BSI-Sicherheitstest - Mailadresse wurde gehackt - Avira PC-Cleaner findet Trojaner in outlook.pst

imebro · 24.01.2014, 08:40

Guten Morgen,

nach einiger Zeit Ruhe, habe ich heute auch mal wieder ein Problem.

Nachdem in den Medien über 16 Mio. gehackter Email-Adressen berichtet wurde, habe ich auch meine Email-Adressen überprüfen lassen über die BSI-Seite.
Eine davon ist lt. einer Antwort-Email des BSI tatsächlich gehackt worden.

Da das BSI erklärt, dass dies offenbar dadurch möglich war, dass irgendwelche Trojaner (od. sonstige Schadsoftware) auf einen PC geschleust wurden, habe ich dann meinen PC gestern Abend mit "Avira PC-Cleaner" durchsuchen lassen.

Es wurden tatsächlich mehrere Viren / Trojaner gefunden... u.a. auch in der Datei "OUTLOOK.PST". Diese Datei kann ich ja nun nicht einfach löschen lassen...

Hier ein Screenshot dazu:

Was kann ich nun tun, um die "OUTLOOK.PST" trojaner-/virenfrei zu bekommen?
Und... ist es ggf. möglich, diese Datei einfach über Outlook (2010) neu erstellen zu lassen, damit die alte gelöscht werden kann?

Ich bin mir nicht sicher, ob das komprimieren der "OUTLOOK.PST" den gewünschten Erfolg bringen kann.

Wäre schön, wenn mir jemand von Euch helfen könnte.

Danke und schöne Grüße,
imebro

schrauber · 24.01.2014, 09:12

Hi,

zeig mal das Log von Avira. Outlook.pst bedeutet das irgend eine Mail die damals komprimiert wurde verseucht ist, oder ein Anhang. Also bleibt nur PST aufmachen, und einzeln checken.

imebro · 24.01.2014, 09:32

Hallo und danke für die schnelle Antwort.

Da es sich um meinen Privat-PC handelt, kann ich das LOG erst heute Abend senden... Allerdings wurde nach dem Scan mit "Avira PC Cleaner" gar keine LOG-Datei angezeigt. Ggf. liegt die im Programm-Ordner...?? Ansonsten müßte ich den "Avira PC Cleaner" nochmal drüber laufen lassen.

Zur PST:
Ist das nicht die Datei, in der meine "ganz normalen" Emails, Kontakte etc. gespeichert sind? Also... das, was ich immer in Outlook sehe, wenn ich es öffne?
Wenn ja, dann müßte ich also im Avira-LOG nachsehen, welche Email speziell betroffen ist und diese dann im Posteingang suchen. Oder hab ich da jetzt was falsch verstanden?

Danke und Gruss,
imebro

schrauber · 25.01.2014, 11:12

Wenn dir Avira genau die Email anzeigt haste Glück, ansonten wird nur die PST angemeckert, dann musste händisch suchen.

imebro · 25.01.2014, 11:26

Danke nochmal...

Aber wie soll ich bei hunderten von Emails händisch nach einer suchen, die infiziert ist?

Ich habe gestern meine Emails archiviert und anschließend die PST-Datei/en komprimiert. Ich hatte gelesen, dass somit tatsächlich alle gelöschten Dateien auch wirklich gelöscht werden.

Gerade läuft "Trend Micro Housecall" durch und das schon seit jetzt 1067 Minuten :-)
Danach werde ich mal schauen, wie dessen Ergebnisse sind und ggf. dann nochmal den "Avira PC Cleaner" drüber laufen lassen.

Ggf. noch "Malewarebytes", welches ja - soweit mir bekannt - auch gut ist, um solche Infizierungen zu beseitigen...

Danke und Gruss,
imebro

schrauber · 25.01.2014, 21:25

Poste dann mal die Logs

imebro · 25.01.2014, 23:04

Hallo nochmal.

Hmmm... da gibt´s offenbar keine Logs.
Habe jedenfalls keine gefunden über die Suche.

Habe "Trend Micro House Call" laufen lassen und danach nochmal den "PC Cleaner von Avira". Vom Housecall wurden ein paar Dateien aus meiner Nir-Soft-Sammlung gefunden, die aber bei solchen Suchen meist als Schädlinge gefunden werden... sonst aber nichts.
Vom Avira wurden nur wieder sämtliche PST-Dateien gefunden - sonst nichts.

Das Ganze, obwohl ich ja vorher Outlook archiviert und anschließend die einzelnen Archive komprimiert hatte.

Wie kann ich nun feststellen, was in der/den PST-Datei/en an Schädlingen vorhanden ist?

Danke und Gruss,
imebro

schrauber · 26.01.2014, 08:15

Guggst Du

Mailbox-Dateien und Virenscanner

imebro · 26.01.2014, 11:31

Danke nochmals...

Also kann ich im Grunde nichts weiter machen.

Malewarebytes hat ebenfalls nur die "Nir-Soft-Utilities" gefunden sowie den "TeamViewer". Sonst nichts.

Muss ich jetzt noch irgend etwas machen, um sicher zu sein, dass sich keine Spionagesoftware mehr auf meinem Laptop befindet?

Danke und Gruss,
imebro

schrauber · 27.01.2014, 08:35

Ich schau allgemein mal schnell drüber

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

imebro · 27.01.2014, 18:24

OK.

Habe FRST jetzt ausgeführt.

Hier die Logs:

1) FRST.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-01-2014
Ran by Ingo (administrator) on INGOS-LAPTOP on 27-01-2014 18:12:30
Running from C:\Users\Ingo\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files (x86)\Avast5\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
() C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Alexander Seeliger Software) C:\Program Files (x86)\Backup Service Home 3\BSHService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
(Uwe A. Ruttkamp) F:\DHCP-Server\dhcpsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\LVPrS64H.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NlsSrv32.exe
(Entriq, Inc.) D:\Programme\maxdome\DCBin\DCService.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Secunia) D:\Programme\Secunia\PSI\psia.exe
(LULU Software) C:\Program Files (x86)\Soda PDF 5\HelperService.exe
(LULU Software) C:\Program Files (x86)\Soda PDF 5\ConversionService.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Secunia) D:\Programme\Secunia\PSI\sua.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(JAM Software) D:\Programme\UltraSearch\UltraSearch.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
() D:\Programme\Clipdiary\ClipDiary.exe
(Mirek Wojtowicz) C:\Program Files (x86)\MWSnap\MWSnap.exe
() D:\Programme\Desksave\DeskSave.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(Jumping Bytes) C:\Program Files (x86)\PureSync\PureSyncTray.exe
(Sebastien.warin.fr) C:\Program Files (x86)\Stream What You Hear\SWYH.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Mister Group) D:\Programme\System Explorer\SystemExplorer.exe
(Mister Group) D:\Programme\System Explorer\service\SystemExplorerService64.exe
(Secunia) D:\Programme\Secunia\PSI\psi_tray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(AVAST Software) C:\Program Files (x86)\Avast5\AvastUI.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
() C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpCaslNotification.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_43.exe
(EJIE Technology) D:\Programme\Clover\clover.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2000-01-01] (IDT, Inc.)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM-x32\...\Run: [AdressLittle] - D:\Programme\Adress Little 2.0\ageb.exe [65536 2009-03-13] (Joachim Stroemer)
HKLM-x32\...\Run: [WirelessAssistant] - C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [500792 2010-03-23] (Hewlett-Packard Company)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] - C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2065408 2013-11-03] (Dominik Reichl)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [295512 2013-10-22] (RealNetworks, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files (x86)\Avast5\AvastUI.exe [3764024 2014-01-11] (AVAST Software)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-09-11] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKCU\...\Run: [clipdiary] - D:\Programme\Clipdiary\clipdiary.exe [208896 2007-05-22] ()
HKCU\...\Run: [MWSnap] - C:\Program Files (x86)\MWSnap\MWSnap.exe [427008 2002-07-06] (Mirek Wojtowicz)
HKCU\...\Run: [DeskSave] - D:\Programme\Desksave\DeskSave.exe [82944 2008-07-26] ()
HKCU\...\Run: [SpybotSD TeaTimer] - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
HKCU\...\Run: [PureSync] - C:\Program Files (x86)\PureSync\PureSyncTray.exe [907808 2013-04-29] (Jumping Bytes)
HKCU\...\Run: [Google Update] - C:\Users\Ingo\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-01-22] (Google Inc.)
HKCU\...\Run: [StreamWhatYouHear] - C:\Program Files (x86)\Stream What You Hear\SWYH.exe [368128 2012-12-07] (Sebastien.warin.fr)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung)
HKCU\...\Run: [SystemExplorerAutoStart] - D:\Programme\System Explorer\SystemExplorer.exe [2610648 2012-06-18] (Mister Group)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
HKCU\...\Policies\system: [DisableChangePassword] 0
HKU\Administrator\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
HKU\Administrator\...\Run: [HPADVISOR] - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW
HKU\Administrator\...\Run: [clipdiary] - D:\Programme\Clipdiary\clipdiary.exe [208896 2007-05-22] ()
HKU\Administrator\...\Run: [DriverMax] - [x]
HKU\Administrator\...\Run: [DriverMax_RESTART] - [x]
HKU\Administrator\...\Run: [PC Suite Tray] - "D:\Programme\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
HKU\Administrator\...\Run: [phonostarTimer] - D:\Programme\phonostar-Player\phonostarTimer.exe
HKU\Administrator\...\Policies\system: [DisableLockWorkstation] 0
HKU\Administrator\...\Policies\system: [DisableChangePassword] 0
HKU\Gast\...\Run: [LightScribe Control Panel] - C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
HKU\Gast\...\Run: [PC Suite Tray] - "D:\Programme\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
HKU\Gast\...\Run: [SpywareTerminatorUpdate] - "C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe"
HKU\Gast\...\Run: [ICQ] - C:\Users\Gast\AppData\Roaming\ICQ\Application\ICQ7.2\ICQ.exe [133432 2011-01-05] (ICQ, LLC.)
HKU\Gast\...\Policies\system: [DisableLockWorkstation] 0
HKU\Gast\...\Policies\system: [DisableChangePassword] 0
IFEO\taskmgr.exe: [Debugger] "D:\Programme\System Explorer\SystemExplorer.exe"
Startup: C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Persbackup.lnk
ShortcutTarget: Persbackup.lnk -> D:\Programme\Personal Backup 5\Persbackup.exe (J. Rathlev, IEAP, Uni-Kiel)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/CQNOT/4
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {BA3E27DB-425D-4E00-AD57-83689D8ECADD} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO: ExplorerWatcher Class - {F8A6CAA2-533D-4AED-9E05-8EB19A4021AB} - d:\Programme\Clover\TabHelper64.dll (EJIE Technology)
BHO-x32: No Name - {11111111-1111-1111-1111-110311301136} -  No File
BHO-x32: No Name - {1ED16E0A-E8C4-40A0-8BC2-79485D21F796} -  No File
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files (x86)\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Soda PDF 5 IE Helper - {C737F472-1193-4281-BF53-A00B67AB3E19} - C:\Program Files (x86)\Soda PDF 5\PDFIEHelper.dll (LULU Software)
BHO-x32: AusweisApp 1.8.0.0 - {C9EE92B7-EDD5-4ad9-8029-2EC6818E653A} - C:\Program Files (x86)\AusweisApp\siqeCardClient.ols (OpenLimit SignCubes AG)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
BHO-x32: No Name - {F8A6CAA2-533D-4AED-9E05-8EB19A4021AB} -  No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files (x86)\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\Avast5\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Soda PDF 5 IE Toolbar - {F335ABA2-FDB4-4644-92B2-5CC4B0FC91D6} - C:\Program Files (x86)\Soda PDF 5\PDFIEPlugin.dll (LULU Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files (x86)\Avast5\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: HKLM-x32 {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} 
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52272 2009-11-07] (EasyBits Software Corp.)
ShellExecuteHooks-x32:  - UPB:{B5A7F190-DDA6-4420-B3BA-52453494E6CD} -  No File [ ]
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{27B2EBF4-4FE1-4E15-85D3-A92B7F9110BF}: [NameServer]192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default
FF NewTab: hxxp://www.google.de
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.1 - D:\Programme\VLC-Player\npvlc.dll No File
FF Plugin: @videolan.org/vlc,version=2.1.0-git-20120125-2155 - D:\Programme\VLC-Player\npvlc.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll No File
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 - C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=1.1.11 - D:\Programme\VLC-Player\npvlc.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Ingo\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Ingo\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npfoxitpdf.dll ( )
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npFoxitReaderPlugin.dll (Foxit Software Company)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npOGAPlugin.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: German Dictionary, extended for Austria - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\de-AT@dictionaries.addons.mozilla.org [2012-10-14]
FF Extension: Deutsches Wörterbuch - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\de-DE@dictionaries.addons.mozilla(2).org [2010-08-26]
FF Extension: German Dictionary - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\de-DE@dictionaries.addons.mozilla.org [2012-10-14]
FF Extension: Fast Translation - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\fasttrans@kemot [2013-07-21]
FF Extension: FRITZ!Box AddOn - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\fb_add_on@avm.de [2013-04-14]
FF Extension: FlashFirebug - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\flashfirebug@o-minds.com [2013-06-22]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\ich@maltegoetz.de [2013-12-12]
FF Extension: Open Image In New Tab - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\imagetab@next.gen.nz [2010-08-26]
FF Extension: Link Alert - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\linkalert.conlan@addons.mozilla.com [2011-03-16]
FF Extension: New Tab Button on Tab Right - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{05BF52F6-A4F9-48B9-84ED-F8D83762E619}(2) [2010-08-26]
FF Extension: Garmin Communicator - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-11-21]
FF Extension: Metal Lion - iCe - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{1AFC82C3-0154-4b09-878B-D68500EFBE76}(2) [2010-08-26]
FF Extension: Html Validator - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{3b56bcc7-54e5-44a2-9b44-66c3ef58c13e} [2013-10-21]
FF Extension: Modern Modoki - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{4a428302-5267-4749-bb22-459b3236695f}(2) [2010-08-26]
FF Extension: Walnut for Firefox - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{5A170DD3-63CA-4c58-93B7-DE9FF536C2FF}(2) [2010-08-26]
FF Extension: ColorZilla - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326} [2012-08-02]
FF Extension: Modern Aluminum - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{835A3F80-DF39-11D9-A0B5-000D0B3AEB26}(2) [2010-08-26]
FF Extension: BugMeNot - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{987311C6-B504-4aa2-90BF-60CC49808D42} [2010-08-26]
FF Extension: DownloadHelper - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-28]
FF Extension: DownloadHelper - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2) [2010-08-26]
FF Extension: Whitehart - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{d650973c-0444-4ac7-9d00-19e3613c83b9}(2) [2010-08-26]
FF Extension: Print - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{f199da35-0a9a-4ce9-8f59-c68524deba93} [2011-02-17]
FF Extension: Add Bookmark Here ² - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\abhere2@moztw.org.xpi [2014-01-15]
FF Extension: Aero Improved - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\aeroimproved@rsjtdrjgfuzkfg.com.xpi [2011-05-09]
FF Extension: YouTube Video and Audio Downloader - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2013-11-10]
FF Extension: Firebug - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\firebug@software.joehewitt.com.xpi [2012-04-19]
FF Extension: CodeBurner for Firebug - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\firebug@tools.sitepoint.com.xpi [2012-04-19]
FF Extension: FirePHP - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\FirePHPExtension-Build@firephp.org.xpi [2012-04-19]
FF Extension: gui:config - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\guiconfig@slosd.net.xpi [2011-09-02]
FF Extension: Deutsch (DE) Language Pack - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2011-12-21]
FF Extension: NewTabURL - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\newtaburl@sogame.cat.xpi [2013-10-02]
FF Extension: NoSquint - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\nosquint@urandom.ca.xpi [2012-03-17]
FF Extension: Illuminations for Developers - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\sroussey@illumination-for-developers.com.xpi [2012-04-19]
FF Extension: YouTube to MP3 - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\youtube2mp3@mondayx.de.xpi [2012-03-01]
FF Extension: Table2Clipboard - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{9ab67d74-ec41-4cb2-b417-df5d93ba1beb}.xpi [2011-08-12]
FF Extension: Easy YouTube Video Downloader - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi [2012-03-01]
FF Extension: Pearl Crescent Page Saver Basic - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}.xpi [2011-05-22]
FF Extension: Adblock Plus - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-15]
FF Extension: Fox!Box - C:\Users\Ingo\AppData\Roaming\Mozilla\Firefox\Profiles\n64mq0a4.default\Extensions\{df4e4df5-5cb7-46b0-9aef-6c784c3249f8}.xpi [2013-11-19]
FF HKLM-x32\...\Firefox\Extensions: [PHPEditXdebugExtension@waterproof.fr] - C:\Program Files\PHPEdit\Tools\FirefoxExtension\unpacked
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files (x86)\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files (x86)\Avast5\WebRep\FF [2011-02-24]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-10-22]
FF HKLM-x32\...\Firefox\Extensions: [FFSodaPDF5Converter@sodapdf.com] - C:\Program Files (x86)\Soda PDF 5\FFSoda5Ext
FF Extension: Soda PDF 5 Converter For Firefox - C:\Program Files (x86)\Soda PDF 5\FFSoda5Ext [2013-12-09]
FF HKLM-x32\...\Firefox\Extensions: [{4F3D26C8-9907-48ff-BC74-B8C572D317BF}] - C:\Program Files (x86)\AusweisApp\mozilla\eCardClientExt_FFxx_Win
FF Extension: AusweisApp - C:\Program Files (x86)\AusweisApp\mozilla\eCardClientExt_FFxx_Win [2013-12-15]
FF HKLM-x32\...\Firefox\Extensions: [{4F0963A3-1658-4fde-9585-23A25CC288BF}] - C:\Program Files (x86)\AusweisApp\mozilla\eCardClientPIn_FFxx_Win
FF Extension: AusweisApp - C:\Program Files (x86)\AusweisApp\mozilla\eCardClientPIn_FFxx_Win [2013-12-15]
FF HKCU\...\Firefox\Extensions: [finder@meingutscheincode.de] - C:\Program Files (x86)\Mein Gutscheincode Finder\Firefox
FF HKCU\...\Firefox\Extensions: [PHPEditXdebugExtension@waterproof.fr] - C:\Program Files\PHPEdit\Tools\FirefoxExtension\unpacked

Chrome: 
=======
CHR HomePage: 
CHR RestoreOnStartup: "bookmark_bar" : 
	{
		"show_on_all_tabs"
CHR DefaultSearchKeyword: bing.com
CHR DefaultSearchProvider: Bing
CHR DefaultSearchURL: hxxp://www.bing.com/search?setmkt=de-DE&q={searchTerms}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Ingo\AppData\Local\Google\Chrome\Application\17.0.963.66\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Ingo\AppData\Local\Google\Chrome\Application\17.0.963.66\pdf.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\Ingo\AppData\Local\Google\Chrome\Application\17.0.963.66\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Basic Example Plugin for Mozilla) - C:\Program Files (x86)\Mozilla Firefox\plugins\npfoxitpdf.dll ( )
CHR Plugin: (Foxit Reader Plugin for Mozilla) - D:\Programme\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
CHR Plugin: (Office Genuine Advantage) - C:\Program Files (x86)\Mozilla Firefox\plugins\npOGAPlugin.dll (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll No File
CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (PHP Docs) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aofkhphjhkanpddmfmbckdlcajhnehlf [2012-04-13]
CHR Extension: (Web Developer) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm [2012-04-13]
CHR Extension: (YouTube) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-02-25]
CHR Extension: (Firebug Lite for Google Chrome™) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench [2012-04-13]
CHR Extension: (Last updated at $time$ on $date$) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2012-03-18]
CHR Extension: (Google Search) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-02-25]
CHR Extension: (Session Buddy) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2012-03-17]
CHR Extension: (avast! WebRep) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2012-02-25]
CHR Extension: (New Tab Redirect!) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\icpgjfneehieebagbmdbhnlpiopdcmna [2012-03-17]
CHR Extension: (Mein Gutscheincode Finder) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgfpelakfkbbkkdchaaaknckhoadkcbo [2012-02-25]
CHR Extension: (Popup HTML Editor) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjpagcblmlakmpcihopmpfknakkimjdh [2012-04-13]
CHR Extension: (Docs PDF/PowerPoint Viewer (by Google)) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbmlagghjjcbdhgmkedmbmedengocbn [2012-03-19]
CHR Extension: (Stylebot) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiaejidbmkiecgbjeifoejpgmdaleoha [2012-04-13]
CHR Extension: (Gmail) - C:\Users\Ingo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-02-25]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-11-12]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [jgfpelakfkbbkkdchaaaknckhoadkcbo] - C:\Program Files (x86)\Mein Gutscheincode Finder\Chrome\chrome-extension.crx [2013-08-14]
CHR StartMenuInternet: Google Chrome - C:\Users\Ingo\AppData\Local\Google\Chrome\Application\chrome.exe
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 avast! Antivirus; C:\Program Files (x86)\Avast5\AvastSvc.exe [50344 2014-01-11] (AVAST Software)
R2 Backup Service Home-Dienst; C:\Program Files (x86)\Backup Service Home 3\BSHService.exe [17920 2012-02-15] (Alexander Seeliger Software)
R2 DHCPServer; F:\DHCP-Server\dhcpsrv.exe [106496 2011-12-17] (Uwe A. Ruttkamp)
S3 MyWiFiDHCPDNS; C:\PROGRAM FILES\INTEL\WIFI\BIN\PANDHCPDNS.EXE [340240 2011-05-02] ()
R2 Prosieben; D:\programme\maxdome\DCBin\DCService.exe [77032 2009-05-01] (Entriq, Inc.)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-06] ()
S3 RServer3; C:\Windows\SysWOW64\rserver30\RServer3.exe [1246536 2007-10-31] (Famatech International Corp.)
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 Secunia PSI Agent; D:\Programme\Secunia\PSI\PSIA.exe [993848 2011-01-10] (Secunia)
R2 Secunia Update Agent; D:\Programme\Secunia\PSI\sua.exe [399416 2011-01-10] (Secunia)
R2 Soda PDF 5 Helper Service; C:\Program Files (x86)\Soda PDF 5\HelperService.exe [1237856 2013-01-25] (LULU Software)
R2 Soda PDF 5 Service; C:\Program Files (x86)\Soda PDF 5\ConversionService.exe [877920 2013-01-25] (LULU Software)
R3 SystemExplorerHelpService; D:\Programme\System Explorer\service\SystemExplorerService64.exe [807896 2012-05-21] (Mister Group)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [x]

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-11] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-07] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-07] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-11] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-11] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-11] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-11] ()
S3 cleanhlp; D:\PROGRAMME\EMSISOFT EMERGENCY KIT\RUN\cleanhlp64.sys [57024 2013-08-19] (Emsisoft GmbH)
S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2009-12-18] ()
S3 CrystalSysInfo; D:\Programme\MediaCoder\SysInfoX64.sys [18128 2007-09-25] ()
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
S3 hcw95bda; C:\Windows\System32\Drivers\hcw95bda.sys [658944 2011-12-12] (Hauppauge Computer Works, Inc.)
S3 hcw95rc; C:\Windows\System32\DRIVERS\hcw95rc.sys [19840 2011-12-12] (Hauppauge Computer Works, Inc.)
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R3 mirrorv3; C:\Windows\System32\DRIVERS\rminiv3.sys [5632 2007-08-17] (Famatech International Corp.)
R1 raddrvv3; C:\Windows\SysWOW64\rserver30\raddrvv3.sys [68632 2007-10-31] (Famatech International Corp.)
S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-02] (Realtek Semiconductor Corp.)
S3 SCL01164; C:\Windows\System32\DRIVERS\SCL01164.sys [72320 2010-05-07] (SCM Microsystems Inc.)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [15672 2011-09-08] ()
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
U5 UnlockerDriver5; D:\Programme\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [x]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-27 18:13 - 2014-01-27 18:13 - 00000631 _____ C:\Users\Ingo\Desktop\W E B.lnk
2014-01-27 18:12 - 2014-01-27 18:12 - 00040346 _____ C:\Users\Ingo\Desktop\FRST.txt
2014-01-27 17:31 - 2014-01-27 09:59 - 02078208 _____ (Farbar) C:\Users\Ingo\Desktop\FRST64.exe
2014-01-26 13:44 - 2014-01-27 17:07 - 00000592 _____ C:\Windows\PFRO.log
2014-01-26 13:44 - 2014-01-27 17:07 - 00000112 _____ C:\Windows\setupact.log
2014-01-26 13:44 - 2014-01-26 13:44 - 00000000 _____ C:\Windows\setuperr.log
2014-01-25 12:49 - 2014-01-25 12:49 - 00001431 _____ C:\Users\Ingo\AppData\Local\census.cache
2014-01-25 12:49 - 2014-01-25 12:49 - 00000000 _____ C:\Users\Ingo\AppData\Local\ars.cache
2014-01-24 17:35 - 2014-01-24 17:35 - 00000036 _____ C:\Users\Ingo\AppData\Local\housecall.guid.cache
2014-01-22 21:02 - 2014-01-26 13:45 - 00003368 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3237284612-487690776-1710373329-1001
2014-01-21 18:20 - 2014-01-27 17:08 - 00003346 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3237284612-487690776-1710373329-1001
2014-01-21 18:20 - 2014-01-27 17:08 - 00003210 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3237284612-487690776-1710373329-1001
2014-01-20 19:49 - 2014-01-20 19:50 - 00000000 ____D C:\Users\Ingo\Desktop\MUSIK
2014-01-19 21:48 - 2014-01-19 21:48 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\RoboMirror
2014-01-18 12:40 - 2014-01-18 12:44 - 00000000 ____D C:\Users\Ingo\Desktop\Tamina
2014-01-16 18:37 - 2014-01-26 13:45 - 00003232 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3237284612-487690776-1710373329-1001
2014-01-15 16:58 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 16:58 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 16:58 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 16:58 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 16:58 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 16:58 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 16:58 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 16:58 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 16:58 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 19:18 - 2014-01-14 19:18 - 00000000 ____D C:\Program Files (x86)\Tools&More
2014-01-11 16:29 - 2014-01-11 16:29 - 00000000 ____D C:\Users\Ingo\Dokumente\Mixpad Projects
2014-01-11 16:29 - 2014-01-11 16:29 - 00000000 ____D C:\ProgramData\NCH Swift Sound
2014-01-11 16:28 - 2014-01-11 16:28 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2014-01-11 16:27 - 2014-01-11 16:27 - 00000000 ____D C:\Program Files (x86)\NCH Swift Sound
2014-01-11 16:19 - 2014-01-11 16:19 - 00000000 ____D C:\Users\Ingo\Dokumente\Adobe
2014-01-11 15:32 - 2014-01-11 15:40 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\CUE Tools
2014-01-11 14:04 - 2014-01-11 14:04 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-11 12:10 - 2014-01-11 12:13 - 00001136 _____ C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaInfo.lnk
2014-01-11 12:10 - 2014-01-11 12:10 - 00000000 ____D C:\Program Files\MediaInfo
2014-01-08 21:27 - 2014-01-11 13:20 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\xrecode2
2014-01-08 21:27 - 2014-01-08 21:27 - 00000000 ____D C:\Program Files (x86)\xrecode II
2014-01-07 19:21 - 2014-01-07 19:21 - 00000000 ____D C:\Program Files (x86)\FLAC
2014-01-06 12:11 - 2014-01-06 12:31 - 00000846 _____ C:\Users\Ingo\Desktop\Belege für Steuererklärung hinzufügen.txt
2014-01-03 13:14 - 2014-01-23 20:59 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\foobar2000
2014-01-03 13:13 - 2014-01-23 18:29 - 00000000 ____D C:\Program Files (x86)\foobar2000
2014-01-02 10:45 - 2014-01-02 13:25 - 00000000 ____D C:\Users\Ingo\Dokumente\SelfMV
2014-01-02 10:17 - 2014-01-02 10:17 - 00000000 ____D C:\Program Files\SAMSUNG
2014-01-02 10:04 - 2014-01-02 10:04 - 00000000 ____D C:\Users\Ingo\AppData\Local\Samsung
2014-01-02 10:03 - 2014-01-02 10:03 - 00000000 ____D C:\Users\Ingo\Dokumente\samsung
2014-01-02 10:01 - 2014-01-02 10:01 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2014-01-02 10:00 - 2013-10-30 12:13 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2014-01-02 10:00 - 2013-10-30 12:06 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\SysWOW64\dgderapi.dll
2014-01-02 09:59 - 2014-01-02 10:02 - 00000000 ____D C:\ProgramData\Samsung
2013-12-30 18:08 - 2013-12-30 21:53 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\streamWriter

==================== One Month Modified Files and Folders =======

2014-01-27 18:15 - 2014-01-27 18:12 - 00040346 _____ C:\Users\Ingo\Desktop\FRST.txt
2014-01-27 18:13 - 2014-01-27 18:13 - 00000631 _____ C:\Users\Ingo\Desktop\W E B.lnk
2014-01-27 17:59 - 2012-03-31 21:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-27 17:55 - 2012-02-02 08:56 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-27 17:53 - 2010-08-31 20:05 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\clipdiary
2014-01-27 17:49 - 2010-08-29 19:46 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\Skype
2014-01-27 17:45 - 2013-01-22 20:06 - 00001116 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3237284612-487690776-1710373329-1001UA.job
2014-01-27 17:30 - 2010-08-23 18:02 - 00000000 ____D C:\Users\Ingo
2014-01-27 17:23 - 2010-09-10 17:14 - 00003942 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{CA70E5AD-9D55-49AB-9231-E8CBF2D6A45F}
2014-01-27 17:20 - 2009-07-14 05:45 - 00026192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-27 17:20 - 2009-07-14 05:45 - 00026192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-27 17:14 - 2009-11-08 04:20 - 00703176 _____ C:\Windows\system32\perfh007.dat
2014-01-27 17:14 - 2009-11-08 04:20 - 00150784 _____ C:\Windows\system32\perfc007.dat
2014-01-27 17:14 - 2009-07-14 06:13 - 01629276 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-27 17:11 - 2012-07-25 09:39 - 00004166 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-27 17:08 - 2014-01-21 18:20 - 00003346 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3237284612-487690776-1710373329-1001
2014-01-27 17:08 - 2014-01-21 18:20 - 00003210 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3237284612-487690776-1710373329-1001
2014-01-27 17:08 - 2012-02-02 08:56 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-27 17:08 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-27 17:07 - 2014-01-26 13:44 - 00000592 _____ C:\Windows\PFRO.log
2014-01-27 17:07 - 2014-01-26 13:44 - 00000112 _____ C:\Windows\setupact.log
2014-01-27 09:59 - 2014-01-27 17:31 - 02078208 _____ (Farbar) C:\Users\Ingo\Desktop\FRST64.exe
2014-01-26 20:01 - 2013-09-22 11:37 - 00035702 _____ C:\Windows\WindowsUpdate.log
2014-01-26 13:45 - 2014-01-22 21:02 - 00003368 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3237284612-487690776-1710373329-1001
2014-01-26 13:45 - 2014-01-16 18:37 - 00003232 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3237284612-487690776-1710373329-1001
2014-01-26 13:44 - 2014-01-26 13:44 - 00000000 _____ C:\Windows\setuperr.log
2014-01-26 10:25 - 2011-05-15 10:01 - 00000000 ____D C:\Program Files (x86)\NirSoft Utilities
2014-01-25 12:55 - 2012-07-04 19:05 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\KeePass
2014-01-25 12:49 - 2014-01-25 12:49 - 00001431 _____ C:\Users\Ingo\AppData\Local\census.cache
2014-01-25 12:49 - 2014-01-25 12:49 - 00000000 _____ C:\Users\Ingo\AppData\Local\ars.cache
2014-01-25 11:44 - 2013-01-22 20:06 - 00001064 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3237284612-487690776-1710373329-1001Core.job
2014-01-24 18:49 - 2012-09-14 17:21 - 00000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2014-01-24 17:35 - 2014-01-24 17:35 - 00000036 _____ C:\Users\Ingo\AppData\Local\housecall.guid.cache
2014-01-24 07:17 - 2010-08-31 20:04 - 00000000 ___RD C:\Users\Ingo\Desktop\Wartung
2014-01-23 21:25 - 2010-08-29 19:33 - 00000000 ____D C:\Users\Ingo\Dokumente\Youcam
2014-01-23 20:59 - 2014-01-03 13:14 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\foobar2000
2014-01-23 18:29 - 2014-01-03 13:13 - 00000000 ____D C:\Program Files (x86)\foobar2000
2014-01-23 18:18 - 2011-05-03 11:00 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\vlc
2014-01-22 17:39 - 2010-08-28 17:06 - 00000000 ____D C:\Users\Ingo\Desktop\Wichtige Daten
2014-01-20 19:51 - 2012-04-05 20:04 - 00000000 ____D C:\Users\Ingo\Desktop\TV + AVR + BD
2014-01-20 19:51 - 2010-08-31 20:14 - 00000000 ____D C:\Users\Ingo\Desktop\Tools
2014-01-20 19:50 - 2014-01-20 19:49 - 00000000 ____D C:\Users\Ingo\Desktop\MUSIK
2014-01-19 21:48 - 2014-01-19 21:48 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\RoboMirror
2014-01-18 23:39 - 2012-03-31 21:10 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-01-18 23:39 - 2012-03-31 21:10 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-18 23:39 - 2011-05-21 11:57 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-18 23:38 - 2010-08-26 21:15 - 00000000 ____D C:\Users\Ingo\AppData\Local\Adobe
2014-01-18 16:29 - 2012-04-20 17:37 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2014-01-18 16:29 - 2012-04-20 17:37 - 00000000 ____D C:\ProgramData\NCH Software
2014-01-18 12:44 - 2014-01-18 12:40 - 00000000 ____D C:\Users\Ingo\Desktop\Tamina
2014-01-17 17:49 - 2011-12-17 13:52 - 00000000 ____D C:\Users\Ingo\Dokumente\Steuerfälle
2014-01-17 17:47 - 2013-01-03 13:36 - 00000000 ____D C:\Users\Ingo\Dokumente\BelegManager
2014-01-17 17:42 - 2011-12-17 13:32 - 00000000 ___RD C:\Program Files (x86)\Akademische Arbeitsgemeinschaft
2014-01-16 18:33 - 2009-07-14 05:45 - 00566520 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 21:52 - 2013-08-14 19:23 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 21:48 - 2010-08-23 20:06 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 17:35 - 2012-01-30 17:56 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\Mp3tag
2014-01-14 21:09 - 2012-04-21 10:35 - 00001005 _____ C:\Users\Ingo\Desktop\Wecker und Küchenradio.txt
2014-01-14 19:18 - 2014-01-14 19:18 - 00000000 ____D C:\Program Files (x86)\Tools&More
2014-01-14 19:17 - 2012-04-20 17:50 - 00000000 ____D C:\Windows\Downloaded Installations
2014-01-14 19:01 - 2010-09-02 21:00 - 00000000 ____D C:\Program Files\Recuva
2014-01-12 09:18 - 2010-08-23 19:47 - 00000000 ____D C:\Program Files (x86)\Avast5
2014-01-11 19:27 - 2013-12-10 21:37 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-11 19:13 - 2010-08-23 20:50 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\Mozilla
2014-01-11 16:41 - 2012-04-20 17:36 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\NCH Software
2014-01-11 16:29 - 2014-01-11 16:29 - 00000000 ____D C:\Users\Ingo\Dokumente\Mixpad Projects
2014-01-11 16:29 - 2014-01-11 16:29 - 00000000 ____D C:\ProgramData\NCH Swift Sound
2014-01-11 16:29 - 2012-04-20 17:36 - 00000000 ____D C:\Program Files (x86)\NCH Software
2014-01-11 16:29 - 2010-08-23 18:02 - 00000000 ___RD C:\Users\Ingo\Dokumente
2014-01-11 16:28 - 2014-01-11 16:28 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
2014-01-11 16:27 - 2014-01-11 16:27 - 00000000 ____D C:\Program Files (x86)\NCH Swift Sound
2014-01-11 16:19 - 2014-01-11 16:19 - 00000000 ____D C:\Users\Ingo\Dokumente\Adobe
2014-01-11 16:19 - 2010-08-23 19:53 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\Adobe
2014-01-11 16:18 - 2010-08-23 19:29 - 00176120 _____ C:\Users\Ingo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-11 16:05 - 2009-11-07 21:14 - 00000000 ____D C:\ProgramData\Adobe
2014-01-11 15:40 - 2014-01-11 15:32 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\CUE Tools
2014-01-11 14:04 - 2014-01-11 14:04 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-11 14:03 - 2013-03-28 17:51 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-11 14:03 - 2011-02-24 20:04 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-11 14:03 - 2011-01-05 10:22 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-11 14:03 - 2010-08-23 19:47 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-11 14:03 - 2010-08-23 19:47 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-11 14:03 - 2010-08-23 19:47 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-11 13:20 - 2014-01-08 21:27 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\xrecode2
2014-01-11 12:14 - 2010-08-31 20:35 - 00000000 ____D C:\Users\Ingo\Desktop\Multimedia
2014-01-11 12:13 - 2014-01-11 12:10 - 00001136 _____ C:\Users\Ingo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaInfo.lnk
2014-01-11 12:10 - 2014-01-11 12:10 - 00000000 ____D C:\Program Files\MediaInfo
2014-01-08 21:27 - 2014-01-08 21:27 - 00000000 ____D C:\Program Files (x86)\xrecode II
2014-01-07 19:21 - 2014-01-07 19:21 - 00000000 ____D C:\Program Files (x86)\FLAC
2014-01-07 18:51 - 2011-11-24 21:09 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\DVDVideoSoft
2014-01-07 18:51 - 2010-09-04 16:25 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2014-01-07 18:42 - 2013-02-25 18:42 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\Audacity
2014-01-07 18:41 - 2011-12-07 19:25 - 00000000 ____D C:\Program Files (x86)\Mp3tag
2014-01-06 15:40 - 2009-07-14 06:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-06 12:31 - 2014-01-06 12:11 - 00000846 _____ C:\Users\Ingo\Desktop\Belege für Steuererklärung hinzufügen.txt
2014-01-05 12:54 - 2010-10-08 19:38 - 01603556 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-04 10:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2014-01-02 13:25 - 2014-01-02 10:45 - 00000000 ____D C:\Users\Ingo\Dokumente\SelfMV
2014-01-02 10:17 - 2014-01-02 10:17 - 00000000 ____D C:\Program Files\SAMSUNG
2014-01-02 10:17 - 2012-12-05 19:47 - 00000000 ____D C:\Program Files (x86)\Samsung
2014-01-02 10:04 - 2014-01-02 10:04 - 00000000 ____D C:\Users\Ingo\AppData\Local\Samsung
2014-01-02 10:04 - 2012-12-05 19:49 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\Samsung
2014-01-02 10:03 - 2014-01-02 10:03 - 00000000 ____D C:\Users\Ingo\Dokumente\samsung
2014-01-02 10:02 - 2014-01-02 09:59 - 00000000 ____D C:\ProgramData\Samsung
2014-01-02 10:01 - 2014-01-02 10:01 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2014-01-02 10:00 - 2009-11-07 19:41 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-02 09:56 - 2010-09-02 20:34 - 00000000 ____D C:\Users\Ingo\AppData\Local\Downloaded Installations
2013-12-30 21:53 - 2013-12-30 18:08 - 00000000 ____D C:\Users\Ingo\AppData\Roaming\streamWriter
2013-12-29 18:07 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-11 10:36

==================== End Of Log ============================

--- --- ---

2) Addition.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-01-2014
Ran by Ingo at 2014-01-27 18:21:11
Running from C:\Users\Ingo\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

7-Zip 9.30 (x64 edition) (Version: 9.30.00.0 - Igor Pavlov)
AAVUpdateManager (x32 Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
ACDSee 8 (x32 Version: 8.0.41 - ACD Systems Ltd.)
Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated) Hidden
Adobe Audition 3.0 (x32 Version: 3.0 - Adobe Systems Incorporated)
Adobe Audition 3.0 (x32 Version: 3.0 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (x32 Version: 1.0.6 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.0.6 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated)
Adobe Shockwave Player (x32 Version: 11.0 - Adobe Systems, Inc.)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.1.629 - Adobe Systems, Inc)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.4.144 - Adobe Systems, Inc.)
Adress Little 2.0 (x32 Version: 2.10 - Joachim Strömer)
Any Video Converter 3.0.7 (x32 Version:  - Any-Video-Converter.com)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
AquaSoft SnapTip (HKCU Version: 1.0.02 - AquaSoft)
AquaSoft SnapTip (x32 Version: 1.0.02 - AquaSoft) Hidden
Artweaver Free 3.0 (x32 Version: 3.0 - Boris Eyrich Software)
Ashampoo Burning Studio 2013 v.11.0.5 (x32 Version: 11.0.5 - Ashampoo GmbH & Co. KG)
aTube Catcher (x32 Version: 2.6.769 - DsNET Corp)
Audacity 2.0.3 (x32 Version: 2.0.3 - Audacity Team)
AusweisApp (x32 Version: 1.11.0 - OpenLimit SignCubes AG)
avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software)
Backup Service Home 3.4.4.1 (x32 Version: 3.4.4.1 - Alexander Seeliger Software)
Biet-O-Matic v2.14.6 (x32 Version: Biet-O-Matic v2.14.6 - BOM Development Team)
Bing Bar (x32 Version: 7.0.850.0 - Microsoft Corporation)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Bonjour-Druckdienste (Version: 2.0.2.0 - Apple Inc.)
Brother MFL-Pro Suite MFC-7840W (x32 Version: 1.0.1.0 - Brother Industries, Ltd.)
Camtasia Studio 7 (x32 Version: 7.0.1 - TechSmith Corporation)
CanoScan Toolbox Ver4.9 (x32 Version:  - )
CCleaner (Version: 4.08 - Piriform)
CDBurnerXP (x32 Version: 4.5.2.4255 - CDBurnerXP)
Cisco Systems VPN Client 5.0.07.0290 (Version: 5.0.7 - Cisco Systems, Inc.)
Classic Menu 3.x for Office 2007 (x32 Version:  - Addintools)
Clipdiary 1.4 (x32 Version: 1.4 - Softvoile)
Clover 3.0 (x32 Version: 3.0 - )
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
CPUID CPU-Z 1.58 (Version:  - )
CyberLink PowerDVD 9 (x32 Version: 9.0.1.5122 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.1.5122 - CyberLink Corp.) Hidden
CyberLink YouCam (x32 Version: 3.0.2201 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.0.2201 - CyberLink Corp.) Hidden
Debugging Tools for Windows (x32 Version: 6.4.7.2 - Microsoft Corporation)
Debugging Tools for Windows (x64) (Version: 6.11.1.404 - Microsoft Corporation)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)
Defraggler (Version: 2.10 - Piriform)
DirComp (x32 Version: 2.11.0000 - Wirth IT Design)
DivX Author 1.5 (x32 Version: 1.5.0 - DivX, Inc.)
DivX-Setup (x32 Version: 2.6.1.87 - DivX, LLC)
ERUNT 1.1j (x32 Version:  - Lars Hederer)
EVEREST Corporate Edition v5.02 (x32 Version: 5.02 - Lavalys, Inc.)
Exifer (x32 Version:  - Friedemann Schmidt)
Express Burn (x32 Version: 4.68 - NCH Software)
Express Rip (x32 Version: 1.92 - NCH Software)
FileZilla Client 3.7.3 (HKCU Version: 3.7.3 - Tim Kosse)
FLAC 1.2.1b (remove only) (x32 Version: 1.2.1b - Xiph.org)
foobar2000 v1.3 (x32 Version: 1.3 - Peter Pawlowski)
FormatFactory 3.2.1.0 (x32 Version: 3.2.1.0 - Free Time)
Fotosizer 2.07 (x32 Version: 2.07.0.540 - Fotosizer.com)
Free Audio CD to MP3 Converter version 1.3.12.1228 (x32 Version: 1.3.12.1228 - DVDVideoSoft Ltd.)
Free Audio Converter version 5.0.32.1230 (x32 Version: 5.0.32.1230 - DVDVideoSoft Ltd.)
Free CD Ripper V2.0 (x32 Version: 2.0.0.0 - Koyote Soft)
Free FLV Converter V 6.92.0 (x32 Version: 6.92.0.0 - Koyote Soft)
Free Video to MP3 Converter version 5.0.30.1029 (x32 Version: 5.0.30.1029 - DVDVideoSoft Ltd.)
Free Word/Doc Txt to Image Jpg/Jpeg Bmp Tiff Png Converter 5.6 (x32 Version:  - Word-Pdf-Convert Software, Inc.)
Free YouTube Download version 3.2.16.1030 (x32 Version: 3.2.16.1030 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.8 (x32 Version:  - DVDVideoSoft Limited.)
FreePDF (Remove only) (x32 Version:  - )
Garmin POI Loader (x32 Version: 2.7.0 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (x32 Version: 2.3.0.0 - Garmin Ltd or its subsidiaries)
Garmin WebUpdater (x32 Version: 2.5.4 - Garmin Ltd or its subsidiaries)
GIMP 2.8.4 (Version: 2.8.4 - The GIMP Team)
Glary Registry Repair 3.3.0.852 (x32 Version:  - GlarySoft.com)
Google Chrome (HKCU Version: 32.0.1700.76 - Google Inc.)
Google Earth Plug-in (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
GPL Ghostscript 8.71 (x32 Version:  - )
HP Customer Experience Enhancements (x32 Version: 6.0.1.3 - Hewlett-Packard) Hidden
HP Wireless Assistant (x32 Version: 3.50.11.2 - Hewlett-Packard)
IDT Audio (x32 Version: 1.0.6341.0 - IDT)
ImgBurn (x32 Version: 2.5.7.0 - LIGHTNING UK!)
Intel PROSet Wireless (Version:  - ) Hidden
Intel PROSet Wireless (x32 Version:  - ) Hidden
Intel(R) PROSet/Wireless WiFi-Software (Version: 14.01.1000 - Intel Corporation)
IrfanView (remove only) (x32 Version: 4.36 - Irfan Skiljan)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
KaloMa 4.72 (x32 Version:  - Frank Böpple)
KeePass Password Safe 2.24 (x32 Version: 2.24 - Dominik Reichl)
LAME v3.99.3 (for Windows) (x32 Version:  - )
Logitech Webcam Software (Version: 12.10.1113 - Logitech Inc.)
Logitech Webcam Software-Treiberpaket (Version: 12.10.1110 - Logitech Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Manual CanoScan LiDE 35 (x32 Version:  - )
maxdome Download Manager 4.1.300.78 (x32 Version: 4.1.30078 - Prosieben)
MediaCoder x64 0.7.3.4685 (x32 Version: 0.7.3.4685 - Broad Intelligence)
MediaCoder x64 0.8.27.5570 (Version: 0.8.27.5570 - Broad Intelligence)
MediaInfo 0.7.67 (Version: 0.7.67 - MediaArea.net)
Meine Ausnahmen (Version:  - )
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Compatibility Toolkit 5.6 (x32 Version: 5.6.7324.0 - Microsoft Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 English (x32 Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 x64 English (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Core Components (x64) ENU  (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Core Components (x86) ENU  (x32 Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Provider Services (x64) ENU  (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Provider Services (x86) ENU  (x32 Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
MixPad (x32 Version: 3.51 - NCH Software)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mp3tag v2.58 (x32 Version: v2.58 - Florian Heidenreich)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MWSnap 3 (x32 Version: 3.0.0.74 - Mirek Wojtowicz)
MyFreeCodec (HKCU Version:  - )
No23 Recorder (x32 Version: 2.1.0.3 - No23)
No23 Recorder (x32 Version: 2.1.0.3 - No23) Hidden
Nokia Connectivity Cable Driver (Version: 7.1.32.64 - )
Notepad++ (x32 Version: 6.1.1 - )
NVIDIA 3D Vision Controller Driver (x32 Version: 270.61 - NVIDIA Corporation) Hidden
NVIDIA 3D Vision Controller Driver 270.61 (Version: 270.61 - NVIDIA Corporation)
NVIDIA Display Control Panel (Version: 6.14.12.6099 - NVIDIA Corporation) Hidden
NVIDIA Grafiktreiber 327.02 (Version: 327.02 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.2.22.1 (Version: 1.2.22.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.10.0514 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514 - NVIDIA Corporation)
NVIDIA Update 1.1.34 (Version: 1.1.34 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.1.34 - NVIDIA Corporation) Hidden
O&O SafeErase (Version: 4.1.153 - O&O Software GmbH)
Paragon Backup & Recovery™ 2013 Free (x32 Version: 90.00.0003 - Paragon Software)
PC Connectivity Solution (x32 Version: 10.50.2.0 - Nokia)
PDFCreator (x32 Version: 1.0.2 - Frank Heindörfer, Philip Chinery)
Personal Backup 5.4 (x32 Version: 5.3 - J. Rathlev)
PhotoFiltre 7 (HKCU Version:  - )
Power2Go (x32 Version: 6.0.3311 - CyberLink Corp.)
Power2Go (x32 Version: 6.0.3311 - CyberLink Corp.) Hidden
PowerDirector (x32 Version: 7.0.3311 - CyberLink Corp.)
PowerDirector (x32 Version: 7.0.3311 - CyberLink Corp.) Hidden
Prism Videodatei-Konverter (x32 Version:  - NCH Software)
PureSync (x32 Version: 3.7.6 - Jumping Bytes) Hidden
PureSync 3.7.6 (x32 Version: 3.7.6 - Jumping Bytes)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
QuickConvert Video (x32 Version: 1.09.0520 - Franzis)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
Radmin Server 3.1 (x32 Version: 3.10.0000 - Famatech)
Radmin Viewer 3.4 (x32 Version: 3.41.0000 - Famatech)
RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (x32 Version: 16.0.3 - RealNetworks)
Realtek Ethernet Controller Driver (x32 Version: 7.45.516.2011 - Realtek)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30104 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
REAPER (x64) (Version:  - )
Recovery Manager (x32 Version: 5.5.2214 - CyberLink Corp.) Hidden
Recuva (Version: 1.49 - Piriform)
RedMon - Redirection Port Monitor (Version:  - )
Revo Uninstaller 1.92 (x32 Version: 1.92 - VS Revo Group)
Samsung AllShare (x32 Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.)
Samsung AllShare (x32 Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies (x32 Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
SCL011 Contactless Reader (x32 Version: 1.01 - SCM Microsystems)
Scribus 1.4.1 (x32 Version: 1.4.1 - The Scribus Team)
Secunia PSI (2.0.0.3001) (x32 Version:  - )
Serif PagePlus 11 - Installer (x32 Version:  - Avanquest GmbH)
Serif PagePlus 11 (x32 Version: 11.1.1.0 - Serif (Europe) Ltd)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Shared Add-in Extensibility Update for Microsoft .NET Framework 2.0 (KB908002) (x32 Version: 1.0.0 - Microsoft)
Shared Add-in Support Update for Microsoft .NET Framework 2.0 (KB908002) (x32 Version: 1.0.0 - Microsoft)
SIW version 2011.10.29 (x32 Version: 2011.10.29 - Topala Software Solutions)
Skype™ 5.10 (x32 Version: 5.10.116 - Skype Technologies S.A.)
Slice Audio File Splitter (x32 Version:  - NCH Software)
SlimDrivers (x32 Version: 2.2.13867 - SlimWare Utilities, Inc.)
Soda PDF 5 (x32 Version: 5.0.131.9113 - LULU SOFTWARE LIMITED)
SopCast 3.8.3 (x32 Version: 3.8.3 - www.sopcast.com)
SpeedCommander 13 (x64) (Version: 13.60.6500 - SWE Sven Ritter)
Spybot - Search & Destroy (x32 Version: 1.6.2 - Safer Networking Limited)
Steuer-Spar-Erklärung 2012 (x32 Version: 17.05 - Wolters Kluwer Deutschland GmbH)
Steuer-Spar-Erklärung 2013 (x32 Version: 18.06 - Wolters Kluwer Deutschland GmbH)
SteuerSparErklärung 2014 (x32 Version: 19.04.49 - Akademische Arbeitsgemeinschaft)
Stream What You Hear (SWYH) Version 1.3 (x32 Version: 1.3 - Sebastien.warin.fr)
streamWriter (x32 Version:  - )
SuperMailer 5.71 (x32 Version: 5.71 - Mirko Boeer Softwareentwicklungen)
Switch Sound File Converter (x32 Version: 4.52 - NCH Software)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (Version: 15.3.29.0 - Synaptics Incorporated)
System Explorer 3.9.0 (x32 Version:  - Mister Group)
System Requirements Lab for Intel (x32 Version: 4.4.24.0 - Husdawg, LLC)
tango solo (x32 Version: 4.6.3.999 - MarkStein)
TeraCopy 2.27 (Version:  - Code Sector)
Ulead PhotoImpact 12 (x32 Version: 12.0 - Ulead System)
UltraSearch V1.7.1 (x32 Version: 1.7.1 - JAM Software)
Unlocker 1.9.0-x64 (Version: 1.9.0-x64 - Cedrick Collomb)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VideoPad Video Editor (x32 Version:  - NCH Software)
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
WavePad Sound Editor (x32 Version: 5.55 - NCH Software)
Windows 7 Upgrade Advisor (x32 Version: 2.0.5000.0 - Microsoft Corporation)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (Version: 06/03/2009 2.3.0.0 - Garmin)
Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 14.0.8091.0730 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp)
Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0 - Nokia)
Winmail Opener 1.4 (x32 Version: 1.4 - Eolsoft)
WinMend Folder Hidden 1.4.1 (x32 Version:  - WinMend.com)
Wise Registry Cleaner Free 5.72 (x32 Version: 5.71 - WiseCleaner.com, Inc.)
WOW Slider (x32 Version:  - )
XAMPP 1.7.7 (x32 Version:  - )
Xenu's Link Sleuth (x32 Version: 1.3.8 - Tilman Hausherr)
xrecode II 1.0.0.209 (x32 Version:  - )
Yahoo! Messenger (x32 Version:  - Yahoo! Inc.)
YAMAHA Musicsoft Downloader 5 (x32 Version:  - )

==================== Restore Points  =========================

02-01-2014 08:57:43 Installed Samsung Kies
05-01-2014 11:50:49 Windows Update
10-01-2014 16:08:28 Windows Update
11-01-2014 13:01:22 avast! antivirus system restore point
11-01-2014 15:04:13 Installed Adobe Audition 3.0
11-01-2014 18:21:54 Removed iTunes
14-01-2014 17:55:41 Removed Java 7 Update 45 (64-bit)
14-01-2014 18:17:39 DirComp wird installiert
15-01-2014 15:45:31 Windows Update
15-01-2014 20:48:15 Windows Update
19-01-2014 20:46:02 Installed RoboMirror
19-01-2014 21:29:19 Removed RoboMirror
21-01-2014 17:21:19 Windows Update
24-01-2014 06:15:36 Avira PC Cleaner - 24.01.2014 07:15

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {006A554B-A2FE-4BE9-A08A-C7C390D548BC} - System32\Tasks\UltraSearch\UltraSearch_autostart_Ingo => d:\Programme\UltraSearch\UltraSearch.exe [2012-10-25] (JAM Software)
Task: {060D731F-213E-4324-922B-C92CED435F00} - \Plus-HD-2.2-firefoxinstaller No Task File
Task: {085F3282-95BD-40B6-8CA6-89A53C894274} - System32\Tasks\{F43834D4-58B9-485B-A1FF-987443B2495A} => C:\Program Files (x86)\PDFzuWord Professional\pdf2word.exe
Task: {0E3F4A80-8A33-4697-8C9A-80DB9AE37306} - System32\Tasks\RunAsStdUser Task => d:\Programme\Startup Delayer\Startup Delayer.exe
Task: {22645C2F-4CC3-49FF-A284-EF655191DFEA} - System32\Tasks\Backup auf externe Festplatte => C:\Users\Ingo\Desktop\Backup auf externe FP.bat
Task: {291C0C7B-A30D-4442-8B52-D9511960460E} - System32\Tasks\{80A1EBA5-013B-461B-A62B-DF3F8C41234B} => C:\Program Files (x86)\PDFzuWord Professional\pdf2word.exe
Task: {2E5C8479-5C75-4A96-938D-EEB0EE1799CF} - System32\Tasks\{9CCE2A9E-F275-4DDD-9975-301CED5EF5C8} => C:\Program Files (x86)\PDFzuWord Professional\pdf2word.exe
Task: {3DA6EB31-6657-47FE-87EB-02E73136A64D} - System32\Tasks\CCleanerSkipUAC => D:\Programme\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {3E8192D1-9859-4B91-99D4-CF82A3FD9BF0} - System32\Tasks\{75AEF577-CB5D-410A-83CE-E94971D7D929} => D:\Programme\System Explorer\SystemExplorer.exe [2012-06-18] (Mister Group)
Task: {3FFBF25D-7337-43B9-8A27-5C8F00A44437} - \Plus-HD-2.2-codedownloader No Task File
Task: {4059B5F1-BA6C-44C1-ACA7-ED694B490470} - System32\Tasks\Erinnerung an Backup
Task: {48A29376-28B4-4B59-9B98-ACBA9FBC3918} - System32\Tasks\RealCreateProcessScheduledTask12161135S-1-5-21-3237284612-487690776-1710373329-1001 => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [2013-10-22] (RealNetworks, Inc.)
Task: {4BC7B039-66D3-484A-87F6-3386F0CCC7B2} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {4EA47E88-ED65-438E-9F60-224EB3F7EB8F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3237284612-487690776-1710373329-1001Core => C:\Users\Ingo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-01-22] (Google Inc.)
Task: {50989CFB-D123-4325-B6B6-CFB78B680634} - System32\Tasks\UltraSearch\UltraSearch_shortcut_Ingo => d:\Programme\UltraSearch\UltraSearch.exe [2012-10-25] (JAM Software)
Task: {53925CE3-9732-4CC6-8954-CC8342243E7F} - System32\Tasks\{4FB59C5A-9CD7-4EEB-85E6-9A4FCEDD478D} => D:\Programme\Folder Hidden\FolderHidden.exe [2010-07-07] (WinMend.com)
Task: {6412ADB8-FA04-439C-8525-DF910D502E15} - System32\Tasks\{E61D096D-0C8B-4358-9599-7DBCBE494F9F} => D:\Programme\Any Video Converter\VideoConverter.exe [2010-07-27] (Any-Video-Converter.com)
Task: {67E2DDB9-204A-4161-A297-4B48A723174F} - \Plus-HD-2.2-chromeinstaller No Task File
Task: {798E4B3B-6141-4C5F-9E4B-08158D1CB2EC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-19] (Google Inc.)
Task: {80FE9F33-8962-44CB-8D77-62B8CDACDE89} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3237284612-487690776-1710373329-1001UA => C:\Users\Ingo\AppData\Local\Google\Update\GoogleUpdate.exe [2013-01-22] (Google Inc.)
Task: {8AFC5563-784E-4EE9-B30D-8060B8D4CBCC} - System32\Tasks\Spybot - Search & Destroy -  Scheduled Task => C:\Program Files (x86)\Spybot - Search &amp; Destroy\SpybotSD.exe
Task: {96FD081D-E8A1-4F16-970B-F3B4916DC957} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {9711D4C7-2A35-4A81-BA61-B9896D38C629} - System32\Tasks\avast! Emergency Update => C:\Program Files (x86)\Avast5\AvastEmUpdate.exe [2014-01-11] (AVAST Software)
Task: {9C4A9F33-04D0-45EB-AEEF-83640F9289F4} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {A381A019-8A45-4C29-BCF8-980A9318713D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {B08F5F98-33CD-472E-A106-A6DD372B8610} - System32\Tasks\{C6C72D9E-182C-4501-9678-4589C613021D} => D:\Programme\System Explorer\SystemExplorer.exe [2012-06-18] (Mister Group)
Task: {B4C00403-9728-4B85-94C9-F290EDE3BFDE} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3237284612-487690776-1710373329-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {D3F5468F-7E8D-44D1-BE83-A059A9EB23EC} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3237284612-487690776-1710373329-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {D6DC5A6A-FE28-4E9D-B2C9-D6A5CA8296FD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-18] (Adobe Systems Incorporated)
Task: {E2D9B0C9-2726-408D-B13B-1D061AE046AA} - \Plus-HD-2.2-updater No Task File
Task: {EAA7599C-DAA2-47A2-966A-C71F7EAD2410} - System32\Tasks\{9A06E3D4-E744-4179-94D4-90494C03E44B} => D:\Programme\Revo Uninstaller\revouninstaller.exe [2011-04-14] (VS Revo Group)
Task: {EB2AA6F0-7A09-4FCE-AD61-B6F3FB0BA4E5} - \Plus-HD-2.2-enabler No Task File
Task: {F02A3F61-6BD2-4546-A3A7-32E1EFA2693E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3237284612-487690776-1710373329-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {F3F6AC43-1580-4D22-BEB4-425F02EF71C2} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3237284612-487690776-1710373329-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {FF441A93-F71E-4E95-883D-3DD1F2A0196F} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3237284612-487690776-1710373329-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {FF7BE7BA-D1C1-4A97-8AF8-4A75E19A79DC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-19] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3237284612-487690776-1710373329-1001Core.job => C:\Users\Ingo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3237284612-487690776-1710373329-1001UA.job => C:\Users\Ingo\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Spybot - Search & Destroy -  Scheduled Task.job => C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe

==================== Loaded Modules (whitelisted) =============

2011-05-02 12:41 - 2011-05-02 12:41 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2010-10-10 20:39 - 2005-03-12 00:07 - 00087040 _____ () C:\Windows\System32\pdfcmnnt.dll
2010-08-31 21:02 - 2005-03-12 01:07 - 00087040 _____ () C:\Windows\System32\redmonnt.dll
2012-08-29 20:33 - 2005-04-22 12:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () D:\Programme\FileZilla FTP Client\fzshellext_64.dll
2010-04-30 00:40 - 2010-04-30 00:40 - 00013312 _____ () D:\Programme\Unlocker\UnlockerCOM.dll
2013-05-16 18:19 - 2011-10-26 16:41 - 00318976 _____ () d:\Programme\TeraCopy\TeraCopyExt64.dll
2011-07-18 22:04 - 2011-07-18 22:04 - 00301568 _____ () D:\Programme\Notepad++\NppShell_04.dll
2011-05-02 12:41 - 2011-05-02 12:41 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2013-05-16 18:19 - 2011-10-26 16:41 - 00126464 _____ () d:\Programme\TeraCopy\TeraCopy64.dll
2014-01-26 13:45 - 2014-01-26 11:54 - 02166272 _____ () C:\Program Files (x86)\Avast5\defs\14012600\algo.dll
2014-01-27 17:09 - 2014-01-27 14:41 - 02166272 _____ () C:\Program Files (x86)\Avast5\defs\14012700\algo.dll
2012-10-11 21:56 - 2012-10-11 21:56 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-10-11 21:56 - 2012-10-11 21:56 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2010-03-23 12:26 - 2010-03-23 12:26 - 00201512 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 01057512 _____ () D:\programme\maxdome\DCBin\PocoFoundation.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00627944 _____ () D:\programme\maxdome\DCBin\PocoNet.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00514352 _____ () D:\programme\maxdome\DCBin\sqlite3.dll
2009-05-01 17:58 - 2009-05-01 17:58 - 00517352 _____ () D:\programme\maxdome\DCBin\PocoXML.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2007-05-22 17:44 - 2007-05-22 17:44 - 00350711 _____ () D:\Programme\Clipdiary\sqlite3.dll
2013-12-09 20:33 - 2012-07-11 10:47 - 00518144 _____ () C:\Program Files (x86)\Stream What You Hear\Lame_enc.dll
2013-12-07 11:22 - 2013-12-07 11:22 - 19336120 _____ () C:\Program Files (x86)\Avast5\libcef.dll
2012-08-29 20:33 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-08-29 01:25 - 2013-08-29 01:25 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2013-08-07 20:25 - 2013-08-07 20:25 - 00093696 _____ () D:\Programme\FileZilla FTP Client\fzshellext.dll
2013-12-20 16:10 - 2013-12-20 16:10 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-01-18 23:39 - 2014-01-18 23:39 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\ProgramData\Temp:D282699C

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"

==================== Faulty Device Manager Devices =============

Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (01/19/2014 10:29:44 PM) (Source: MsiInstaller) (User: INGOS-LAPTOP)
Description: Product: RoboMirror -- Error 1310. Error writing to file: C:\Config.Msi\1c33e3a.rbf.  System error 5.  Verify that you have access to that directory.

Error: (01/17/2014 05:42:47 PM) (Source: MsiInstaller) (User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\adl\vunfall.adb.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.

Error: (01/17/2014 05:42:46 PM) (Source: MsiInstaller) (User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\adl\vorsorgekvfragen.adb.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.

Error: (01/17/2014 05:39:17 PM) (Source: MsiInstaller) (User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\adl\einkvvnksonst.adb.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.

Error: (01/17/2014 05:37:47 PM) (Source: MsiInstaller) (User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\adl\auswtaetigkverpfl.adb.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.

Error: (01/17/2014 05:37:45 PM) (Source: MsiInstaller) (User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\adl\agbsonstx.adb.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.

Error: (01/17/2014 05:37:44 PM) (Source: MsiInstaller) (User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Config.Msi\PFAB0.tmp.  Systemfehler 0. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.

Error: (01/17/2014 05:37:43 PM) (Source: MsiInstaller) (User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1321. Installer besitzt keine ausreichenden Berechtigungen, um diese Datei zu verändern: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\ddf\ermaess.ddb.

Error: (01/17/2014 05:37:41 PM) (Source: MsiInstaller) (User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1321. Installer besitzt keine ausreichenden Berechtigungen, um diese Datei zu verändern: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\extras\SBES-141-LstKlassenVergl2013.htm.

Error: (01/17/2014 05:37:40 PM) (Source: MsiInstaller) (User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Config.Msi\db616.rbf.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.


System errors:
=============
Error: (01/27/2014 05:16:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (01/26/2014 10:37:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (01/19/2014 10:16:20 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (01/18/2014 10:33:05 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (01/17/2014 05:27:05 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (01/14/2014 10:32:09 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR3 gefunden.

Error: (01/14/2014 10:23:33 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (01/12/2014 09:23:46 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde nicht richtig gestartet.

Error: (01/11/2014 09:41:45 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (01/11/2014 09:20:41 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.


Microsoft Office Sessions:
=========================
Error: (01/19/2014 10:29:44 PM) (Source: MsiInstaller)(User: INGOS-LAPTOP)
Description: Product: RoboMirror -- Error 1310. Error writing to file: C:\Config.Msi\1c33e3a.rbf.  System error 5.  Verify that you have access to that directory.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/17/2014 05:42:47 PM) (Source: MsiInstaller)(User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\adl\vunfall.adb.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/17/2014 05:42:46 PM) (Source: MsiInstaller)(User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\adl\vorsorgekvfragen.adb.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/17/2014 05:39:17 PM) (Source: MsiInstaller)(User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\adl\einkvvnksonst.adb.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/17/2014 05:37:47 PM) (Source: MsiInstaller)(User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\adl\auswtaetigkverpfl.adb.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/17/2014 05:37:45 PM) (Source: MsiInstaller)(User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\adl\agbsonstx.adb.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/17/2014 05:37:44 PM) (Source: MsiInstaller)(User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Config.Msi\PFAB0.tmp.  Systemfehler 0. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/17/2014 05:37:43 PM) (Source: MsiInstaller)(User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1321. Installer besitzt keine ausreichenden Berechtigungen, um diese Datei zu verändern: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\ddf\ermaess.ddb.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/17/2014 05:37:41 PM) (Source: MsiInstaller)(User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1321. Installer besitzt keine ausreichenden Berechtigungen, um diese Datei zu verändern: C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\SteuerSparErklaerung 2014\extras\SBES-141-LstKlassenVergl2013.htm.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (01/17/2014 05:37:40 PM) (Source: MsiInstaller)(User: INGOS-LAPTOP)
Description: Produkt: SteuerSparErklärung 2014 -- Fehler 1310. Fehler beim Schreiben in Datei: C:\Config.Msi\db616.rbf.  Systemfehler 5. Überprüfen Sie, ob Sie auf den Ordner zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL)


CodeIntegrity Errors:
===================================
  Date: 2012-12-26 20:21:16.060
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\wow64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-12-26 18:34:27.212
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\wow64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2012-12-25 18:40:25.280
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\wow64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 68%
Total physical RAM: 4062.93 MB
Available physical RAM: 1283.93 MB
Total Pagefile: 8124.03 MB
Available Pagefile: 5303.19 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:125.46 GB) (Free:50.33 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Daten) (Fixed) (Total:88.36 GB) (Free:71.47 GB) NTFS
Drive f: (Install) (Fixed) (Total:19.53 GB) (Free:5.02 GB) NTFS
Drive g: (Backup) (Fixed) (Total:37.11 GB) (Free:9.15 GB) NTFS
Drive h: () (Fixed) (Total:14.67 GB) (Free:14.54 GB) NTFS
Drive v: (Daten) (Network) (Total:88.36 GB) (Free:71.47 GB) NTFS
Drive x: (RECOVERY) (Fixed) (Total:12.76 GB) (Free:2.13 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 5B1FB528)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=125 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=160 GB) - (Type=05)
Partition 4: (Not Active) - (Size=13 GB) - (Type=07 NTFS)

==================== End Of Log ============================

Danke und Gruss,
imebro

schrauber · 28.01.2014, 14:58

sauber

imebro · 29.01.2014, 08:48

...na das ist doch mal ein Statement

Danke Dir!!

LG
imebro

Hallo nochmal...

Wie sieht es denn jetzt mit meiner Outlook.pst aus?
Wie kann ich denn jetzt meine Emails auf einen Trojaner checken?

Ich hatte ja den Postein- u. Ausgang archiviert und anschließend auch komprimiert, um alle gelöschten Mails auch tatsächlich zu löschen.

Wie gehe ich jetzt am besten vor, um sicher zu sein, dass sich keine Mail mit einem Trojaner im aktuellen Postein- oder Ausgang befindet bzw. in den archivierten Mails?

Danke und Gruss,
imebro

schrauber · 29.01.2014, 17:13

Wenn du komprimiert hast sollte sie sauber sein, bereinigen kann man die nicht.

24.01.2014, 09:12	#2
schrauber /// the machine /// TB-Ausbilder	BSI-Sicherheitstest - Mailadresse wurde gehackt - Avira PC-Cleaner findet Trojaner in outlook.pst Hi, zeig mal das Log von Avira. Outlook.pst bedeutet das irgend eine Mail die damals komprimiert wurde verseucht ist, oder ein Anhang. Also bleibt nur PST aufmachen, und einzeln checken. __________________ __________________

25.01.2014, 21:25	#6
schrauber /// the machine /// TB-Ausbilder	BSI-Sicherheitstest - Mailadresse wurde gehackt - Avira PC-Cleaner findet Trojaner in outlook.pst Poste dann mal die Logs __________________ --> BSI-Sicherheitstest - Mailadresse wurde gehackt - Avira PC-Cleaner findet Trojaner in outlook.pst

26.01.2014, 08:15	#8
schrauber /// the machine /// TB-Ausbilder	BSI-Sicherheitstest - Mailadresse wurde gehackt - Avira PC-Cleaner findet Trojaner in outlook.pst Guggst Du Mailbox-Dateien und Virenscanner __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

28.01.2014, 14:58	#12
schrauber /// the machine /// TB-Ausbilder	BSI-Sicherheitstest - Mailadresse wurde gehackt - Avira PC-Cleaner findet Trojaner in outlook.pst sauber __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

29.01.2014, 17:13	#14
schrauber /// the machine /// TB-Ausbilder	BSI-Sicherheitstest - Mailadresse wurde gehackt - Avira PC-Cleaner findet Trojaner in outlook.pst Wenn du komprimiert hast sollte sie sauber sein, bereinigen kann man die nicht. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

BSI-Sicherheitstest - Mailadresse wurde gehackt - Avira PC-Cleaner findet Trojaner in outlook.pst

Plagegeister aller Art und deren Bekämpfung: BSI-Sicherheitstest - Mailadresse wurde gehackt - Avira PC-Cleaner findet Trojaner in outlook.pst