 - 2013-12-19 13:14 - 00002235 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 12:41 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-19 12:41 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-19 12:41 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-19 12:41 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-19 12:41 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-19 12:41 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-19 12:41 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-19 12:41 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-19 12:41 - 2013-10-25 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-19 12:41 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-19 12:39 - 2013-12-19 12:41 - 00000000 ____D C:\windows\system32\MRT
2013-12-19 12:37 - 2013-12-21 13:54 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-19 11:37 - 2013-12-19 11:37 - 00000000 ____D C:\windows\system32\RsFx
2013-12-19 11:37 - 2009-07-21 01:42 - 00111640 _____ (Microsoft Corporation) C:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00079896 _____ (Microsoft Corporation) C:\windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00078872 _____ (Microsoft Corporation) C:\windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00050200 _____ (Microsoft Corporation) C:\windows\SysWOW64\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\SysWOW64\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1033
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2013-12-19 11:35 - 2013-12-19 11:35 - 00000000 ____D C:\windows\PCHEALTH
2013-12-19 11:34 - 2013-12-19 11:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-19 11:24 - 2013-12-19 11:24 - 03277648 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcs_web.exe
2013-12-19 11:23 - 2013-12-19 11:23 - 00673024 _____ ( ) C:\Users\Klaus\Downloads\ZipOpenerSetup.exe
2013-12-15 12:33 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-15 12:33 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-15 12:33 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-15 12:33 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-15 12:33 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-15 12:33 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-15 12:33 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-15 12:33 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-15 12:33 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-15 12:33 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-15 12:33 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-15 12:33 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-15 12:33 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-15 12:33 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-15 12:33 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-15 12:33 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-15 12:33 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-15 12:33 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-15 12:33 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2013-12-09 13:46 - 2013-12-09 14:21 - 00397824 ___SH C:\EUMONBMP.SYS
2013-12-09 13:38 - 2013-12-09 13:38 - 00001244 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 6.1.lnk
2013-12-09 13:38 - 2013-09-04 11:24 - 00189000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\EuFdDisk.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00061000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\eubakup.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00048200 _____ C:\windows\system32\Drivers\EUBKMON.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00018504 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\eudskacs.sys
2013-12-09 13:36 - 2013-09-04 11:32 - 00024136 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\fbnative.exe
2013-12-09 13:35 - 2013-12-09 13:35 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-09 13:33 - 2013-12-09 13:33 - 118962544 _____ ( ) C:\Users\Klaus\Downloads\tb_free.exe
2013-12-09 13:30 - 2013-12-09 13:30 - 00583496 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Users\Klaus\Downloads\tb_free_installer.exe
2013-12-09 13:24 - 2013-12-09 13:24 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vc_web.exe
2013-12-09 12:11 - 2013-12-09 12:11 - 00813920 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\VS10sp1-KB983509(1).exe
2013-12-09 12:03 - 2013-12-09 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVAST Software
2013-12-09 11:18 - 2013-12-09 11:18 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcPlus_web.exe
2013-12-09 09:33 - 2013-12-09 09:33 - 00000000 ____D C:\Movtec-Kinegram
2013-12-06 13:28 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-12-06 10:40 - 2013-12-19 12:37 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-06 10:40 - 2013-12-19 12:37 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-06 10:33 - 2013-12-06 10:33 - 00000000 ____D C:\Users\Klaus\Desktop\Alte Firefox-Daten
2013-12-06 09:54 - 2013-12-06 09:55 - 02753344 _____ (AVAST Software) C:\Users\Klaus\Downloads\avast-browser-cleanup.exe
2013-12-05 18:42 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-12-05 18:42 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-12-05 18:42 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll
2013-12-05 18:42 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\credui.dll
2013-12-05 18:42 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-12-05 18:42 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\SysWOW64\SmartcardCredentialProvider.dll
2013-12-05 18:42 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2013-12-05 18:42 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\credui.dll
2013-12-05 18:42 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-12-05 18:42 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2013-12-05 18:42 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2013-12-05 18:42 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2013-12-05 18:42 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2013-12-05 18:42 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2013-12-05 18:42 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2013-12-05 18:42 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2013-12-05 18:42 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-12-05 18:42 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2013-12-05 18:42 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2013-12-05 18:42 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2013-12-05 18:42 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2013-12-05 18:42 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2013-12-05 18:42 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-12-05 18:42 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-12-05 18:42 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-12-05 18:42 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-12-05 18:42 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-12-05 18:42 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-12-05 18:42 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-12-05 18:42 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-12-05 18:42 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-12-05 18:42 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-12-05 18:42 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-12-05 18:42 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-12-05 18:42 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-12-05 18:42 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-12-05 18:42 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-12-05 18:42 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-12-05 18:42 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-12-05 18:42 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-12-05 18:42 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2013-12-05 18:42 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-12-05 18:42 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-12-05 18:42 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2013-12-05 18:42 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2013-12-05 18:42 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2013-12-05 18:42 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-12-05 18:42 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2013-12-05 18:42 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2013-12-05 18:42 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2013-12-05 18:42 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-12-05 18:42 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-12-05 18:42 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-12-05 18:42 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d11.dll
2013-12-05 18:42 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\windows\system32\d3d11.dll
2013-12-05 18:41 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-12-05 18:41 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-12-05 18:41 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-12-05 18:41 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll
2013-12-05 18:41 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll
2013-12-05 18:41 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-12-05 18:41 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-12-05 18:41 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2013-12-05 18:41 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-12-05 18:41 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2013-12-05 18:41 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-12-05 18:41 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-12-05 18:41 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-12-05 18:41 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2013-12-05 18:41 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-12-05 18:41 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2013-12-05 18:41 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-12-05 18:41 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-12-05 18:41 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-12-05 18:41 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-12-05 18:41 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2013-12-05 18:41 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-12-05 18:41 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-12-05 18:41 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-12-05 18:41 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-12-05 18:41 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-05 18:41 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-05 18:41 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-12-05 18:41 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-12-05 18:41 - 2013-07-12 11:40 - 00109824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBAUDIO.sys
2013-12-05 18:41 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2013-12-05 18:41 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2013-12-05 18:41 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2013-12-05 18:41 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2013-12-05 18:41 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2013-12-05 18:41 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-12-05 18:41 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-12-05 18:41 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2013-12-05 18:41 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2013-12-05 18:41 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2013-12-05 18:41 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\certenc.dll
2013-12-05 18:41 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\windows\system32\certutil.exe
2013-12-05 18:41 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\windows\SysWOW64\certutil.exe
2013-12-05 18:41 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\certenc.dll
2013-12-05 18:41 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\cryptdlg.dll
2013-12-05 18:41 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptdlg.dll
2013-12-05 18:41 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2013-12-05 18:41 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32spl.dll
2013-12-05 18:41 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2013-12-05 18:41 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2013-12-05 18:40 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-12-05 18:40 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-12-05 18:40 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-12-05 18:40 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-12-05 18:40 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-12-05 18:40 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll
2013-12-05 18:40 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2013-12-05 18:40 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2013-12-05 15:57 - 2013-12-19 10:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00002073 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Users\user\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-12-05 15:36 - 2013-12-05 15:37 - 36047576 _____ (Foxit Corporation ) C:\Users\Klaus\Downloads\FoxitReader604.0719_L10N_Setup.exe
2013-12-05 15:34 - 2013-12-05 15:34 - 00401752 _____ (Softonic ) C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_foxit-reader.exe
2013-12-05 15:22 - 2013-12-05 15:28 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-12-05 15:21 - 2013-12-05 15:21 - 00002080 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-12-05 15:21 - 2013-12-05 15:21 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2013-12-05 15:17 - 2013-12-05 15:17 - 07080248 _____ C:\Users\Klaus\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-12-05 13:15 - 2013-12-05 13:15 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes
==================== One Month Modified Files and Folders =======
2013-12-21 14:11 - 2013-12-21 14:11 - 00025431 _____ C:\Users\Klaus\Downloads\FRST.txt
2013-12-21 14:11 - 2013-12-21 14:11 - 00000000 ____D C:\FRST
2013-12-21 14:10 - 2013-12-21 14:10 - 00000470 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-12-21 14:10 - 2013-12-21 14:10 - 00000000 _____ C:\Users\user\defogger_reenable
2013-12-21 13:55 - 2011-11-16 00:56 - 01892704 _____ C:\windows\WindowsUpdate.log
2013-12-21 13:54 - 2013-12-19 12:37 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-21 13:38 - 2013-12-21 13:38 - 02193141 _____ (Farbar) C:\Users\Klaus\Downloads\FRST64.exe
2013-12-21 13:37 - 2013-12-21 13:37 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-12-21 13:34 - 2013-12-21 13:33 - 00377856 _____ C:\Users\Klaus\Downloads\tg2fpwht.exe
2013-12-21 13:34 - 2012-01-10 11:11 - 03451762 _____ C:\Users\Klaus\Documents\.bzr.log
2013-12-21 13:33 - 2013-12-21 13:32 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf(1).exe
2013-12-21 13:31 - 2013-12-21 13:31 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf.exe
2013-12-21 13:31 - 2013-12-21 13:30 - 00000000 ____D C:\Users\Klaus\Documents\VirenKram
2013-12-21 13:12 - 2011-10-16 21:40 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-21 12:33 - 2012-05-18 11:33 - 00000402 _____ C:\windows\Tasks\FreeFileViewerUpdateChecker.job
2013-12-20 19:26 - 2011-10-16 21:40 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-20 16:58 - 2013-12-20 16:58 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-12-20 16:58 - 2013-12-20 16:58 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-20 16:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-12-20 14:47 - 2011-02-11 09:21 - 00769312 _____ C:\windows\system32\perfh007.dat
2013-12-20 14:47 - 2011-02-11 09:21 - 00175692 _____ C:\windows\system32\perfc007.dat
2013-12-20 14:47 - 2009-07-14 06:13 - 01816312 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-20 14:37 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-20 14:37 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-20 14:33 - 2013-12-20 14:33 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-12-20 14:33 - 2013-12-20 14:33 - 00001132 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-20 14:33 - 2013-12-20 14:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-20 14:30 - 2012-05-12 11:27 - 00000000 ____D C:\ProgramData\VMware
2013-12-20 14:30 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-12-20 14:30 - 2009-07-14 05:51 - 00091816 _____ C:\windows\setupact.log
2013-12-20 14:29 - 2012-05-13 18:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 13:19 - 2012-01-02 11:36 - 00000000 ____D C:\Users\Klaus\AppData\Local\Mozilla
2013-12-20 12:52 - 2013-12-20 12:40 - 00002029 _____ C:\Users\Klaus\Desktop\CringStart.lnk
2013-12-20 12:19 - 2013-12-20 12:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-20 11:47 - 2012-03-13 14:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\UseNeXT
2013-12-20 11:38 - 2012-05-28 08:58 - 00000000 ____D C:\Users\Klaus\Documents\UseNeXT
2013-12-19 17:27 - 2013-12-19 17:09 - 00000000 ____D C:\CONTEXT4
2013-12-19 16:53 - 2012-03-09 14:02 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\vlc
2013-12-19 16:01 - 2013-03-26 11:50 - 00000978 _____ C:\windows\Tasks\Paragon Archive name arc_260313104821816.job
2013-12-19 13:14 - 2013-12-19 13:14 - 00002235 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 13:14 - 2011-10-16 21:40 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-19 12:53 - 2012-03-12 12:32 - 00000000 ____D C:\Ergebnis
2013-12-19 12:49 - 2009-07-14 05:45 - 00414376 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-19 12:43 - 2012-01-02 12:30 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-19 12:41 - 2013-12-19 12:39 - 00000000 ____D C:\windows\system32\MRT
2013-12-19 12:37 - 2013-12-06 10:40 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-19 12:37 - 2013-12-06 10:40 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-19 11:42 - 2012-01-03 14:56 - 00000000 ____D C:\Users\Klaus\Documents\Visual Studio 2010
2013-12-19 11:37 - 2013-12-19 11:37 - 00000000 ____D C:\windows\system32\RsFx
2013-12-19 11:37 - 2013-12-19 11:34 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\SysWOW64\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1033
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2013-12-19 11:36 - 2012-02-09 08:25 - 00000000 ____D C:\windows\SysWOW64\1033
2013-12-19 11:36 - 2012-01-03 14:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-12-19 11:36 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-12-19 11:35 - 2013-12-19 11:35 - 00000000 ____D C:\windows\PCHEALTH
2013-12-19 11:32 - 2012-01-03 14:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 10.0
2013-12-19 11:24 - 2013-12-19 11:24 - 03277648 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcs_web.exe
2013-12-19 11:23 - 2013-12-19 11:23 - 00673024 _____ ( ) C:\Users\Klaus\Downloads\ZipOpenerSetup.exe
2013-12-19 10:41 - 2013-12-05 15:57 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Foxit Software
2013-12-15 12:21 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-12-09 14:21 - 2013-12-09 13:46 - 00397824 ___SH C:\EUMONBMP.SYS
2013-12-09 13:38 - 2013-12-09 13:38 - 00001244 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 6.1.lnk
2013-12-09 13:35 - 2013-12-09 13:35 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-09 13:33 - 2013-12-09 13:33 - 118962544 _____ ( ) C:\Users\Klaus\Downloads\tb_free.exe
2013-12-09 13:30 - 2013-12-09 13:30 - 00583496 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Users\Klaus\Downloads\tb_free_installer.exe
2013-12-09 13:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-09 13:24 - 2013-12-09 13:24 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vc_web.exe
2013-12-09 13:05 - 2012-01-02 12:40 - 01607480 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-12-09 12:11 - 2013-12-09 12:11 - 00813920 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\VS10sp1-KB983509(1).exe
2013-12-09 12:03 - 2013-12-09 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVAST Software
2013-12-09 12:02 - 2010-11-21 04:47 - 00053152 _____ C:\windows\PFRO.log
2013-12-09 11:18 - 2013-12-09 11:18 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcPlus_web.exe
2013-12-09 09:33 - 2013-12-09 09:33 - 00000000 ____D C:\Movtec-Kinegram
2013-12-09 09:33 - 2012-01-13 10:41 - 00000000 ____D C:\Movtec-Raster-INI
2013-12-09 09:30 - 2012-01-23 12:34 - 00000000 ____D C:\MeineProgramme
2013-12-09 08:01 - 2013-03-21 16:13 - 00205320 _____ C:\windows\system32\Drivers\aswVmm.sys
2013-12-09 08:01 - 2013-03-21 16:13 - 00065776 _____ C:\windows\system32\Drivers\aswRvrt.sys
2013-12-09 08:01 - 2012-03-26 11:33 - 00092544 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 01032416 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00409832 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00334648 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2013-12-09 08:01 - 2012-01-11 10:27 - 00084328 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00065264 _____ (AVAST Software) C:\windows\system32\Drivers\aswTdi.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00038984 _____ (AVAST Software) C:\windows\system32\Drivers\aswFsBlk.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00002011 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-09 08:01 - 2012-01-11 10:26 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2013-12-09 07:59 - 2012-01-11 10:27 - 00000000 _____ C:\windows\SysWOW64\config.nt
2013-12-09 07:59 - 2012-01-11 10:26 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-06 10:33 - 2013-12-06 10:33 - 00000000 ____D C:\Users\Klaus\Desktop\Alte Firefox-Daten
2013-12-06 09:55 - 2013-12-06 09:54 - 02753344 _____ (AVAST Software) C:\Users\Klaus\Downloads\avast-browser-cleanup.exe
2013-12-06 09:52 - 2012-01-01 13:16 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-06 09:52 - 2012-01-01 13:16 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-06 09:15 - 2013-03-15 07:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-12-06 09:15 - 2011-10-16 21:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-12-06 09:14 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-12-06 09:14 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-12-06 08:20 - 2012-01-12 18:27 - 00000000 ____D C:\DATEN
2013-12-05 21:35 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\Msdtc
2013-12-05 15:52 - 2013-12-05 15:52 - 00002073 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Users\user\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-12-05 15:37 - 2013-12-05 15:36 - 36047576 _____ (Foxit Corporation ) C:\Users\Klaus\Downloads\FoxitReader604.0719_L10N_Setup.exe
2013-12-05 15:34 - 2013-12-05 15:34 - 00401752 _____ (Softonic ) C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_foxit-reader.exe
2013-12-05 15:28 - 2013-12-05 15:22 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-12-05 15:21 - 2013-12-05 15:21 - 00002080 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-12-05 15:21 - 2013-12-05 15:21 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2013-12-05 15:17 - 2013-12-05 15:17 - 07080248 _____ C:\Users\Klaus\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-12-05 13:15 - 2013-12-05 13:15 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes
2013-12-05 13:08 - 2012-01-01 13:16 - 00000000 ____D C:\Users\Klaus
2013-12-05 12:47 - 2011-10-16 21:40 - 00002198 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-01 14:42 - 2012-01-05 09:58 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-11-23 19:26 - 2013-12-15 12:33 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-11-23 18:47 - 2013-12-15 12:33 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
Some content of TEMP:
====================
C:\Users\Klaus\AppData\Local\Temp\2f3amw1v.dll
C:\Users\Klaus\AppData\Local\Temp\3grkizhl.dll
C:\Users\Klaus\AppData\Local\Temp\Checkupdate.exe
C:\Users\Klaus\AppData\Local\Temp\dr12wdcz.dll
C:\Users\Klaus\AppData\Local\Temp\fldowivi.dll
C:\Users\Klaus\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Klaus\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\Klaus\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Klaus\AppData\Local\Temp\gcapi_dll.dll
C:\Users\Klaus\AppData\Local\Temp\gtapi_signed.dll
C:\Users\Klaus\AppData\Local\Temp\p5xr5ckg.dll
C:\Users\Klaus\AppData\Local\Temp\yfipgcsb.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-12-2013 02
Ran by Klaus at 2013-12-21 14:11:48
Running from C:\Users\Klaus\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958) (x32)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe Digital Editions (x32)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)
Atmel Software Framework (x32 Version: 3.1.121)
Atmel Studio 6.0 (x32 Version: 6.0.1843)
Atmel USB (x32 Version: 10.6)
avast! Free Antivirus (x32 Version: 9.0.2008)
Bazaar 2.4.2 (x32 Version: 2.4.2)
Bing Bar (x32 Version: 7.1.391.0)
Bluetooth Stack for Windows by Toshiba (Version: v8.00.13(T))
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
CSChipID (HKCU Version: 1.0.0.5)
Dir Size View v1.0.0 (C:\Program Files (x86)\DirSizeView\) (x32)
Dir Size View v1.0.0 (x32)
Disk Investigator 1.61 (x32 Version: 1.61)
DisplayLink Core Software (Version: 5.6.31854.0)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.7)
EaseUS Todo Backup Free 6.1 (x32 Version: 6.1)
ElsterFormular (x32 Version: 14.1.11318)
ESET Online Scanner v3 (x32)
Evernote v. 4.6.5 (x32 Version: 4.6.5.8353)
FME Flash Programming Tool for Fujitsu 32Bit FR Microcontroller (x32)
Foxit Reader (x32 Version: 6.0.4.719)
FR Family SOFTUNE Professional Pack V6 (x32)
Free File Viewer 2011 (x32)
FreeMind (x32 Version: 0.9.0)
FUJITSU FLASH MCU Programmer for FR (x32 Version: 1.28.0000)
Google Chrome (x32 Version: 31.0.1650.63)
Google Earth (x32 Version: 7.1.2.2041)
Google Update Helper (x32 Version: 1.3.22.3)
GoToMeeting 5.4.0.1083 (HKCU Version: 5.4.0.1083)
HHD Software Device Monitoring Studio 6.23 (Version: 6.23.0.3373)
High-Definition Video Playback (x32 Version: 7.3.10900.8.0)
HxD Hex Editor Version 1.7.7.0 (x32 Version: 1.7.7.0)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Identity Protection Technology 1.2.18.0 (x32 Version: 1.2.18.0)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Network Connections Drivers (Version: 16.5)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2509)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.01.1000)
Intel(R) Rapid Start Technology (x32 Version: 1.0.0.1008)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004)
Intel(R) WiDi (x32 Version: 2.1.41.0)
Intel(R) Wireless Display
IrfanView (remove only) (x32 Version: 4.35)
Java 7 Update 21 (64-bit) (Version: 7.0.210)
Java Auto Updater (x32 Version: 2.0.2.1)
Java(TM) 6 Update 20 (x32 Version: 6.0.200)
JLink OB CDC Driver Package (Version: 1.2.1)
LinuxLive USB Creator (x32 Version: 2.8)
LPCXpresso (x32 Version: 4.1.5)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000)
Microsoft Help Viewer 1.1 (Version: 1.1.40219)
Microsoft Help Viewer 1.1 Language Pack - DEU (Version: 1.1.40219)
Microsoft Office 2000 Premium (x32 Version: 9.00.2816)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 9.0.21022)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2008 (64-bit)
Microsoft SQL Server 2008 Browser (x32 Version: 10.1.2531.0)
Microsoft SQL Server 2008 Common Files (Version: 10.0.1600.22)
Microsoft SQL Server 2008 Common Files (Version: 10.1.2531.0)
Microsoft SQL Server 2008 Database Engine Services (Version: 10.1.2531.0)
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.1.2531.0)
Microsoft SQL Server 2008 Native Client (Version: 10.1.2531.0)
Microsoft SQL Server 2008 R2 Management Objects (x32 Version: 10.50.1750.9)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.1.2531.0)
Microsoft SQL Server Compact 3.5 SP2 DEU (x32 Version: 3.5.8080.0)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (Version: 3.5.8080.0)
Microsoft SQL Server System CLR Types (x32 Version: 10.50.1750.9)
Microsoft SQL Server VSS Writer (Version: 10.1.2531.0)
Microsoft Visual C# 2010 Express - DEU (x32 Version: 10.0.30319)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (x32 Version: 9.0.30729.4974)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2010 Express - DEU (x32 Version: 10.0.30319)
Microsoft Visual C++ 5.0 (x32)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (x32 Version: 10.0.30319)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (Version: 10.0.30319)
Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219)
Microsoft Visual Studio 2010 Shell (Isolated) - ENU (x32 Version: 10.0.40219)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40303)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.40308)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU (Version: 10.0.40303)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (Version: 10.0.40303)
MiniTool Partition Wizard Home Edition 7.7 (x32)
Movtec-Raster (HKCU Version: 5.0.13.9)
Movtec-Server (HKCU Version: 2.3.0.7)
MozBackup 1.5.1 (x32)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0)
Mozilla Maintenance Service (x32 Version: 26.0)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MyPhoneExplorer (x32 Version: 1.8.5)
NanoJEasy 1.04 (x32)
NanoPro 1.60 (x32)
Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0)
Nero BackItUp 10 (x32 Version: 5.8.10900.8.100)
Nero BackItUp 10 Help (CHM) (x32 Version: 10.6.10700)
Nero BurnRights 10 (x32 Version: 4.4.10400.2.100)
Nero BurnRights 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Control Center 10 (x32 Version: 10.6.12700.0.7)
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10800)
Nero Core Components 10 (x32 Version: 2.0.20000.9.12)
Nero Express 10 (x32 Version: 10.6.10700.5.100)
Nero Express 10 Help (CHM) (x32 Version: 10.6.10700)
Nero InfoTool 10 (x32 Version: 7.4.10300.1.100)
Nero InfoTool 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Kwik Media (x32 Version: 1.6.15100.59.100)
Nero Multimedia Suite 10 Essentials (x32 Version: 10.6.10300)
Nero RescueAgent 10 (x32 Version: 3.6.10500.3.100)
Nero RescueAgent 10 Help (CHM) (x32 Version: 10.6.10800)
Nero StartSmart 10 (x32 Version: 10.6.10500.3.100)
Nero StartSmart 10 Help (CHM) (x32 Version: 10.6.10700)
Nero Update (x32 Version: 1.0.10900.31.0)
NeroKwikMedia Help (CHM) (x32 Version: 10.6.10900)
NetObjects Fusion 8 (x32 Version: 8)
Paragon Backup & Recovery™ 2012 Free (x32 Version: 90.00.0003)
PC Wizard 2012.2.1 (x32)
PDFCreator (x32 Version: 1.2.3)
pdfforge Toolbar v5.6 (x32 Version: 5.6) <==== ATTENTION
Picasa 3 (x32 Version: 3.9)
PL-2303 USB-to-Serial (x32 Version: 1.5.0)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Reader for PC (x32 Version: 2.0.01.11080)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6458)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.25.0)
RICOH Media Driver v2.15.17.02 (x32 Version: 2.15.17.02)
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (Version: 10.1.2531.0)
SimpleHelloWelt (HKCU Version: 1.0.0.0)
SiSoftware Sandra Lite 2013 (Version: 19.11.2013.1)
Skype™ 5.10 (x32 Version: 5.10.116)
Sql Server Customer Experience Improvement Program (Version: 10.1.2531.0)
Synaptics Pointing Device Driver (Version: 15.2.11.1)
TeamViewer 8 (x32 Version: 8.0.18051)
Tftpd32 Standalone Edition (remove only) (x32)
tools-netware (x32 Version: 8.8.2.703057)
tools-windows (x32 Version: 8.8.2.703057)
tools-winPre2k (x32 Version: 8.8.2.703057)
TortoiseOverlays (Version: 1.1.19334)
TOSHIBA Assist (x32 Version: 4.2.3.0)
TOSHIBA Bulletin Board (Version: 2.1.17.64)
TOSHIBA Bulletin Board (x32 Version: 2.1.17.64)
TOSHIBA ConfigFree (x32 Version: 8.0.42)
TOSHIBA eco Utility (Version: 1.3.7.64)
TOSHIBA Face Recognition (Version: 3.1.18.64)
TOSHIBA Face Recognition (x32 Version: 3.1.18.64)
TOSHIBA HDD/SSD Alert (Version: 3.1.64.9)
Toshiba Manuals (x32 Version: 10.03)
TOSHIBA Media Controller (x32 Version: 1.0.87.4)
TOSHIBA Media Controller Plug-in (x32 Version: 1.0.7.6)
TOSHIBA Online Product Information (x32 Version: 4.01.0000)
TOSHIBA PC Health Monitor (Version: 1.7.11.64)
TOSHIBA Places Icon Utility (x32 Version: 1.0.2.4)
TOSHIBA Recovery Media Creator (x32 Version: 2.1.5.5109a)
TOSHIBA Recovery Media Creator Reminder (x32 Version: 1.00.0019)
TOSHIBA ReelTime (Version: 1.7.21.64)
TOSHIBA ReelTime (x32 Version: 1.7.21.64)
TOSHIBA Resolution+ Plug-in for Windows Media Player (x32 Version: 1.1.2003)
TOSHIBA Security Assist (x32 Version: 2.0.9)
TOSHIBA Service Station (x32 Version: 2.2.13)
TOSHIBA Sleep Utility (x32 Version: 1.4.2.9)
TOSHIBA TEMPRO (x32 Version: 3.35)
TOSHIBA Value Added Package (Version: 1.6.9.64)
TOSHIBA Value Added Package (x32 Version: 1.6.9.64)
TOSHIBA Web Camera Application (x32 Version: 2.0.3.29)
TOSHIBA Wireless Display Monitor (x32 Version: 1.0.1)
TOSHIBA Wireless LAN Indicator (x32 Version: 1.0.5)
Total Commander (Remove or Repair) (x32 Version: 7.56a)
TrueCrypt (x32 Version: 7.1a)
Unterstützungsdateien für Microsoft SQL Server 2008-Setup (Version: 10.1.2731.0)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
UseNeXT by Tangysoft (x32)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (x32 Version: 4.0.8080.0)
VLC media player 2.0.0 (x32 Version: 2.0.0)
VmciSockets (Version: 9.1.54.1)
VMware Player (x32 Version: 4.0.3.29699)
VMware vCenter Converter Standalone (x32 Version: 5.0.0.470252)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows-Treiberpaket - Segger (jlink_ob_x64) USB (03/13/2012 2.6.6.2) (Version: 03/13/2012 2.6.6.2)
Windows-Treiberpaket - SEGGER (usbser) Ports (01/25/2012 6.0.2600.4) (Version: 01/25/2012 6.0.2600.4)
WinPcap 4.1.2 (x32 Version: 4.1.0.2001)
Wireshark 1.6.4 (x32 Version: 1.6.4)
XXClone ver 2.01.2 (Version: 2.01.2)
Zattoo4 4.0.5 (x32 Version: 4.0.5)
==================== Restore Points =========================
Could not list Restore Points. Check WMI.
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => ?
Task: C:\windows\Tasks\FreeFileViewerUpdateChecker.job => ?
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => ?
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => ?
Task: C:\windows\Tasks\Paragon Archive name arc_260313104821816.job => ?
==================== Loaded Modules (whitelisted) =============
2012-01-10 11:11 - 2011-11-02 15:56 - 00265728 _____ () C:\Program Files (x86)\Bazaar\tbzrshellext_x64.dll
2011-08-31 21:13 - 2011-08-31 21:13 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-08-23 00:19 - 2011-08-23 00:19 - 11204992 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll
2010-11-30 19:37 - 2010-11-30 19:37 - 00048504 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll
2010-03-03 23:15 - 2010-03-03 23:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll
2010-03-03 23:15 - 2010-03-03 23:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll
2011-08-23 02:08 - 2011-08-23 02:08 - 00593856 _____ () C:\Program Files\TOSHIBA\TECO\TecoPower.dll
2010-12-16 00:19 - 2010-12-16 00:19 - 00124320 _____ () C:\Program Files\TOSHIBA\TECO\MUIHelp.dll
2011-06-01 02:32 - 2011-06-01 02:32 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-06-28 13:02 - 2011-06-28 13:02 - 03421104 _____ () C:\Program Files\TOSHIBA\BulletinBoard\TosNcUi.dll
2011-10-16 22:05 - 2011-02-22 10:16 - 00559104 _____ () C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\de\Humphrey.resources.dll
2011-10-16 21:53 - 2011-04-21 09:57 - 00013184 _____ () C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\de\TosDILangPack.resources.dll
2011-10-16 21:53 - 2011-04-21 09:57 - 00063360 _____ () C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIInternal.XmlSerializers.dll
2011-06-10 06:09 - 2011-06-10 06:09 - 00079784 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (12/21/2013 01:32:08 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/21/2013 01:32:08 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/21/2013 03:00:26 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Visual Studio 2010 Shell (Isolated) - ENU - Update "KB2251489" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\windows\TEMP\KB2251489_20131221_030020816-Microsoft Visual Studio 2010 Shell (Isolated) - ENU-MSP0.txt enthalten.
Error: (12/21/2013 03:00:26 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Microsoft Visual Studio 2010 Shell (Isolated) - ENU -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2902. The arguments are: ixfAssemblyCopy, ,
Error: (12/20/2013 04:58:48 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/20/2013 04:58:43 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (12/20/2013 02:30:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (12/20/2013 07:46:41 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Visual Studio 2010 Shell (Isolated) - ENU - Update "KB2251489" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\windows\TEMP\KB2251489_20131220_074632302-Microsoft Visual Studio 2010 Shell (Isolated) - ENU-MSP0.txt enthalten.
Error: (12/20/2013 07:46:41 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Product: Microsoft Visual Studio 2010 Shell (Isolated) - ENU -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2902. The arguments are: ixfAssemblyCopy, ,
Error: (12/19/2013 00:49:32 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (12/21/2013 03:00:41 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft Visual Studio 2010 XML-Editor (KB2251489)
Error: (12/20/2013 02:31:18 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (12/20/2013 02:30:20 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (12/20/2013 02:30:01 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am 20.12.2013 um 14:29:11 unerwartet heruntergefahren.
Error: (12/20/2013 07:47:01 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft Visual Studio 2010 XML-Editor (KB2251489)
Error: (12/19/2013 05:08:59 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.
Error: (12/19/2013 05:08:58 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.
Error: (12/19/2013 05:08:58 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.
Error: (12/19/2013 05:08:57 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR6 gefunden.
Error: (12/19/2013 00:50:29 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2012-02-21 10:52:00.548
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-02-21 10:52:00.468
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-02-21 10:50:11.885
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-02-21 10:50:11.835
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-12-17 10:58:31.634
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-12-17 10:58:31.578
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-24 14:29:33.404
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-24 14:29:33.379
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-24 14:29:33.356
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-24 14:29:33.334
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\dlumd64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 64%
Total physical RAM: 3996.55 MB
Available physical RAM: 1421.96 MB
Total Pagefile: 7991.27 MB
Available Pagefile: 4837.26 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: (TI30818500B) (Fixed) (Total:96.94 GB) (Free:18.11 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HDDRECOVERY) (Fixed) (Total:12.83 GB) (Free:0.6 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive l: (System) (Fixed) (Total:1.46 GB) (Free:1.22 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive r: (INTENSO) (Fixed) (Total:596.17 GB) (Free:335.76 GB) NTFS
==================== MBR & Partition Table ==================
==================== End Of Log ============================
Avast meldet keine Problem Vorhin hatte ich einen blauen Bildschirm, das System wurde neu gestartet und läuft wie vorher Vielen Dank für Eure Hilfe im Voraus Klaus |
|
21.12.2013, 15:52
| #2 |
| /// the machine /// TB-Ausbilder    | win7 64bit: malwarebyte meldet Infektionen Hi,
__________________FRST bitte nochmal scannen lassen, unsere Tools brauchen immer Adminrechte.
__________________ |
|
21.12.2013, 16:52
| #3 |
| | win7 64bit: malwarebyte meldet Infektionen Hallo Schrauber,
__________________FIRST FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-12-2013 02
Ran by user (administrator) on USER-TOSH on 21-12-2013 15:56:40
Running from C:\DATEN\VirenKram
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Spigot, Inc.) C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter-a.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
() C:\Program Files (x86)\Bazaar\tbzrcache.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
() C:\Program Files\TOSHIBA\FlashCards\Hotkey\TCrdKBB.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Spigot, Inc.) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Users\Klaus\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\widimon\widimon.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.EXE
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
() C:\Program Files (x86)\Bazaar\tbzrcache.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
() C:\Program Files\TOSHIBA\FlashCards\Hotkey\TCrdKBB.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng_D.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe
(Spigot, Inc.) C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [] - [x]
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12856936 2011-09-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-17] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-04] (Synaptics Incorporated)
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [590256 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [981888 2011-08-03] (TOSHIBA Corporation)
HKLM\...\Run: [BatteryManager] - C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe [285608 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1544624 2011-08-23] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [712096 2011-08-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710560 2011-06-10] (TOSHIBA Corporation)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-06-01] (Intel(R) Corporation)
HKLM\...\Run: [TosVolRegulator] - C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosNC] - C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe [598448 2011-06-28] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38824 2011-06-28] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [Toshiba Registration] - C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-10-16] (Toshiba Europe GmbH)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
HKCU\...\Run: [ISUSPM] - "C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe" -scheduler
MountPoints2: {b98a5166-32d8-11e1-93c9-88532e772d38} - D:\SETUP.EXE /AUTORUN
MountPoints2: {f1f61085-3acc-11e1-b978-e89d8794c031} - F:\LS21M.exe
HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1409424 2011-06-29] (Nero AG)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ITSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-02] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [TOSDCR] - C:\Program Files (x86)\TOSHIBA\PasswordUtility\TOSDCR.exe [169296 2007-08-28] ()
HKLM-x32\...\Run: [ToshibaServiceStation] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-12] (TOSHIBA Corporation)
HKLM-x32\...\Run: [TSleepSrv] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [252792 2010-06-05] (TOSHIBA)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [SearchSettings] - C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [983904 2012-04-23] (Spigot, Inc.)
HKLM-x32\...\Run: [Reader Application Helper] - C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [898952 2012-11-08] (Sony Corporation)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\1ce4d5d5-40dd-4876-9601-c3e8eda25bfa.exe [180184 2013-12-05] (AVAST Software)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-09] (AVAST Software)
HKU\Default\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
HKU\Default User\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Users\user\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe (No File)
Startup: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.delta-search.com/?affID=119677&babsrc=HP_ss&mntrId=765988532E772D39
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
URLSearchHook: HKCU - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {1A4B5EEF-3962-42D1-8CA8-4A6AF1796564} URL =
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=119677&babsrc=SP_ss&mntrId=765988532E772D39
SearchScopes: HKCU - {9CE63A3E-469F-4B15-83CC-87D34782A8A1} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll (Spigot, Inc.)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{33822A57-F00C-4F8D-BC78-8B65AE4DDCDC}: [NameServer]0.0.0.0
FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default
FF user.js: detected! => C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\user.js
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @sony.com/ReaderDesktop - C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\searchplugins\delta.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Speed Analysis 2 - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\Extensions\speedanalysis02@SpeedAnalysis.com
FF Extension: Yahoo! Toolbar - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\Extensions\pdfforge@mybrowserbar.com
FF Extension: No Name - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\Extensions\wtxpcom@mybrowserbar.com
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR HomePage: hxxp://www2.delta-search.com/?affID=119677&babsrc=HP_ss&mntrId=765988532E772D39
CHR RestoreOnStartup: "hxxp://www2.delta-search.com/?affID=119677&babsrc=HP_ss&mntrId=765988532E772D39"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.79\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.79\pdf.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.79\gcswf32.dll No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.31.131.2_0\McChPlg.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.200.2) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U20) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (WildTangent Games App Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll No File
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0
CHR Extension: () - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.0
CHR Extension: (avast! WebRep) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0
CHR HKLM-x32\...\Chrome\Extension: [dgjkhjdcljddbedokogakmmdjgnbeanf] - C:\Users\user\AppData\Roaming\SpeedAnalysis2\speedanalysis.crx
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-09] (AVAST Software)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9663848 2011-04-10] (DisplayLink Corp.)
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [69192 2013-10-11] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Guard Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R2 irstrtsv; C:\windows\SysWow64\irstrtsv.exe [184320 2011-07-07] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-06-01] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013\RpcAgentSrv.exe [68760 2008-11-04] (SiSoftware)
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
R2 vmware-converter-agent; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter-a.exe [423536 2011-08-19] (VMware, Inc.)
R2 vmware-converter-server; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [423536 2011-08-19] (VMware, Inc.)
R2 vmware-converter-worker; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [423536 2011-08-19] (VMware, Inc.)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [38984 2013-12-09] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [84328 2013-12-09] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [92544 2013-12-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-09] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1032416 2013-12-09] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [409832 2013-12-09] (AVAST Software)
R1 aswTdi; C:\windows\system32\drivers\aswTdi.sys [65264 2013-12-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-09] ()
S3 bmdrvr; C:\Windows\SysWow64\drivers\bmdrvr.sys [74352 2011-03-15] (VMware, Inc.)
S3 cpuz135; C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [23816 2012-02-07] (CPUID)
S3 dfu; C:\Windows\System32\drivers\MassDfu64.sys [15360 2011-12-12] (Philips PTCL)
S3 DisplayLinkUsbPort; C:\Windows\System32\DRIVERS\DisplayLinkUsbPort_5.6.31854.0.sys [17408 2011-04-10] (hxxp://libusb-win32.sourceforge.net)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48200 2013-09-04] ()
R2 hhdserhelp; C:\windows\system32\drivers\hhdserhelp.sys [20776 2011-08-16] (HHD Software Ltd.)
R3 hhdserial64; C:\Windows\System32\DRIVERS\hhdserial64.sys [42280 2011-08-16] (HHD Software Ltd.)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 pwdrvio; C:\windows\system32\pwdrvio.sys [19032 2013-01-11] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12384 2013-01-11] ()
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254976 2010-08-31] (Jungo)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-21 15:05 - 2013-12-21 15:05 - 00007972 _____ C:\Users\Klaus\Downloads\gmer21-12-13.7z
2013-12-21 14:58 - 2013-12-21 14:58 - 00266288 _____ C:\windows\Minidump\122113-13540-01.dmp
2013-12-21 14:43 - 2013-12-21 14:43 - 00000000 ____D C:\Users\Klaus\Downloads\Neuer Ordner
2013-12-21 14:36 - 2013-12-21 14:36 - 00000000 ____D C:\Users\user\AppData\Roaming\AVAST Software
2013-12-21 14:29 - 2013-12-21 14:29 - 00318223 _____ C:\Users\Klaus\Downloads\gmer21-12-13.log
2013-12-21 14:11 - 2013-12-21 14:12 - 00072343 _____ C:\Users\Klaus\Downloads\FRST.txt
2013-12-21 14:11 - 2013-12-21 14:12 - 00029829 _____ C:\Users\Klaus\Downloads\Addition.txt
2013-12-21 14:11 - 2013-12-21 14:11 - 00000000 ____D C:\FRST
2013-12-21 14:10 - 2013-12-21 14:10 - 00000470 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-12-21 14:10 - 2013-12-21 14:10 - 00000000 _____ C:\Users\user\defogger_reenable
2013-12-21 13:37 - 2013-12-21 13:37 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-12-21 13:33 - 2013-12-21 13:34 - 00377856 _____ C:\Users\Klaus\Downloads\tg2fpwht.exe
2013-12-21 13:32 - 2013-12-21 13:33 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf(1).exe
2013-12-21 13:31 - 2013-12-21 13:31 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf.exe
2013-12-21 13:30 - 2013-12-21 13:31 - 00000000 ____D C:\Users\Klaus\Documents\VirenKram
2013-12-21 10:11 - 2013-12-21 10:11 - 00000393 _____ C:\Users\user\Documents\eser.txt
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (4)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (3)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (2)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner
2013-12-21 10:10 - 2013-12-21 10:10 - 00000393 _____ C:\Users\user\Desktop\eser.txt
2013-12-20 16:58 - 2013-12-20 16:58 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-12-20 16:58 - 2013-12-20 16:58 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-20 14:33 - 2013-12-20 14:33 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-12-20 14:33 - 2013-12-20 14:33 - 00001132 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-20 14:33 - 2013-12-20 14:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-20 14:33 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-12-20 12:40 - 2013-12-20 12:52 - 00002029 _____ C:\Users\Klaus\Desktop\CringStart.lnk
2013-12-20 12:19 - 2013-12-20 12:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-19 17:10 - 2012-06-05 12:35 - 00001963 _____ C:\Users\Klaus\Desktop\DOSBox 0.74.lnk
2013-12-19 17:09 - 2013-12-19 17:27 - 00000000 ____D C:\CONTEXT4
2013-12-19 13:14 - 2013-12-19 13:14 - 00002235 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 12:41 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-19 12:41 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-19 12:41 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-19 12:41 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-19 12:41 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-19 12:41 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-19 12:41 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-19 12:41 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-19 12:41 - 2013-10-25 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-19 12:41 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-19 12:39 - 2013-12-19 12:41 - 00000000 ____D C:\windows\system32\MRT
2013-12-19 12:37 - 2013-12-21 15:54 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-19 12:37 - 2013-12-19 12:37 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-12-19 11:37 - 2013-12-19 11:37 - 00000000 ____D C:\windows\system32\RsFx
2013-12-19 11:37 - 2009-07-21 01:42 - 00111640 _____ (Microsoft Corporation) C:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00079896 _____ (Microsoft Corporation) C:\windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00078872 _____ (Microsoft Corporation) C:\windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00050200 _____ (Microsoft Corporation) C:\windows\SysWOW64\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\SysWOW64\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1033
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2013-12-19 11:35 - 2013-12-19 11:35 - 00000000 ____D C:\windows\PCHEALTH
2013-12-19 11:34 - 2013-12-19 11:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-19 11:24 - 2013-12-19 11:24 - 03277648 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcs_web.exe
2013-12-19 11:23 - 2013-12-19 11:23 - 00673024 _____ ( ) C:\Users\Klaus\Downloads\ZipOpenerSetup.exe
2013-12-15 12:33 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-15 12:33 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-15 12:33 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-15 12:33 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-15 12:33 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-15 12:33 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-15 12:33 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-15 12:33 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-15 12:33 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-15 12:33 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-15 12:33 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-15 12:33 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-15 12:33 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-15 12:33 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-15 12:33 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-15 12:33 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-15 12:33 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-15 12:33 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-15 12:33 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2013-12-09 13:46 - 2013-12-09 14:21 - 00397824 ___SH C:\EUMONBMP.SYS
2013-12-09 13:38 - 2013-12-09 13:38 - 00001244 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 6.1.lnk
2013-12-09 13:38 - 2013-09-04 11:24 - 00189000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\EuFdDisk.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00061000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\eubakup.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00048200 _____ C:\windows\system32\Drivers\EUBKMON.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00018504 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\eudskacs.sys
2013-12-09 13:36 - 2013-09-04 11:32 - 00024136 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\fbnative.exe
2013-12-09 13:35 - 2013-12-09 13:35 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-09 13:33 - 2013-12-09 13:33 - 118962544 _____ ( ) C:\Users\Klaus\Downloads\tb_free.exe
2013-12-09 13:30 - 2013-12-09 13:30 - 00583496 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Users\Klaus\Downloads\tb_free_installer.exe
2013-12-09 13:24 - 2013-12-09 13:24 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vc_web.exe
2013-12-09 12:11 - 2013-12-09 12:11 - 00813920 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\VS10sp1-KB983509(1).exe
2013-12-09 12:03 - 2013-12-09 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVAST Software
2013-12-09 11:18 - 2013-12-09 11:18 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcPlus_web.exe
2013-12-09 09:33 - 2013-12-09 09:33 - 00000000 ____D C:\Movtec-Kinegram
2013-12-06 13:28 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-12-06 10:40 - 2013-12-19 12:37 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-06 10:40 - 2013-12-19 12:37 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-06 10:33 - 2013-12-06 10:33 - 00000000 ____D C:\Users\Klaus\Desktop\Alte Firefox-Daten
2013-12-06 09:54 - 2013-12-06 09:55 - 02753344 _____ (AVAST Software) C:\Users\Klaus\Downloads\avast-browser-cleanup.exe
2013-12-05 18:42 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-12-05 18:42 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-12-05 18:42 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll
2013-12-05 18:42 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\credui.dll
2013-12-05 18:42 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-12-05 18:42 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\SysWOW64\SmartcardCredentialProvider.dll
2013-12-05 18:42 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2013-12-05 18:42 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\credui.dll
2013-12-05 18:42 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-12-05 18:42 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2013-12-05 18:42 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2013-12-05 18:42 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2013-12-05 18:42 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2013-12-05 18:42 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2013-12-05 18:42 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2013-12-05 18:42 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2013-12-05 18:42 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-12-05 18:42 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2013-12-05 18:42 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2013-12-05 18:42 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2013-12-05 18:42 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2013-12-05 18:42 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2013-12-05 18:42 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-12-05 18:42 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-12-05 18:42 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-12-05 18:42 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-12-05 18:42 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-12-05 18:42 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-12-05 18:42 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-12-05 18:42 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-12-05 18:42 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-12-05 18:42 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-12-05 18:42 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-12-05 18:42 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-12-05 18:42 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-12-05 18:42 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-12-05 18:42 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-12-05 18:42 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-12-05 18:42 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-12-05 18:42 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-12-05 18:42 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2013-12-05 18:42 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-12-05 18:42 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-12-05 18:42 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2013-12-05 18:42 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2013-12-05 18:42 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2013-12-05 18:42 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-12-05 18:42 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2013-12-05 18:42 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2013-12-05 18:42 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2013-12-05 18:42 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-12-05 18:42 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-12-05 18:42 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-12-05 18:42 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d11.dll
2013-12-05 18:42 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\windows\system32\d3d11.dll
2013-12-05 18:41 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-12-05 18:41 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-12-05 18:41 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-12-05 18:41 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll
2013-12-05 18:41 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll
2013-12-05 18:41 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-12-05 18:41 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-12-05 18:41 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2013-12-05 18:41 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-12-05 18:41 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2013-12-05 18:41 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-12-05 18:41 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-12-05 18:41 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-12-05 18:41 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2013-12-05 18:41 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-12-05 18:41 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2013-12-05 18:41 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-12-05 18:41 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-12-05 18:41 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-12-05 18:41 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-12-05 18:41 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2013-12-05 18:41 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-12-05 18:41 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-12-05 18:41 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-12-05 18:41 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-12-05 18:41 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-05 18:41 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-05 18:41 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-12-05 18:41 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-12-05 18:41 - 2013-07-12 11:40 - 00109824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBAUDIO.sys
2013-12-05 18:41 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2013-12-05 18:41 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2013-12-05 18:41 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2013-12-05 18:41 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2013-12-05 18:41 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2013-12-05 18:41 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-12-05 18:41 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-12-05 18:41 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2013-12-05 18:41 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2013-12-05 18:41 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2013-12-05 18:41 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\certenc.dll
2013-12-05 18:41 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\windows\system32\certutil.exe
2013-12-05 18:41 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\windows\SysWOW64\certutil.exe
2013-12-05 18:41 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\certenc.dll
2013-12-05 18:41 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\cryptdlg.dll
2013-12-05 18:41 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptdlg.dll
2013-12-05 18:41 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2013-12-05 18:41 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32spl.dll
2013-12-05 18:41 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2013-12-05 18:41 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2013-12-05 18:40 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-12-05 18:40 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-12-05 18:40 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-12-05 18:40 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-12-05 18:40 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-12-05 18:40 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll
2013-12-05 18:40 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2013-12-05 18:40 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2013-12-05 15:57 - 2013-12-19 10:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00002073 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Users\user\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-12-05 15:36 - 2013-12-05 15:37 - 36047576 _____ (Foxit Corporation ) C:\Users\Klaus\Downloads\FoxitReader604.0719_L10N_Setup.exe
2013-12-05 15:34 - 2013-12-05 15:34 - 00401752 _____ (Softonic ) C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_foxit-reader.exe
2013-12-05 15:22 - 2013-12-05 15:28 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-12-05 15:21 - 2013-12-05 15:21 - 00002080 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-12-05 15:21 - 2013-12-05 15:21 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2013-12-05 15:17 - 2013-12-05 15:17 - 07080248 _____ C:\Users\Klaus\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-12-05 13:15 - 2013-12-05 13:15 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes
==================== One Month Modified Files and Folders =======
2013-12-21 15:55 - 2012-05-18 11:33 - 00000402 _____ C:\windows\Tasks\FreeFileViewerUpdateChecker.job
2013-12-21 15:55 - 2012-01-10 15:48 - 01082700 _____ C:\Users\user\Documents\.bzr.log
2013-12-21 15:55 - 2011-10-16 21:40 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-21 15:54 - 2013-12-19 12:37 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-21 15:12 - 2011-10-16 21:40 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-21 15:05 - 2013-12-21 15:05 - 00007972 _____ C:\Users\Klaus\Downloads\gmer21-12-13.7z
2013-12-21 15:05 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-21 15:05 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-21 15:04 - 2011-02-11 09:21 - 00769312 _____ C:\windows\system32\perfh007.dat
2013-12-21 15:04 - 2011-02-11 09:21 - 00175692 _____ C:\windows\system32\perfc007.dat
2013-12-21 15:04 - 2009-07-14 06:13 - 01816312 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-21 14:58 - 2013-12-21 14:58 - 00266288 _____ C:\windows\Minidump\122113-13540-01.dmp
2013-12-21 14:58 - 2012-05-12 11:27 - 00000000 ____D C:\ProgramData\VMware
2013-12-21 14:58 - 2012-04-19 08:17 - 00000000 ____D C:\windows\Minidump
2013-12-21 14:58 - 2012-01-10 11:11 - 03451857 _____ C:\Users\Klaus\Documents\.bzr.log
2013-12-21 14:58 - 2009-07-14 06:08 - 00032632 _____ C:\windows\Tasks\SCHEDLGU.TXT
2013-12-21 14:58 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-12-21 14:58 - 2009-07-14 05:51 - 00091872 _____ C:\windows\setupact.log
2013-12-21 14:43 - 2013-12-21 14:43 - 00000000 ____D C:\Users\Klaus\Downloads\Neuer Ordner
2013-12-21 14:40 - 2012-01-12 18:27 - 00000000 ____D C:\DATEN
2013-12-21 14:40 - 2011-11-16 00:56 - 01912457 _____ C:\windows\WindowsUpdate.log
2013-12-21 14:36 - 2013-12-21 14:36 - 00000000 ____D C:\Users\user\AppData\Roaming\AVAST Software
2013-12-21 14:35 - 2011-12-27 13:35 - 00000000 ___RD C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-21 14:35 - 2011-12-27 13:34 - 00000000 ___RD C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-21 14:29 - 2013-12-21 14:29 - 00318223 _____ C:\Users\Klaus\Downloads\gmer21-12-13.log
2013-12-21 14:12 - 2013-12-21 14:11 - 00072343 _____ C:\Users\Klaus\Downloads\FRST.txt
2013-12-21 14:12 - 2013-12-21 14:11 - 00029829 _____ C:\Users\Klaus\Downloads\Addition.txt
2013-12-21 14:11 - 2013-12-21 14:11 - 00000000 ____D C:\FRST
2013-12-21 14:10 - 2013-12-21 14:10 - 00000470 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-12-21 14:10 - 2013-12-21 14:10 - 00000000 _____ C:\Users\user\defogger_reenable
2013-12-21 13:37 - 2013-12-21 13:37 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-12-21 13:34 - 2013-12-21 13:33 - 00377856 _____ C:\Users\Klaus\Downloads\tg2fpwht.exe
2013-12-21 13:33 - 2013-12-21 13:32 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf(1).exe
2013-12-21 13:31 - 2013-12-21 13:31 - 01272360 _____ (iMesh Inc) C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf.exe
2013-12-21 13:31 - 2013-12-21 13:30 - 00000000 ____D C:\Users\Klaus\Documents\VirenKram
2013-12-21 10:11 - 2013-12-21 10:11 - 00000393 _____ C:\Users\user\Documents\eser.txt
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (4)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (3)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (2)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner
2013-12-21 10:10 - 2013-12-21 10:10 - 00000393 _____ C:\Users\user\Desktop\eser.txt
2013-12-20 16:58 - 2013-12-20 16:58 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-12-20 16:58 - 2013-12-20 16:58 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-20 16:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-12-20 15:12 - 2012-02-27 10:00 - 00003934 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{06FDF393-8C2C-4392-9653-50D8C6492927}
2013-12-20 14:33 - 2013-12-20 14:33 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-12-20 14:33 - 2013-12-20 14:33 - 00001132 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-20 14:33 - 2013-12-20 14:33 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-20 14:29 - 2012-05-13 18:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 13:19 - 2012-01-02 11:36 - 00000000 ____D C:\Users\Klaus\AppData\Local\Mozilla
2013-12-20 12:52 - 2013-12-20 12:40 - 00002029 _____ C:\Users\Klaus\Desktop\CringStart.lnk
2013-12-20 12:19 - 2013-12-20 12:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-20 11:47 - 2012-03-13 14:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\UseNeXT
2013-12-20 11:38 - 2012-05-28 08:58 - 00000000 ____D C:\Users\Klaus\Documents\UseNeXT
2013-12-20 07:46 - 2012-07-16 07:04 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update
2013-12-19 17:27 - 2013-12-19 17:09 - 00000000 ____D C:\CONTEXT4
2013-12-19 16:53 - 2012-03-09 14:02 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\vlc
2013-12-19 16:01 - 2013-03-26 11:50 - 00000978 _____ C:\windows\Tasks\Paragon Archive name arc_260313104821816.job
2013-12-19 13:14 - 2013-12-19 13:14 - 00002235 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 13:14 - 2011-10-16 21:40 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-19 12:53 - 2012-03-12 12:32 - 00000000 ____D C:\Ergebnis
2013-12-19 12:49 - 2009-07-14 05:45 - 00414376 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-19 12:43 - 2012-01-02 12:30 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-19 12:41 - 2013-12-19 12:39 - 00000000 ____D C:\windows\system32\MRT
2013-12-19 12:37 - 2013-12-19 12:37 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-12-19 12:37 - 2013-12-06 10:40 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-19 12:37 - 2013-12-06 10:40 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-19 11:42 - 2012-01-03 14:56 - 00000000 ____D C:\Users\Klaus\Documents\Visual Studio 2010
2013-12-19 11:37 - 2013-12-19 11:37 - 00000000 ____D C:\windows\system32\RsFx
2013-12-19 11:37 - 2013-12-19 11:34 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\SysWOW64\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1033
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2013-12-19 11:36 - 2012-02-09 08:25 - 00000000 ____D C:\windows\SysWOW64\1033
2013-12-19 11:36 - 2012-01-03 14:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-12-19 11:36 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-12-19 11:35 - 2013-12-19 11:35 - 00000000 ____D C:\windows\PCHEALTH
2013-12-19 11:32 - 2012-01-03 14:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 10.0
2013-12-19 11:24 - 2013-12-19 11:24 - 03277648 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcs_web.exe
2013-12-19 11:23 - 2013-12-19 11:23 - 00673024 _____ ( ) C:\Users\Klaus\Downloads\ZipOpenerSetup.exe
2013-12-19 10:41 - 2013-12-05 15:57 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Foxit Software
2013-12-15 19:07 - 2011-10-16 21:40 - 00004120 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-15 19:07 - 2011-10-16 21:40 - 00003868 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-15 12:21 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-12-09 14:21 - 2013-12-09 13:46 - 00397824 ___SH C:\EUMONBMP.SYS
2013-12-09 13:38 - 2013-12-09 13:38 - 00001244 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 6.1.lnk
2013-12-09 13:35 - 2013-12-09 13:35 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-09 13:33 - 2013-12-09 13:33 - 118962544 _____ ( ) C:\Users\Klaus\Downloads\tb_free.exe
2013-12-09 13:30 - 2013-12-09 13:30 - 00583496 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Users\Klaus\Downloads\tb_free_installer.exe
2013-12-09 13:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-09 13:24 - 2013-12-09 13:24 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vc_web.exe
2013-12-09 13:05 - 2012-01-02 12:40 - 01607480 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-12-09 12:11 - 2013-12-09 12:11 - 00813920 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\VS10sp1-KB983509(1).exe
2013-12-09 12:03 - 2013-12-09 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVAST Software
2013-12-09 12:02 - 2010-11-21 04:47 - 00053152 _____ C:\windows\PFRO.log
2013-12-09 11:18 - 2013-12-09 11:18 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcPlus_web.exe
2013-12-09 09:33 - 2013-12-09 09:33 - 00000000 ____D C:\Movtec-Kinegram
2013-12-09 09:33 - 2012-01-13 10:41 - 00000000 ____D C:\Movtec-Raster-INI
2013-12-09 09:30 - 2012-01-23 12:34 - 00000000 ____D C:\MeineProgramme
2013-12-09 08:01 - 2013-03-21 16:13 - 00205320 _____ C:\windows\system32\Drivers\aswVmm.sys
2013-12-09 08:01 - 2013-03-21 16:13 - 00065776 _____ C:\windows\system32\Drivers\aswRvrt.sys
2013-12-09 08:01 - 2012-03-26 11:33 - 00092544 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 01032416 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00409832 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00334648 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2013-12-09 08:01 - 2012-01-11 10:27 - 00084328 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00065264 _____ (AVAST Software) C:\windows\system32\Drivers\aswTdi.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00038984 _____ (AVAST Software) C:\windows\system32\Drivers\aswFsBlk.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00002011 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-09 08:01 - 2012-01-11 10:26 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2013-12-09 07:59 - 2012-01-11 10:27 - 00000000 _____ C:\windows\SysWOW64\config.nt
2013-12-09 07:59 - 2012-01-11 10:26 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-06 10:42 - 2011-12-27 14:57 - 00000000 ____D C:\Users\user\AppData\Local\Adobe
2013-12-06 10:33 - 2013-12-06 10:33 - 00000000 ____D C:\Users\Klaus\Desktop\Alte Firefox-Daten
2013-12-06 09:55 - 2013-12-06 09:54 - 02753344 _____ (AVAST Software) C:\Users\Klaus\Downloads\avast-browser-cleanup.exe
2013-12-06 09:52 - 2012-01-01 13:16 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-06 09:52 - 2012-01-01 13:16 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-06 09:15 - 2013-03-15 07:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-12-06 09:15 - 2011-10-16 21:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-12-06 09:14 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-12-06 09:14 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-12-05 21:35 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\Msdtc
2013-12-05 15:52 - 2013-12-05 15:52 - 00002073 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Users\user\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-12-05 15:37 - 2013-12-05 15:36 - 36047576 _____ (Foxit Corporation ) C:\Users\Klaus\Downloads\FoxitReader604.0719_L10N_Setup.exe
2013-12-05 15:34 - 2013-12-05 15:34 - 00401752 _____ (Softonic ) C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_foxit-reader.exe
2013-12-05 15:28 - 2013-12-05 15:22 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-12-05 15:21 - 2013-12-05 15:21 - 00002080 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-12-05 15:21 - 2013-12-05 15:21 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2013-12-05 15:17 - 2013-12-05 15:17 - 07080248 _____ C:\Users\Klaus\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-12-05 13:15 - 2013-12-05 13:15 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes
2013-12-05 13:08 - 2012-01-01 13:16 - 00000000 ____D C:\Users\Klaus
2013-12-05 12:47 - 2011-10-16 21:40 - 00002198 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-01 14:42 - 2012-01-05 09:58 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-11-23 19:26 - 2013-12-15 12:33 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-11-23 18:47 - 2013-12-15 12:33 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
Some content of TEMP:
====================
C:\Users\Klaus\AppData\Local\Temp\2f3amw1v.dll
C:\Users\Klaus\AppData\Local\Temp\3grkizhl.dll
C:\Users\Klaus\AppData\Local\Temp\Checkupdate.exe
C:\Users\Klaus\AppData\Local\Temp\dr12wdcz.dll
C:\Users\Klaus\AppData\Local\Temp\fldowivi.dll
C:\Users\Klaus\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Klaus\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\Klaus\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Klaus\AppData\Local\Temp\gcapi_dll.dll
C:\Users\Klaus\AppData\Local\Temp\gtapi_signed.dll
C:\Users\Klaus\AppData\Local\Temp\p5xr5ckg.dll
C:\Users\Klaus\AppData\Local\Temp\yfipgcsb.dll
C:\Users\user\AppData\Local\Temp\ose00000.exe
C:\Users\user\AppData\Local\Temp\uninst1.exe
C:\Users\user\AppData\Local\Temp\?odec Performer803601.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-20 16:02
==================== End Of Log ============================
Addition wurde nicht erzeugt Grüße Klaus |
|
22.12.2013, 07:18
| #4 | |
| /// the machine /// TB-Ausbilder | win7 64bit: malwarebyte meldet InfektionenCombofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.12.2013, 12:18
| #5 |
| | win7 64bit: malwarebyte meldet Infektionen Hallo Schrauber, combofix.txt: Code:
ATTFilter ComboFix 13-12-20.01 - user 22.12.2013 10:29:33.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3997.1867 [GMT 1:00]
ausgeführt von:: c:\daten\VirenKram\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
C:\test.txt
c:\windows\IsUn0407.exe
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\SysWow64\MSMAsk32.ocx
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-11-22 bis 2013-12-22 ))))))))))))))))))))))))))))))
.
.
2013-12-22 09:47 . 2013-12-22 09:47 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-12-21 13:36 . 2013-12-21 13:36 -------- d-----w- c:\users\user\AppData\Roaming\AVAST Software
2013-12-21 13:11 . 2013-12-21 13:11 -------- d-----w- C:\FRST
2013-12-20 15:58 . 2013-12-20 15:58 -------- d-----w- c:\program files (x86)\ESET
2013-12-20 13:33 . 2013-12-20 13:33 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-12-20 13:33 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-12-20 13:29 . 2013-12-21 03:52 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D88BCCCE-60DD-4096-8846-30291A0270AE}\offreg.dll
2013-12-20 06:48 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D88BCCCE-60DD-4096-8846-30291A0270AE}\mpengine.dll
2013-12-19 16:09 . 2013-12-19 16:27 -------- d-----w- C:\CONTEXT4
2013-12-19 10:37 . 2009-07-21 00:42 78872 ----a-w- c:\windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 10:37 . 2009-07-21 00:42 50200 ----a-w- c:\windows\SysWow64\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 10:37 . 2009-07-21 00:42 79896 ----a-w- c:\windows\SysWow64\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 10:37 . 2009-07-21 00:42 111640 ----a-w- c:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 10:37 . 2013-12-19 10:37 -------- d-----w- c:\windows\system32\RsFx
2013-12-19 10:36 . 2013-12-19 10:36 -------- d-----w- c:\program files\Microsoft Visual Studio 9.0
2013-12-19 10:36 . 2013-12-19 10:36 -------- d-----w- c:\windows\SysWow64\1031
2013-12-19 10:36 . 2013-12-19 10:36 -------- d-----w- c:\windows\system32\1033
2013-12-19 10:36 . 2013-12-19 10:36 -------- d-----w- c:\windows\system32\1031
2013-12-19 10:36 . 2013-12-19 10:36 -------- d-----w- c:\program files\Microsoft.NET
2013-12-19 10:35 . 2013-12-19 10:35 -------- d-----w- c:\windows\PCHEALTH
2013-12-19 10:34 . 2013-12-19 10:37 -------- d-----w- c:\program files\Microsoft SQL Server
2013-12-09 12:46 . 2013-12-09 13:21 397824 --sha-w- C:\EUMONBMP.SYS
2013-12-09 12:38 . 2013-09-04 10:24 61000 ----a-w- c:\windows\system32\drivers\eubakup.sys
2013-12-09 12:38 . 2013-09-04 10:24 189000 ----a-w- c:\windows\system32\drivers\EuFdDisk.sys
2013-12-09 12:38 . 2013-09-04 10:24 18504 ----a-w- c:\windows\system32\drivers\eudskacs.sys
2013-12-09 12:38 . 2013-09-04 10:24 48200 ----a-w- c:\windows\system32\drivers\EUBKMON.sys
2013-12-09 12:36 . 2013-09-04 10:32 24136 ----a-w- c:\windows\system32\fbnative.exe
2013-12-09 12:35 . 2013-12-09 12:35 -------- d-----w- c:\program files (x86)\EaseUS
2013-12-09 11:03 . 2013-12-09 11:03 -------- d-----w- c:\users\Klaus\AppData\Roaming\AVAST Software
2013-12-09 10:24 . 2013-12-09 10:24 113440 ----a-w- c:\programdata\Microsoft\VCExpress\10.0\1031\ResourceCache.dll
2013-12-09 08:33 . 2013-12-09 08:33 -------- d-----w- C:\Movtec-Kinegram
2013-12-06 12:28 . 2013-09-04 12:11 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-12-06 12:28 . 2013-09-04 12:12 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-12-06 12:28 . 2013-09-04 12:11 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-12-06 12:28 . 2013-09-04 12:11 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-12-06 12:28 . 2013-09-04 12:11 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-12-06 12:28 . 2013-09-04 12:11 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-12-06 12:28 . 2013-09-04 12:11 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-12-06 09:40 . 2013-12-19 11:37 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-06 09:40 . 2013-12-19 11:37 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-05 17:41 . 2013-07-12 10:41 185344 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2013-12-05 17:40 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
2013-12-05 17:40 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll
2013-12-05 17:40 . 2013-10-12 02:30 830464 ----a-w- c:\windows\system32\nshwfp.dll
2013-12-05 17:40 . 2013-10-12 02:29 859648 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-12-05 17:40 . 2013-10-12 02:29 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-12-05 17:40 . 2013-10-12 02:03 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll
2013-12-05 17:40 . 2013-10-12 02:01 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL
2013-12-05 17:40 . 2013-08-28 01:12 461312 ----a-w- c:\windows\system32\scavengeui.dll
2013-12-05 14:57 . 2013-12-19 09:41 -------- d-----w- c:\users\Klaus\AppData\Roaming\Foxit Software
2013-12-05 14:52 . 2013-12-05 14:52 -------- d-----w- c:\users\user\AppData\Roaming\Foxit Software
2013-12-05 14:52 . 2013-12-05 14:52 -------- d-----w- c:\program files (x86)\Foxit Software
2013-12-05 14:22 . 2013-12-05 14:28 -------- d-----w- c:\users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-12-05 14:21 . 2013-12-05 14:21 -------- d-----w- c:\program files (x86)\MyPhoneExplorer
2013-12-05 12:15 . 2013-12-05 12:15 -------- d-----w- c:\users\Klaus\AppData\Roaming\Malwarebytes
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-19 10:33 . 2012-01-03 13:52 188896 ----a-w- c:\programdata\Microsoft\VCSExpress\10.0\1031\ResourceCache.dll
2013-12-09 11:47 . 2012-02-09 07:28 90976 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2013-12-09 07:01 . 2013-03-21 15:13 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-12-09 07:01 . 2013-03-21 15:13 205320 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-12-09 07:01 . 2012-01-11 09:27 409832 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-12-09 07:01 . 2012-01-11 09:27 65264 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-12-09 07:01 . 2012-01-11 09:27 1032416 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-12-09 07:01 . 2012-03-26 10:33 92544 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2013-12-09 07:01 . 2012-01-11 09:27 38984 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-12-09 07:01 . 2012-01-11 09:27 84328 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-12-09 07:01 . 2012-01-11 09:27 334648 ----a-w- c:\windows\system32\aswBoot.exe
2013-12-09 07:01 . 2012-01-11 09:26 43152 ----a-w- c:\windows\avastSS.scr
2013-12-01 13:42 . 2012-01-05 08:58 90708896 ----a-w- c:\windows\system32\MRT.exe
2013-11-19 02:33 . 2010-11-21 03:27 267936 ------w- c:\windows\system32\MpSigStub.exe
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
2012-04-23 18:47 1124704 ----a-w- c:\program files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{B922D405-6D13-4A2B-AE89-08A030DA4402}"= "c:\program files (x86)\pdfforge Toolbar\IE\5.6\pdfforgeToolbarIE.dll" [2012-04-23 1124704]
.
[HKEY_CLASSES_ROOT\clsid\{b922d405-6d13-4a2b-ae89-08a030da4402}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOPI.EXE"="c:\program files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe" [2011-05-16 846936]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NBAgent"="c:\program files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [2011-06-29 1409424]
"Dolby Advanced Audio v2"="c:\program files (x86)\Dolby Advanced Audio v2\pcee4.exe" [2011-06-01 506712]
"ITSecMng"="c:\program files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2011-04-02 80840]
"TOSDCR"="c:\program files (x86)\TOSHIBA\PasswordUtility\TOSDCR.exe" [2007-08-28 169296]
"ToshibaServiceStation"="c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" [2011-07-12 1298816]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"SearchSettings"="c:\program files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" [2012-04-23 983904]
"Reader Application Helper"="c:\program files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe" [2012-11-08 898952]
"20131121"="c:\program files\AVAST Software\Avast\setup\emupdate\1ce4d5d5-40dd-4876-9601-c3e8eda25bfa.exe" [2013-12-05 180184]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-12-09 3568312]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"TOPI.EXE"="c:\program files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe" [2011-05-16 846936]
.
c:\users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe [2009-9-2 481184]
.
c:\users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe [2009-9-2 481184]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
TRDCReminder.lnk - c:\program files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe [2009-9-2 481184]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 bmdrvr;Modified Clusters Tracking Driver;SysWOW64\drivers\bmdrvr.sys;SysWOW64\drivers\bmdrvr.sys [x]
R3 cpuz135;cpuz135;c:\program files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys;c:\program files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [x]
R3 dfu;dfu;c:\windows\system32\drivers\MassDfu64.sys;c:\windows\SYSNATIVE\drivers\MassDfu64.sys [x]
R3 DisplayLinkUsbPort;DisplayLink USB Device;c:\windows\system32\DRIVERS\DisplayLinkUsbPort_5.6.31854.0.sys;c:\windows\SYSNATIVE\DRIVERS\DisplayLinkUsbPort_5.6.31854.0.sys [x]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys;c:\windows\SYSNATIVE\drivers\intelaud.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys;c:\windows\SYSNATIVE\pwdrvio.sys [x]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys;c:\windows\SYSNATIVE\pwdspio.sys [x]
R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Lite 2013\RpcAgentSrv.exe;c:\program files\SiSoftware\SiSoftware Sandra Lite 2013\RpcAgentSrv.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 MSSQLServerADHelper100;SQL Server Hilfsdienst für Active Directory;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [x]
R4 RsFx0103;RsFx0103 Driver;c:\windows\system32\DRIVERS\RsFx0103.sys;c:\windows\SYSNATIVE\DRIVERS\RsFx0103.sys [x]
R4 SQLAgent$SQLEXPRESS;SQL Server-Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE;c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 dlkmdldr;dlkmdldr;c:\windows\system32\drivers\dlkmdldr.sys;c:\windows\SYSNATIVE\drivers\dlkmdldr.sys [x]
S0 EUBAKUP;EUBAKUP;c:\windows\system32\drivers\eubakup.sys;c:\windows\SYSNATIVE\drivers\eubakup.sys [x]
S0 EUBKMON;EUBKMON;c:\windows\system32\drivers\EUBKMON.sys;c:\windows\SYSNATIVE\drivers\EUBKMON.sys [x]
S0 tos_sps64;TOSHIBA tos_sps64 Service;c:\windows\system32\DRIVERS\tos_sps64.sys;c:\windows\SYSNATIVE\DRIVERS\tos_sps64.sys [x]
S0 vmci;VMware VMCI Bus Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 EUDSKACS;EUDSKACS;c:\windows\system32\drivers\eudskacs.sys;c:\windows\SYSNATIVE\drivers\eudskacs.sys [x]
S1 EUFDDISK;EUFDDISK;c:\windows\system32\drivers\EuFdDisk.sys;c:\windows\SYSNATIVE\drivers\EuFdDisk.sys [x]
S1 Uim_VIM;UIM Virtual Image Plugin;c:\windows\system32\Drivers\uim_vimx64.sys;c:\windows\SYSNATIVE\Drivers\uim_vimx64.sys [x]
S2 Application Updater;Application Updater;c:\program files (x86)\Application Updater\ApplicationUpdater.exe;c:\program files (x86)\Application Updater\ApplicationUpdater.exe [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys;c:\windows\SYSNATIVE\drivers\aswFsBlk.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 cfWiMAXService;ConfigFree WiMAX Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe;c:\program files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [x]
S2 ConfigFree Service;ConfigFree Service;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe;c:\program files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [x]
S2 DisplayLinkService;DisplayLinkManager;c:\program files\DisplayLink Core Software\DisplayLinkManager.exe;c:\program files\DisplayLink Core Software\DisplayLinkManager.exe [x]
S2 EaseUS Agent;EaseUS Agent Service;c:\program files (x86)\EaseUS\Todo Backup\bin\Agent.exe;c:\program files (x86)\EaseUS\Todo Backup\bin\Agent.exe [x]
S2 Guard Agent;Guard Agent Service;c:\program files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe;c:\program files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [x]
S2 hhdserhelp;HHD Software Serial Monitoring Helper Driver;c:\windows\system32\drivers\hhdserhelp.sys;c:\windows\SYSNATIVE\drivers\hhdserhelp.sys [x]
S2 irstrtsv;Intel(R) Rapid Start Technology Service;c:\windows\system32\irstrtsv.exe;c:\windows\SYSNATIVE\irstrtsv.exe [x]
S2 jhi_service;Intel(R) Identity Protection Technology Host Interface Service;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]
S2 risdxc;risdxc;c:\windows\system32\DRIVERS\risdxc64.sys;c:\windows\SYSNATIVE\DRIVERS\risdxc64.sys [x]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
S2 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO);c:\program files (x86)\Toshiba TEMPRO\TemproSvc.exe;c:\program files (x86)\Toshiba TEMPRO\TemproSvc.exe [x]
S2 TOSHIBA eco Utility Service;TOSHIBA eco Utility Service;c:\program files\TOSHIBA\TECO\TecoService.exe;c:\program files\TOSHIBA\TECO\TecoService.exe [x]
S2 TVALZFL;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Filter Driver;c:\windows\system32\DRIVERS\TVALZFL.sys;c:\windows\SYSNATIVE\DRIVERS\TVALZFL.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [x]
S2 vmware-converter-agent;VMware vCenter Converter Standalone Agent;c:\program files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter-a.exe;c:\program files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter-a.exe [x]
S2 vmware-converter-server;VMware vCenter Converter Standalone Server;c:\program files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe;c:\program files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [x]
S2 vmware-converter-worker;VMware vCenter Converter Standalone Worker;c:\program files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe;c:\program files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [x]
S2 vstor2-mntapi10-shared;Vstor2 MntApi 1.0 Driver (shared);SysWOW64\drivers\vstor2-mntapi10-shared.sys;SysWOW64\drivers\vstor2-mntapi10-shared.sys [x]
S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe [x]
S3 dlkmd;dlkmd;c:\windows\system32\drivers\dlkmd.sys;c:\windows\SYSNATIVE\drivers\dlkmd.sys [x]
S3 hhdserial64;HHD Software Serial Monitoring Filter Driver;c:\windows\system32\DRIVERS\hhdserial64.sys;c:\windows\SYSNATIVE\DRIVERS\hhdserial64.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys;c:\windows\SYSNATIVE\DRIVERS\iwdbus.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 PGEffect;Pangu effect driver;c:\windows\system32\DRIVERS\pgeffect.sys;c:\windows\SYSNATIVE\DRIVERS\pgeffect.sys [x]
S3 TMachInfo;TMachInfo;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe;c:\program files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [x]
S3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe;c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [x]
S3 TPCHSrv;TPCH Service;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe;c:\program files\TOSHIBA\TPHM\TPCHSrv.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-05 11:46 1210320 ----a-w- c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-12-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-06 11:37]
.
2013-12-21 c:\windows\Tasks\FreeFileViewerUpdateChecker.job
- c:\program files (x86)\FreeFileViewer\FFVCheckForUpdates.exe [2012-05-18 12:24]
.
2013-12-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-16 20:40]
.
2013-12-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-16 20:40]
.
2013-12-21 c:\windows\Tasks\Paragon Archive name arc_260313104821816.job
- c:\program files (x86)\Paragon Software\Backup and Recovery 2012 Free\program\scripts.exe [2011-11-17 14:37]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-12-09 07:01 326944 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 17:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-09-09 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-09-09 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-09-09 416024]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-09-10 12856936]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-08-16 2277480]
"TosSENotify"="c:\program files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe" [2011-06-10 710560]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-06-01 1935120]
"TosVolRegulator"="c:\program files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe" [2009-11-11 24376]
"Toshiba TEMPRO"="c:\program files (x86)\Toshiba TEMPRO\TemproTray.exe" [2011-02-10 1546720]
"Toshiba Registration"="c:\program files\TOSHIBA\Registration\ToshibaReminder.exe" [2011-10-16 150992]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www2.delta-search.com/?affID=119677&babsrc=HP_ss&mntrId=765988532E772D39
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Zu TOSHIBA Bulletin Board hinzufügen - c:\program files\TOSHIBA\BulletinBoard\TosBBCom.dll/1000
LSP: %SystemRoot%\system32\vsocklib.dll
TCP: DhcpNameServer = 192.168.178.1
TCP: Interfaces\{33822A57-F00C-4F8D-BC78-8B65AE4DDCDC}: NameServer = 0.0.0.0
FF - ProfilePath - c:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\
FF - user.js: extensions.delta.tlbrSrchUrl -
FF - user.js: extensions.delta.id - 7659b24500000000000088532e772d39
FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
FF - user.js: extensions.delta.instlDay - 15819
FF - user.js: extensions.delta.vrsn - 1.8.16.16
FF - user.js: extensions.delta.vrsni - 1.8.16.16
FF - user.js: extensions.delta.vrsnTs - 1.8.16.1620:37
FF - user.js: extensions.delta.prtnrId - delta
FF - user.js: extensions.delta.prdct - delta
FF - user.js: extensions.delta.aflt - babsst
FF - user.js: extensions.delta.smplGrp - none
FF - user.js: extensions.delta.tlbrId - base
FF - user.js: extensions.delta.instlRef - sst
FF - user.js: extensions.delta.dfltLng - en
FF - user.js: extensions.delta.excTlbr - false
FF - user.js: extensions.delta.ffxUnstlRst - true
FF - user.js: extensions.delta.admin - false
FF - user.js: extensions.delta.autoRvrt - false
FF - user.js: extensions.delta.rvrt - false
FF - user.js: extensions.delta.newTab - false
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-ISUSPM - c:\programdata\FLEXnet\Connect\11\ISUSPM.exe
Wow6432Node-HKLM-Run-TSleepSrv - %ProgramFiles(x86)%\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
c:\users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk - c:\users\user\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Klaus\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Klaus\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Klaus\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - c:\users\Klaus\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-TPwrMain - c:\program files (x86)\TOSHIBA\Power Saver\TPwrMain.EXE
HKLM-Run-TCrdMain - c:\program files (x86)\TOSHIBA\FlashCards\TCrdMain.exe
HKLM-Run-BatteryManager - c:\program files (x86)\TOSHIBA\Power Saver\TBatmgrTrayIcon.EXE
HKLM-Run-Teco - c:\program files (x86)\TOSHIBA\TECO\Teco.exe
HKLM-Run-TosWaitSrv - c:\program files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe
HKLM-Run-TosNC - c:\program files (x86)\Toshiba\BulletinBoard\TosNcCore.exe
HKLM-Run-TosReelTimeMonitor - c:\program files (x86)\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-12-22 11:30:27
ComboFix-quarantined-files.txt 2013-12-22 10:30
.
Vor Suchlauf: 23 Verzeichnis(se), 20.396.580.864 Bytes frei
Nach Suchlauf: 28 Verzeichnis(se), 21.889.200.128 Bytes frei
.
- - End Of File - - 96B458D6AF1EEE8CB77D06D92AB5B8C8
Klaus |
|
23.12.2013, 08:26
| #6 |
| /// the machine /// TB-Ausbilder | win7 64bit: malwarebyte meldet Infektionen Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> win7 64bit: malwarebyte meldet Infektionen |
|
23.12.2013, 13:51
| #7 |
| | win7 64bit: malwarebyte meldet Infektionen Hallo Schrauber, mbam: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.12.23.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16750 user :: USER-TOSH [Administrator] 23.12.2013 10:55:12 mbam-log-2013-12-23 (10-55-12).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 247068 Laufzeit: 3 Minute(n), 15 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 4 HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\BabylonToolbar (PUP.Optional.BabylonToolBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Google\Chrome\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf (PUP.Optional.SpeedAnalysis2.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 1 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.StartPage) -> Bösartig: (hxxp://www2.delta-search.com/?affID=119677&babsrc=HP_ss&mntrId=765988532E772D39) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 4 C:\Users\user\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\user\AppData\Roaming\SpeedAnalysis2 (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Klaus\AppData\Roaming\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\user\AppData\Roaming\File Scout (PUP.Optional.FileScout.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 14 C:\Users\user\AppData\Roaming\File Scout\filescout.exe (PUP.Optional.FileScout.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Klaus\Downloads\BestCodecsPackSetup(1).exe (Adware.InstallBrain) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Klaus\Downloads\BestCodecsPackSetup.exe (Adware.InstallBrain) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf(1).exe (PUP.Optional.Bandoo.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Klaus\Downloads\iMeshSetup-r1487-w-bf.exe (PUP.Optional.Bandoo.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_foxit-reader.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_mobile-atlas-creator.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Klaus\Downloads\SoftonicDownloader_fuer_pdfcreator.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\user\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\user\AppData\Roaming\SpeedAnalysis2\speedanalysis.crx (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\user\AppData\Roaming\speedanalysis.ico (PUP.Optional.SpeedAnalysis2.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Klaus\AppData\Roaming\PerformerSoft\PC Performer\log_04-26-2013.log (PUP.Optional.PCPerformer.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Klaus\AppData\Roaming\PerformerSoft\PC Performer\eng_rcp.dat (PUP.Optional.PCPerformer.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\user\AppData\Roaming\File Scout\uninst.exe (PUP.Optional.FileScout.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 23/12/2013 um 13:15:21
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : user - USER-TOSH
# Gestartet von : C:\Users\Klaus\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : Application Updater
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Program Files (x86)\Application Updater
Ordner Gelöscht : C:\Program Files (x86)\pdfforge Toolbar
Ordner Gelöscht : C:\Program Files (x86)\Common Files\Spigot
Ordner Gelöscht : C:\users\user\AppData\LocalLow\pdfforge
Ordner Gelöscht : C:\users\user\AppData\LocalLow\Search Settings
Ordner Gelöscht : C:\users\user\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\users\user\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
Ordner Gelöscht : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\Extensions\speedanalysis02@SpeedAnalysis.com
Ordner Gelöscht : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
Datei Gelöscht : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\Extensions\pdfforge@mybrowserbar.com
Datei Gelöscht : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\Extensions\wtxpcom@mybrowserbar.com
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\windows\System32\roboot64.exe
Datei Gelöscht : C:\users\user\Desktop\SpeedAnalysis.lnk
Datei Gelöscht : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\invalidprefs.js
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Babylon.xml
Datei Gelöscht : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\searchplugins\delta.xml
Datei Gelöscht : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\user.js
Datei Gelöscht : C:\windows\System32\Tasks\EPUpdater
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\*\shell\filescout
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]
Schlüssel Gelöscht : HKLM\SOFTWARE\5c0dbd0e63ee844
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mobile-atlas-creator_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_mobile-atlas-creator_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdfcreator_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_pdfcreator_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{B922D405-6D13-4A2B-AE89-08A030DA4402}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{045F91B3-695F-423A-98C7-8DE3C47AA020}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1348BD1B-C32A-41A7-9BD4-5377AA1AB925}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{395AFE6E-8308-48DB-89BE-ED5F4AA3D3EC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{43B390F0-6BA2-45CA-ABF2-5DB0CEE9B49D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{93CF54F5-CFAA-4440-B588-8ED0DFAD5C21}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{94CADA2E-1D3F-419F-8A3D-06C58EDF53C8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E52EB8B-8DD9-4605-AD36-D352BCD482F2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A1440EC3-F0FA-407A-B811-DE6668C06D29}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B9A84AD0-5777-46FD-8B8F-1EBD06750FBC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C1995F88-1C7F-40D7-B0FA-6F107F6308B8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D3BC53E7-0437-4C97-90EE-2CD6FF47FB14}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E4A994B0-5550-4680-A4C6-B9470B888069}
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\FLEXnet
Schlüssel Gelöscht : HKCU\Software\pdfforge
Schlüssel Gelöscht : HKCU\Software\Search Settings
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\pdfforge
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Search Settings
Schlüssel Gelöscht : HKLM\Software\Application Updater
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Freeze.com
Schlüssel Gelöscht : HKLM\Software\pdfforge
Schlüssel Gelöscht : HKLM\Software\Search Settings
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF}
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\90C64EA18BA25EE488BF80DCF07F2FFD
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\90C64EA18BA25EE488BF80DCF07F2FFD
***** [ Browser ] *****
-\\ Internet Explorer v0.0.0.0
-\\ Mozilla Firefox v26.0 (de)
[ Datei : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default\prefs.js ]
Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "en");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.id", "7659b24500000000000088532e772d39");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15819");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.16.16");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.16.1620:37:56");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.16.16");
-\\ Google Chrome v31.0.1650.63
[ Datei : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gelöscht : homepage
Gelöscht : urls_to_restore_on_startup
[ Datei : C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [8801 octets] - [23/12/2013 13:13:16]
AdwCleaner[S0].txt - [8355 octets] - [23/12/2013 13:15:21]
########## EOF - \AdwCleaner\AdwCleaner[S0].txt - [8415 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by user on 23.12.2013 at 13:20:42,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2992699830-2983422617-984916726-1000\Software\sweetim
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\f80273e8.default\minidumps [6 files]
~~~ Chrome
Successfully deleted: [Folder] C:\Users\user\appdata\local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 23.12.2013 at 13:30:01,01
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-12-2013 01
Ran by user (administrator) on USER-TOSH on 23-12-2013 13:42:12
Running from C:\DATEN\VirenKram
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.EXE
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
() C:\Program Files (x86)\Bazaar\tbzrcache.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter-a.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
() C:\Program Files\TOSHIBA\FlashCards\Hotkey\TCrdKBB.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\widimon\widimon.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Program Files (x86)\Bazaar\tbzrcache.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
() C:\Program Files\TOSHIBA\FlashCards\Hotkey\TCrdKBB.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng_D.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12856936 2011-09-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-17] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-04] (Synaptics Incorporated)
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [590256 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [981888 2011-08-03] (TOSHIBA Corporation)
HKLM\...\Run: [BatteryManager] - C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe [285608 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1544624 2011-08-23] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [712096 2011-08-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710560 2011-06-10] (TOSHIBA Corporation)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-06-01] (Intel(R) Corporation)
HKLM\...\Run: [TosVolRegulator] - C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosNC] - C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe [598448 2011-06-28] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38824 2011-06-28] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [Toshiba Registration] - C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-10-16] (Toshiba Europe GmbH)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1409424 2011-06-29] (Nero AG)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ITSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-02] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [TOSDCR] - C:\Program Files (x86)\TOSHIBA\PasswordUtility\TOSDCR.exe [169296 2007-08-28] ()
HKLM-x32\...\Run: [ToshibaServiceStation] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-12] (TOSHIBA Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Reader Application Helper] - C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [898952 2012-11-08] (Sony Corporation)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\1ce4d5d5-40dd-4876-9601-c3e8eda25bfa.exe [180184 2013-12-05] (AVAST Software)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-09] (AVAST Software)
HKU\Default\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
HKU\Default User\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {9CE63A3E-469F-4B15-83CC-87D34782A8A1} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=827316&p={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{33822A57-F00C-4F8D-BC78-8B65AE4DDCDC}: [NameServer]0.0.0.0
FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\f80273e8.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @sony.com/ReaderDesktop - C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.79\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.79\pdf.dll No File
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\17.0.963.79\gcswf32.dll No File
CHR Plugin: (McAfee SiteAdvisor) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.31.131.2_0\McChPlg.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.200.2) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U20) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (WildTangent Games App Presence Detector) - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll No File
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0
CHR Extension: (avast! WebRep) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-09] (AVAST Software)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9663848 2011-04-10] (DisplayLink Corp.)
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [69192 2013-10-11] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Guard Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R2 irstrtsv; C:\windows\SysWow64\irstrtsv.exe [184320 2011-07-07] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-06-01] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013\RpcAgentSrv.exe [68760 2008-11-04] (SiSoftware)
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
R2 vmware-converter-agent; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter-a.exe [423536 2011-08-19] (VMware, Inc.)
R2 vmware-converter-server; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [423536 2011-08-19] (VMware, Inc.)
R2 vmware-converter-worker; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [423536 2011-08-19] (VMware, Inc.)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [38984 2013-12-09] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [84328 2013-12-09] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [92544 2013-12-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-09] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1032416 2013-12-09] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [409832 2013-12-09] (AVAST Software)
R1 aswTdi; C:\windows\system32\drivers\aswTdi.sys [65264 2013-12-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-09] ()
S3 bmdrvr; C:\Windows\SysWow64\drivers\bmdrvr.sys [74352 2011-03-15] (VMware, Inc.)
S3 cpuz135; C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [23816 2012-02-07] (CPUID)
S3 dfu; C:\Windows\System32\drivers\MassDfu64.sys [15360 2011-12-12] (Philips PTCL)
S3 DisplayLinkUsbPort; C:\Windows\System32\DRIVERS\DisplayLinkUsbPort_5.6.31854.0.sys [17408 2011-04-10] (hxxp://libusb-win32.sourceforge.net)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48200 2013-09-04] ()
R2 hhdserhelp; C:\windows\system32\drivers\hhdserhelp.sys [20776 2011-08-16] (HHD Software Ltd.)
R3 hhdserial64; C:\Windows\System32\DRIVERS\hhdserial64.sys [42280 2011-08-16] (HHD Software Ltd.)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 pwdrvio; C:\windows\system32\pwdrvio.sys [19032 2013-01-11] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12384 2013-01-11] ()
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254976 2010-08-31] (Jungo)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-23 13:30 - 2013-12-23 13:30 - 00001334 _____ C:\Users\user\Desktop\JRT.txt
2013-12-23 13:20 - 2013-12-23 13:20 - 00000000 ____D C:\windows\ERUNT
2013-12-23 13:19 - 2013-12-23 13:19 - 01034531 _____ (Thisisu) C:\Users\Klaus\Desktop\JRT.exe
2013-12-23 13:12 - 2013-12-23 13:15 - 00000000 ____D C:\AdwCleaner
2013-12-23 13:11 - 2013-12-23 13:11 - 01233962 _____ C:\Users\Klaus\Desktop\adwcleaner.exe
2013-12-23 10:51 - 2013-12-23 10:51 - 00001132 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-23 10:51 - 2013-12-23 10:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-23 10:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-12-23 10:50 - 2013-12-23 10:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(2).exe
2013-12-23 09:27 - 2013-12-23 09:45 - 707306496 _____ C:\Users\Klaus\Downloads\P1000004.MOV
2013-12-22 11:31 - 2013-12-22 11:31 - 00030021 _____ C:\ComboFix.txt
2013-12-22 10:28 - 2011-06-26 07:45 - 00256000 _____ C:\windows\PEV.exe
2013-12-22 10:28 - 2010-11-07 18:20 - 00208896 _____ C:\windows\MBR.exe
2013-12-22 10:28 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-12-22 10:28 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-12-22 10:28 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-12-22 10:28 - 2000-08-31 01:00 - 00098816 _____ C:\windows\sed.exe
2013-12-22 10:28 - 2000-08-31 01:00 - 00080412 _____ C:\windows\grep.exe
2013-12-22 10:28 - 2000-08-31 01:00 - 00068096 _____ C:\windows\zip.exe
2013-12-22 10:27 - 2013-12-22 11:33 - 00000000 ____D C:\Qoobox
2013-12-22 10:27 - 2013-12-22 11:17 - 00000000 ____D C:\windows\erdnt
2013-12-21 15:05 - 2013-12-21 15:05 - 00007972 _____ C:\Users\Klaus\Downloads\gmer21-12-13.7z
2013-12-21 14:58 - 2013-12-21 14:58 - 00266288 _____ C:\windows\Minidump\122113-13540-01.dmp
2013-12-21 14:43 - 2013-12-21 14:43 - 00000000 ____D C:\Users\Klaus\Downloads\Neuer Ordner
2013-12-21 14:36 - 2013-12-21 14:36 - 00000000 ____D C:\Users\user\AppData\Roaming\AVAST Software
2013-12-21 14:29 - 2013-12-21 14:29 - 00318223 _____ C:\Users\Klaus\Downloads\gmer21-12-13.log
2013-12-21 14:11 - 2013-12-23 13:41 - 00000000 ____D C:\FRST
2013-12-21 14:11 - 2013-12-21 14:12 - 00072343 _____ C:\Users\Klaus\Downloads\FRST.txt
2013-12-21 14:11 - 2013-12-21 14:12 - 00029829 _____ C:\Users\Klaus\Downloads\Addition.txt
2013-12-21 14:10 - 2013-12-21 14:10 - 00000470 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-12-21 14:10 - 2013-12-21 14:10 - 00000000 _____ C:\Users\user\defogger_reenable
2013-12-21 13:37 - 2013-12-21 13:37 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-12-21 13:33 - 2013-12-21 13:34 - 00377856 _____ C:\Users\Klaus\Downloads\tg2fpwht.exe
2013-12-21 13:30 - 2013-12-21 13:31 - 00000000 ____D C:\Users\Klaus\Documents\VirenKram
2013-12-21 10:11 - 2013-12-21 10:11 - 00000393 _____ C:\Users\user\Documents\eser.txt
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (4)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (3)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (2)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner
2013-12-21 10:10 - 2013-12-21 10:10 - 00000393 _____ C:\Users\user\Desktop\eser.txt
2013-12-20 16:58 - 2013-12-20 16:58 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-12-20 16:58 - 2013-12-20 16:58 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-20 14:33 - 2013-12-20 14:33 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-12-20 12:40 - 2013-12-20 12:52 - 00002029 _____ C:\Users\Klaus\Desktop\CringStart.lnk
2013-12-20 12:19 - 2013-12-20 12:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-19 17:10 - 2012-06-05 12:35 - 00001963 _____ C:\Users\Klaus\Desktop\DOSBox 0.74.lnk
2013-12-19 17:09 - 2013-12-19 17:27 - 00000000 ____D C:\CONTEXT4
2013-12-19 13:14 - 2013-12-19 13:14 - 00002235 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 12:41 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-19 12:41 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-19 12:41 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-19 12:41 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-19 12:41 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-19 12:41 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-19 12:41 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-19 12:41 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-19 12:41 - 2013-10-25 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-19 12:41 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-19 12:39 - 2013-12-19 12:41 - 00000000 ____D C:\windows\system32\MRT
2013-12-19 12:37 - 2013-12-23 12:54 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-19 12:37 - 2013-12-19 12:37 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-12-19 11:37 - 2013-12-19 11:37 - 00000000 ____D C:\windows\system32\RsFx
2013-12-19 11:37 - 2009-07-21 01:42 - 00111640 _____ (Microsoft Corporation) C:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00079896 _____ (Microsoft Corporation) C:\windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00078872 _____ (Microsoft Corporation) C:\windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00050200 _____ (Microsoft Corporation) C:\windows\SysWOW64\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\SysWOW64\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1033
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2013-12-19 11:35 - 2013-12-19 11:35 - 00000000 ____D C:\windows\PCHEALTH
2013-12-19 11:34 - 2013-12-19 11:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-19 11:24 - 2013-12-19 11:24 - 03277648 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcs_web.exe
2013-12-19 11:23 - 2013-12-19 11:23 - 00673024 _____ ( ) C:\Users\Klaus\Downloads\ZipOpenerSetup.exe
2013-12-15 12:33 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-15 12:33 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-15 12:33 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-15 12:33 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-15 12:33 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-15 12:33 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-15 12:33 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-15 12:33 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-15 12:33 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-15 12:33 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-15 12:33 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-15 12:33 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-15 12:33 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-15 12:33 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-15 12:33 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-15 12:33 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-15 12:33 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-15 12:33 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-15 12:33 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2013-12-09 13:46 - 2013-12-09 14:21 - 00397824 ___SH C:\EUMONBMP.SYS
2013-12-09 13:38 - 2013-12-09 13:38 - 00001244 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 6.1.lnk
2013-12-09 13:38 - 2013-09-04 11:24 - 00189000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\EuFdDisk.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00061000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\eubakup.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00048200 _____ C:\windows\system32\Drivers\EUBKMON.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00018504 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\eudskacs.sys
2013-12-09 13:36 - 2013-09-04 11:32 - 00024136 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\fbnative.exe
2013-12-09 13:35 - 2013-12-09 13:35 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-09 13:33 - 2013-12-09 13:33 - 118962544 _____ ( ) C:\Users\Klaus\Downloads\tb_free.exe
2013-12-09 13:30 - 2013-12-09 13:30 - 00583496 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Users\Klaus\Downloads\tb_free_installer.exe
2013-12-09 13:24 - 2013-12-09 13:24 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vc_web.exe
2013-12-09 12:11 - 2013-12-09 12:11 - 00813920 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\VS10sp1-KB983509(1).exe
2013-12-09 12:03 - 2013-12-09 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVAST Software
2013-12-09 11:18 - 2013-12-09 11:18 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcPlus_web.exe
2013-12-09 09:33 - 2013-12-09 09:33 - 00000000 ____D C:\Movtec-Kinegram
2013-12-06 13:28 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-12-06 10:40 - 2013-12-19 12:37 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-06 10:40 - 2013-12-19 12:37 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-06 10:33 - 2013-12-06 10:33 - 00000000 ____D C:\Users\Klaus\Desktop\Alte Firefox-Daten
2013-12-06 09:54 - 2013-12-06 09:55 - 02753344 _____ (AVAST Software) C:\Users\Klaus\Downloads\avast-browser-cleanup.exe
2013-12-05 18:42 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-12-05 18:42 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-12-05 18:42 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll
2013-12-05 18:42 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\credui.dll
2013-12-05 18:42 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-12-05 18:42 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\SysWOW64\SmartcardCredentialProvider.dll
2013-12-05 18:42 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2013-12-05 18:42 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\credui.dll
2013-12-05 18:42 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-12-05 18:42 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2013-12-05 18:42 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2013-12-05 18:42 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2013-12-05 18:42 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2013-12-05 18:42 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2013-12-05 18:42 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2013-12-05 18:42 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2013-12-05 18:42 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-12-05 18:42 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2013-12-05 18:42 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2013-12-05 18:42 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2013-12-05 18:42 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2013-12-05 18:42 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2013-12-05 18:42 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-12-05 18:42 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-12-05 18:42 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-12-05 18:42 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-12-05 18:42 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-12-05 18:42 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-12-05 18:42 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-12-05 18:42 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-12-05 18:42 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-12-05 18:42 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-12-05 18:42 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-12-05 18:42 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-12-05 18:42 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-12-05 18:42 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-12-05 18:42 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-12-05 18:42 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-12-05 18:42 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-12-05 18:42 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-12-05 18:42 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2013-12-05 18:42 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-12-05 18:42 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-12-05 18:42 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2013-12-05 18:42 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2013-12-05 18:42 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2013-12-05 18:42 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-12-05 18:42 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2013-12-05 18:42 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2013-12-05 18:42 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2013-12-05 18:42 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-12-05 18:42 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-12-05 18:42 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-12-05 18:42 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d11.dll
2013-12-05 18:42 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\windows\system32\d3d11.dll
2013-12-05 18:41 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-12-05 18:41 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-12-05 18:41 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-12-05 18:41 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll
2013-12-05 18:41 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll
2013-12-05 18:41 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-12-05 18:41 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-12-05 18:41 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2013-12-05 18:41 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-12-05 18:41 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2013-12-05 18:41 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-12-05 18:41 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-12-05 18:41 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-12-05 18:41 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2013-12-05 18:41 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-12-05 18:41 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2013-12-05 18:41 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-12-05 18:41 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-12-05 18:41 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-12-05 18:41 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-12-05 18:41 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2013-12-05 18:41 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-12-05 18:41 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-12-05 18:41 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-12-05 18:41 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-12-05 18:41 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-05 18:41 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-05 18:41 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-12-05 18:41 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-12-05 18:41 - 2013-07-12 11:40 - 00109824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBAUDIO.sys
2013-12-05 18:41 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2013-12-05 18:41 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2013-12-05 18:41 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2013-12-05 18:41 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2013-12-05 18:41 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2013-12-05 18:41 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-12-05 18:41 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-12-05 18:41 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2013-12-05 18:41 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2013-12-05 18:41 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2013-12-05 18:41 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\certenc.dll
2013-12-05 18:41 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\windows\system32\certutil.exe
2013-12-05 18:41 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\windows\SysWOW64\certutil.exe
2013-12-05 18:41 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\certenc.dll
2013-12-05 18:41 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\cryptdlg.dll
2013-12-05 18:41 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptdlg.dll
2013-12-05 18:41 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2013-12-05 18:41 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32spl.dll
2013-12-05 18:41 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2013-12-05 18:41 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2013-12-05 18:40 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-12-05 18:40 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-12-05 18:40 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-12-05 18:40 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-12-05 18:40 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-12-05 18:40 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll
2013-12-05 18:40 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2013-12-05 18:40 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2013-12-05 15:57 - 2013-12-19 10:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00002073 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Users\user\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-12-05 15:36 - 2013-12-05 15:37 - 36047576 _____ (Foxit Corporation ) C:\Users\Klaus\Downloads\FoxitReader604.0719_L10N_Setup.exe
2013-12-05 15:22 - 2013-12-05 15:28 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-12-05 15:21 - 2013-12-05 15:21 - 00002080 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-12-05 15:21 - 2013-12-05 15:21 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2013-12-05 15:17 - 2013-12-05 15:17 - 07080248 _____ C:\Users\Klaus\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-12-05 13:15 - 2013-12-05 13:15 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes
==================== One Month Modified Files and Folders =======
2013-12-23 13:41 - 2013-12-21 14:11 - 00000000 ____D C:\FRST
2013-12-23 13:40 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-23 13:40 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-23 13:39 - 2012-01-10 15:48 - 01084247 _____ C:\Users\user\Documents\.bzr.log
2013-12-23 13:39 - 2011-02-11 09:21 - 00769312 _____ C:\windows\system32\perfh007.dat
2013-12-23 13:39 - 2011-02-11 09:21 - 00175692 _____ C:\windows\system32\perfc007.dat
2013-12-23 13:39 - 2009-07-14 06:13 - 01816312 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-23 13:38 - 2012-05-18 11:33 - 00000402 _____ C:\windows\Tasks\FreeFileViewerUpdateChecker.job
2013-12-23 13:38 - 2011-10-16 21:40 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-23 13:36 - 2011-11-16 00:56 - 02056050 _____ C:\windows\WindowsUpdate.log
2013-12-23 13:33 - 2012-05-12 11:27 - 00000000 ____D C:\ProgramData\VMware
2013-12-23 13:33 - 2012-01-10 11:11 - 03453586 _____ C:\Users\Klaus\Documents\.bzr.log
2013-12-23 13:33 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-12-23 13:33 - 2009-07-14 05:51 - 00092152 _____ C:\windows\setupact.log
2013-12-23 13:30 - 2013-12-23 13:30 - 00001334 _____ C:\Users\user\Desktop\JRT.txt
2013-12-23 13:20 - 2013-12-23 13:20 - 00000000 ____D C:\windows\ERUNT
2013-12-23 13:19 - 2013-12-23 13:19 - 01034531 _____ (Thisisu) C:\Users\Klaus\Desktop\JRT.exe
2013-12-23 13:15 - 2013-12-23 13:12 - 00000000 ____D C:\AdwCleaner
2013-12-23 13:13 - 2011-10-16 21:40 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-23 13:11 - 2013-12-23 13:11 - 01233962 _____ C:\Users\Klaus\Desktop\adwcleaner.exe
2013-12-23 13:08 - 2010-11-21 04:47 - 00058346 _____ C:\windows\PFRO.log
2013-12-23 13:07 - 2013-04-26 07:55 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\PerformerSoft
2013-12-23 12:54 - 2013-12-19 12:37 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-23 10:51 - 2013-12-23 10:51 - 00001132 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-23 10:51 - 2013-12-23 10:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-23 10:50 - 2013-12-23 10:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(2).exe
2013-12-23 10:46 - 2012-03-09 14:02 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\vlc
2013-12-23 09:45 - 2013-12-23 09:27 - 707306496 _____ C:\Users\Klaus\Downloads\P1000004.MOV
2013-12-23 07:49 - 2012-07-16 07:04 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update
2013-12-22 19:23 - 2012-02-27 10:00 - 00003934 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{06FDF393-8C2C-4392-9653-50D8C6492927}
2013-12-22 11:33 - 2013-12-22 10:27 - 00000000 ____D C:\Qoobox
2013-12-22 11:32 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-22 11:31 - 2013-12-22 11:31 - 00030021 _____ C:\ComboFix.txt
2013-12-22 11:21 - 2012-01-01 13:16 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-22 11:17 - 2013-12-22 10:27 - 00000000 ____D C:\windows\erdnt
2013-12-22 10:49 - 2009-07-14 03:34 - 00000215 _____ C:\windows\system.ini
2013-12-21 16:48 - 2013-03-26 11:50 - 00000978 _____ C:\windows\Tasks\Paragon Archive name arc_260313104821816.job
2013-12-21 16:48 - 2012-01-02 10:26 - 00000000 ____D C:\Users\user\AppData\Local\Mozilla
2013-12-21 15:05 - 2013-12-21 15:05 - 00007972 _____ C:\Users\Klaus\Downloads\gmer21-12-13.7z
2013-12-21 14:58 - 2013-12-21 14:58 - 00266288 _____ C:\windows\Minidump\122113-13540-01.dmp
2013-12-21 14:58 - 2012-04-19 08:17 - 00000000 ____D C:\windows\Minidump
2013-12-21 14:58 - 2009-07-14 06:08 - 00032632 _____ C:\windows\Tasks\SCHEDLGU.TXT
2013-12-21 14:43 - 2013-12-21 14:43 - 00000000 ____D C:\Users\Klaus\Downloads\Neuer Ordner
2013-12-21 14:40 - 2012-01-12 18:27 - 00000000 ____D C:\DATEN
2013-12-21 14:36 - 2013-12-21 14:36 - 00000000 ____D C:\Users\user\AppData\Roaming\AVAST Software
2013-12-21 14:35 - 2011-12-27 13:35 - 00000000 ___RD C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-21 14:35 - 2011-12-27 13:34 - 00000000 ___RD C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-21 14:29 - 2013-12-21 14:29 - 00318223 _____ C:\Users\Klaus\Downloads\gmer21-12-13.log
2013-12-21 14:12 - 2013-12-21 14:11 - 00072343 _____ C:\Users\Klaus\Downloads\FRST.txt
2013-12-21 14:12 - 2013-12-21 14:11 - 00029829 _____ C:\Users\Klaus\Downloads\Addition.txt
2013-12-21 14:10 - 2013-12-21 14:10 - 00000470 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-12-21 14:10 - 2013-12-21 14:10 - 00000000 _____ C:\Users\user\defogger_reenable
2013-12-21 13:37 - 2013-12-21 13:37 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-12-21 13:34 - 2013-12-21 13:33 - 00377856 _____ C:\Users\Klaus\Downloads\tg2fpwht.exe
2013-12-21 13:31 - 2013-12-21 13:30 - 00000000 ____D C:\Users\Klaus\Documents\VirenKram
2013-12-21 10:11 - 2013-12-21 10:11 - 00000393 _____ C:\Users\user\Documents\eser.txt
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (4)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (3)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner (2)
2013-12-21 10:11 - 2013-12-21 10:11 - 00000000 ____D C:\Users\user\Documents\Neuer Ordner
2013-12-21 10:10 - 2013-12-21 10:10 - 00000393 _____ C:\Users\user\Desktop\eser.txt
2013-12-20 16:58 - 2013-12-20 16:58 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-12-20 16:58 - 2013-12-20 16:58 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-20 16:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-12-20 14:33 - 2013-12-20 14:33 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-12-20 14:29 - 2012-05-13 18:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 13:19 - 2012-01-02 11:36 - 00000000 ____D C:\Users\Klaus\AppData\Local\Mozilla
2013-12-20 12:52 - 2013-12-20 12:40 - 00002029 _____ C:\Users\Klaus\Desktop\CringStart.lnk
2013-12-20 12:19 - 2013-12-20 12:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-20 11:47 - 2012-03-13 14:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\UseNeXT
2013-12-20 11:38 - 2012-05-28 08:58 - 00000000 ____D C:\Users\Klaus\Documents\UseNeXT
2013-12-19 17:27 - 2013-12-19 17:09 - 00000000 ____D C:\CONTEXT4
2013-12-19 13:14 - 2013-12-19 13:14 - 00002235 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 13:14 - 2011-10-16 21:40 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-19 12:53 - 2012-03-12 12:32 - 00000000 ____D C:\Ergebnis
2013-12-19 12:49 - 2009-07-14 05:45 - 00414376 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-19 12:43 - 2012-01-02 12:30 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-19 12:41 - 2013-12-19 12:39 - 00000000 ____D C:\windows\system32\MRT
2013-12-19 12:37 - 2013-12-19 12:37 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-12-19 12:37 - 2013-12-06 10:40 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-19 12:37 - 2013-12-06 10:40 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-19 11:42 - 2012-01-03 14:56 - 00000000 ____D C:\Users\Klaus\Documents\Visual Studio 2010
2013-12-19 11:37 - 2013-12-19 11:37 - 00000000 ____D C:\windows\system32\RsFx
2013-12-19 11:37 - 2013-12-19 11:34 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\SysWOW64\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1033
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2013-12-19 11:36 - 2012-02-09 08:25 - 00000000 ____D C:\windows\SysWOW64\1033
2013-12-19 11:36 - 2012-01-03 14:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-12-19 11:36 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-12-19 11:35 - 2013-12-19 11:35 - 00000000 ____D C:\windows\PCHEALTH
2013-12-19 11:32 - 2012-01-03 14:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 10.0
2013-12-19 11:24 - 2013-12-19 11:24 - 03277648 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcs_web.exe
2013-12-19 11:23 - 2013-12-19 11:23 - 00673024 _____ ( ) C:\Users\Klaus\Downloads\ZipOpenerSetup.exe
2013-12-19 10:41 - 2013-12-05 15:57 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Foxit Software
2013-12-15 19:07 - 2011-10-16 21:40 - 00004120 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-15 19:07 - 2011-10-16 21:40 - 00003868 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-15 12:21 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-12-09 14:21 - 2013-12-09 13:46 - 00397824 ___SH C:\EUMONBMP.SYS
2013-12-09 13:38 - 2013-12-09 13:38 - 00001244 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 6.1.lnk
2013-12-09 13:35 - 2013-12-09 13:35 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-09 13:33 - 2013-12-09 13:33 - 118962544 _____ ( ) C:\Users\Klaus\Downloads\tb_free.exe
2013-12-09 13:30 - 2013-12-09 13:30 - 00583496 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Users\Klaus\Downloads\tb_free_installer.exe
2013-12-09 13:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-09 13:24 - 2013-12-09 13:24 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vc_web.exe
2013-12-09 13:05 - 2012-01-02 12:40 - 01607480 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-12-09 12:11 - 2013-12-09 12:11 - 00813920 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\VS10sp1-KB983509(1).exe
2013-12-09 12:03 - 2013-12-09 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVAST Software
2013-12-09 11:18 - 2013-12-09 11:18 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcPlus_web.exe
2013-12-09 09:33 - 2013-12-09 09:33 - 00000000 ____D C:\Movtec-Kinegram
2013-12-09 09:33 - 2012-01-13 10:41 - 00000000 ____D C:\Movtec-Raster-INI
2013-12-09 09:30 - 2012-01-23 12:34 - 00000000 ____D C:\MeineProgramme
2013-12-09 08:01 - 2013-03-21 16:13 - 00205320 _____ C:\windows\system32\Drivers\aswVmm.sys
2013-12-09 08:01 - 2013-03-21 16:13 - 00065776 _____ C:\windows\system32\Drivers\aswRvrt.sys
2013-12-09 08:01 - 2012-03-26 11:33 - 00092544 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 01032416 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00409832 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00334648 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2013-12-09 08:01 - 2012-01-11 10:27 - 00084328 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00065264 _____ (AVAST Software) C:\windows\system32\Drivers\aswTdi.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00038984 _____ (AVAST Software) C:\windows\system32\Drivers\aswFsBlk.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00002011 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-09 08:01 - 2012-01-11 10:26 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2013-12-09 07:59 - 2012-01-11 10:27 - 00000000 _____ C:\windows\SysWOW64\config.nt
2013-12-09 07:59 - 2012-01-11 10:26 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-06 10:42 - 2011-12-27 14:57 - 00000000 ____D C:\Users\user\AppData\Local\Adobe
2013-12-06 10:33 - 2013-12-06 10:33 - 00000000 ____D C:\Users\Klaus\Desktop\Alte Firefox-Daten
2013-12-06 09:55 - 2013-12-06 09:54 - 02753344 _____ (AVAST Software) C:\Users\Klaus\Downloads\avast-browser-cleanup.exe
2013-12-06 09:52 - 2012-01-01 13:16 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-06 09:15 - 2013-03-15 07:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-12-06 09:15 - 2011-10-16 21:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-12-06 09:14 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-12-06 09:14 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-12-05 21:35 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\Msdtc
2013-12-05 15:52 - 2013-12-05 15:52 - 00002073 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Users\user\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-12-05 15:37 - 2013-12-05 15:36 - 36047576 _____ (Foxit Corporation ) C:\Users\Klaus\Downloads\FoxitReader604.0719_L10N_Setup.exe
2013-12-05 15:28 - 2013-12-05 15:22 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-12-05 15:21 - 2013-12-05 15:21 - 00002080 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-12-05 15:21 - 2013-12-05 15:21 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2013-12-05 15:17 - 2013-12-05 15:17 - 07080248 _____ C:\Users\Klaus\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-12-05 13:15 - 2013-12-05 13:15 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes
2013-12-05 13:08 - 2012-01-01 13:16 - 00000000 ____D C:\Users\Klaus
2013-12-05 12:47 - 2011-10-16 21:40 - 00002198 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-01 14:42 - 2012-01-05 09:58 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-11-23 19:26 - 2013-12-15 12:33 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-11-23 18:47 - 2013-12-15 12:33 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
Some content of TEMP:
====================
C:\Users\user\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-20 16:02
==================== End Of Log ============================
Grüße Klaus |
|
24.12.2013, 10:33
| #8 |
| /// the machine /// TB-Ausbilder | win7 64bit: malwarebyte meldet InfektionenESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
25.12.2013, 09:38
| #9 |
| | win7 64bit: malwarebyte meldet Infektionen Guten Morgen Schrauber und Frohe Weihnachten, ESET: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=12
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=30cd1ed550048c42866f8f9794f4c42f
# engine=16346
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-20 10:22:06
# local_time=2013-12-20 11:22:06 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 83 994776 164284398 0 0
# compatibility_mode=5893 16776573 100 94 35559 139207976 0 0
# scanned=295589
# found=3
# cleaned=0
# scan_time=22573
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll"
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\Users\All Users\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll"
sh=11445FCF304B2043FF37461C4F34F492EE5BB19C ft=1 fh=21ba350e23674168 vn="multiple threats" ac=I fn="C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UJ1Q8ZPT\yontoosetup[1].exe"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=30cd1ed550048c42866f8f9794f4c42f
# engine=16388
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-24 06:30:45
# local_time=2013-12-24 07:30:45 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 83 1322895 164616117 0 0
# compatibility_mode=5893 16776573 100 94 39587 139539695 0 0
# scanned=280303
# found=1
# cleaned=0
# scan_time=29340
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll.vir"
Code:
ATTFilter Results of screen317's Security Check version 0.99.77 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 Out of date! ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus out of date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java(TM) 6 Update 20 Java version out of Date! Adobe Flash Player 11.9.900.170 Mozilla Firefox (26.0) Google Chrome 26.0.1410.64 Google Chrome 31.0.1650.63 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe ESET ESET Online Scanner OnlineScannerApp.exe Malwarebytes' Anti-Malware mbamscheduler.exe TOSHIBA TOSHIBA Online Product Information TOPI.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-12-2013 01
Ran by Klaus (ATTENTION: The logged in user is not administrator) on USER-TOSH on 25-12-2013 09:29:54
Running from C:\DATEN\VirenKram
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
() C:\Program Files\TOSHIBA\FlashCards\Hotkey\TCrdKBB.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\widimon\widimon.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
(TOSHIBA CORPORATION.) C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
(Microsoft Corporation) C:\Program Files\Microsoft Help Viewer\v1.0\HelpLibAgent.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
() C:\Program Files (x86)\Bazaar\tbzrcache.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12856936 2011-09-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-17] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-04] (Synaptics Incorporated)
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [590256 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [981888 2011-08-03] (TOSHIBA Corporation)
HKLM\...\Run: [BatteryManager] - C:\Program Files\TOSHIBA\Power Saver\TBatmgrTrayicon.exe [285608 2011-09-23] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1544624 2011-08-23] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [712096 2011-08-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710560 2011-06-10] (TOSHIBA Corporation)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-06-01] (Intel(R) Corporation)
HKLM\...\Run: [TosVolRegulator] - C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [TosNC] - C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe [598448 2011-06-28] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38824 2011-06-28] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [Toshiba Registration] - C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-10-16] (Toshiba Europe GmbH)
HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1409424 2011-06-29] (Nero AG)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ITSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-02] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [TOSDCR] - C:\Program Files (x86)\TOSHIBA\PasswordUtility\TOSDCR.exe [169296 2007-08-28] ()
HKLM-x32\...\Run: [ToshibaServiceStation] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-12] (TOSHIBA Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [Reader Application Helper] - C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [898952 2012-11-08] (Sony Corporation)
HKLM-x32\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\1ce4d5d5-40dd-4876-9601-c3e8eda25bfa.exe [180184 2013-12-05] (AVAST Software)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-09] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
MountPoints2: {0fb0090c-7bf3-11e2-a5e9-fa81d59540b0} - E:\SETUP.EXE
MountPoints2: {b98a5166-32d8-11e1-93c9-88532e772d38} - D:\autorun.exe
MountPoints2: {cd3dfb00-f336-11e1-84a3-005056c00008} - D:\shelexec.exe start.htm
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {1A4B5EEF-3962-42D1-8CA8-4A6AF1796564} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {1A4B5EEF-3962-42D1-8CA8-4A6AF1796564} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
SearchScopes: HKLM-x32 - {1A4B5EEF-3962-42D1-8CA8-4A6AF1796564} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{33822A57-F00C-4F8D-BC78-8B65AE4DDCDC}: [NameServer]0.0.0.0
FireFox:
========
FF ProfilePath: C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\fsm3yj81.default-1386322393877
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @sony.com/ReaderDesktop - C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (YouTube) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (avast! WebRep) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\8.0.1483_0
CHR Extension: (Google Wallet) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Klaus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-09] (AVAST Software)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9663848 2011-04-10] (DisplayLink Corp.)
R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [69192 2013-10-11] (CHENGDU YIWO Tech Development Co., Ltd)
R2 Guard Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\GuardAgent.exe [23624 2013-09-04] (CHENGDU YIWO Tech Development Co., Ltd)
R2 irstrtsv; C:\windows\SysWow64\irstrtsv.exe [184320 2011-07-07] (Intel Corporation)
R2 lmhosts; C:\Windows\system32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-06-01] ()
R2 NlaSvc; C:\Windows\System32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013\RpcAgentSrv.exe [68760 2008-11-04] (SiSoftware)
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
R2 vmware-converter-agent; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter-a.exe [423536 2011-08-19] (VMware, Inc.)
R2 vmware-converter-server; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [423536 2011-08-19] (VMware, Inc.)
R2 vmware-converter-worker; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [423536 2011-08-19] (VMware, Inc.)
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [38984 2013-12-09] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [84328 2013-12-09] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [92544 2013-12-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-09] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1032416 2013-12-09] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [409832 2013-12-09] (AVAST Software)
R1 aswTdi; C:\windows\system32\drivers\aswTdi.sys [65264 2013-12-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-09] ()
R3 BioNTDrv; C:\Program Files (x86)\Paragon Software\Backup and Recovery 2012 Free\program\BioNTDrv.SYS [20784 2011-11-17] (Paragon Software GmbH)
S3 bmdrvr; C:\Windows\SysWow64\drivers\bmdrvr.sys [74352 2011-03-15] (VMware, Inc.)
S3 cpuz135; C:\Program Files (x86)\CPUID\PC Wizard 2012\pcwiz_x64.sys [23816 2012-02-07] (CPUID)
S3 dfu; C:\Windows\System32\drivers\MassDfu64.sys [15360 2011-12-12] (Philips PTCL)
S3 DisplayLinkUsbPort; C:\Windows\System32\DRIVERS\DisplayLinkUsbPort_5.6.31854.0.sys [17408 2011-04-10] (hxxp://libusb-win32.sourceforge.net)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [48200 2013-09-04] ()
R2 hhdserhelp; C:\windows\system32\drivers\hhdserhelp.sys [20776 2011-08-16] (HHD Software Ltd.)
R3 hhdserial64; C:\Windows\System32\DRIVERS\hhdserial64.sys [42280 2011-08-16] (HHD Software Ltd.)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 pwdrvio; C:\windows\system32\pwdrvio.sys [19032 2013-01-11] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [12384 2013-01-11] ()
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon)
R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254976 2010-08-31] (Jungo)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27648 2011-03-01] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-24 19:33 - 2013-12-24 19:33 - 00891200 _____ C:\Users\Klaus\Downloads\SecurityCheck.exe
2013-12-24 11:14 - 2013-12-24 11:15 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu(1).exe
2013-12-24 10:02 - 2013-12-24 10:04 - 00047892 _____ C:\windows\SysWOW64\~.tmp
2013-12-23 13:20 - 2013-12-23 13:20 - 00000000 ____D C:\windows\ERUNT
2013-12-23 13:19 - 2013-12-23 13:19 - 01034531 _____ (Thisisu) C:\Users\Klaus\Desktop\JRT.exe
2013-12-23 13:12 - 2013-12-23 13:15 - 00000000 ____D C:\AdwCleaner
2013-12-23 13:11 - 2013-12-23 13:11 - 01233962 _____ C:\Users\Klaus\Desktop\adwcleaner.exe
2013-12-23 10:51 - 2013-12-23 10:51 - 00001132 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-23 10:51 - 2013-12-23 10:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-23 10:51 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-12-23 10:50 - 2013-12-23 10:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(2).exe
2013-12-23 09:27 - 2013-12-23 09:45 - 707306496 _____ C:\Users\Klaus\Downloads\P1000004.MOV
2013-12-22 11:31 - 2013-12-22 11:31 - 00030021 _____ C:\ComboFix.txt
2013-12-22 10:28 - 2011-06-26 07:45 - 00256000 _____ C:\windows\PEV.exe
2013-12-22 10:28 - 2010-11-07 18:20 - 00208896 _____ C:\windows\MBR.exe
2013-12-22 10:28 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2013-12-22 10:28 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2013-12-22 10:28 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2013-12-22 10:28 - 2000-08-31 01:00 - 00098816 _____ C:\windows\sed.exe
2013-12-22 10:28 - 2000-08-31 01:00 - 00080412 _____ C:\windows\grep.exe
2013-12-22 10:28 - 2000-08-31 01:00 - 00068096 _____ C:\windows\zip.exe
2013-12-22 10:27 - 2013-12-22 11:33 - 00000000 ____D C:\Qoobox
2013-12-22 10:27 - 2013-12-22 11:17 - 00000000 ____D C:\windows\erdnt
2013-12-21 15:05 - 2013-12-21 15:05 - 00007972 _____ C:\Users\Klaus\Downloads\gmer21-12-13.7z
2013-12-21 14:43 - 2013-12-21 14:43 - 00000000 ____D C:\Users\Klaus\Downloads\Neuer Ordner
2013-12-21 14:36 - 2013-12-21 14:36 - 00000000 ____D C:\Users\user\AppData\Roaming\AVAST Software
2013-12-21 14:29 - 2013-12-21 14:29 - 00318223 _____ C:\Users\Klaus\Downloads\gmer21-12-13.log
2013-12-21 14:11 - 2013-12-25 09:29 - 00000000 ____D C:\FRST
2013-12-21 14:11 - 2013-12-21 14:12 - 00072343 _____ C:\Users\Klaus\Downloads\FRST.txt
2013-12-21 14:11 - 2013-12-21 14:12 - 00029829 _____ C:\Users\Klaus\Downloads\Addition.txt
2013-12-21 14:10 - 2013-12-21 14:10 - 00000470 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-12-21 14:10 - 2013-12-21 14:10 - 00000000 _____ C:\Users\user\defogger_reenable
2013-12-21 13:37 - 2013-12-21 13:37 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-12-21 13:33 - 2013-12-21 13:34 - 00377856 _____ C:\Users\Klaus\Downloads\tg2fpwht.exe
2013-12-21 13:30 - 2013-12-21 13:31 - 00000000 ____D C:\Users\Klaus\Documents\VirenKram
2013-12-20 16:58 - 2013-12-20 16:58 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-12-20 16:58 - 2013-12-20 16:58 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-20 14:33 - 2013-12-20 14:33 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-12-20 12:40 - 2013-12-20 12:52 - 00002029 _____ C:\Users\Klaus\Desktop\CringStart.lnk
2013-12-20 12:19 - 2013-12-20 12:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-19 17:10 - 2012-06-05 12:35 - 00001963 _____ C:\Users\Klaus\Desktop\DOSBox 0.74.lnk
2013-12-19 17:09 - 2013-12-19 17:27 - 00000000 ____D C:\CONTEXT4
2013-12-19 13:14 - 2013-12-19 13:14 - 00002235 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 12:41 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-19 12:41 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-19 12:41 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-19 12:41 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-19 12:41 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-19 12:41 - 2013-10-25 07:17 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-19 12:41 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-19 12:41 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-19 12:41 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-19 12:41 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-19 12:41 - 2013-10-25 05:07 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-19 12:41 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-19 12:39 - 2013-12-19 12:41 - 00000000 ____D C:\windows\system32\MRT
2013-12-19 12:37 - 2013-12-25 08:54 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-19 11:37 - 2013-12-19 11:37 - 00000000 ____D C:\windows\system32\RsFx
2013-12-19 11:37 - 2009-07-21 01:42 - 00111640 _____ (Microsoft Corporation) C:\windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00079896 _____ (Microsoft Corporation) C:\windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00078872 _____ (Microsoft Corporation) C:\windows\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 11:37 - 2009-07-21 01:42 - 00050200 _____ (Microsoft Corporation) C:\windows\SysWOW64\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.1.2531.0.dll
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\SysWOW64\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1033
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2013-12-19 11:35 - 2013-12-19 11:35 - 00000000 ____D C:\windows\PCHEALTH
2013-12-19 11:34 - 2013-12-19 11:37 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-19 11:24 - 2013-12-19 11:24 - 03277648 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcs_web.exe
2013-12-19 11:23 - 2013-12-19 11:23 - 00673024 _____ ( ) C:\Users\Klaus\Downloads\ZipOpenerSetup.exe
2013-12-15 12:33 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-15 12:33 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-15 12:33 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-15 12:33 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-15 12:33 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-15 12:33 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-15 12:33 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-15 12:33 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-15 12:33 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-15 12:33 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-15 12:33 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-15 12:33 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-15 12:33 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-15 12:33 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-15 12:33 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-15 12:33 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-15 12:33 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-15 12:33 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-15 12:33 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2013-12-09 13:46 - 2013-12-09 14:21 - 00397824 ___SH C:\EUMONBMP.SYS
2013-12-09 13:38 - 2013-12-09 13:38 - 00001244 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 6.1.lnk
2013-12-09 13:38 - 2013-09-04 11:24 - 00189000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\EuFdDisk.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00061000 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\eubakup.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00048200 _____ C:\windows\system32\Drivers\EUBKMON.sys
2013-12-09 13:38 - 2013-09-04 11:24 - 00018504 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\Drivers\eudskacs.sys
2013-12-09 13:36 - 2013-09-04 11:32 - 00024136 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\windows\system32\fbnative.exe
2013-12-09 13:35 - 2013-12-09 13:35 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-09 13:33 - 2013-12-09 13:33 - 118962544 _____ ( ) C:\Users\Klaus\Downloads\tb_free.exe
2013-12-09 13:30 - 2013-12-09 13:30 - 00583496 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Users\Klaus\Downloads\tb_free_installer.exe
2013-12-09 13:24 - 2013-12-09 13:24 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vc_web.exe
2013-12-09 12:11 - 2013-12-09 12:11 - 00813920 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\VS10sp1-KB983509(1).exe
2013-12-09 12:03 - 2013-12-09 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVAST Software
2013-12-09 11:18 - 2013-12-09 11:18 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcPlus_web.exe
2013-12-09 09:33 - 2013-12-09 09:33 - 00000000 ____D C:\Movtec-Kinegram
2013-12-06 13:28 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-12-06 13:28 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-12-06 10:40 - 2013-12-19 12:37 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-06 10:40 - 2013-12-19 12:37 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-06 10:33 - 2013-12-06 10:33 - 00000000 ____D C:\Users\Klaus\Desktop\Alte Firefox-Daten
2013-12-06 09:54 - 2013-12-06 09:55 - 02753344 _____ (AVAST Software) C:\Users\Klaus\Downloads\avast-browser-cleanup.exe
2013-12-05 18:42 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-12-05 18:42 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-12-05 18:42 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll
2013-12-05 18:42 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\credui.dll
2013-12-05 18:42 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-12-05 18:42 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\SysWOW64\SmartcardCredentialProvider.dll
2013-12-05 18:42 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2013-12-05 18:42 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\credui.dll
2013-12-05 18:42 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-12-05 18:42 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2013-12-05 18:42 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2013-12-05 18:42 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2013-12-05 18:42 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2013-12-05 18:42 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2013-12-05 18:42 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2013-12-05 18:42 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2013-12-05 18:42 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-12-05 18:42 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2013-12-05 18:42 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2013-12-05 18:42 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2013-12-05 18:42 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2013-12-05 18:42 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2013-12-05 18:42 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys
2013-12-05 18:42 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2013-12-05 18:42 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2013-12-05 18:42 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll
2013-12-05 18:42 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2013-12-05 18:42 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2013-12-05 18:42 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-12-05 18:42 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-12-05 18:42 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-12-05 18:42 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-12-05 18:42 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-12-05 18:42 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-12-05 18:42 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-12-05 18:42 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-12-05 18:42 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-12-05 18:42 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-12-05 18:42 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-12-05 18:42 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-12-05 18:42 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-12-05 18:42 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2013-12-05 18:42 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\windows\SysWOW64\comctl32.dll
2013-12-05 18:42 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-12-05 18:42 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2013-12-05 18:42 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2013-12-05 18:42 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2013-12-05 18:42 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-12-05 18:42 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\lpk.dll
2013-12-05 18:42 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\windows\SysWOW64\fontsub.dll
2013-12-05 18:42 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\windows\SysWOW64\dciman32.dll
2013-12-05 18:42 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-12-05 18:42 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2013-12-05 18:42 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2013-12-05 18:42 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d11.dll
2013-12-05 18:42 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\windows\system32\d3d11.dll
2013-12-05 18:41 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-12-05 18:41 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2013-12-05 18:41 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-12-05 18:41 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll
2013-12-05 18:41 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll
2013-12-05 18:41 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-12-05 18:41 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-12-05 18:41 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2013-12-05 18:41 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-12-05 18:41 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2013-12-05 18:41 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-12-05 18:41 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-12-05 18:41 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-12-05 18:41 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdh.dll
2013-12-05 18:41 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-12-05 18:41 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\windows\SysWOW64\advapi32.dll
2013-12-05 18:41 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-12-05 18:41 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-12-05 18:41 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-12-05 18:41 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-12-05 18:41 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2013-12-05 18:41 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2013-12-05 18:41 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll
2013-12-05 18:41 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2013-12-05 18:41 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
2013-12-05 18:41 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-05 18:41 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-05 18:41 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-12-05 18:41 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-12-05 18:41 - 2013-07-12 11:40 - 00109824 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBAUDIO.sys
2013-12-05 18:41 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2013-12-05 18:41 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2013-12-05 18:41 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\SysWOW64\WebClnt.dll
2013-12-05 18:41 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\davclnt.dll
2013-12-05 18:41 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2013-12-05 18:41 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-12-05 18:41 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-12-05 18:41 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys
2013-12-05 18:41 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2013-12-05 18:41 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2013-12-05 18:41 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\certenc.dll
2013-12-05 18:41 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\windows\system32\certutil.exe
2013-12-05 18:41 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\windows\SysWOW64\certutil.exe
2013-12-05 18:41 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\certenc.dll
2013-12-05 18:41 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\cryptdlg.dll
2013-12-05 18:41 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptdlg.dll
2013-12-05 18:41 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2013-12-05 18:41 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\windows\SysWOW64\win32spl.dll
2013-12-05 18:41 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2013-12-05 18:41 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2013-12-05 18:40 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-12-05 18:40 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-12-05 18:40 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-12-05 18:40 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\SysWOW64\nshwfp.dll
2013-12-05 18:40 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\SysWOW64\FWPUCLNT.DLL
2013-12-05 18:40 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll
2013-12-05 18:40 - 2013-04-10 00:34 - 01247744 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2013-12-05 18:40 - 2013-04-02 23:51 - 01643520 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2013-12-05 15:57 - 2013-12-19 10:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00002073 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Users\user\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-12-05 15:36 - 2013-12-05 15:37 - 36047576 _____ (Foxit Corporation ) C:\Users\Klaus\Downloads\FoxitReader604.0719_L10N_Setup.exe
2013-12-05 15:22 - 2013-12-05 15:28 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-12-05 15:21 - 2013-12-05 15:21 - 00002080 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-12-05 15:21 - 2013-12-05 15:21 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2013-12-05 15:17 - 2013-12-05 15:17 - 07080248 _____ C:\Users\Klaus\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-12-05 13:15 - 2013-12-05 13:15 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes
==================== One Month Modified Files and Folders =======
2013-12-25 09:29 - 2013-12-21 14:11 - 00000000 ____D C:\FRST
2013-12-25 09:29 - 2012-01-10 11:11 - 03454408 _____ C:\Users\Klaus\Documents\.bzr.log
2013-12-25 09:12 - 2011-10-16 21:40 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-25 08:54 - 2013-12-19 12:37 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-25 03:49 - 2011-11-16 00:56 - 01125237 _____ C:\windows\WindowsUpdate.log
2013-12-24 19:33 - 2013-12-24 19:33 - 00891200 _____ C:\Users\Klaus\Downloads\SecurityCheck.exe
2013-12-24 19:12 - 2011-10-16 21:40 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-24 12:36 - 2012-05-18 11:33 - 00000402 _____ C:\windows\Tasks\FreeFileViewerUpdateChecker.job
2013-12-24 11:15 - 2013-12-24 11:14 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu(1).exe
2013-12-24 11:15 - 2012-03-09 14:02 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\vlc
2013-12-24 11:02 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-24 11:02 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-24 10:58 - 2009-07-14 05:51 - 00092311 _____ C:\windows\setupact.log
2013-12-24 10:56 - 2012-02-09 15:16 - 00017408 _____ C:\Users\Klaus\AppData\Local\WebpageIcons.db
2013-12-24 10:04 - 2013-12-24 10:02 - 00047892 _____ C:\windows\SysWOW64\~.tmp
2013-12-23 16:01 - 2013-03-26 11:50 - 00000978 _____ C:\windows\Tasks\Paragon Archive name arc_260313104821816.job
2013-12-23 15:57 - 2011-02-11 09:21 - 00769312 _____ C:\windows\system32\perfh007.dat
2013-12-23 15:57 - 2011-02-11 09:21 - 00175692 _____ C:\windows\system32\perfc007.dat
2013-12-23 15:57 - 2009-07-14 06:13 - 01816312 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-23 13:33 - 2012-05-12 11:27 - 00000000 ____D C:\ProgramData\VMware
2013-12-23 13:33 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-12-23 13:20 - 2013-12-23 13:20 - 00000000 ____D C:\windows\ERUNT
2013-12-23 13:19 - 2013-12-23 13:19 - 01034531 _____ (Thisisu) C:\Users\Klaus\Desktop\JRT.exe
2013-12-23 13:15 - 2013-12-23 13:12 - 00000000 ____D C:\AdwCleaner
2013-12-23 13:11 - 2013-12-23 13:11 - 01233962 _____ C:\Users\Klaus\Desktop\adwcleaner.exe
2013-12-23 13:08 - 2010-11-21 04:47 - 00058346 _____ C:\windows\PFRO.log
2013-12-23 13:07 - 2013-04-26 07:55 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\PerformerSoft
2013-12-23 10:51 - 2013-12-23 10:51 - 00001132 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-23 10:51 - 2013-12-23 10:51 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-23 10:50 - 2013-12-23 10:50 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(2).exe
2013-12-23 09:45 - 2013-12-23 09:27 - 707306496 _____ C:\Users\Klaus\Downloads\P1000004.MOV
2013-12-22 11:33 - 2013-12-22 10:27 - 00000000 ____D C:\Qoobox
2013-12-22 11:32 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-12-22 11:31 - 2013-12-22 11:31 - 00030021 _____ C:\ComboFix.txt
2013-12-22 11:21 - 2012-01-01 13:16 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-22 11:17 - 2013-12-22 10:27 - 00000000 ____D C:\windows\erdnt
2013-12-22 10:49 - 2009-07-14 03:34 - 00000215 _____ C:\windows\system.ini
2013-12-21 15:05 - 2013-12-21 15:05 - 00007972 _____ C:\Users\Klaus\Downloads\gmer21-12-13.7z
2013-12-21 14:58 - 2012-04-19 08:17 - 00000000 ____D C:\windows\Minidump
2013-12-21 14:58 - 2009-07-14 06:08 - 00032632 _____ C:\windows\Tasks\SCHEDLGU.TXT
2013-12-21 14:43 - 2013-12-21 14:43 - 00000000 ____D C:\Users\Klaus\Downloads\Neuer Ordner
2013-12-21 14:40 - 2012-01-12 18:27 - 00000000 ____D C:\DATEN
2013-12-21 14:36 - 2013-12-21 14:36 - 00000000 ____D C:\Users\user\AppData\Roaming\AVAST Software
2013-12-21 14:29 - 2013-12-21 14:29 - 00318223 _____ C:\Users\Klaus\Downloads\gmer21-12-13.log
2013-12-21 14:12 - 2013-12-21 14:11 - 00072343 _____ C:\Users\Klaus\Downloads\FRST.txt
2013-12-21 14:12 - 2013-12-21 14:11 - 00029829 _____ C:\Users\Klaus\Downloads\Addition.txt
2013-12-21 14:10 - 2013-12-21 14:10 - 00000470 _____ C:\Users\Klaus\Downloads\defogger_disable.log
2013-12-21 14:10 - 2013-12-21 14:10 - 00000000 _____ C:\Users\user\defogger_reenable
2013-12-21 13:37 - 2013-12-21 13:37 - 00050477 _____ C:\Users\Klaus\Downloads\Defogger.exe
2013-12-21 13:34 - 2013-12-21 13:33 - 00377856 _____ C:\Users\Klaus\Downloads\tg2fpwht.exe
2013-12-21 13:31 - 2013-12-21 13:30 - 00000000 ____D C:\Users\Klaus\Documents\VirenKram
2013-12-20 16:58 - 2013-12-20 16:58 - 02347384 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_enu.exe
2013-12-20 16:58 - 2013-12-20 16:58 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-20 16:10 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-12-20 14:33 - 2013-12-20 14:33 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Klaus\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-12-20 14:29 - 2012-05-13 18:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-20 13:19 - 2012-01-02 11:36 - 00000000 ____D C:\Users\Klaus\AppData\Local\Mozilla
2013-12-20 12:52 - 2013-12-20 12:40 - 00002029 _____ C:\Users\Klaus\Desktop\CringStart.lnk
2013-12-20 12:19 - 2013-12-20 12:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-20 11:47 - 2012-03-13 14:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\UseNeXT
2013-12-20 11:38 - 2012-05-28 08:58 - 00000000 ____D C:\Users\Klaus\Documents\UseNeXT
2013-12-19 17:27 - 2013-12-19 17:09 - 00000000 ____D C:\CONTEXT4
2013-12-19 13:14 - 2013-12-19 13:14 - 00002235 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-19 13:14 - 2011-10-16 21:40 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-19 12:53 - 2012-03-12 12:32 - 00000000 ____D C:\Ergebnis
2013-12-19 12:49 - 2009-07-14 05:45 - 00414376 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-19 12:43 - 2012-01-02 12:30 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-19 12:41 - 2013-12-19 12:39 - 00000000 ____D C:\windows\system32\MRT
2013-12-19 12:37 - 2013-12-06 10:40 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-19 12:37 - 2013-12-06 10:40 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-19 11:42 - 2012-01-03 14:56 - 00000000 ____D C:\Users\Klaus\Documents\Visual Studio 2010
2013-12-19 11:37 - 2013-12-19 11:37 - 00000000 ____D C:\windows\system32\RsFx
2013-12-19 11:37 - 2013-12-19 11:34 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\SysWOW64\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1033
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\windows\system32\1031
2013-12-19 11:36 - 2013-12-19 11:36 - 00000000 ____D C:\Program Files\Microsoft Visual Studio 9.0
2013-12-19 11:36 - 2012-02-09 08:25 - 00000000 ____D C:\windows\SysWOW64\1033
2013-12-19 11:36 - 2012-01-03 14:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-12-19 11:36 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-12-19 11:35 - 2013-12-19 11:35 - 00000000 ____D C:\windows\PCHEALTH
2013-12-19 11:32 - 2012-01-03 14:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 10.0
2013-12-19 11:24 - 2013-12-19 11:24 - 03277648 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcs_web.exe
2013-12-19 11:23 - 2013-12-19 11:23 - 00673024 _____ ( ) C:\Users\Klaus\Downloads\ZipOpenerSetup.exe
2013-12-19 10:41 - 2013-12-05 15:57 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Foxit Software
2013-12-15 12:21 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2013-12-09 14:21 - 2013-12-09 13:46 - 00397824 ___SH C:\EUMONBMP.SYS
2013-12-09 13:38 - 2013-12-09 13:38 - 00001244 _____ C:\Users\Public\Desktop\EaseUS Todo Backup Free 6.1.lnk
2013-12-09 13:35 - 2013-12-09 13:35 - 00000000 ____D C:\Program Files (x86)\EaseUS
2013-12-09 13:33 - 2013-12-09 13:33 - 118962544 _____ ( ) C:\Users\Klaus\Downloads\tb_free.exe
2013-12-09 13:30 - 2013-12-09 13:30 - 00583496 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Users\Klaus\Downloads\tb_free_installer.exe
2013-12-09 13:28 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-09 13:24 - 2013-12-09 13:24 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vc_web.exe
2013-12-09 13:05 - 2012-01-02 12:40 - 01607480 _____ C:\windows\SysWOW64\PerfStringBackup.INI
2013-12-09 12:11 - 2013-12-09 12:11 - 00813920 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\VS10sp1-KB983509(1).exe
2013-12-09 12:03 - 2013-12-09 12:03 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\AVAST Software
2013-12-09 11:18 - 2013-12-09 11:18 - 03349320 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\vcPlus_web.exe
2013-12-09 09:33 - 2013-12-09 09:33 - 00000000 ____D C:\Movtec-Kinegram
2013-12-09 09:33 - 2012-01-13 10:41 - 00000000 ____D C:\Movtec-Raster-INI
2013-12-09 09:30 - 2012-01-23 12:34 - 00000000 ____D C:\MeineProgramme
2013-12-09 08:01 - 2013-03-21 16:13 - 00205320 _____ C:\windows\system32\Drivers\aswVmm.sys
2013-12-09 08:01 - 2013-03-21 16:13 - 00065776 _____ C:\windows\system32\Drivers\aswRvrt.sys
2013-12-09 08:01 - 2012-03-26 11:33 - 00092544 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 01032416 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00409832 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00334648 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2013-12-09 08:01 - 2012-01-11 10:27 - 00084328 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00065264 _____ (AVAST Software) C:\windows\system32\Drivers\aswTdi.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00038984 _____ (AVAST Software) C:\windows\system32\Drivers\aswFsBlk.sys
2013-12-09 08:01 - 2012-01-11 10:27 - 00002011 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-09 08:01 - 2012-01-11 10:26 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2013-12-09 07:59 - 2012-01-11 10:27 - 00000000 _____ C:\windows\SysWOW64\config.nt
2013-12-09 07:59 - 2012-01-11 10:26 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-06 10:33 - 2013-12-06 10:33 - 00000000 ____D C:\Users\Klaus\Desktop\Alte Firefox-Daten
2013-12-06 09:55 - 2013-12-06 09:54 - 02753344 _____ (AVAST Software) C:\Users\Klaus\Downloads\avast-browser-cleanup.exe
2013-12-06 09:52 - 2012-01-01 13:16 - 00000000 ___RD C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-06 09:15 - 2013-03-15 07:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-12-06 09:15 - 2011-10-16 21:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-12-06 09:14 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-12-06 09:14 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-12-05 21:35 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\Msdtc
2013-12-05 15:52 - 2013-12-05 15:52 - 00002073 _____ C:\Users\Public\Desktop\Foxit Reader.lnk
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Users\user\AppData\Roaming\Foxit Software
2013-12-05 15:52 - 2013-12-05 15:52 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2013-12-05 15:37 - 2013-12-05 15:36 - 36047576 _____ (Foxit Corporation ) C:\Users\Klaus\Downloads\FoxitReader604.0719_L10N_Setup.exe
2013-12-05 15:28 - 2013-12-05 15:22 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2013-12-05 15:21 - 2013-12-05 15:21 - 00002080 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-12-05 15:21 - 2013-12-05 15:21 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2013-12-05 15:17 - 2013-12-05 15:17 - 07080248 _____ C:\Users\Klaus\Downloads\MyPhoneExplorer_Setup_1.8.5.exe
2013-12-05 13:15 - 2013-12-05 13:15 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Malwarebytes
2013-12-05 13:08 - 2012-01-01 13:16 - 00000000 ____D C:\Users\Klaus
2013-12-05 12:47 - 2011-10-16 21:40 - 00002198 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-01 14:42 - 2012-01-05 09:58 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
Some content of TEMP:
====================
C:\Users\Klaus\AppData\Local\Temp\dbi0gln2.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== End Of Log ============================
Probleme habe ich nicht festgestellt, aber ESET hatte noch einen Fund? Grüße Klaus |
|
25.12.2013, 15:07
| #10 |
| /// the machine /// TB-Ausbilder | win7 64bit: malwarebyte meldet Infektionen Der ist schon in Quarantäne. Windows und Java updaten. Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
26.12.2013, 12:51
| #11 |
| | win7 64bit: malwarebyte meldet Infektionen Hallo Schrauber, vielen Dank für die schnelle Hilfe, auch an den Feiertagen. Zwei Fragen noch: mbam: kann ich herunterladen und installieren, dann ist es deutsch und Aktualisierung ist enabled. Wenn ich es dann erneut starte, ist es englisch und update ist disabled. Ist das normal? 2. auf den von Dir empfohlenen Seiten gibt es Hinweise auf z.B. speedMyPc und so. ist so etwas seriös und zu empfehlen? Ansonsten habe ich Deine Empfehlungen hier eingebaut, bis auf MVPs hosts file. Das muss ich mir noch genauer anschauen, die Anleitung ist für mich etwas unübersichtlich. Grüße Klaus |
|
27.12.2013, 10:33
| #12 | ||
| /// the machine /// TB-Ausbilder | win7 64bit: malwarebyte meldet InfektionenZitat:
Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.12.2013, 14:03
| #13 |
| | win7 64bit: malwarebyte meldet Infektionen Hallo Schrauber, Das mit dem mbam werde ich noch checken. Ich denke, es ist jetzt alles ok und wir können dieses Thema schließen. vielen, vielen Dank für Deine Hilfe, besonders auch während der Festtage. Grüße Klaus |
|
28.12.2013, 12:41
| #14 |
| /// the machine /// TB-Ausbilder | win7 64bit: malwarebyte meldet Infektionen Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
Linear-Darstellung
