| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Tab mit "http://rvzr-a.akamaihd.net" öffnen sich im BrowserWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
10.01.2014, 22:48
| #1 |
 |  Tab mit "http://rvzr-a.akamaihd.net" öffnen sich im Browser Hallo, seit kurzer Zeit öffnet sich beim Browsen ein Tab mit der Seite "hxxp://rvzr-a.akamaihd.net" (geht danach noch weiter). Hab gesehen, dass es dazu hier ja schon Threads gibt, aber laut euren goldenen Regeln ist ja jedes Problem individuell. Dummerweise habe ich Farbar's Recovery Scan Tool versehentlich erst unter "Downloads" gespeichert und von da aus gestartet. Dann habe ich meinen Fehler bemerkt und es erneut auf "Desktop" heruntergeladen und gestartet. Dann kam aber die "Addition.txt" nicht mehr. Reicht also die alte? Hier die FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-01-2014
Ran by Dennis (administrator) on DENNIS-PC on 10-01-2014 21:58:34
Running from C:\Users\Dennis\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) D:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Avira Operations GmbH & Co. KG) D:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.EXE
(Cisco Systems, Inc.) D:\Programme\VPN\cvpnd.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
(Nero AG) D:\Programme\Nero\Nero8\Nero BackItUp\NBService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
() C:\Program Files (x86)\Common Files\Protexis\License Service\PSIService.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Windows\PLFSetI.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) D:\Programme\Skype\Phone\Skype.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) D:\Programme\Antivir\Avira\AntiVir Desktop\avshadow.exe
(Lavasoft Limited) C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.EXE
(Avira Operations GmbH & Co. KG) D:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Cisco Systems, Inc.) D:\Programme\VPN\vpngui.exe
(Facebook Inc.) C:\Users\Dennis\AppData\Local\Facebook\Update\FacebookUpdate.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2009-08-18] (Acer Incorporated)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1814312 2009-08-14] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2008-07-29] ()
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-21] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.EXE [825864 2009-08-18] (Dritek System Inc.)
HKLM-x32\...\Run: [NBKeyScan] - D:\Programme\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2221352 2008-06-08] (Nero AG)
HKLM-x32\...\Run: [avgnt] - D:\Programme\Antivir\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-19] (Avira Operations GmbH & Co. KG)
HKCU\...\Run: [Skype] - D:\Programme\Skype\Phone\Skype.exe [18678376 2013-05-08] (Skype Technologies S.A.)
HKCU\...\Run: [RGSC] - D:\Spiele\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe [306088 2008-12-13] (Take-Two Interactive Software, Inc.)
MountPoints2: {cc696983-30da-11e2-a14c-f5ca06d44d89} - G:\Setup.exe
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [162336 2009-07-08] ()
AppInit_DLLs-x32: c:\progra~3\browserprotect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.dll [ ] ()
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: proxy.uni.flensburg.de:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.holasearch.com/?affID=121962&tt=gc_&babsrc=HP_ss&mntrId=3C6F001E65874FA7
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_5739g&r=273606102916l03e3z196t5894y64n
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.holasearch.com/?affID=121962&tt=gc_&babsrc=HP_ss&mntrId=3C6F001E65874FA7
URLSearchHook: HKCU - (No Name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - No File
SearchScopes: HKLM-x32 - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE383
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.holasearch.com/?q={searchTerms}&affID=121962&tt=gc_&babsrc=SP_ss&mntrId=3C6F001E65874FA7
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE383
SearchScopes: HKCU - {A9E2F350-0A5A-420A-8D8B-1904AE97D818} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=971163&p={searchTerms}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Plus-HD-2.6 - {11111111-1111-1111-1111-110311341140} - No File
BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: StartNow Toolbar Helper - {6E13D095-45C3-4271-9475-F3B48227DD9F} - C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll (StartNow.com)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: holasearch Helper Object - {DFF9B2DA-EF99-4B26-83CB-7058299999D8} - C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\bh\holasearch.dll (holasearch.com)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - StartNow Toolbar - {5911488E-9D1E-40ec-8CBB-06B231CC153F} - C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll (StartNow.com)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Holasearch Toolbar - {C510DFFB-0AFE-484C-BA40-CED5B74C4EEF} - C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchTlbr.dll (holasearch.com)
Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 01 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231496] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 02 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231496] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 03 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231496] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 04 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231496] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 05 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231496] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 06 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231496] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 07 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231496] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 08 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231496] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9-x64 19 D:\Programme\Antivir\Avira\AntiVir Desktop\avsda64.dll [231496] (Avira Operations GmbH & Co. KG)
Tcpip\..\Interfaces\{0AE21BC5-68A5-49A7-917D-87CE15E742C4}: [NameServer]192.168.153.30,192.168.153.50
Tcpip\..\Interfaces\{F9E49A12-9959-489B-B3D2-2A6E3A19E6AF}: [NameServer]193.174.11.98,172.16.18.3
FireFox:
========
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default
FF user.js: detected! => C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\user.js
FF NewTab: hxxp://www.holasearch.com/?affID=121962&tt=gc_&babsrc=NT_ss&mntrId=3C6F001E65874FA7
FF SearchEngineOrder.1: Hola Search
FF Homepage: www.google.de
FF NetworkProxy: "backup.ftp", "proxy.uni-flensburg.de"
FF NetworkProxy: "backup.ftp_port", 8080
FF NetworkProxy: "backup.gopher", "140.247.60.126"
FF NetworkProxy: "backup.gopher_port", 3128
FF NetworkProxy: "backup.socks", "proxy.uni-flensburg.de"
FF NetworkProxy: "backup.socks_port", 8080
FF NetworkProxy: "backup.ssl", "proxy.uni-flensburg.de"
FF NetworkProxy: "backup.ssl_port", 8080
FF NetworkProxy: "ftp", "proxy.uni-flensburg.de"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "gopher", "128.119.41.211"
FF NetworkProxy: "gopher_port", 3128
FF NetworkProxy: "http", "proxy.uni-flensburg.de"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, 172.16.16.16"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "proxy.uni-flensburg.de"
FF NetworkProxy: "socks_port", 8080
FF NetworkProxy: "ssl", "proxy.uni-flensburg.de"
FF NetworkProxy: "ssl_port", 8080
FF NetworkProxy: "type", 1
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - D:\Programme\Canon Drucker\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @canon.com/MycameraPlugin - D:\Programme\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - D:\Programme\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Dennis\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\searchplugins\holasearch.xml
FF SearchPlugin: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-2.6 - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\Extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com
FF Extension: HolaSearch - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\Extensions\ffxtlbr@holasearch.com
FF Extension: DownloadHelper - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: GutscheinRausch.de - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\Extensions\jl@leimbach-it.de.xpi
FF Extension: Speed Dial - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: Adblock Plus - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\txs426xp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
==================== Services (Whitelisted) =================
S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AntiVirSchedulerService; D:\Programme\Antivir\Avira\AntiVir Desktop\sched.exe [440376 2013-12-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; D:\Programme\Antivir\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; D:\Programme\Antivir\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-19] (Avira Operations GmbH & Co. KG)
R2 CVPND; D:\Programme\VPN\cvpnd.exe [1529856 2011-03-04] (Cisco Systems, Inc.)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2010 CBE\Dfsdks.exe [544768 2009-08-24] (mst software GmbH, Germany)
R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [796192 2009-08-18] (Acer Incorporated)
R2 Lavasoft Ad-Aware Service; C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe [2152152 2011-12-29] (Lavasoft Limited)
S4 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [311592 2009-08-06] (Egis Technology Inc.)
R2 Nero BackItUp Scheduler 3; D:\Programme\Nero\Nero8\Nero BackItUp\NBService.exe [877864 2008-06-08] (Nero AG)
S4 NMIndexingService; C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe [537896 2008-06-24] (Nero AG)
S4 PLFlash DeviceIoControl Service; C:\Windows\SysWOW64\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.)
R2 ProtexisLicensing; C:\Program Files (x86)\Common Files\Protexis\License Service\PSIService.exe [174656 2006-11-02] ()
S4 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2144056 2013-12-11] (TuneUp Software)
S4 VMLiteService; D:\Programme\VMLite\VMLiteService.exe [426584 2009-12-07] (VMLite, Inc.)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG)
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] ()
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-09-07] (GFI Software)
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [37392 2010-01-26] (Paragon Software Group)
S3 int15.sys; C:\Windows\System32\OEM\Factory\int15.sys [17952 2008-03-28] (Acer, Inc.)
R3 Iviaspi; C:\Windows\System32\drivers\Iviaspi.sys [21792 2007-01-11] (InterVideo, Inc.)
R3 Lavasoft Kernexplorer; C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [17152 2011-08-31] ()
R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69376 2011-08-18] (Lavasoft AB)
R3 nuvotoncir; C:\Windows\system32\DRIVERS\nuvotoncir.sys [48128 2009-06-24] (Nuvoton Technology Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-05-08] (TuneUp Software)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [48144 2010-01-26] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [158736 2010-01-26] (Paragon)
R1 VBoxDrv; C:\Windows\System32\drivers\VBoxDrv.sys [194776 2009-12-06] (VMLite, Inc.)
S3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp.sys [147928 2009-12-06] (VMLite, Inc.)
R3 VBoxNetFlt; C:\Windows\System32\DRIVERS\VBoxNetFlt.sys [167704 2009-12-06] (VMLite, Inc.)
R3 vmlitediskmp; C:\Windows\System32\DRIVERS\vmlitediskmp.sys [147560 2010-01-11] (VMLite, Inc.)
R1 vmlitedrv; C:\Windows\System32\drivers\vmlitedrv.sys [14936 2009-12-06] (VMLite, Inc.)
S3 Bulk1528; System32\Drivers\Bulk1528.sys [x]
S2 Ca1528av; System32\Drivers\Ca1528av.sys [x]
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-24] (Huawei Technologies Co., Ltd.)
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [x]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [x]
S4 sptd; \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [x]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-10 21:58 - 2014-01-10 21:58 - 00023069 _____ C:\Users\Dennis\Desktop\FRST.txt
2014-01-10 21:57 - 2014-01-10 21:57 - 01932166 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2014-01-10 21:52 - 2014-01-10 21:52 - 00000000 ____D C:\FRST
2014-01-10 21:45 - 2014-01-10 21:45 - 00000584 _____ C:\Users\Dennis\Downloads\defogger_disable.log
2014-01-10 21:45 - 2014-01-10 21:45 - 00000020 _____ C:\Users\Dennis\defogger_reenable
2014-01-10 21:44 - 2014-01-10 21:44 - 00050477 _____ C:\Users\Dennis\Downloads\Defogger.exe
2014-01-10 21:29 - 2014-01-10 21:29 - 00707664 _____ (iS3, Inc.) C:\Users\Dennis\Downloads\SZSetup_AID10121_AV.exe
2014-01-10 21:28 - 2014-01-10 21:28 - 00943872 _____ C:\Users\Dennis\Downloads\SpyHunter-Setup.exe
2014-01-10 21:25 - 2014-01-10 21:25 - 00003160 _____ C:\Windows\System32\Tasks\{2EEBCA65-F069-4DD1-B449-4F0867299212}
2014-01-10 21:24 - 2014-01-10 21:24 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dennis\Downloads\SpyHunter-Installer(1).exe
2014-01-10 21:23 - 2014-01-10 21:23 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dennis\Downloads\SpyHunter-Installer.exe
2014-01-05 13:23 - 2014-01-05 13:23 - 00000296 _____ C:\Windows\PFRO.log
2014-01-04 21:50 - 2014-01-10 21:46 - 00001176 _____ C:\Windows\setupact.log
2014-01-04 21:50 - 2014-01-04 21:50 - 00000000 _____ C:\Windows\setuperr.log
2014-01-04 21:25 - 2014-01-04 21:25 - 00866817 _____ C:\Users\Dennis\Downloads\avira_fusebundlegen-win32-en.zip
2014-01-02 13:11 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-02 13:11 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-02 13:11 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-02 13:11 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-02 13:11 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-02 13:11 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-02 13:11 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-12-27 07:35 - 2013-12-27 07:35 - 00000000 ____D C:\ProgramData\Oracle
2013-12-27 07:34 - 2013-12-27 07:34 - 00000151 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-12-27 07:32 - 2013-12-27 07:32 - 00915368 _____ (Oracle Corporation) C:\Users\Dennis\Downloads\jxpiinstall.exe
2013-12-25 10:30 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-25 10:30 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-25 10:29 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-25 10:29 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-25 10:29 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-25 10:29 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-25 10:29 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-25 10:29 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-25 10:29 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-25 10:29 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-25 10:29 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-25 10:29 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-25 10:29 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-25 10:29 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-25 10:29 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-25 10:29 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-25 10:29 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-25 10:29 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-25 10:29 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-25 10:29 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-25 10:29 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-25 10:29 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-25 10:29 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-25 10:29 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-25 10:29 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-25 10:29 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-25 10:29 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-25 10:29 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-25 10:29 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-25 10:29 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-25 10:29 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-24 10:12 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-24 10:05 - 2013-12-24 10:05 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-24 10:05 - 2013-12-24 10:05 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-24 10:04 - 2013-12-24 10:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-24 10:04 - 2013-12-24 10:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-24 10:04 - 2013-12-24 10:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-24 10:04 - 2013-12-24 10:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-24 10:04 - 2013-12-24 10:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-24 10:04 - 2013-12-24 10:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-12-24 10:02 - 2013-12-24 10:02 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-12-24 10:02 - 2013-12-24 10:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-12-24 10:02 - 2013-12-24 10:02 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-12-24 10:01 - 2013-12-24 10:01 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-12-24 10:01 - 2013-12-24 10:01 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-12-23 10:17 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-23 10:17 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-23 10:17 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-23 10:17 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-23 10:17 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-23 10:17 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-12-23 10:17 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-12-23 10:17 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-23 10:17 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-23 10:17 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-12-23 10:17 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-12-23 10:17 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2013-12-23 10:17 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2013-12-23 10:17 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2013-12-23 10:17 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2013-12-23 10:17 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-12-23 10:17 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-12-23 10:17 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2013-12-23 10:17 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2013-12-23 10:17 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-12-23 10:17 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2013-12-23 10:17 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2013-12-23 10:17 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2013-12-23 10:17 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-12-23 10:17 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-12-23 10:17 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-12-23 10:17 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-12-23 10:17 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-12-23 10:17 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-12-23 10:17 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-12-23 10:17 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-12-23 10:17 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-12-23 10:17 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-12-23 10:17 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-12-23 10:17 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-12-23 10:17 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-12-23 10:17 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-12-23 10:15 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-23 10:15 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-23 10:15 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2013-12-23 10:15 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2013-12-23 10:15 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2013-12-23 10:15 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-23 10:15 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2013-12-23 10:15 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-23 10:15 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2013-12-23 10:15 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-23 10:15 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-23 10:15 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-23 10:15 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-23 10:15 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2013-12-23 10:15 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-12-23 10:15 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-12-23 10:15 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-23 10:15 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-23 10:15 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-12-23 10:15 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-12-23 10:15 - 2013-07-12 11:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-12-23 10:15 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-12-23 10:15 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-12-23 10:15 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-12-21 13:01 - 2013-12-21 13:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-20 16:31 - 2013-12-20 16:40 - 00213408 _____ C:\Users\Dennis\Downloads\Campus in F(lensburg).3ga.sfk
2013-12-15 20:00 - 2013-12-15 20:00 - 02488297 _____ C:\Users\Dennis\Downloads\Campus in F(lensburg).3ga
2013-12-15 09:42 - 2013-12-11 09:59 - 00026936 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-15 09:42 - 2013-12-11 09:59 - 00022328 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
==================== One Month Modified Files and Folders =======
2014-01-10 21:58 - 2014-01-10 21:58 - 00023069 _____ C:\Users\Dennis\Desktop\FRST.txt
2014-01-10 21:57 - 2014-01-10 21:57 - 01932166 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2014-01-10 21:55 - 2013-05-31 10:46 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-10 21:54 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-10 21:54 - 2009-07-14 05:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-10 21:52 - 2014-01-10 21:52 - 00000000 ____D C:\FRST
2014-01-10 21:50 - 2009-10-17 17:37 - 01964638 _____ C:\Windows\WindowsUpdate.log
2014-01-10 21:49 - 2012-04-21 16:35 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1267998968-4071257723-975739916-1000UA.job
2014-01-10 21:49 - 2012-04-21 16:35 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1267998968-4071257723-975739916-1000Core.job
2014-01-10 21:49 - 2010-06-08 22:42 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Skype
2014-01-10 21:47 - 2013-03-13 19:02 - 00003626 _____ C:\Windows\System32\Tasks\Ad-Aware Update (Weekly)
2014-01-10 21:46 - 2014-01-04 21:50 - 00001176 _____ C:\Windows\setupact.log
2014-01-10 21:46 - 2010-07-03 11:08 - 00486310 _____ C:\aaw7boot.log
2014-01-10 21:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-10 21:45 - 2014-01-10 21:45 - 00000584 _____ C:\Users\Dennis\Downloads\defogger_disable.log
2014-01-10 21:45 - 2014-01-10 21:45 - 00000020 _____ C:\Users\Dennis\defogger_reenable
2014-01-10 21:45 - 2010-06-08 19:11 - 00000000 ____D C:\Users\Dennis
2014-01-10 21:44 - 2014-01-10 21:44 - 00050477 _____ C:\Users\Dennis\Downloads\Defogger.exe
2014-01-10 21:29 - 2014-01-10 21:29 - 00707664 _____ (iS3, Inc.) C:\Users\Dennis\Downloads\SZSetup_AID10121_AV.exe
2014-01-10 21:28 - 2014-01-10 21:28 - 00943872 _____ C:\Users\Dennis\Downloads\SpyHunter-Setup.exe
2014-01-10 21:25 - 2014-01-10 21:25 - 00003160 _____ C:\Windows\System32\Tasks\{2EEBCA65-F069-4DD1-B449-4F0867299212}
2014-01-10 21:24 - 2014-01-10 21:24 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dennis\Downloads\SpyHunter-Installer(1).exe
2014-01-10 21:23 - 2014-01-10 21:23 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dennis\Downloads\SpyHunter-Installer.exe
2014-01-10 19:15 - 2009-10-18 03:30 - 00643866 _____ C:\Windows\system32\perfh007.dat
2014-01-10 19:15 - 2009-10-18 03:30 - 00126394 _____ C:\Windows\system32\perfc007.dat
2014-01-10 19:15 - 2009-07-14 06:13 - 01472002 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-10 18:56 - 2011-09-03 20:52 - 00000064 _____ C:\Windows\SysWOW64\rp_stats.dat
2014-01-10 18:56 - 2011-09-03 20:52 - 00000044 _____ C:\Windows\SysWOW64\rp_rules.dat
2014-01-07 11:02 - 2010-06-12 11:47 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\vlc
2014-01-05 13:23 - 2014-01-05 13:23 - 00000296 _____ C:\Windows\PFRO.log
2014-01-04 21:50 - 2014-01-04 21:50 - 00000000 _____ C:\Windows\setuperr.log
2014-01-04 21:45 - 2010-07-03 11:45 - 00000000 ____D C:\Users\Dennis\Desktop\Unwichtige Desktopsymbole
2014-01-04 21:34 - 2010-08-11 12:59 - 00000000 ____D C:\Windows\Minidump
2014-01-04 21:25 - 2014-01-04 21:25 - 00866817 _____ C:\Users\Dennis\Downloads\avira_fusebundlegen-win32-en.zip
2014-01-02 23:27 - 2010-10-31 05:50 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\dvdcss
2014-01-02 23:24 - 2010-07-03 11:38 - 00000069 _____ C:\Windows\NeroDigital.ini
2013-12-30 23:41 - 2011-04-23 14:39 - 00001588 _____ C:\Users\Dennis\Desktop\Reggae.txt
2013-12-27 09:11 - 2012-08-25 18:04 - 00002005 _____ C:\Users\Dennis\Desktop\German - English.txt
2013-12-27 07:35 - 2013-12-27 07:35 - 00000000 ____D C:\ProgramData\Oracle
2013-12-27 07:34 - 2013-12-27 07:34 - 00000151 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-12-27 07:34 - 2011-10-03 15:20 - 00000000 ____D C:\Program Files (x86)\Java
2013-12-27 07:32 - 2013-12-27 07:32 - 00915368 _____ (Oracle Corporation) C:\Users\Dennis\Downloads\jxpiinstall.exe
2013-12-24 11:46 - 2013-09-07 01:01 - 00000000 ____D C:\Windows\system32\MRT
2013-12-24 11:44 - 2010-06-08 19:13 - 00001425 _____ C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-24 10:45 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-24 10:17 - 2009-07-14 05:45 - 00497688 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-24 10:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-24 10:12 - 2009-08-22 07:30 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-24 10:05 - 2013-12-24 10:05 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-24 10:05 - 2013-12-24 10:05 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-24 10:04 - 2013-12-24 10:04 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-24 10:04 - 2013-12-24 10:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-24 10:04 - 2013-12-24 10:04 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-24 10:04 - 2013-12-24 10:04 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-24 10:04 - 2013-12-24 10:04 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-24 10:04 - 2013-12-24 10:04 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-24 10:04 - 2013-12-24 10:04 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-24 10:04 - 2013-12-24 10:04 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-12-24 10:03 - 2013-12-24 10:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-12-24 10:03 - 2013-12-24 10:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-12-24 10:02 - 2013-12-24 10:02 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-12-24 10:02 - 2013-12-24 10:02 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-12-24 10:02 - 2013-12-24 10:02 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-12-24 10:01 - 2013-12-24 10:01 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2013-12-24 10:01 - 2013-12-24 10:01 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-12-24 09:45 - 2013-05-30 13:44 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-12-23 12:56 - 2013-05-31 10:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-23 12:56 - 2013-05-31 10:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-23 12:56 - 2013-05-31 10:46 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-23 12:43 - 2013-04-29 15:35 - 00000553 _____ C:\Windows\capella.INI
2013-12-23 10:36 - 2013-05-30 13:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-12-21 20:04 - 2012-05-07 06:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-21 13:01 - 2013-12-21 13:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-20 16:40 - 2013-12-20 16:31 - 00213408 _____ C:\Users\Dennis\Downloads\Campus in F(lensburg).3ga.sfk
2013-12-19 07:24 - 2013-09-07 17:21 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-19 07:24 - 2013-09-07 17:20 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-19 07:24 - 2013-09-07 17:20 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-15 20:00 - 2013-12-15 20:00 - 02488297 _____ C:\Users\Dennis\Downloads\Campus in F(lensburg).3ga
2013-12-15 09:41 - 2013-01-04 21:02 - 00000000 ____D C:\Program Files (x86)\TuneUp Utilities 2012
2013-12-11 14:51 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-11 09:59 - 2013-12-15 09:42 - 00026936 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2013-12-11 09:59 - 2013-12-15 09:42 - 00022328 _____ (TuneUp Software) C:\Windows\SysWOW64\authuitu.dll
2013-12-11 09:59 - 2013-10-29 20:25 - 00036664 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2013-12-11 09:59 - 2013-10-29 20:25 - 00030008 _____ (TuneUp Software) C:\Windows\SysWOW64\uxtuneup.dll
2013-12-11 09:59 - 2013-01-04 21:03 - 00035640 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
Some content of TEMP:
====================
C:\Users\Dennis\AppData\Local\Temp\avgnt.exe
C:\Users\Dennis\AppData\Local\Temp\SHSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-30 19:08
==================== End Of Log ============================
Und die gmer: Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2014-01-10 22:09:01
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD32 rev.11.0 298,09GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Dennis\AppData\Local\Temp\axdirpog.sys
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe[1808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075e31465 2 bytes [E3, 75]
.text C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe[1808] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000075e314bb 2 bytes [E3, 75]
.text ... * 2
.text D:\Programme\VPN\cvpnd.exe[1864] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075e31465 2 bytes [E3, 75]
.text D:\Programme\VPN\cvpnd.exe[1864] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000075e314bb 2 bytes [E3, 75]
.text ... * 2
.text C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075e31465 2 bytes [E3, 75]
.text C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe[1432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000075e314bb 2 bytes [E3, 75]
.text ... * 2
.text C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe[1860] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075e31465 2 bytes [E3, 75]
.text C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe[1860] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000075e314bb 2 bytes [E3, 75]
.text ... * 2
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 D:\Programme\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x77 0xCE 0xD5 0x86 ...
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0xA0 0x02 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x5B 0x80 0xB4 0x34 ...
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xB3 0x92 0x00 0xB6 ...
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 D:\Programme\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x77 0xCE 0xD5 0x86 ...
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0xA0 0x02 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x5B 0x80 0xB4 0x34 ...
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xB3 0x92 0x00 0xB6 ...
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
Danke im Voraus, Orangutan (irgendeinen Namen braucht man ja ^^) ------------ Nachtrag: Antivir-Report werde ich wohl erst morgen früh posten können. Das dauert eine halbe Ewigkeit... Geändert von Orangutan (10.01.2014 um 23:13 Uhr) |
| Themen zu Tab mit "http://rvzr-a.akamaihd.net" öffnen sich im Browser |
| ad-aware, adblock, adware.installbrain, adware/adware.gen2, bingbar, desktop, flash player, html/rce.gen, js/agent.nej, launch, newtab, plug-in, problem, pup.bprotector, pup.dealio.tb, pup.optional.babsolution.a, pup.optional.babylon.a, pup.optional.babylontoolbar.a, pup.optional.bprotector.a, pup.optional.crossrider.a, pup.optional.crossrider.m, pup.optional.datamngr.a, pup.optional.pcperformer.a, pup.optional.plushd.a, services.exe, software, spyhunter, spyhunter entfernen, svchost.exe, öffnet |
Baum-Darstellung