|
Plagegeister aller Art und deren Bekämpfung: "ads not from this site" NUR in Chrome - bisher half nixWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
01.02.2014, 18:02 | #1 |
| "ads not from this site" NUR in Chrome - bisher half nix Halo zusammen, ich hab das im Betreff genannte Problem. FireFox und IEx sind sauber. Ich hab - adwcleaner - malwarebytes anti Malware - WinOpimizer (Ashampoo) - PandaCloudCleaner - McAfee SecurityScanPlus benutzt. Jedes mal wurde mir gesagt : Alles klar, ist nach nem Neustart sauber. Leider nicht. Jetzt möchte ich doch Eure Hilfe in Anspruch nehmen. Habe den FRST64 laufen lassen, siehe Protokolle. Ich erbitte Hilfe. Danke vorab |
01.02.2014, 20:33 | #2 |
/// the machine /// TB-Ausbilder | "ads not from this site" NUR in Chrome - bisher half nix Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
01.02.2014, 20:47 | #3 |
| "ads not from this site" NUR in Chrome - bisher half nix habe die Funktion wegen der Logs nicht gefunden.. sorry..
__________________hier sind sie FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04 Ran by admin (administrator) on DIDIQUADPC on 01-02-2014 17:56:22 Running from C:\Users\Dieter\Desktop Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe (CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (1&1 Internet AG) C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe (Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe () C:\Program Files (x86)\WISO\Steuersoftware 2014\mshaktuell.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Dropbox, Inc.) C:\Users\Dieter\AppData\Roaming\Dropbox\bin\Dropbox.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-12-10] (Adobe Systems Incorporated) HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [722256 2008-12-12] (CANON INC.) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink) HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-20] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.) HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2239376 2013-12-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478392 2013-09-05] (Adobe Systems Inc.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.) HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1 HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\Run: [1&1_1&1 Upload-Manager] - C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE [989264 2011-11-21] (1&1 Internet AG) HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\Run: [Lync] - C:\Program Files\Microsoft Office 15\root\office15\lync.exe [22312608 2014-01-15] (Microsoft Corporation) HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google) HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-12-11] (Samsung) HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung) HKU\S-1-5-21-1942426975-168617158-1696248371-1002\...\MountPoints2: {6d257820-399c-11e3-8250-806e6f6e6963} - "J:\zdata\cobi.exe" AppInit_DLLs: C:\PROGRA~2\GS_X64~1.ENA => C:\Program Files (x86)\GS_x64.Enabler [2759168 2014-01-16] () AppInit_DLLs-x32: c:\progra~2\gsb779~1.ena => C:\Program Files (x86)\GS.Enabler [3041792 2014-01-16] () Startup: C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Dieter\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com SearchScopes: HKLM - DefaultScope {193FC469-1C0E-4F27-9337-44F3743DEB11} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKLM - {193FC469-1C0E-4F27-9337-44F3743DEB11} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKCU - {05981031-C8A5-43F1-B829-4D69FC0A9B29} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS SearchScopes: HKCU - {193FC469-1C0E-4F27-9337-44F3743DEB11} URL = hxxp://www.sm.de/?q={searchTerms} SearchScopes: HKCU - {C1208F42-8BF2-4E37-B75F-D580A1C4D5F8} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=72a79f26000000000000801f028a8153&r=906 BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKCU - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Tcpip\..\Interfaces\{B37694CD-C8CF-455D-A18C-04361AA66989}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 FireFox: ======== FF ProfilePath: C:\Users\Dieter\AppData\Roaming\Mozilla\Firefox\Profiles\bcqbrui4.default FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect_x86_64 - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_43.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.130\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-10-13] Chrome: ======= CHR Extension: (Google Docs) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-01] CHR Extension: (Google Drive) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-17] CHR Extension: (YouTube) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-01] CHR Extension: (Google-Suche) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-01] CHR Extension: (TubEAdblocker) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\egjciaipacdhinjoljdnjaagkhbdlggf [2014-01-31] CHR Extension: (Google Wallet) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-13] CHR Extension: (Google Mail) - C:\Users\Dieter\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-01] CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Dieter\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2014-01-17] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 1a34a8e0; C:\Program Files (x86)\GSSvc.dll [146768 2014-01-16] () R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.) R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink) R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink) R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1830768 2013-10-16] (SurfRight B.V.) S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe [288776 2013-09-06] (McAfee, Inc.) R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1907896 2013-10-31] (Microsoft Corporation) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] () R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) S3 WO_LiveService; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerService.exe [885096 2013-11-19] () ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [129536 2013-07-05] (Advanced Micro Devices) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) S3 FsUsbExDisk; C:\WINDOWS\SysWOW64\FsUsbExDisk.SYS [37344 2013-10-30] () R2 hmpalert; C:\Windows\system32\drivers\hmpalert.sys [17416 2013-10-16] () S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-11-11] (Microsoft Corporation) R2 LiveTunerPM; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\LiveTunerProcessMonitor64.sys [12824 2011-03-08] () S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) S3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1975000 2013-07-31] (Realtek Semiconductor Corporation ) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-10-26] (Microsoft Corporation) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) S3 DfSdkS; S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-01 17:56 - 2014-02-01 17:56 - 00020791 _____ () C:\Users\Dieter\Desktop\FRST.txt 2014-02-01 17:56 - 2014-02-01 17:56 - 00000000 ____D () C:\FRST 2014-02-01 17:44 - 2014-02-01 17:44 - 00001951 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-02-01 17:44 - 2014-02-01 17:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-02-01 17:43 - 2014-02-01 17:43 - 02080256 _____ (Farbar) C:\Users\Dieter\Downloads\FRST64.exe 2014-02-01 17:43 - 2014-02-01 17:43 - 02080256 _____ (Farbar) C:\Users\Dieter\Desktop\FRST64.exe 2014-02-01 17:38 - 2014-02-01 17:39 - 05179159 _____ (Swearware) C:\Users\Dieter\Downloads\ComboFix.exe 2014-02-01 17:22 - 2014-02-01 17:22 - 01166132 _____ () C:\Users\Dieter\Downloads\adwcleaner.exe 2014-02-01 17:14 - 2014-02-01 17:14 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-02-01 17:13 - 2014-02-01 17:13 - 00000000 ____D () C:\ProgramData\McAfee 2014-02-01 17:12 - 2014-02-01 17:41 - 00009791 _____ () C:\WINDOWS\WindowsUpdate.log 2014-02-01 17:10 - 2014-02-01 17:10 - 00000608 _____ () C:\WINDOWS\PFRO.log 2014-02-01 16:54 - 2014-02-01 16:54 - 00003668 _____ () C:\WINDOWS\System32\Tasks\One-Click Optimizer 2014-02-01 16:53 - 2014-02-01 16:54 - 00000000 ____D () C:\ProgramData\Ashampoo 2014-02-01 16:53 - 2014-02-01 16:53 - 00002268 _____ () C:\Users\Public\Desktop\Ein-Klick-Optimierung (WO10).lnk 2014-02-01 16:53 - 2014-02-01 16:53 - 00001246 _____ () C:\Users\Public\Desktop\Ashampoo WinOptimizer 10.lnk 2014-02-01 16:53 - 2014-02-01 16:53 - 00000000 ____D () C:\Program Files (x86)\Ashampoo 2014-02-01 16:53 - 2009-08-24 21:13 - 00034304 _____ (mst software GmbH, Germany) C:\WINDOWS\system32\DfSdkBt.exe 2014-02-01 16:40 - 2014-02-01 16:40 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe 2014-02-01 16:40 - 2014-02-01 16:40 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe 2014-02-01 16:40 - 2014-02-01 16:40 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe 2014-02-01 16:40 - 2014-02-01 16:40 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll 2014-02-01 16:38 - 2014-02-01 16:38 - 35868608 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Dieter\Downloads\7176_2_ashampoo_winoptimizer_10_10_3_0_15172.exe 2014-02-01 15:53 - 2014-02-01 15:53 - 00000000 _____ () C:\autoexec.bat 2014-02-01 15:52 - 2014-02-01 15:52 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-02-01 15:51 - 2014-02-01 17:21 - 00000000 ____D () C:\WINDOWS\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP 2014-02-01 15:51 - 2014-02-01 15:51 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dieter\Downloads\SpyHunter-Installer.exe 2014-02-01 15:39 - 2014-02-01 15:39 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Macromedia 2014-02-01 15:37 - 2014-02-01 15:37 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Mozilla 2014-02-01 15:36 - 2014-02-01 15:36 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-01 15:36 - 2014-02-01 15:36 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-01 15:36 - 2014-02-01 15:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-01 15:35 - 2014-02-01 15:35 - 21703480 _____ (Mozilla) C:\Users\Dieter\Downloads\Firefox Setup 22.0.exe 2014-01-31 18:06 - 2014-01-31 18:06 - 00001125 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Malwarebytes 2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-31 18:06 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-01-31 17:10 - 2013-04-08 15:30 - 00022752 _____ () C:\WINDOWS\system32\PCloudBroom64.exe 2014-01-31 16:39 - 2014-01-31 16:39 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dieter\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-31 16:37 - 2014-01-31 16:37 - 00000000 ____D () C:\Program Files (x86)\Panda Security 2014-01-31 16:37 - 2013-04-29 08:17 - 00047632 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSKMAD.sys 2014-01-31 16:36 - 2014-01-31 16:37 - 28026504 _____ (Panda Security ) C:\Users\Dieter\Downloads\PandaCloudCleaner.exe 2014-01-31 16:09 - 2014-01-31 16:09 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 16:09 - 2014-01-31 16:09 - 00000000 ____D () C:\ProgramData\egjciaipacdhinjoljdnjaagkhbdlggf 2014-01-30 19:38 - 2014-01-30 19:38 - 00001249 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk 2014-01-30 19:38 - 2014-01-30 19:38 - 00000000 ____D () C:\ProgramData\elsterformular 2014-01-30 19:38 - 2014-01-30 19:38 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular 2014-01-30 19:37 - 2014-01-30 19:37 - 78303584 _____ (Landesfinanzdirektion Thüringen) C:\Users\Dieter\Downloads\ElsterFormular-15.0.20140117p.exe 2014-01-27 20:17 - 2014-01-27 20:17 - 02038597 _____ () C:\Users\Dieter\Downloads\eXtplorer_2.1.5.zip 2014-01-27 20:02 - 2014-01-27 20:02 - 00666578 _____ () C:\Users\Dieter\Downloads\plg_jcemediabox_1114_joomla25.zip 2014-01-26 17:21 - 2014-01-26 17:21 - 00021698 _____ () C:\Users\Dieter\Downloads\Blank_Joomla_Template_UNZIP_ME_FIRST.zip 2014-01-26 17:08 - 2014-01-26 17:08 - 16851317 _____ () C:\Users\Dieter\Downloads\t3_blank_j32.zip 2014-01-26 17:01 - 2014-01-26 17:01 - 00911974 _____ () C:\Users\Dieter\Downloads\Blank-Template-2.6.1 (1).zip 2014-01-26 13:51 - 2014-01-26 13:51 - 00196885 _____ () C:\Users\Dieter\Downloads\mod_accordeonck_2.0.7_j30.zip 2014-01-26 13:34 - 2014-01-26 13:34 - 00341454 _____ () C:\Users\Dieter\Downloads\mod_maximenuck_7.1.6_j30.zip 2014-01-26 11:33 - 2014-01-26 11:33 - 00031022 _____ () C:\Users\Dieter\Downloads\Gestrandet-im-Dschungel-Die-Urwald-Hits-2014-by-Taekwondo00.nzb 2014-01-26 11:32 - 2014-01-26 11:32 - 00053214 _____ () C:\Users\Dieter\Downloads\Rattenscharf-Vol.71-2014-by-Taekwondo88.nzb 2014-01-25 16:27 - 2014-01-25 16:27 - 00666578 _____ () C:\Users\Dieter\Downloads\plg_jcemediabox_1114_joomla3.zip 2014-01-25 16:26 - 2014-01-25 16:26 - 00064871 _____ () C:\Users\Dieter\Downloads\jce_language_de-DE_234.zip 2014-01-25 15:45 - 2014-01-25 15:45 - 11341429 _____ () C:\Users\Dieter\Downloads\psd.zip 2014-01-25 15:45 - 2014-01-25 15:45 - 00911974 _____ () C:\Users\Dieter\Downloads\Blank-Template-2.6.1.zip 2014-01-24 19:44 - 2014-01-24 19:44 - 00078785 _____ () C:\Users\Dieter\Downloads\My Special 2014 Vol.01.nzb 2014-01-24 19:44 - 2014-01-24 19:44 - 00061293 _____ () C:\Users\Dieter\Downloads\Hot-Rod-Rockabilly-by-Taekwondo.nzb 2014-01-24 19:43 - 2014-01-24 19:43 - 00118429 _____ () C:\Users\Dieter\Downloads\Bravo-Hits-Vol.84-2CD-2014-by-Taekwondo.nzb 2014-01-24 19:43 - 2014-01-24 19:43 - 00050364 _____ () C:\Users\Dieter\Downloads\Peter-Maffay-Wenn-das-so-ist-Premium-Edition-2014-by-Taekwondo.nzb 2014-01-24 19:42 - 2014-01-24 19:42 - 00267905 _____ () C:\Users\Dieter\Downloads\The Kinks - Kollekted (3CD).nzb 2014-01-24 19:41 - 2014-01-24 19:41 - 00261650 _____ () C:\Users\Dieter\Downloads\l26l26jgtkzhgfgbljzc.par2.nzb 2014-01-24 19:40 - 2014-01-24 19:40 - 00015897 _____ () C:\Users\Dieter\Downloads\k26k26khtzjgvcui7rth.par2.nzb 2014-01-24 19:39 - 2014-01-24 19:39 - 00701266 _____ () C:\Users\Dieter\Downloads\haifischerl7.par2.nzb 2014-01-24 19:39 - 2014-01-24 19:39 - 00495021 _____ () C:\Users\Dieter\Downloads\haifischerl8.par2.nzb 2014-01-24 19:39 - 2014-01-24 19:39 - 00407853 _____ () C:\Users\Dieter\Downloads\haifischerl5.par2.nzb 2014-01-24 19:38 - 2014-01-24 19:38 - 00512531 _____ () C:\Users\Dieter\Downloads\haifischerl10.par2.nzb 2014-01-22 20:42 - 2014-01-22 20:42 - 00642177 _____ () C:\Users\Dieter\Downloads\01-layout.zip 2014-01-22 19:45 - 2014-01-22 19:45 - 00003261 _____ () C:\Users\Dieter\Downloads\Extensoft-Artisteer-v4.2.0-Build-60559a-CRACKED.rar.nzb 2014-01-22 19:36 - 2014-01-22 19:36 - 00069909 _____ () C:\Users\Dieter\Downloads\Extensoft.Artisteer.4.2.0.60559+Keygen+Crack.part0.nzb 2014-01-22 19:32 - 2014-01-22 19:35 - 123768816 _____ () C:\Users\Dieter\Downloads\Artisteer.4.2.0.60623.exe 2014-01-22 19:29 - 2014-01-22 19:29 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Artisteer 2014-01-22 19:25 - 2014-01-22 19:25 - 00076770 _____ () C:\Users\Dieter\Downloads\Artisteer 4.2.nzb 2014-01-22 19:08 - 2014-01-22 19:08 - 09782558 _____ () C:\Users\Dieter\Downloads\Joomla_3.2.1-Stable-Full_Package_German.zip 2014-01-22 17:04 - 2014-01-22 17:04 - 07457004 _____ () C:\Users\Dieter\Downloads\Joomla_3.1.1-Stable-Update_Package.zip 2014-01-22 15:21 - 2014-01-22 15:22 - 11065184 _____ () C:\Users\Dieter\Downloads\usr_web147_10.sql 2014-01-22 12:32 - 2014-01-22 12:32 - 00404735 _____ () C:\Users\Dieter\Downloads\Uploader.Presents-Abhaun.2013.German.AC3D.HDRip.Xvid-IND.nzb 2014-01-20 13:24 - 2014-01-20 13:24 - 00644595 _____ () C:\Users\Dieter\Downloads\e26e26htjku77609ikj.par2.nzb 2014-01-20 13:23 - 2014-01-20 13:23 - 00442967 _____ () C:\Users\Dieter\Downloads\d26d26htjzukuil76oiutfjgh.par2.nzb 2014-01-20 12:57 - 2014-01-20 12:57 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2014-01-20 12:57 - 2014-01-20 12:57 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2014-01-20 12:57 - 2014-01-20 12:57 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2014-01-20 12:57 - 2014-01-20 12:57 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2014-01-20 12:54 - 2014-01-20 12:54 - 30796712 _____ (Oracle Corporation) C:\Users\Dieter\Downloads\jre-7u51-windows-x64.exe 2014-01-20 12:54 - 2014-01-20 12:54 - 00000843 _____ () C:\Users\Dieter\Downloads\sd (1).jnlp 2014-01-16 18:38 - 2014-01-24 12:13 - 00000000 ____D () C:\ProgramData\SNT 2014-01-16 18:38 - 2014-01-23 13:58 - 00000000 ____D () C:\Program Files (x86)\SNT 2014-01-16 18:37 - 2014-02-01 17:28 - 00000486 ____H () C:\WINDOWS\Tasks\GS.Enabler-S-1824435291.job 2014-01-16 18:37 - 2014-01-31 18:27 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker 2014-01-16 18:37 - 2014-01-16 18:37 - 03041792 _____ () C:\Program Files (x86)\GS.Enabler 2014-01-16 18:37 - 2014-01-16 18:37 - 02759168 _____ () C:\Program Files (x86)\GS_x64.Enabler 2014-01-16 18:37 - 2014-01-16 18:37 - 00146768 _____ () C:\Program Files (x86)\GSSvc.dll 2014-01-16 18:37 - 2014-01-16 18:37 - 00002724 _____ () C:\WINDOWS\System32\Tasks\GS.Enabler-S-1824435291 2014-01-16 18:37 - 2014-01-16 18:37 - 00000000 ____D () C:\ProgramData\House Of Soft 2014-01-16 18:36 - 2014-01-31 16:09 - 00000000 ____D () C:\ProgramData\3baab739ab8ff135 2014-01-16 18:36 - 2014-01-18 11:40 - 00000000 ____D () C:\ProgramData\greATsaverr 2014-01-16 18:36 - 2014-01-17 11:05 - 00000000 ____D () C:\Program Files (x86)\greATsaverr 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$ 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Comodo 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\diete_000\AppData\Local\Torch 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\diete_000\AppData\Local\Comodo 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator 2014-01-16 18:35 - 2014-01-16 18:35 - 00000000 ____D () C:\ProgramData\InstallMate 2014-01-16 16:27 - 2014-01-16 16:28 - 37479382 _____ () C:\Users\Dieter\Downloads\Microsoft Toolkit.rar 2014-01-16 16:04 - 2013-11-22 11:21 - 00000000 ____D () C:\Users\Dieter\Downloads\Adobe Acrobat XI Pro 11.0.5 2014-01-16 14:49 - 2014-01-16 15:54 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part3.rar 2014-01-16 14:45 - 2014-01-16 15:55 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part2.rar 2014-01-16 14:43 - 2014-01-16 14:44 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part1.rar 2014-01-16 14:14 - 2014-01-16 14:21 - 34002190 _____ () C:\Users\Dieter\Downloads\U10599.part4.rar 2014-01-15 15:56 - 2013-12-09 01:15 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-01-15 15:56 - 2013-11-27 16:36 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2014-01-15 15:56 - 2013-11-27 12:41 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe 2014-01-15 15:56 - 2013-11-27 11:34 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll 2014-01-15 15:56 - 2013-11-27 10:54 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll 2014-01-15 15:56 - 2013-11-27 09:48 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-01-15 15:56 - 2013-11-27 09:45 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll 2014-01-15 15:56 - 2013-11-27 09:40 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-01-15 15:56 - 2013-11-27 09:38 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll 2014-01-15 15:56 - 2013-11-27 09:17 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-01-15 15:56 - 2013-11-27 09:12 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-01-06 20:18 - 2014-01-06 20:18 - 02549916 _____ () C:\Users\Dieter\Downloads\01KMSpico_Install.rar 2014-01-04 14:12 - 2014-01-04 14:12 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Android SDK Tools 2014-01-04 14:12 - 2014-01-04 14:12 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Android 2014-01-04 14:08 - 2014-01-04 14:09 - 76520869 _____ (Google Inc.) C:\Users\Dieter\Downloads\installer_r21.0.1-windows.exe 2014-01-04 13:56 - 2014-01-04 13:57 - 272624044 _____ () C:\Users\Dieter\Downloads\III_8188_131108.zip 2014-01-04 13:27 - 2014-01-04 14:30 - 00000000 ____D () C:\Users\Dieter\.android 2014-01-03 12:18 - 2014-01-03 12:18 - 04377740 _____ () C:\Users\Dieter\Downloads\AdobeCC-Amtlib.dll.rar ==================== One Month Modified Files and Folders ======= 2014-02-01 17:56 - 2014-02-01 17:56 - 00020791 _____ () C:\Users\Dieter\Desktop\FRST.txt 2014-02-01 17:56 - 2014-02-01 17:56 - 00000000 ____D () C:\FRST 2014-02-01 17:50 - 2013-10-13 18:12 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1942426975-168617158-1696248371-1002 2014-02-01 17:46 - 2013-10-17 19:02 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-02-01 17:45 - 2013-10-13 18:30 - 00001132 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-01 17:44 - 2014-02-01 17:44 - 00001951 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-02-01 17:44 - 2014-02-01 17:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-02-01 17:43 - 2014-02-01 17:43 - 02080256 _____ (Farbar) C:\Users\Dieter\Downloads\FRST64.exe 2014-02-01 17:43 - 2014-02-01 17:43 - 02080256 _____ (Farbar) C:\Users\Dieter\Desktop\FRST64.exe 2014-02-01 17:41 - 2014-02-01 17:12 - 00009791 _____ () C:\WINDOWS\WindowsUpdate.log 2014-02-01 17:41 - 2013-10-17 18:42 - 00005144 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for DidiQuadPC-admin DidiQuadPC 2014-02-01 17:39 - 2014-02-01 17:38 - 05179159 _____ (Swearware) C:\Users\Dieter\Downloads\ComboFix.exe 2014-02-01 17:31 - 2013-10-13 19:00 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Adobe 2014-02-01 17:30 - 2013-10-27 18:45 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Dropbox 2014-02-01 17:30 - 2013-10-13 18:30 - 00002199 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-02-01 17:28 - 2014-01-16 18:37 - 00000486 ____H () C:\WINDOWS\Tasks\GS.Enabler-S-1824435291.job 2014-02-01 17:28 - 2013-10-13 18:30 - 00001128 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-01 17:27 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-02-01 17:25 - 2013-12-06 18:45 - 00000000 ____D () C:\AdwCleaner 2014-02-01 17:22 - 2014-02-01 17:22 - 01166132 _____ () C:\Users\Dieter\Downloads\adwcleaner.exe 2014-02-01 17:21 - 2014-02-01 15:51 - 00000000 ____D () C:\WINDOWS\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP 2014-02-01 17:17 - 2013-09-30 05:14 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-02-01 17:17 - 2013-09-30 04:56 - 00764340 _____ () C:\WINDOWS\system32\perfh007.dat 2014-02-01 17:17 - 2013-09-30 04:56 - 00159160 _____ () C:\WINDOWS\system32\perfc007.dat 2014-02-01 17:14 - 2014-02-01 17:14 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-02-01 17:14 - 2013-12-21 15:49 - 00003938 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{139BA647-7D28-4AD3-98E8-F28EF8D54402} 2014-02-01 17:13 - 2014-02-01 17:13 - 00000000 ____D () C:\ProgramData\McAfee 2014-02-01 17:13 - 2013-10-17 19:02 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-02-01 17:10 - 2014-02-01 17:10 - 00000608 _____ () C:\WINDOWS\PFRO.log 2014-02-01 17:06 - 2013-10-20 17:29 - 00000000 ___DC () C:\WINDOWS\Panther 2014-02-01 17:02 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-02-01 16:55 - 2013-11-01 18:49 - 00000000 ____D () C:\Users\Dieter\Documents\Outlook-Dateien 2014-02-01 16:54 - 2014-02-01 16:54 - 00003668 _____ () C:\WINDOWS\System32\Tasks\One-Click Optimizer 2014-02-01 16:54 - 2014-02-01 16:53 - 00000000 ____D () C:\ProgramData\Ashampoo 2014-02-01 16:53 - 2014-02-01 16:53 - 00002268 _____ () C:\Users\Public\Desktop\Ein-Klick-Optimierung (WO10).lnk 2014-02-01 16:53 - 2014-02-01 16:53 - 00001246 _____ () C:\Users\Public\Desktop\Ashampoo WinOptimizer 10.lnk 2014-02-01 16:53 - 2014-02-01 16:53 - 00000000 ____D () C:\Program Files (x86)\Ashampoo 2014-02-01 16:40 - 2014-02-01 16:40 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe 2014-02-01 16:40 - 2014-02-01 16:40 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe 2014-02-01 16:40 - 2014-02-01 16:40 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe 2014-02-01 16:40 - 2014-02-01 16:40 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll 2014-02-01 16:40 - 2014-02-01 16:40 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll 2014-02-01 16:38 - 2014-02-01 16:38 - 35868608 _____ (Ashampoo GmbH & Co. KG ) C:\Users\Dieter\Downloads\7176_2_ashampoo_winoptimizer_10_10_3_0_15172.exe 2014-02-01 15:53 - 2014-02-01 15:53 - 00000000 _____ () C:\autoexec.bat 2014-02-01 15:52 - 2014-02-01 15:52 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-02-01 15:51 - 2014-02-01 15:51 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Dieter\Downloads\SpyHunter-Installer.exe 2014-02-01 15:39 - 2014-02-01 15:39 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Macromedia 2014-02-01 15:37 - 2014-02-01 15:37 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Mozilla 2014-02-01 15:37 - 2013-11-19 19:08 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Mozilla 2014-02-01 15:36 - 2014-02-01 15:36 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-01 15:36 - 2014-02-01 15:36 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-01 15:36 - 2014-02-01 15:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-01 15:36 - 2013-12-01 15:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-01 15:35 - 2014-02-01 15:35 - 21703480 _____ (Mozilla) C:\Users\Dieter\Downloads\Firefox Setup 22.0.exe 2014-01-31 18:52 - 2013-10-26 17:37 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\FileZilla 2014-01-31 18:27 - 2014-01-16 18:37 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker 2014-01-31 18:06 - 2014-01-31 18:06 - 00001125 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Malwarebytes 2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-01-31 18:06 - 2014-01-31 18:06 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-31 16:39 - 2014-01-31 16:39 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Dieter\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-31 16:37 - 2014-01-31 16:37 - 00000000 ____D () C:\Program Files (x86)\Panda Security 2014-01-31 16:37 - 2014-01-31 16:36 - 28026504 _____ (Panda Security ) C:\Users\Dieter\Downloads\PandaCloudCleaner.exe 2014-01-31 16:09 - 2014-01-31 16:09 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 16:09 - 2014-01-31 16:09 - 00000000 ____D () C:\ProgramData\egjciaipacdhinjoljdnjaagkhbdlggf 2014-01-31 16:09 - 2014-01-16 18:36 - 00000000 ____D () C:\ProgramData\3baab739ab8ff135 2014-01-31 16:09 - 2013-08-22 16:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy 2014-01-31 16:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy 2014-01-30 20:43 - 2013-10-13 18:03 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Packages 2014-01-30 19:38 - 2014-01-30 19:38 - 00001249 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk 2014-01-30 19:38 - 2014-01-30 19:38 - 00000000 ____D () C:\ProgramData\elsterformular 2014-01-30 19:38 - 2014-01-30 19:38 - 00000000 ____D () C:\Program Files (x86)\ElsterFormular 2014-01-30 19:37 - 2014-01-30 19:37 - 78303584 _____ (Landesfinanzdirektion Thüringen) C:\Users\Dieter\Downloads\ElsterFormular-15.0.20140117p.exe 2014-01-29 16:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\FxsTmp 2014-01-27 20:42 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI 2014-01-27 20:17 - 2014-01-27 20:17 - 02038597 _____ () C:\Users\Dieter\Downloads\eXtplorer_2.1.5.zip 2014-01-27 20:02 - 2014-01-27 20:02 - 00666578 _____ () C:\Users\Dieter\Downloads\plg_jcemediabox_1114_joomla25.zip 2014-01-27 18:28 - 2013-12-19 17:41 - 00000000 ____D () C:\Users\Dieter\AppData\Local\FRITZ! 2014-01-26 17:33 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-01-26 17:21 - 2014-01-26 17:21 - 00021698 _____ () C:\Users\Dieter\Downloads\Blank_Joomla_Template_UNZIP_ME_FIRST.zip 2014-01-26 17:08 - 2014-01-26 17:08 - 16851317 _____ () C:\Users\Dieter\Downloads\t3_blank_j32.zip 2014-01-26 17:01 - 2014-01-26 17:01 - 00911974 _____ () C:\Users\Dieter\Downloads\Blank-Template-2.6.1 (1).zip 2014-01-26 13:51 - 2014-01-26 13:51 - 00196885 _____ () C:\Users\Dieter\Downloads\mod_accordeonck_2.0.7_j30.zip 2014-01-26 13:34 - 2014-01-26 13:34 - 00341454 _____ () C:\Users\Dieter\Downloads\mod_maximenuck_7.1.6_j30.zip 2014-01-26 11:33 - 2014-01-26 11:33 - 00031022 _____ () C:\Users\Dieter\Downloads\Gestrandet-im-Dschungel-Die-Urwald-Hits-2014-by-Taekwondo00.nzb 2014-01-26 11:32 - 2014-01-26 11:32 - 00053214 _____ () C:\Users\Dieter\Downloads\Rattenscharf-Vol.71-2014-by-Taekwondo88.nzb 2014-01-25 16:27 - 2014-01-25 16:27 - 00666578 _____ () C:\Users\Dieter\Downloads\plg_jcemediabox_1114_joomla3.zip 2014-01-25 16:26 - 2014-01-25 16:26 - 00064871 _____ () C:\Users\Dieter\Downloads\jce_language_de-DE_234.zip 2014-01-25 15:45 - 2014-01-25 15:45 - 11341429 _____ () C:\Users\Dieter\Downloads\psd.zip 2014-01-25 15:45 - 2014-01-25 15:45 - 00911974 _____ () C:\Users\Dieter\Downloads\Blank-Template-2.6.1.zip 2014-01-25 13:51 - 2013-10-26 19:17 - 00005120 _____ () C:\Users\Dieter\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-01-25 12:53 - 2013-10-20 18:46 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\vlc 2014-01-24 19:44 - 2014-01-24 19:44 - 00078785 _____ () C:\Users\Dieter\Downloads\My Special 2014 Vol.01.nzb 2014-01-24 19:44 - 2014-01-24 19:44 - 00061293 _____ () C:\Users\Dieter\Downloads\Hot-Rod-Rockabilly-by-Taekwondo.nzb 2014-01-24 19:43 - 2014-01-24 19:43 - 00118429 _____ () C:\Users\Dieter\Downloads\Bravo-Hits-Vol.84-2CD-2014-by-Taekwondo.nzb 2014-01-24 19:43 - 2014-01-24 19:43 - 00050364 _____ () C:\Users\Dieter\Downloads\Peter-Maffay-Wenn-das-so-ist-Premium-Edition-2014-by-Taekwondo.nzb 2014-01-24 19:42 - 2014-01-24 19:42 - 00267905 _____ () C:\Users\Dieter\Downloads\The Kinks - Kollekted (3CD).nzb 2014-01-24 19:41 - 2014-01-24 19:41 - 00261650 _____ () C:\Users\Dieter\Downloads\l26l26jgtkzhgfgbljzc.par2.nzb 2014-01-24 19:40 - 2014-01-24 19:40 - 00015897 _____ () C:\Users\Dieter\Downloads\k26k26khtzjgvcui7rth.par2.nzb 2014-01-24 19:39 - 2014-01-24 19:39 - 00701266 _____ () C:\Users\Dieter\Downloads\haifischerl7.par2.nzb 2014-01-24 19:39 - 2014-01-24 19:39 - 00495021 _____ () C:\Users\Dieter\Downloads\haifischerl8.par2.nzb 2014-01-24 19:39 - 2014-01-24 19:39 - 00407853 _____ () C:\Users\Dieter\Downloads\haifischerl5.par2.nzb 2014-01-24 19:38 - 2014-01-24 19:38 - 00512531 _____ () C:\Users\Dieter\Downloads\haifischerl10.par2.nzb 2014-01-24 12:13 - 2014-01-16 18:38 - 00000000 ____D () C:\ProgramData\SNT 2014-01-23 13:58 - 2014-01-16 18:38 - 00000000 ____D () C:\Program Files (x86)\SNT 2014-01-23 13:33 - 2013-11-11 20:09 - 00000000 ____D () C:\Users\Dieter\Documents\Mein Steuer-Sparbuch Heute 2014-01-22 20:54 - 2013-10-23 17:07 - 00004028 _____ () C:\Users\Dieter\Sti_Trace.log 2014-01-22 20:42 - 2014-01-22 20:42 - 00642177 _____ () C:\Users\Dieter\Downloads\01-layout.zip 2014-01-22 19:45 - 2014-01-22 19:45 - 00003261 _____ () C:\Users\Dieter\Downloads\Extensoft-Artisteer-v4.2.0-Build-60559a-CRACKED.rar.nzb 2014-01-22 19:36 - 2014-01-22 19:36 - 00069909 _____ () C:\Users\Dieter\Downloads\Extensoft.Artisteer.4.2.0.60559+Keygen+Crack.part0.nzb 2014-01-22 19:35 - 2014-01-22 19:32 - 123768816 _____ () C:\Users\Dieter\Downloads\Artisteer.4.2.0.60623.exe 2014-01-22 19:29 - 2014-01-22 19:29 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Artisteer 2014-01-22 19:29 - 2013-11-30 18:48 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Apple Computer 2014-01-22 19:25 - 2014-01-22 19:25 - 00076770 _____ () C:\Users\Dieter\Downloads\Artisteer 4.2.nzb 2014-01-22 19:08 - 2014-01-22 19:08 - 09782558 _____ () C:\Users\Dieter\Downloads\Joomla_3.2.1-Stable-Full_Package_German.zip 2014-01-22 17:04 - 2014-01-22 17:04 - 07457004 _____ () C:\Users\Dieter\Downloads\Joomla_3.1.1-Stable-Update_Package.zip 2014-01-22 15:22 - 2014-01-22 15:21 - 11065184 _____ () C:\Users\Dieter\Downloads\usr_web147_10.sql 2014-01-22 12:32 - 2014-01-22 12:32 - 00404735 _____ () C:\Users\Dieter\Downloads\Uploader.Presents-Abhaun.2013.German.AC3D.HDRip.Xvid-IND.nzb 2014-01-22 11:21 - 2013-11-11 19:37 - 00000547 _____ () C:\WINDOWS\wiso.ini 2014-01-22 11:16 - 2013-10-20 17:14 - 00000000 ____D () C:\Program Files\Microsoft Office 15 2014-01-20 13:24 - 2014-01-20 13:24 - 00644595 _____ () C:\Users\Dieter\Downloads\e26e26htjku77609ikj.par2.nzb 2014-01-20 13:23 - 2014-01-20 13:23 - 00442967 _____ () C:\Users\Dieter\Downloads\d26d26htjzukuil76oiutfjgh.par2.nzb 2014-01-20 12:57 - 2014-01-20 12:57 - 00312744 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe 2014-01-20 12:57 - 2014-01-20 12:57 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe 2014-01-20 12:57 - 2014-01-20 12:57 - 00189352 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe 2014-01-20 12:57 - 2014-01-20 12:57 - 00108968 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2014-01-20 12:54 - 2014-01-20 12:54 - 30796712 _____ (Oracle Corporation) C:\Users\Dieter\Downloads\jre-7u51-windows-x64.exe 2014-01-20 12:54 - 2014-01-20 12:54 - 00000843 _____ () C:\Users\Dieter\Downloads\sd (1).jnlp 2014-01-19 08:38 - 2013-10-15 06:15 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2014-01-18 11:40 - 2014-01-16 18:36 - 00000000 ____D () C:\ProgramData\greATsaverr 2014-01-17 11:06 - 2013-10-13 18:05 - 00000000 ___RD () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-17 11:05 - 2014-01-16 18:36 - 00000000 ____D () C:\Program Files (x86)\greATsaverr 2014-01-17 11:05 - 2013-10-27 18:48 - 00001076 _____ () C:\Users\Dieter\Desktop\Dropbox.lnk 2014-01-17 11:05 - 2013-10-27 18:46 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-16 18:41 - 2013-11-24 18:01 - 00002084 _____ () C:\Users\Dieter\Desktop\Entfernen des Avira EU-Cleaners.lnk 2014-01-16 18:41 - 2013-11-24 18:01 - 00002028 _____ () C:\Users\Dieter\Desktop\Avira EU-Cleaner.lnk 2014-01-16 18:37 - 2014-01-16 18:37 - 03041792 _____ () C:\Program Files (x86)\GS.Enabler 2014-01-16 18:37 - 2014-01-16 18:37 - 02759168 _____ () C:\Program Files (x86)\GS_x64.Enabler 2014-01-16 18:37 - 2014-01-16 18:37 - 00146768 _____ () C:\Program Files (x86)\GSSvc.dll 2014-01-16 18:37 - 2014-01-16 18:37 - 00002724 _____ () C:\WINDOWS\System32\Tasks\GS.Enabler-S-1824435291 2014-01-16 18:37 - 2014-01-16 18:37 - 00000000 ____D () C:\ProgramData\House Of Soft 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\HomeGroupUser$ 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Gast 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Comodo 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\diete_000\AppData\Local\Torch 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\diete_000\AppData\Local\Comodo 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo 2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D () C:\Users\Administrator 2014-01-16 18:36 - 2013-10-13 18:30 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Google 2014-01-16 18:35 - 2014-01-16 18:35 - 00000000 ____D () C:\ProgramData\InstallMate 2014-01-16 16:28 - 2014-01-16 16:27 - 37479382 _____ () C:\Users\Dieter\Downloads\Microsoft Toolkit.rar 2014-01-16 15:55 - 2014-01-16 14:45 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part2.rar 2014-01-16 15:54 - 2014-01-16 14:49 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part3.rar 2014-01-16 14:44 - 2014-01-16 14:43 - 209715200 _____ () C:\Users\Dieter\Downloads\U10599.part1.rar 2014-01-16 14:21 - 2014-01-16 14:14 - 34002190 _____ () C:\Users\Dieter\Downloads\U10599.part4.rar 2014-01-16 13:26 - 2013-10-14 22:17 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-01-16 13:25 - 2012-11-09 09:35 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-01-15 18:52 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-01-06 23:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-01-06 23:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-06 20:18 - 2014-01-06 20:18 - 02549916 _____ () C:\Users\Dieter\Downloads\01KMSpico_Install.rar 2014-01-04 14:30 - 2014-01-04 13:27 - 00000000 ____D () C:\Users\Dieter\.android 2014-01-04 14:12 - 2014-01-04 14:12 - 00000000 ____D () C:\Users\Dieter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Android SDK Tools 2014-01-04 14:12 - 2014-01-04 14:12 - 00000000 ____D () C:\Users\Dieter\AppData\Local\Android 2014-01-04 14:09 - 2014-01-04 14:08 - 76520869 _____ (Google Inc.) C:\Users\Dieter\Downloads\installer_r21.0.1-windows.exe 2014-01-04 13:57 - 2014-01-04 13:56 - 272624044 _____ () C:\Users\Dieter\Downloads\III_8188_131108.zip 2014-01-04 13:27 - 2013-10-20 16:35 - 00000000 ____D () C:\Users\Dieter 2014-01-03 12:24 - 2013-10-13 19:41 - 00000000 ____D () C:\Program Files\Adobe 2014-01-03 12:23 - 2013-10-13 19:01 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-01-03 12:18 - 2014-01-03 12:18 - 04377740 _____ () C:\Users\Dieter\Downloads\AdobeCC-Amtlib.dll.rar 2014-01-03 12:16 - 2013-10-13 19:20 - 00001321 _____ () C:\Users\Public\Desktop\Adobe Creative Cloud.lnk Some content of TEMP: ==================== C:\Users\Dieter\AppData\Local\Temp\Quarantine.exe C:\Users\Dieter\AppData\Local\Temp\TsuA35E60FB.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-27 18:34 ==================== End Of Log ============================ --- --- --- Additions.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04 Ran by admin at 2014-02-01 17:57:13 Running from C:\Users\Dieter\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== 1&1 Upload-Manager (x32 Version: 2.0.676 - 1&1 Internet AG) Adobe Acrobat XI Pro (x32 Version: 11.0 - Adobe Systems Incorporated) Adobe Acrobat XI Pro (x32 Version: 11.0.05 - Adobe Systems) Adobe AIR (x32 Version: 3.9.0.1030 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.9.0.1030 - Adobe Systems Incorporated) Hidden Adobe Creative Cloud (x32 Version: 2.3.0.322 - Adobe Systems Incorporated) Adobe Download Assistant (x32 Version: 1.2 - Adobe Systems Incorporated) Adobe Download Assistant (x32 Version: 1.2 - Adobe Systems Incorporated) Hidden Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.43 - Adobe Systems Incorporated) Adobe InDesign CC (x32 Version: 9.0 - Adobe Systems Incorporated) Adobe Photoshop CC (x32 Version: 14.0 - Adobe Systems Incorporated) Adobe® Content Viewer (x32 Version: 3.3.0 - Adobe Systems Incorporated) Adobe® Content Viewer (x32 Version: 3.3.0 - Adobe Systems Incorporated) Hidden AMD Accelerated Video Transcoding (Version: 13.15.100.30830 - Advanced Micro Devices, Inc.) Hidden AMD Accelerated Video Transcoding (Version: 2.00.0002 - Advanced Micro Devices, Inc.) Hidden AMD APP SDK Runtime (Version: 10.0.938.2 - Advanced Micro Devices Inc.) Hidden AMD Catalyst Control Center (x32 Version: 2013.0830.1944.33589 - Ihr Firmenname) Hidden AMD Catalyst Install Manager (Version: 8.0.881.0 - Advanced Micro Devices, Inc.) AMD Catalyst Install Manager (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) AMD Fuel (Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden AMD Fuel (Version: 2013.0830.1944.33589 - Ihr Firmenname) Hidden AMD VISION Engine Control Center (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden Android SDK Tools (x32 Version: 1.16 - Google Inc.) Apple Application Support (x32 Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) Ashampoo AppLauncher (Medion) v.1.0.0 (x32 Version: 1.0.0 - Ashampoo GmbH & Co. KG) Ashampoo WinOptimizer 10 v.10.3.0 (x32 Version: 10.03.00 - Ashampoo GmbH & Co. KG) AVM FRITZ!fax für FRITZ!Box (x32 Version: - AVM Berlin) Bonjour (Version: 3.0.0.10 - Apple Inc.) Canon MP Navigator EX 2.1 (x32 Version: - ) Canon Utilities Solution Menu (x32 Version: - ) CanoScan LiDE 700F Scanner Driver (Version: - ) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Standard (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Chinese Traditional (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Czech (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Danish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Dutch (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help English (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Finnish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help French (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help German (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Greek (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Hungarian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Italian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Japanese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Korean (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Norwegian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Polish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Portuguese (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Russian (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Spanish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2012.0806.1155.19437 - Advanced Micro Devices, Inc.) Hidden CCC Help Swedish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Thai (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden CCC Help Turkish (x32 Version: 2013.0830.1943.33589 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2012.0806.1156.19437 - Advanced Micro Devices, Inc.) Hidden ccc-utility64 (Version: 2013.0830.1944.33589 - Advanced Micro Devices, Inc.) Hidden CDBurnerXP (x32 Version: 4.5.2.4291 - CDBurnerXP) CloneDVD2 (x32 Version: 2.9.3.0 - Elaborate Bytes) CrystalDiskInfo 6.0.1 (x32 Version: 6.0.1 - Crystal Dew World) CyberLink LabelPrint 2.5 (x32 Version: 2.5.5415 - CyberLink Corp.) Hidden CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3111_44883 - CyberLink Corp.) Hidden CyberLink PhotoDirector 3 (x32 Version: 3.0.3124 - CyberLink Corp.) CyberLink PhotoDirector 3 (x32 Version: 3.0.3124 - CyberLink Corp.) Hidden CyberLink PhotoNow (x32 Version: 1.1.7717 - CyberLink Corp.) CyberLink PhotoNow (x32 Version: 1.1.7717 - CyberLink Corp.) Hidden CyberLink Power2Go 8 (x32 Version: 8.0.0.1920 - CyberLink Corp.) Hidden CyberLink PowerDirector (Version: 9.0.0.3815c - CyberLink Corp.) Hidden CyberLink PowerDVD 10 (x32 Version: 10.0.4125.02 - CyberLink Corp.) Hidden CyberLink PowerDVD Copy 1.5 (x32 Version: 1.5.2715b - CyberLink Corp.) Hidden CyberLink PowerRecover (Version: 5.7.0.0913 - CyberLink Corp.) Hidden CyberLink PowerRecover (x32 Version: 5.7.0.0913 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Deutschland Digital 1.0.0 (x32 Version: 1.0.0 - Ashampoo GmbH & Co. KG) Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) ElsterFormular (x32 Version: 15.0.20140117 - Landesfinanzdirektion Thüringen) FileZilla Client 3.7.3 (x32 Version: 3.7.3 - Tim Kosse) Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fotogalerija (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fotogalleri (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fotogalleriet (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fotoğraf Galerisi (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Fotótár (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galeria de Fotografias (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galería de fotos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galeria fotografii (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Google Chrome (x32 Version: 32.0.1700.102 - Google Inc.) Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden GS.Supporter 1.80 (x32 Version: - Verified Publisher) <==== ATTENTION HitmanPro.Alert (Version: 2.0.10.45 - SurfRight B.V.) IrfanView (remove only) (x32 Version: 4.36 - Irfan Skiljan) iTunes (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 45 (x32 Version: 7.0.450 - Oracle) Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) McAfee Security Scan Plus (Version: 3.8.130.10 - McAfee, Inc.) Mediathek (x32 Version: 1.4.0 - Medion) Medion Home Cinema 10 (x32 Version: 10.0 - CyberLink Corp.) Medion Home Cinema 10 (x32 Version: 10.1924 - CyberLink Corp.) Hidden Mein Verein (x32 Version: 13.0 - Buhl Data Service GmbH) Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4551.1512 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft Silverlight (x32 Version: 4.1.10329.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 22.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden Nero Backup Drivers (Version: 1.0.11100.8.0 - Nero AG) NewsLeecher v5.0 Final (x32 Version: - ) Notepad++ (x32 Version: 6.5 - Notepad++ Team) Office 15 Click-to-Run Extensibility Component (Version: 15.0.4551.1512 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (Version: 15.0.4551.1512 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (Version: 15.0.4551.1512 - Microsoft Corporation) Hidden PDF Settings CC (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden QuickLaunch (x32 Version: 1.00.0019 - Lenovo Group Limited) QuickPar 0.9 (x32 Version: 0.9 - Peter B. Clements) Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (x32 Version: 6.0.1.6710 - Realtek Semiconductor Corp.) Samsung Kies (x32 Version: 2.1.1.11124_17 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.1.1.11124_17 - Samsung Electronics Co., Ltd.) Hidden VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN) WinDFT (x32 Version: 1.0.0 - HGST) Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden WinRAR 5.00 (64-bit) (Version: 5.00.0 - win.rar GmbH) WISO Steuer-Sparbuch 2014 (x32 Version: 21.00.8480 - Buhl Data Service GmbH) Your Software Deals 1.0.0 (x32 Version: 1.0.0 - Ashampoo GmbH & Co. KG) Συλλογή φωτογραφιών (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 16-01-2014 17:43:37 Avira EU-Cleaner - 16.01.2014 18:43 20-01-2014 11:56:22 Installed Java 7 Update 51 (64-bit) 27-01-2014 17:40:22 Geplanter Prüfpunkt 01-02-2014 14:52:06 Installed SpyHunter ==================== Hosts content: ========================== 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {10BAB471-EF1E-4D67-8275-A3DD0DBBB549} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-10-31] (Microsoft Corporation) Task: {1F40C80D-BD07-423D-8463-ABE89A73072C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-11-13] (Microsoft Corporation) Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {36074F83-49BD-4244-AC1B-0BF740DC7A1D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.) Task: {3964E442-3E22-4F52-8CBB-CFDAB548883A} - System32\Tasks\Microsoft Office 15 Sync Maintenance for DidiQuadPC-admin DidiQuadPC => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2014-01-15] (Microsoft Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {4E97D71E-57FE-4DB6-9D0F-064F02A988F8} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-dieter.kampf@gmx.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-12-10] (Adobe Systems Incorporated) Task: {629F94E8-74D6-4858-843C-662CC618BFD9} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-01-16] (Microsoft Corporation) Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {7265AC63-9FEC-4891-8187-3E9EFB7666EA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-13] (Google Inc.) Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {9CE5B567-0C81-4521-A20D-050779D16CE3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-11-13] (Microsoft Corporation) Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {A1079AE0-C302-485C-8625-DFA61B3D8017} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-01] (Adobe Systems Incorporated) Task: {BAEDDA2C-D0B2-4015-915C-FB798BD9139E} - System32\Tasks\GS.Enabler-S-1824435291 => c:\programdata\house of soft\gs.enabler\GS.Enabler.exe <==== ATTENTION Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {E275C4AF-D374-4522-9B1F-B367BB37CD0F} - System32\Tasks\One-Click Optimizer => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\WO10.exe [2013-11-19] (Ashampoo Development GmbH & Co. KG) Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GS.Enabler-S-1824435291.job => c:\programdata\house of soft\gs.enabler\GS.Enabler.exe <==== ATTENTION ==================== Loaded Modules (whitelisted) ============= 2013-12-13 12:20 - 2013-12-13 12:20 - 03359600 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll 2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll 2012-08-06 13:08 - 2012-08-06 13:08 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2014-01-16 18:37 - 2014-01-16 18:37 - 00146768 _____ () C:\Program Files (x86)\GSSvc.dll 2014-01-16 18:37 - 2014-01-16 18:37 - 03041792 _____ () C:\Program Files (x86)\GS.Enabler 2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-02-01 17:28 - 2014-02-01 17:28 - 00098816 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32api.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00110080 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\pywintypes27.dll 2014-02-01 17:28 - 2014-02-01 17:28 - 00364544 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\pythoncom27.dll 2014-02-01 17:28 - 2014-02-01 17:28 - 00044032 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_socket.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 01153024 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_ssl.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00320512 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32com.shell.shell.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00711680 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_hashlib.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 01175040 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._core_.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00805888 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._gdi_.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00811008 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._windows_.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 01062400 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._controls_.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00735232 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._misc_.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00128512 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_elementtree.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00127488 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\pyexpat.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00557056 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\pysqlite2._sqlite.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00087040 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_ctypes.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00119808 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32file.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00108544 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32security.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00018432 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32event.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00038912 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32inet.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00122368 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._wizard.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00026624 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\_multiprocessing.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00070656 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\wx._html2.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00010240 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\select.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00686080 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\unicodedata.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00025600 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32pdh.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00521680 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\windows._lib_cacheinvalidation.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00011264 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32crypt.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00024064 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32pipe.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00035840 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32process.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00017408 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32profile.pyd 2014-02-01 17:28 - 2014-02-01 17:28 - 00022528 _____ () C:\Users\Dieter\AppData\Local\Temp\_MEI5362\win32ts.pyd 2013-12-19 10:49 - 2013-12-19 10:49 - 32733080 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libcef.dll 2013-08-07 20:25 - 2013-08-07 20:25 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll 2013-11-11 19:36 - 2013-12-19 14:45 - 09618736 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wgui14.dll 2013-11-11 19:36 - 2013-12-19 14:45 - 03698992 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wcore14.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 00035120 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsdcom48.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 00309040 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rscorewinapi48.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 00321840 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsguiwinapi48.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 02573104 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wfvie14.dll 2013-11-11 19:36 - 2013-10-30 17:37 - 01043456 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-core.dll 2013-11-11 19:36 - 2013-10-30 17:37 - 00250368 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-contribs-lib.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 00136496 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\rsodbc48.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 01886000 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wsteu14.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 01905456 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wreli14.dll 2013-11-11 19:36 - 2013-10-30 17:37 - 00094720 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2014\clucene-shared.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 04274992 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wauff14.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 01468208 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wmain14.dll 2013-11-11 19:36 - 2013-12-19 14:45 - 05055792 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae114.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 01678640 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae214.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 01804080 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae314.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 01626416 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wbae414.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 01126704 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\whau114.dll 2013-11-11 19:36 - 2013-12-19 14:45 - 01313072 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\whau214.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 01281840 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wwerb14.dll 2013-11-11 19:36 - 2013-12-19 14:45 - 07274288 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wkont14.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 01274672 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wimp14.dll 2013-11-11 19:36 - 2013-12-19 14:44 - 01330480 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2014\wfabu14.dll 2012-09-23 19:43 - 2012-09-23 19:43 - 00010240 _____ () C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\de_de\acrotray.deu 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Dieter\AppData\Roaming\Dropbox\bin\libcef.dll 2013-12-19 10:49 - 2013-12-19 10:49 - 00742808 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libglesv2.dll 2013-12-19 10:49 - 2013-12-19 10:49 - 00136600 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\libegl.dll 2014-02-01 15:36 - 2013-06-18 15:21 - 03285912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Realtek RTL8188CU Wireless LAN 802.11n-USB 2.0-Netzwerkadapter Description: Realtek RTL8188CU Wireless LAN 802.11n-USB 2.0-Netzwerkadapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Realtek Semiconductor Corp. Service: RtlWlanu Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Could not start eventlog service, could not read events. Der angeforderte Dienst wurde bereits gestartet. Sie erhalten weitere Hilfe, wenn Sie NET HELPMSG 2182 eingeben. ==================== Memory info =========================== Percentage of memory in use: 44% Total physical RAM: 3542.76 MB Available physical RAM: 1982.19 MB Total Pagefile: 4182.76 MB Available Pagefile: 2336.05 MB Total Virtual: 131072 MB Available Virtual: 131071.79 MB ==================== Drives ================================ Drive c: (Boot) (Fixed) (Total:447.44 GB) (Free:385.63 GB) NTFS Drive d: (PrivateDaten) (Fixed) (Total:422.02 GB) (Free:392.03 GB) NTFS Drive e: (Recover) (Fixed) (Total:60 GB) (Free:43.9 GB) NTFS Drive f: (Musik) (Fixed) (Total:931.51 GB) (Free:123.94 GB) NTFS Drive g: (leer1TB) (Fixed) (Total:931.51 GB) (Free:871.87 GB) NTFS Drive j: (MY_WEEK_WITH_MARILYN) (CDROM) (Total:5.53 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 932 GB) (Disk ID: 00000000) Partition: GPT Partition Type ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 639A875E) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Size: 932 GB) (Disk ID: 034F4965) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
02.02.2014, 07:24 | #4 |
/// the machine /// TB-Ausbilder | "ads not from this site" NUR in Chrome - bisher half nix Chrome deinstallieren, keine DAten behalten, neu installieren. Verbindest Du mit einem Google Konto?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
02.02.2014, 09:19 | #5 |
| "ads not from this site" NUR in Chrome - bisher half nix Ja, ich verbinde mit Google Was gäbe es bei einer Neuinstallation zu beachten? |
03.02.2014, 10:23 | #6 |
/// the machine /// TB-Ausbilder | "ads not from this site" NUR in Chrome - bisher half nix Du wirst gefragt ob Du Daten behalten willst, Nein wählen. Dann neu installierne und testen.
__________________ --> "ads not from this site" NUR in Chrome - bisher half nix |
04.02.2014, 17:16 | #7 |
| "ads not from this site" NUR in Chrome - bisher half nix Chrome bereits am Sonntag deinstalliert (incl. aller alter Daten). Da Du mich wg. der Google-Verbindung fragtest, hatte ich nicht einfach neu installieren wollen. habe das jetzt getan und es sieht gut aus. Ich sag mal danke und würde das Thema damit als abgeschlossen betrachten können/wollen. |
05.02.2014, 12:23 | #8 |
/// the machine /// TB-Ausbilder | "ads not from this site" NUR in Chrome - bisher half nix Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu "ads not from this site" NUR in Chrome - bisher half nix |
ads, anti, ashampoo, betreff, chrome, erbitte, hilfe, iex, laufe, laufen, malwarebytes, mcafee, neustart, not, this, zusammen |