BOO /TDss.O im Masterbootsektor gefunden nach Installation von Windows 7 auf einer zweiten internen Festplatte

cosinus · 05.01.2014, 21:18

Wieso willste du zweimal Win7 eigentlich haben?

Versteh ich nicht.

uagla · 05.01.2014, 21:34

Ich will später die SSD ausbauen in den Laptop einbauen. Jetzt aber die Vorteile der SSD am PC nutzen.

Die Frage ist, ob formatieren des alten Systems ausreicht. Ist nicht schon das neue System auf der SSD verseucht? Woher dann die ganzen Bluescreens und komischen Aktivitäten oder kann das eine Folge von Combofix sein?

cosinus · 05.01.2014, 21:39

Zitat:

Ich will später die SSD ausbauen in den Laptop einbauen.

Und dann von anderer Hardware diese Windows-Installation booten zu lassen?

Das ist eine ganz schlechte Idee. Du wirst ein instablies System haben, mit Treibern ausgestattet die für eine ganz andere Hardware bestimmt ist.

uagla · 05.01.2014, 21:46

Die Treiber müssten sich doch nachinstallieren lassen. Oder seh ich das falsch?

cosinus · 05.01.2014, 22:01

Nein, wenn du die SSD ins Notebook steckst, wirst du Windows darauf neu installieren müssen, alles andere ist ziemlicher Murks. Hab ich ja erwähnt, dass du sonst sehr wahrscheinlich ein instabiles System hast

uagla · 06.01.2014, 09:56

So ich habe meine alte Installation gelöscht. Nun habe ich nur noch ein Windows 7 System auf dem PC.

Was ich mit der SSd später machen werde ist jetzt nicht von Bedeutung. Sollte es nicht so funktionieren, dann werde ich es neu installieren müssen. Daran soll es nicht scheitern.

Was ich jetzt brauche ist ein funktionierendes Windows 7 System auf meinem PC. Aber das ist nicht mehr der Fall. Die Browser funktionieren nur noch sehr langsam bis gar nicht, Firefox stürzt dauernd ab, und immer wieder erscheint ein Bluescreen.

Was wäre als nächstes dran? Können diese Probleme von Combofix herrühren? Vorher hat es nämlich viel besser funktioniert. Was wäre der nächste sinnvolle Schritt?

Vielen Dank für die Hilfe bis jetzt. Könntest du mir auch weiterhin helfen?

cosinus · 06.01.2014, 10:10

Diese Datei, die TDSS-Killer "gefunden" hat stammt hiervon

Zitat:

() C:\Program Files\CE\CovenantEyesCommService.exe
(CovenantEyes) C:\Program Files\CE\CovenantEyesProxy.exe

Das mal so am Rande.

Adware/Junkware/Toolbars entfernen

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

uagla · 06.01.2014, 10:28

AdW Cleaner

Code:

ATTFilter

# AdwCleaner v3.016 - Bericht erstellt am 06/01/2014 um 10:18:54
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (32 bits)
# Benutzername : Erich - ERICH-PC
# Gestartet von : F:\Desktop\Reinigung\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PCProxy.DataContainer
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9DC8FA51-B596-4F77-802C-5B295919C205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9B7B034B-944A-4261-B487-862F642F7615}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE91F9CE-0900-4E2A-B673-F3F6E4FC54D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Erich\AppData\Roaming\Mozilla\Firefox\Profiles\dbkbwl9k.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [2081 octets] - [06/01/2014 10:17:42]
AdwCleaner[S0].txt - [2002 octets] - [06/01/2014 10:18:54]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2062 octets] ##########

JRT

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.9 (01.01.2014:1)
OS: Windows 7 Professional x86
Ran by Erich on 06.01.2014 at 10:20:29,02
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.01.2014 at 10:23:44,48
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-01-2014
Ran by Erich (administrator) on ERICH-PC on 06-01-2014 10:24:56
Running from F:\Desktop\Reinigung
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
() C:\Program Files\CE\CovenantEyesCommService.exe
(CovenantEyes) C:\Program Files\CE\CovenantEyesProxy.exe
() C:\Windows\System32\authServer.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files\CE\CovenantEyes.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
() C:\Program Files\CE\CovenantEyesHelper.exe
(CANON INC.) C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Dropbox, Inc.) C:\Users\Erich\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Covenant Eyes] - C:\Program Files\CE\CovenantEyes.exe [7065104 2013-12-05] ()
HKLM\...\Run: [AdobeCS4ServiceManager] - C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe [37232 2008-06-12] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe [640376 2008-06-11] (Adobe Systems Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [IJNetworkScanUtility] - C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-23] (CANON INC.)
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [354304 2009-07-14] (Microsoft Corporation)
Startup: C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Erich\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF8319B656F08CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
BHO: Covenant Eyes for Internet Explorer - {927BD2E1-2287-49D2-AE71-95F492CE662E} - C:\Program Files\CE\extensions\ie\x86\ceie-0.7.0.dll (Covenant Eyes)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Winsock: Catalog9 01 C:\Windows\system32\CovenantEyesProxy.dll [322584] (CovenantEyes)
Winsock: Catalog9 02 C:\Windows\system32\CovenantEyesProxy.dll [322584] (CovenantEyes)
Winsock: Catalog9 03 C:\Windows\system32\CovenantEyesProxy.dll [322584] (CovenantEyes)
Winsock: Catalog9 04 C:\Windows\system32\CovenantEyesProxy.dll [322584] (CovenantEyes)
Winsock: Catalog9 23 C:\Windows\system32\CovenantEyesProxy.dll [322584] (CovenantEyes)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Erich\AppData\Roaming\Mozilla\Firefox\Profiles\dbkbwl9k.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF Plugin: @canon.com/EPPEX - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Erich\AppData\Roaming\Mozilla\Firefox\Profiles\dbkbwl9k.default\Extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi
FF Extension: Adblock Plus - C:\Users\Erich\AppData\Roaming\Mozilla\Firefox\Profiles\dbkbwl9k.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [firefox-integrated-extension@covenanteyes.com] - C:\Program Files\CE\extensions\firefox\firefox-integrated-extension@covenanteyes.com
FF Extension: Covenant Eyes for Firefox - C:\Program Files\CE\extensions\firefox\firefox-integrated-extension@covenanteyes.com
FF HKLM\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R2 Auth Service; C:\Windows\system32\authServer.exe [3204104 2013-12-05] ()
R2 CovenantEyesCommService; C:\Program Files\CE\CovenantEyesCommService.exe [4510240 2013-12-05] ()
R2 CovenantEyesProxy; C:\Program Files\CE\CovenantEyesProxy.exe [3654168 2013-10-04] (CovenantEyes)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69240 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 cewd32; C:\Windows\system32\Drivers\cewd32.sys [26624 2013-10-04] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-12-09] (Avira GmbH)
S3 catchme; \??\F:\Temp\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-06 10:20 - 2014-01-06 10:20 - 00000000 ____D C:\Windows\ERUNT
2014-01-06 10:17 - 2014-01-06 10:18 - 00000000 ____D C:\AdwCleaner
2014-01-06 09:30 - 2014-01-06 09:30 - 00145080 _____ C:\Windows\Minidump\010614-20748-01.dmp
2014-01-05 11:44 - 2014-01-05 11:44 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-05 11:44 - 2014-01-05 11:44 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-05 11:44 - 2014-01-05 11:44 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-01-05 11:44 - 2014-01-05 11:44 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-05 11:44 - 2014-01-05 11:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-05 11:44 - 2014-01-05 11:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-05 11:44 - 2014-01-05 11:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00240496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-05 11:44 - 2014-01-05 11:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00187752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-01-05 11:44 - 2014-01-05 11:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-05 11:44 - 2014-01-05 11:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-01-05 00:00 - 2014-01-05 00:00 - 00145144 _____ C:\Windows\Minidump\010514-14398-01.dmp
2014-01-04 16:55 - 2014-01-04 16:55 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-04 15:23 - 2014-01-04 15:23 - 00016336 _____ C:\ComboFix.txt
2014-01-04 15:04 - 2014-01-04 15:05 - 00000000 ____D C:\Program Files\WhoCrashed
2014-01-04 15:04 - 2014-01-04 15:04 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NirSoft BlueScreenView
2014-01-04 15:04 - 2014-01-04 15:04 - 00000000 ____D C:\Program Files\NirSoft
2014-01-04 14:59 - 2014-01-04 14:59 - 00000000 ____D C:\Program Files\7-Zip
2014-01-04 14:44 - 2014-01-04 14:44 - 00145136 _____ C:\Windows\Minidump\010414-13587-01.dmp
2014-01-04 14:09 - 2014-01-04 15:23 - 00000000 ____D C:\Qoobox
2014-01-04 14:09 - 2014-01-04 14:18 - 00000000 ____D C:\Windows\erdnt
2014-01-04 14:09 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-04 14:09 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-04 14:09 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-04 14:09 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-04 14:09 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-04 14:09 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-04 14:09 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-04 14:09 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-04 12:38 - 2014-01-04 12:41 - 00004301 _____ C:\Windows\IE9_main.log
2014-01-04 12:23 - 2014-01-05 11:50 - 00032077 _____ C:\Windows\IE11_main.log
2014-01-04 12:18 - 2014-01-04 12:18 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-01-04 12:16 - 2014-01-04 12:16 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-01-04 12:15 - 2014-01-04 17:00 - 00029943 _____ C:\Windows\IE10_main.log
2014-01-04 11:58 - 2014-01-06 09:30 - 167324543 _____ C:\Windows\MEMORY.DMP
2014-01-04 11:58 - 2014-01-06 09:30 - 00000000 ____D C:\Windows\Minidump
2014-01-04 11:58 - 2014-01-04 11:58 - 00145136 _____ C:\Windows\Minidump\010414-18985-01.dmp
2014-01-04 11:26 - 2014-01-04 11:26 - 00000000 _____ C:\Users\Erich\defogger_reenable
2014-01-04 10:53 - 2014-01-04 11:14 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-04 10:53 - 2014-01-04 11:06 - 00104664 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-01-04 10:53 - 2014-01-04 10:53 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 10:51 - 2014-01-06 10:24 - 00000000 ____D C:\FRST
2014-01-04 10:50 - 2014-01-04 11:20 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-04 10:39 - 2013-08-02 02:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-01-04 10:39 - 2013-08-02 02:49 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-01-04 10:39 - 2013-08-02 02:49 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 01:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-01-04 10:39 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-01-04 10:39 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-01-04 10:39 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-01-04 10:39 - 2013-06-15 04:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-01-04 10:39 - 2013-02-27 06:05 - 00101720 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-01-04 10:39 - 2013-02-27 05:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-01-04 10:39 - 2013-02-27 05:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-01-04 10:39 - 2013-02-27 05:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-04 10:39 - 2013-02-27 05:49 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-01-04 10:39 - 2012-11-28 23:57 - 00047720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys
2014-01-04 10:39 - 2012-11-28 23:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll
2014-01-04 10:39 - 2012-11-28 23:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2014-01-04 10:39 - 2011-04-22 20:14 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-01-04 10:39 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-01-04 10:39 - 2011-03-11 06:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-01-04 10:39 - 2011-03-11 06:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll
2014-01-04 10:39 - 2011-02-23 05:47 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-01-04 10:39 - 2011-02-23 05:47 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-01-04 10:39 - 2011-02-23 05:47 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-01-04 10:39 - 2011-02-23 05:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2014-01-04 10:31 - 2014-01-04 10:32 - 00002562 _____ C:\Windows\diagwrn.xml
2014-01-04 10:31 - 2014-01-04 10:32 - 00001908 _____ C:\Windows\diagerr.xml
2014-01-03 14:30 - 2014-01-03 15:01 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Swiss Academic Software
2014-01-03 14:19 - 2014-01-03 14:19 - 00000040 _____ C:\Autoconfig.ini
2014-01-03 14:19 - 2014-01-03 14:19 - 00000000 ____D C:\ProgramData\Samsung
2014-01-03 14:18 - 2014-01-03 14:18 - 00000000 ____D C:\Program Files\Samsung
2014-01-03 14:18 - 2013-06-01 06:13 - 01571160 ____N C:\Windows\TotalUninstaller.exe
2014-01-03 14:18 - 2013-05-10 10:48 - 00162136 _____ C:\Windows\system32\spe__ci.exe
2014-01-03 14:18 - 2012-11-17 09:29 - 00000363 _____ C:\Windows\system32\spe__l.smt
2014-01-03 14:18 - 2011-04-11 06:26 - 00024064 _____ () C:\Windows\system32\spe__l.dll
2014-01-03 14:18 - 2010-10-20 09:49 - 00065536 _____ (SS) C:\Windows\system32\spe__ci.dll
2014-01-03 14:16 - 2014-01-03 14:16 - 00000000 ____D C:\ProgramData\Swiss Academic Software
2014-01-03 14:15 - 2014-01-03 14:15 - 00000000 ____D C:\Program Files\Citavi 4
2014-01-03 14:11 - 2014-01-03 14:11 - 00000000 ____D C:\ProgramData\Canon IJ Network Tool
2014-01-03 14:11 - 2009-09-17 09:12 - 00303104 _____ (CANON INC.) C:\Windows\system32\CNC640L.dll
2014-01-03 14:11 - 2009-04-03 16:00 - 01310720 _____ (CANON INC.) C:\Windows\system32\CNC640C.dll
2014-01-03 14:11 - 2009-04-03 15:59 - 00110592 _____ (CANON INC.) C:\Windows\system32\CNC640I.dll
2014-01-03 14:11 - 2009-04-03 15:57 - 00106496 _____ (CANON INC.) C:\Windows\system32\CNC640U.dll
2014-01-03 14:11 - 2008-12-25 16:23 - 00013312 _____ C:\Windows\system32\CNC173FD.TBL
2014-01-03 14:11 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\system32\CNHMCA.dll
2014-01-03 14:10 - 2014-01-03 14:10 - 00000000 ____D C:\Windows\system32\STRING
2014-01-03 14:10 - 2012-06-14 17:18 - 00366592 _____ (CANON INC.) C:\Windows\system32\CNMNPPM.DLL
2014-01-03 14:10 - 2012-06-14 17:18 - 00035840 _____ (CANON INC.) C:\Windows\system32\CNMNPUI.DLL
2014-01-03 13:18 - 2014-01-06 10:20 - 00000000 ___RD C:\Users\Erich\Dropbox
2014-01-03 13:15 - 2014-01-03 13:15 - 00000000 ____D C:\Windows\system32\Lang
2014-01-03 13:15 - 2014-01-03 13:15 - 00000000 ____D C:\Program Files\Intel
2014-01-03 13:15 - 2009-09-23 11:50 - 00398336 _____ (Intel(R) Corporation) C:\Windows\system32\TVWizudlg.exe
2014-01-03 13:15 - 2009-09-23 11:49 - 00140288 _____ () C:\Windows\system32\igfxtvcx.dll
2014-01-03 13:15 - 2009-09-23 11:47 - 00121232 _____ C:\Windows\system32\IScrNB.bmp
2014-01-03 13:14 - 2014-01-03 13:14 - 00000000 ____D C:\ProgramData\CovenantEyes
2014-01-03 12:51 - 2014-01-03 12:51 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-03 12:50 - 2014-01-04 15:13 - 00000000 ___RD C:\Users\Erich\SkyDrive
2014-01-03 12:50 - 2014-01-03 12:50 - 00002180 _____ C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-01-03 12:50 - 2014-01-03 12:50 - 00002082 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-01-03 12:50 - 2014-01-03 12:50 - 00002082 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-01-03 12:50 - 2014-01-03 12:50 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive
2014-01-03 12:50 - 2014-01-03 12:50 - 00000000 ____D C:\Program Files\Microsoft SkyDrive
2014-01-03 12:49 - 2014-01-06 10:20 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Dropbox
2014-01-03 12:47 - 2014-01-03 12:47 - 00000000 ___HD C:\Windows\system32\CanonIJ Uninstaller Information
2014-01-03 12:47 - 2014-01-03 12:47 - 00000000 ___HD C:\ProgramData\CanonBJ
2014-01-03 12:47 - 2014-01-03 12:47 - 00000000 ___HD C:\Program Files\CanonBJ
2014-01-03 12:47 - 2010-04-24 05:00 - 00272384 _____ (CANON INC.) C:\Windows\system32\CNMLMA2.DLL
2014-01-03 12:47 - 2009-03-18 09:09 - 00178176 _____ (CANON INC.) C:\Windows\system32\CNMIUA2.DLL
2014-01-03 12:46 - 2014-01-03 14:11 - 00000000 ____D C:\Program Files\Canon
2014-01-03 12:33 - 2014-01-03 12:33 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Avira
2014-01-03 12:33 - 2014-01-03 12:33 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2014-01-03 12:33 - 2014-01-03 12:33 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2014-01-03 12:31 - 2014-01-03 12:31 - 00000000 ____D C:\ProgramData\Avira
2014-01-03 12:31 - 2014-01-03 12:31 - 00000000 ____D C:\Program Files\Avira
2014-01-03 12:31 - 2013-12-09 11:37 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-03 12:31 - 2013-12-09 11:37 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-03 12:31 - 2013-12-09 11:37 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-03 12:31 - 2013-12-09 11:37 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-03 12:31 - 2013-12-09 11:37 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys
2014-01-03 12:19 - 2014-01-03 12:19 - 00000000 ____D C:\ProgramData\ALM
2014-01-03 12:19 - 2008-04-07 05:38 - 00022872 ____R (Adobe Systems Inc.) C:\Windows\system32\AdobePDFUI.dll
2014-01-03 12:16 - 2014-01-03 12:16 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Macromedia
2014-01-03 12:16 - 2014-01-03 12:16 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2014-01-03 12:14 - 2014-01-03 13:15 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Adobe
2014-01-03 12:14 - 2014-01-03 12:32 - 00000000 ____D C:\Program Files\Adobe
2014-01-03 12:14 - 2014-01-03 12:19 - 00000000 ____D C:\ProgramData\Adobe
2014-01-03 12:13 - 2014-01-03 12:13 - 00000000 ____D C:\Windows\system32\Macromed
2014-01-03 12:13 - 2014-01-03 12:13 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared
2014-01-03 12:08 - 2014-01-03 15:11 - 00000000 ____D C:\Program Files\Common Files\Adobe
2014-01-03 12:05 - 2014-01-03 12:05 - 00000000 ____D C:\Program Files\capella-software
2014-01-03 11:51 - 2014-01-03 12:04 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Mozilla
2014-01-03 11:51 - 2014-01-03 11:51 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-03 11:51 - 2014-01-03 11:51 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2014-01-03 11:51 - 2014-01-03 11:51 - 00000000 ____D C:\Program Files\Mozilla Firefox
2014-01-03 11:46 - 2014-01-03 14:13 - 00000000 ____D C:\Program Files\Microsoft.NET
2014-01-03 11:46 - 2014-01-03 11:46 - 00000000 ____D C:\Windows\PCHEALTH
2014-01-03 11:46 - 2014-01-03 11:46 - 00000000 ____D C:\Program Files\Microsoft Works
2014-01-03 11:46 - 2014-01-03 11:46 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2014-01-03 11:46 - 2014-01-03 11:46 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2014-01-03 11:46 - 2013-11-26 12:25 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-03 11:40 - 2014-01-06 10:14 - 00005848 _____ C:\Windows\system32\CovenantEyesProxy.ini
2014-01-03 11:40 - 2014-01-06 10:14 - 00003096 _____ C:\Windows\system32\CovenantEyesProxyOff.ini
2014-01-03 11:40 - 2014-01-05 00:00 - 00000794 __RSH C:\ProgramData\ntuser.pol
2014-01-03 11:40 - 2014-01-04 12:52 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-03 11:40 - 2014-01-03 13:14 - 00000000 ____D C:\Program Files\CE
2014-01-03 11:40 - 2014-01-03 11:46 - 00000000 ____D C:\Program Files\Microsoft Office
2014-01-03 11:40 - 2014-01-03 11:40 - 00009626 _____ C:\ceInstall.log
2014-01-03 11:40 - 2014-01-03 11:40 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2014-01-03 11:40 - 2013-12-05 10:32 - 03204104 _____ C:\Windows\system32\authServer.exe
2014-01-03 11:40 - 2013-10-04 13:19 - 00322584 _____ (CovenantEyes) C:\Windows\system32\CovenantEyesProxy.dll
2014-01-03 11:40 - 2013-10-04 13:19 - 00026624 _____ C:\Windows\system32\Drivers\cewd32.sys
2014-01-03 11:39 - 2014-01-03 11:39 - 00000000 ___RD C:\MSOCache
2014-01-03 11:39 - 2014-01-03 11:39 - 00000000 ____D C:\Windows\system32\x64
2014-01-03 11:39 - 2009-09-23 19:30 - 01002008 _____ (Intel Corporation) C:\Windows\system32\igxpun.exe
2014-01-03 11:38 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-01-03 11:38 - 2012-02-17 05:14 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-01-03 11:38 - 2012-02-17 05:13 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-01-03 11:34 - 2014-01-03 11:34 - 00001413 _____ C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 11:34 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-01-03 11:34 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-01-03 11:34 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-01-03 11:34 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-01-03 11:34 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-01-03 11:34 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-01-03 11:34 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-01-03 11:34 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-01-03 11:34 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-01-03 11:33 - 2014-01-04 11:26 - 00000000 ____D C:\Users\Erich
2014-01-03 11:33 - 2014-01-03 11:33 - 00000020 ___SH C:\Users\Erich\ntuser.ini
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Erich\Startmenü
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Erich\Netzwerkumgebung
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Erich\Druckumgebung
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Default\Startmenü
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Programme
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\ProgramData\Startmenü
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\ProgramData\Dokumente
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 ____D C:\Recovery
2014-01-03 11:33 - 2009-07-14 05:42 - 00000000 ___RD C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-01-03 11:33 - 2009-07-14 05:37 - 00000000 ___RD C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-01-03 11:31 - 2014-01-06 10:23 - 01554703 _____ C:\Windows\WindowsUpdate.log
2014-01-03 11:25 - 2014-01-03 11:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-01-03 11:24 - 2014-01-03 11:33 - 00000000 ____D C:\Windows\Panther
2014-01-03 11:24 - 2014-01-03 11:26 - 00001355 _____ C:\Windows\TSSysprep.log

==================== One Month Modified Files and Folders =======

2014-01-06 10:24 - 2014-01-04 10:51 - 00000000 ____D C:\FRST
2014-01-06 10:23 - 2014-01-03 11:31 - 01554703 _____ C:\Windows\WindowsUpdate.log
2014-01-06 10:20 - 2014-01-06 10:20 - 00000000 ____D C:\Windows\ERUNT
2014-01-06 10:20 - 2014-01-03 13:18 - 00000000 ___RD C:\Users\Erich\Dropbox
2014-01-06 10:20 - 2014-01-03 12:49 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Dropbox
2014-01-06 10:19 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-06 10:19 - 2009-07-14 05:39 - 00001757 _____ C:\Windows\setupact.log
2014-01-06 10:19 - 2009-07-14 05:34 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-06 10:19 - 2009-07-14 05:34 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-06 10:18 - 2014-01-06 10:17 - 00000000 ____D C:\AdwCleaner
2014-01-06 10:14 - 2014-01-03 11:40 - 00005848 _____ C:\Windows\system32\CovenantEyesProxy.ini
2014-01-06 10:14 - 2014-01-03 11:40 - 00003096 _____ C:\Windows\system32\CovenantEyesProxyOff.ini
2014-01-06 09:38 - 2010-11-20 22:01 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-06 09:30 - 2014-01-06 09:30 - 00145080 _____ C:\Windows\Minidump\010614-20748-01.dmp
2014-01-06 09:30 - 2014-01-04 11:58 - 167324543 _____ C:\Windows\MEMORY.DMP
2014-01-06 09:30 - 2014-01-04 11:58 - 00000000 ____D C:\Windows\Minidump
2014-01-05 11:56 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2014-01-05 11:50 - 2014-01-04 12:23 - 00032077 _____ C:\Windows\IE11_main.log
2014-01-05 11:44 - 2014-01-05 11:44 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-01-05 11:44 - 2014-01-05 11:44 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-01-05 11:44 - 2014-01-05 11:44 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-01-05 11:44 - 2014-01-05 11:44 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-05 11:44 - 2014-01-05 11:44 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-05 11:44 - 2014-01-05 11:44 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-05 11:44 - 2014-01-05 11:44 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00240496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-05 11:44 - 2014-01-05 11:44 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00187752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-01-05 11:44 - 2014-01-05 11:44 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-05 11:44 - 2014-01-05 11:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-05 11:44 - 2014-01-05 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-05 11:44 - 2014-01-05 11:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-01-05 00:00 - 2014-01-05 00:00 - 00145144 _____ C:\Windows\Minidump\010514-14398-01.dmp
2014-01-05 00:00 - 2014-01-03 11:40 - 00000794 __RSH C:\ProgramData\ntuser.pol
2014-01-04 20:26 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2014-01-04 20:07 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2014-01-04 20:01 - 2009-07-14 05:33 - 02278184 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-04 20:00 - 2010-11-20 22:48 - 00110030 _____ C:\Windows\PFRO.log
2014-01-04 20:00 - 2009-07-14 05:52 - 00000000 ____D C:\Program Files\Windows Defender
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\zh-TW
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\zh-HK
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\zh-CN
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\tr-TR
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\sv-SE
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\ru-RU
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\pt-PT
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\pt-BR
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\pl-PL
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\nl-NL
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\nb-NO
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\ko-KR
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\ja-JP
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\it-IT
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\hu-HU
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\fr-FR
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\fi-FI
2014-01-04 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\el-GR
2014-01-04 17:00 - 2014-01-04 12:15 - 00029943 _____ C:\Windows\IE10_main.log
2014-01-04 16:55 - 2014-01-04 16:55 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 02284544 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 01988096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 01247744 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 01158144 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 01080832 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00906240 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00604160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00207872 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-04 16:55 - 2014-01-04 16:55 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-04 15:23 - 2014-01-04 15:23 - 00016336 _____ C:\ComboFix.txt
2014-01-04 15:23 - 2014-01-04 14:09 - 00000000 ____D C:\Qoobox
2014-01-04 15:22 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini
2014-01-04 15:13 - 2014-01-03 12:50 - 00000000 ___RD C:\Users\Erich\SkyDrive
2014-01-04 15:05 - 2014-01-04 15:04 - 00000000 ____D C:\Program Files\WhoCrashed
2014-01-04 15:04 - 2014-01-04 15:04 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NirSoft BlueScreenView
2014-01-04 15:04 - 2014-01-04 15:04 - 00000000 ____D C:\Program Files\NirSoft
2014-01-04 14:59 - 2014-01-04 14:59 - 00000000 ____D C:\Program Files\7-Zip
2014-01-04 14:44 - 2014-01-04 14:44 - 00145136 _____ C:\Windows\Minidump\010414-13587-01.dmp
2014-01-04 14:19 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2014-01-04 14:18 - 2014-01-04 14:09 - 00000000 ____D C:\Windows\erdnt
2014-01-04 12:52 - 2014-01-03 11:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-04 12:41 - 2014-01-04 12:38 - 00004301 _____ C:\Windows\IE9_main.log
2014-01-04 12:18 - 2014-01-04 12:18 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-01-04 12:16 - 2014-01-04 12:16 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-01-04 11:58 - 2014-01-04 11:58 - 00145136 _____ C:\Windows\Minidump\010414-18985-01.dmp
2014-01-04 11:26 - 2014-01-04 11:26 - 00000000 _____ C:\Users\Erich\defogger_reenable
2014-01-04 11:26 - 2014-01-03 11:33 - 00000000 ____D C:\Users\Erich
2014-01-04 11:20 - 2014-01-04 10:50 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-01-04 11:14 - 2014-01-04 10:53 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-01-04 11:06 - 2014-01-04 10:53 - 00104664 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-01-04 10:53 - 2014-01-04 10:53 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-04 10:32 - 2014-01-04 10:31 - 00002562 _____ C:\Windows\diagwrn.xml
2014-01-04 10:32 - 2014-01-04 10:31 - 00001908 _____ C:\Windows\diagerr.xml
2014-01-04 10:31 - 2009-07-14 05:39 - 00000000 _____ C:\Windows\setuperr.log
2014-01-03 15:11 - 2014-01-03 12:08 - 00000000 ____D C:\Program Files\Common Files\Adobe
2014-01-03 15:01 - 2014-01-03 14:30 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Swiss Academic Software
2014-01-03 14:19 - 2014-01-03 14:19 - 00000040 _____ C:\Autoconfig.ini
2014-01-03 14:19 - 2014-01-03 14:19 - 00000000 ____D C:\ProgramData\Samsung
2014-01-03 14:18 - 2014-01-03 14:18 - 00000000 ____D C:\Program Files\Samsung
2014-01-03 14:16 - 2014-01-03 14:16 - 00000000 ____D C:\ProgramData\Swiss Academic Software
2014-01-03 14:15 - 2014-01-03 14:15 - 00000000 ____D C:\Program Files\Citavi 4
2014-01-03 14:13 - 2014-01-03 11:46 - 00000000 ____D C:\Program Files\Microsoft.NET
2014-01-03 14:11 - 2014-01-03 14:11 - 00000000 ____D C:\ProgramData\Canon IJ Network Tool
2014-01-03 14:11 - 2014-01-03 12:46 - 00000000 ____D C:\Program Files\Canon
2014-01-03 14:11 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\twain_32
2014-01-03 14:11 - 2009-07-14 03:37 - 00000000 __RSD C:\Windows\Media
2014-01-03 14:10 - 2014-01-03 14:10 - 00000000 ____D C:\Windows\system32\STRING
2014-01-03 13:15 - 2014-01-03 13:15 - 00000000 ____D C:\Windows\system32\Lang
2014-01-03 13:15 - 2014-01-03 13:15 - 00000000 ____D C:\Program Files\Intel
2014-01-03 13:15 - 2014-01-03 12:14 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Adobe
2014-01-03 13:14 - 2014-01-03 13:14 - 00000000 ____D C:\ProgramData\CovenantEyes
2014-01-03 13:14 - 2014-01-03 11:40 - 00000000 ____D C:\Program Files\CE
2014-01-03 12:51 - 2014-01-03 12:51 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-03 12:50 - 2014-01-03 12:50 - 00002180 _____ C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-01-03 12:50 - 2014-01-03 12:50 - 00002082 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-01-03 12:50 - 2014-01-03 12:50 - 00002082 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-01-03 12:50 - 2014-01-03 12:50 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive
2014-01-03 12:50 - 2014-01-03 12:50 - 00000000 ____D C:\Program Files\Microsoft SkyDrive
2014-01-03 12:47 - 2014-01-03 12:47 - 00000000 ___HD C:\Windows\system32\CanonIJ Uninstaller Information
2014-01-03 12:47 - 2014-01-03 12:47 - 00000000 ___HD C:\ProgramData\CanonBJ
2014-01-03 12:47 - 2014-01-03 12:47 - 00000000 ___HD C:\Program Files\CanonBJ
2014-01-03 12:33 - 2014-01-03 12:33 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Avira
2014-01-03 12:33 - 2014-01-03 12:33 - 00000000 ____D C:\ProgramData\AskPartnerNetwork
2014-01-03 12:33 - 2014-01-03 12:33 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2014-01-03 12:32 - 2014-01-03 12:14 - 00000000 ____D C:\Program Files\Adobe
2014-01-03 12:31 - 2014-01-03 12:31 - 00000000 ____D C:\ProgramData\Avira
2014-01-03 12:31 - 2014-01-03 12:31 - 00000000 ____D C:\Program Files\Avira
2014-01-03 12:30 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2014-01-03 12:19 - 2014-01-03 12:19 - 00000000 ____D C:\ProgramData\ALM
2014-01-03 12:19 - 2014-01-03 12:14 - 00000000 ____D C:\ProgramData\Adobe
2014-01-03 12:16 - 2014-01-03 12:16 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Macromedia
2014-01-03 12:16 - 2014-01-03 12:16 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2014-01-03 12:13 - 2014-01-03 12:13 - 00000000 ____D C:\Windows\system32\Macromed
2014-01-03 12:13 - 2014-01-03 12:13 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared
2014-01-03 12:05 - 2014-01-03 12:05 - 00000000 ____D C:\Program Files\capella-software
2014-01-03 12:04 - 2014-01-03 11:51 - 00000000 ____D C:\Users\Erich\AppData\Roaming\Mozilla
2014-01-03 11:51 - 2014-01-03 11:51 - 00000000 ____D C:\ProgramData\Mozilla
2014-01-03 11:51 - 2014-01-03 11:51 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2014-01-03 11:51 - 2014-01-03 11:51 - 00000000 ____D C:\Program Files\Mozilla Firefox
2014-01-03 11:50 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles
2014-01-03 11:46 - 2014-01-03 11:46 - 00000000 ____D C:\Windows\PCHEALTH
2014-01-03 11:46 - 2014-01-03 11:46 - 00000000 ____D C:\Program Files\Microsoft Works
2014-01-03 11:46 - 2014-01-03 11:46 - 00000000 ____D C:\Program Files\Microsoft Visual Studio
2014-01-03 11:46 - 2014-01-03 11:46 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2014-01-03 11:46 - 2014-01-03 11:40 - 00000000 ____D C:\Program Files\Microsoft Office
2014-01-03 11:40 - 2014-01-03 11:40 - 00009626 _____ C:\ceInstall.log
2014-01-03 11:40 - 2014-01-03 11:40 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2014-01-03 11:40 - 2011-04-12 02:39 - 00000000 ____D C:\Windows\ShellNew
2014-01-03 11:40 - 2009-07-14 03:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2014-01-03 11:40 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\System
2014-01-03 11:40 - 2009-07-14 03:04 - 00000478 _____ C:\Windows\win.ini
2014-01-03 11:39 - 2014-01-03 11:39 - 00000000 ___RD C:\MSOCache
2014-01-03 11:39 - 2014-01-03 11:39 - 00000000 ____D C:\Windows\system32\x64
2014-01-03 11:34 - 2014-01-03 11:34 - 00001413 _____ C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-01-03 11:34 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\restore
2014-01-03 11:33 - 2014-01-03 11:33 - 00000020 ___SH C:\Users\Erich\ntuser.ini
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Erich\Startmenü
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Erich\Netzwerkumgebung
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Erich\Druckumgebung
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Erich\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Default\Startmenü
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\Programme
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\ProgramData\Startmenü
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 _SHDL C:\ProgramData\Dokumente
2014-01-03 11:33 - 2014-01-03 11:33 - 00000000 ____D C:\Recovery
2014-01-03 11:33 - 2014-01-03 11:24 - 00000000 ____D C:\Windows\Panther
2014-01-03 11:33 - 2010-11-20 21:57 - 00000000 ____D C:\Users\Administrator
2014-01-03 11:33 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Public\Libraries
2014-01-03 11:33 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2014-01-03 11:33 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\Recovery
2014-01-03 11:33 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Windows NT
2014-01-03 11:26 - 2014-01-03 11:24 - 00001355 _____ C:\Windows\TSSysprep.log
2014-01-03 11:25 - 2014-01-03 11:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-01-03 11:24 - 2011-04-12 02:39 - 00000000 ____D C:\Windows\CSC
2014-01-03 11:24 - 2009-07-14 05:34 - 00002790 _____ C:\Windows\DtcInstall.log
2014-01-03 11:23 - 2009-07-14 05:57 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2014-01-03 11:23 - 2009-07-14 05:52 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-12-09 11:37 - 2014-01-03 12:31 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-09 11:37 - 2014-01-03 12:31 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-09 11:37 - 2014-01-03 12:31 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-09 11:37 - 2014-01-03 12:31 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-09 11:37 - 2014-01-03 12:31 - 00028520 _____ (Avira GmbH) C:\Windows\system32\Drivers\ssmdrv.sys

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-03 23:46

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-01-2014
Ran by Erich at 2014-01-06 10:29:57
Running from F:\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

7-Zip 9.20 (Version:  - )
Acrobat.com (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Acrobat.com (Version: 1.2.443 - Adobe Systems Incorporated)
Adobe Acrobat 9 Pro - English, Français, Deutsch (Version: 9.0.0 - Adobe Systems) Hidden
Adobe AIR (Version: 1.1.0.5790 - Adobe Systems Inc.)
Adobe AIR (Version: 1.1.0.5790 - Adobe Systems Inc.) Hidden
Adobe Anchor Service CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Bridge CS4 (Version: 3 - Adobe Systems Incorporated) Hidden
Adobe CMaps CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color - Photoshop Specific CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color EU Recommended Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color JA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color NA Extra Settings CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Color Video Profiles CS CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Creative Suite 4 Design Standard (Version: 4.0 - Adobe Systems Incorporated)
Adobe Creative Suite 4 Design Standard (Version: 4.0 - Adobe Systems Incorporated) Hidden
Adobe CSI CS4 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Default Language CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe ExtendScript Toolkit CS4 (Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Extension Manager CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 10 ActiveX (Version: 10.0.2.54 - Adobe Systems, Inc.)
Adobe Flash Player 10 Plugin (Version: 10.0.2.54 - Adobe Systems, Inc.)
Adobe Fonts All (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Illustrator CS4 (Version: 14.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 (Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Application Feature Set Files (Roman) (Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Common Base Files (Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Icon Handler (Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Output Module (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe PDF Library Files CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 Support (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Search for Help (Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Service Manager Extension (Version: 1.0 - Adobe Systems Incorporated) Hidden
Adobe Setup (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe SGM CS4 (Version: 3.0 - Adobe Systems Incorporated) Hidden
Adobe SING CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Type Support CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Update Manager CS4 (Version: 6.0.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin (Version: 1.1 - Adobe Systems Incorporated) Hidden
Adobe XMP Panels CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetCMYK (Version: 2.0 - Adobe Systems Incorporated) Hidden
AdobeColorCommonSetRGB (Version: 2.0 - Adobe Systems Incorporated) Hidden
Avira Free Antivirus (Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (Version: 12.10.0.2951 - APN, LLC)
Canon Easy-PhotoPrint EX (Version: 4.1.6 - Canon Inc.)
Canon IJ Network Scan Utility (Version:  - )
Canon IJ Network Tool (Version: 3.1.1 - Canon Inc.)
Canon MP Navigator EX 3.0 (Version:  - )
Canon MP640 series MP Drivers (Version:  - Canon Inc.)
capella 2008 (Version: 6.00.9001 - capella-software)
Citavi 4 (Version: 4.2.0.11 - Swiss Academic Software)
Connect (Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
Covenant Eyes (Version: 5.0.4.49 - Covenant Eyes, Inc.)
Dropbox (Version: 2.4.11 - Dropbox, Inc.)
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1930 - Intel Corporation)
Intel(R) TV Wizard (Version:  - Intel Corporation)
kuler (Version: 2.0 - Adobe Systems Incorporated) Hidden
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2007 (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft SkyDrive (Version: 17.0.2015.0811 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (Version: 26.0 - Mozilla)
NirSoft BlueScreenView (Version:  - )
PDF Settings CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw (Version: 5.0 - Adobe Systems Incorporated) Hidden
Samsung Universal Print Driver 2 (Version: 2.50.03.00 - Samsung Electronics Co., Ltd.)
Suite Shared Configuration CS4 (Version: 1.0 - Adobe Systems Incorporated) Hidden
Update for 2007 Microsoft Office System (KB967642) (Version:  - Microsoft)
Update for Microsoft .NET Framework 4.5 (KB2750147) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805221) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805226) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (Version:  - Microsoft)
WhoCrashed 4.01 (Version:  - Resplendence Software Projects Sp.)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 03:04 - 2014-01-04 15:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============


==================== Loaded Modules (whitelisted) =============

2014-01-03 11:40 - 2013-12-05 10:32 - 02297344 _____ () C:\Program Files\CE\nmsvc.dll
2014-01-03 11:40 - 2013-12-05 10:32 - 00074760 _____ () C:\Program Files\CE\nmsvTree.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Erich\AppData\Roaming\Dropbox\bin\libcef.dll
2014-01-03 11:51 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-01-03 14:16 - 2013-07-17 23:56 - 00430080 _____ () C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox\components\FirefoxPickerCommunication.dll

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Auth Service => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CovenantEyesCommService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CovenantEyesProxy => ""="service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 39%
Total physical RAM: 3318.3 MB
Available physical RAM: 2022.3 MB
Total Pagefile: 6632.84 MB
Available Pagefile: 5046.84 MB
Total Virtual: 2047.88 MB
Available Virtual: 1884.97 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:87.92 GB) NTFS
Drive d: () (Fixed) (Total:52.95 GB) (Free:52.87 GB) NTFS
Drive e: () (Fixed) (Total:20.58 GB) (Free:20.5 GB) NTFS
Drive f: (DATA) (Fixed) (Total:261.81 GB) (Free:171.57 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 335 GB) (Disk ID: DB26D43E)
Partition 1: (Not Active) - (Size=21 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=53 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=262 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2544 KB) - (Type=17) ATTENTION ===> Suspicious partition bootkit on partition 4

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: 3D953056)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS)

==================== End Of Log ============================

cosinus · 06.01.2014, 11:02

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

uagla · 06.01.2014, 13:16

Beide Scanner haben nichts mehr auf dem PC gefunden.

Eset hat nur einen Wurm auf der externen Festplatte gefunden, den ich mit AntiVir entfernen werde.

Vielen Dank

cosinus · 06.01.2014, 13:19

Bitte trotzdem beide Logs posten

uagla · 06.01.2014, 14:45

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.07.0.1008
www.malwarebytes.org

Database version: v2014.01.06.02

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16428
Erich :: ERICH-PC [administrator]

06.01.2014 11:04:45
mbar-log-2014-01-06 (11-04-45).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 221926
Time elapsed: 4 minute(s), 58 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=7b2cfd57b670c84aa2ea6989dfee2028
# engine=16535
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-06 12:05:48
# local_time=2014-01-06 01:05:48 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 95 16194 2428110 87545 0
# compatibility_mode=5893 16776574 100 94 147936 140641139 0 0
# scanned=264691
# found=8
# cleaned=0
# scan_time=6323
sh=E0168AE34463373F538EC9B455F9EFB810E171DC ft=0 fh=0000000000000000 vn="Win32/AutoRun.S worm" ac=I fn="N:\AUTORUN.0NF"
sh=B74F82BD456AD4DB7D3D06ADF22DD170E1F2A843 ft=0 fh=0000000000000000 vn="VBS/Butsur.E worm" ac=I fn="O:\JANZEN-039253F7.vbs"
sh=B74F82BD456AD4DB7D3D06ADF22DD170E1F2A843 ft=0 fh=0000000000000000 vn="VBS/Butsur.E worm" ac=I fn="O:\MARKUS.vbs"
sh=EEC0D9058317F547AF6A7A86614706B4377EB8F8 ft=1 fh=e8a21146f26ef42a vn="Win32/AutoRun.AD worm" ac=I fn="O:\System Volume Information\_restore{ABEB11E4-779F-41FE-8B40-3221498BD001}\RP83\A0007296.dll"
sh=E0168AE34463373F538EC9B455F9EFB810E171DC ft=0 fh=0000000000000000 vn="Win32/AutoRun.S worm" ac=I fn="O:\System Volume Information\_restore{4DA5CF9C-D9FB-450D-BD57-341FC88540FE}\RP44\A0084581.inf"
sh=A316D53D180DEBEABE7DD85BD46180EA1D6FF767 ft=0 fh=0000000000000000 vn="VBS/Butsur.E worm" ac=I fn="O:\System Volume Information\_restore{4DA5CF9C-D9FB-450D-BD57-341FC88540FE}\RP44\A0088676.vbs"
sh=A316D53D180DEBEABE7DD85BD46180EA1D6FF767 ft=0 fh=0000000000000000 vn="VBS/Butsur.E worm" ac=I fn="O:\System Volume Information\_restore{4DA5CF9C-D9FB-450D-BD57-341FC88540FE}\RP46\A0099842.vbs"
sh=A316D53D180DEBEABE7DD85BD46180EA1D6FF767 ft=0 fh=0000000000000000 vn="VBS/Butsur.E worm" ac=I fn="O:\System Volume Information\_restore{F30ED059-1A68-4189-8EE4-CE8B99845FFD}\RP158\A0203895.vbs"

Die Viren auf PArtition O:\ habe ich schon mit Avira entfernt.

Vielen Dank noch einmal

cosinus · 06.01.2014, 15:03

Zitat:

Malwarebytes Anti-Rootkit BETA 1.07.0.1008

Falsches Tool, du solltest Malwarebytes Anti-Malware verwenden nicht Anti-Rootkit.

uagla · 06.01.2014, 15:14

Sorry, habe ich überlesen.

So jetzt:

Code:

ATTFilter

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.01.06.04

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16428
Erich :: ERICH-PC [Administrator]

06.01.2014 15:09:04
mbam-log-2014-01-06 (15-09-04).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 219962
Laufzeit: 3 Minute(n), 42 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Users\Erich\Dropbox\Erich_Handschriften.zip (PUP.Optional.Somoto) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

cosinus · 06.01.2014, 16:06

TFC - Temp File Cleaner

Lade dir

TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

Öffne die TFC.exe.
Vista und Win 7 User mit Rechtsklick "als Administrator starten".
Schließe alle anderen Programme.
Drücke auf den Button Start.
Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Sieht soweit ok aus

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

05.01.2014, 21:18	#16
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	BOO /TDss.O im Masterbootsektor gefunden nach Installation von Windows 7 auf einer zweiten internen Festplatte Wieso willste du zweimal Win7 eigentlich haben? Versteh ich nicht. __________________ Logfiles bitte immer in CODE-Tags posten

05.01.2014, 22:01	#20
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	BOO /TDss.O im Masterbootsektor gefunden nach Installation von Windows 7 auf einer zweiten internen Festplatte Nein, wenn du die SSD ins Notebook steckst, wirst du Windows darauf neu installieren müssen, alles andere ist ziemlicher Murks. Hab ich ja erwähnt, dass du sonst sehr wahrscheinlich ein instabiles System hast __________________ Logfiles bitte immer in CODE-Tags posten

06.01.2014, 13:19	#26
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	BOO /TDss.O im Masterbootsektor gefunden nach Installation von Windows 7 auf einer zweiten internen Festplatte Bitte trotzdem beide Logs posten __________________ Logfiles bitte immer in CODE-Tags posten

BOO /TDss.O im Masterbootsektor gefunden nach Installation von Windows 7 auf einer zweiten internen Festplatte

Plagegeister aller Art und deren Bekämpfung: BOO /TDss.O im Masterbootsektor gefunden nach Installation von Windows 7 auf einer zweiten internen Festplatte