| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Google Chrome öffnet sich...Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
09.03.2014, 08:48
| #16 |
| /// the machine /// TB-Ausbilder    |  Google Chrome öffnet sich... Das Log ist unvollständig und nicht in Codetags 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.03.2014, 11:25
| #17 |
 | Google Chrome öffnet sich...FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-03-2014
Ran by Schnuppel (administrator) on SCHNUPPEL-PC on 09-03-2014 11:22:56
Running from C:\Users\Schnuppel\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
(Intel Corporation) C:\WINDOWS\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [Dell Registration] - C:\Program Files (x86)\System Registration\prodreg.exe [4165440 2011-08-04] (Dell, Inc.)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [RoxWatchTray] - c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [AccuWeatherWidget] - C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.facebook.de/
SearchScopes: HKCU - {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Chrome:
=======
CHR Extension: (Google Wallet) - C:\Users\Schnuppel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-26]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199304 2012-05-25] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-01] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-17] (Avira Operations GmbH & Co. KG)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-09 11:04 - 2014-03-09 11:08 - 00000112 _____ () C:\windows\setupact.log
2014-03-09 11:04 - 2014-03-09 11:04 - 00000000 _____ () C:\windows\setuperr.log
2014-03-08 15:16 - 2014-03-09 11:22 - 00009079 _____ () C:\Users\Schnuppel\Desktop\FRST.txt
2014-03-07 17:10 - 2014-03-07 17:10 - 00003000 _____ () C:\windows\System32\Tasks\{61012C3F-26CC-4E01-A20A-37127768BDAE}
2014-03-07 17:08 - 2014-03-07 17:08 - 00003000 _____ () C:\windows\System32\Tasks\{A2C75968-E758-47A2-A933-B9772D3786FD}
2014-03-06 16:53 - 2014-03-09 11:11 - 00183412 _____ () C:\windows\WindowsUpdate.log
2014-03-06 15:18 - 2014-03-06 15:18 - 02156544 _____ (Farbar) C:\Users\Schnuppel\Desktop\FRST64.exe
2014-03-06 15:18 - 2014-03-06 15:18 - 00000000 ____D () C:\Users\Schnuppel\Desktop\FRST-OlderVersion
2014-03-06 15:17 - 2014-03-06 15:17 - 00000096 _____ () C:\Users\Schnuppel\Downloads\Fixlist.txt
2014-03-06 15:15 - 2014-03-06 15:16 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-06 15:15 - 2014-03-06 15:16 - 00000000 ____D () C:\Program Files\iTunes
2014-03-06 15:15 - 2014-03-06 15:16 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Program Files\iPod
2014-03-05 19:23 - 2014-03-05 19:23 - 00448512 _____ (OldTimer Tools) C:\Users\Schnuppel\Desktop\TFC.exe
2014-03-05 19:15 - 2014-03-05 19:15 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml (1).msi
2014-03-05 19:14 - 2014-03-05 19:14 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml.msi
2014-03-05 19:11 - 2014-03-05 19:11 - 00847848 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeSetup.exe
2014-03-05 19:08 - 2014-03-08 20:42 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-05 19:08 - 2014-03-05 19:08 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Secunia PSI
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-03-05 19:03 - 2014-03-05 19:04 - 05329480 _____ (Secunia) C:\Users\Schnuppel\Downloads\PSISetup_3.0.0.9016.exe
2014-03-04 18:31 - 2014-03-04 18:31 - 00987425 _____ () C:\Users\Schnuppel\Downloads\SecurityCheck.exe
2014-03-04 17:21 - 2014-03-04 17:21 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu (1).exe
2014-03-04 17:19 - 2014-03-04 17:19 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-04 17:14 - 2014-03-04 17:15 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu.exe
2014-03-03 15:20 - 2014-03-03 15:20 - 00000000 ____D () C:\windows\ERUNT
2014-03-03 15:19 - 2014-03-03 15:19 - 01037734 _____ (Thisisu) C:\Users\Schnuppel\Downloads\JRT.exe
2014-03-03 15:10 - 2014-03-03 15:10 - 01244192 _____ () C:\Users\Schnuppel\Downloads\adwcleaner.exe
2014-03-03 14:47 - 2014-03-03 14:47 - 00001111 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-03 14:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-03-03 14:43 - 2014-03-03 14:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Schnuppel\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-03 14:39 - 2014-03-03 14:39 - 00000100 _____ () C:\Users\Schnuppel\Desktop\Google Chrome öffnet sich... - Trojaner-Board.url
2014-03-01 18:44 - 2014-03-01 18:44 - 00017584 _____ () C:\ComboFix.txt
2014-03-01 18:41 - 2011-06-26 07:45 - 00256000 _____ () C:\windows\PEV.exe
2014-03-01 18:41 - 2010-11-07 18:20 - 00208896 _____ () C:\windows\MBR.exe
2014-03-01 18:41 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00098816 _____ () C:\windows\sed.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00080412 _____ () C:\windows\grep.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00068096 _____ () C:\windows\zip.exe
2014-03-01 18:40 - 2014-03-01 18:44 - 00000000 ____D () C:\Qoobox
2014-03-01 18:39 - 2014-03-01 18:43 - 00000000 ____D () C:\windows\erdnt
2014-02-27 09:58 - 2014-02-27 09:58 - 00026087 _____ () C:\Users\Schnuppel\Downloads\Addition.txt
2014-02-27 09:57 - 2014-03-09 11:22 - 00000000 ____D () C:\FRST
2014-02-27 09:57 - 2014-03-04 18:36 - 00034900 _____ () C:\Users\Schnuppel\Downloads\FRST.txt
2014-02-27 09:55 - 2014-02-27 09:56 - 02155520 _____ (Farbar) C:\Users\Schnuppel\Downloads\FRST64.exe
2014-02-12 19:51 - 2014-02-12 19:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-12 19:51 - 2014-02-12 19:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-02-12 19:43 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-02-12 19:43 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-02-12 19:43 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-02-12 19:43 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-02-12 19:43 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-02-12 19:43 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-02-12 19:43 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-02-12 19:43 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-02-12 19:43 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-02-12 19:43 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-02-12 19:43 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-02-12 19:43 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-02-12 19:43 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-02-12 19:43 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-02-12 19:43 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-02-12 19:43 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-02-12 19:43 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-02-12 19:43 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-02-12 19:43 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-02-12 19:43 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-02-12 19:43 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-02-12 19:43 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-02-12 19:43 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-02-12 19:43 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-02-12 19:43 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-02-12 19:43 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-02-12 19:43 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-02-12 19:43 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-02-12 19:43 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-02-12 19:43 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-02-12 19:43 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-02-12 19:43 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-02-12 19:43 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-02-12 19:43 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-02-12 19:43 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-02-12 19:43 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-02-12 19:43 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-02-12 19:43 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-02-12 19:42 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-02-12 19:42 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-02-12 19:42 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-02-12 18:20 - 2014-02-12 18:20 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Windows Live Writer
2014-02-12 18:20 - 2014-02-12 18:20 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Windows Live Writer
2014-02-12 18:17 - 2014-02-12 18:42 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Skype
2014-02-12 09:35 - 2014-01-01 00:05 - 00420008 _____ () C:\windows\SysWOW64\locale.nls
2014-02-12 09:35 - 2014-01-01 00:04 - 00420008 _____ () C:\windows\system32\locale.nls
2014-02-12 09:35 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2014-02-12 09:35 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-02-12 09:35 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-02-12 09:35 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2014-02-12 09:35 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-02-12 09:35 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2014-02-12 09:35 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\windows\system32\secproc.dll
2014-02-12 09:35 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\windows\system32\secproc_isv.dll
2014-02-12 09:35 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp_isv.dll
2014-02-12 09:35 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp.dll
2014-02-12 09:35 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\windows\system32\msdrm.dll
2014-02-12 09:35 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_isv.exe
2014-02-12 09:35 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\RMActivate.exe
2014-02-12 09:35 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp.exe
2014-02-12 09:35 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp_isv.exe
2014-02-12 09:35 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc.dll
2014-02-12 09:35 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_isv.dll
2014-02-12 09:35 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 09:35 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_ssp.dll
2014-02-12 09:35 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdrm.dll
2014-02-12 09:35 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_isv.exe
2014-02-12 09:35 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate.exe
2014-02-12 09:35 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 09:35 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 09:35 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\windows\SysWOW64\d2d1.dll
2014-02-12 09:35 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll
==================== One Month Modified Files and Folders =======
2014-03-09 11:23 - 2014-03-08 15:16 - 00009079 _____ () C:\Users\Schnuppel\Desktop\FRST.txt
2014-03-09 11:22 - 2014-02-27 09:57 - 00000000 ____D () C:\FRST
2014-03-09 11:19 - 2009-07-14 05:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-09 11:19 - 2009-07-14 05:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-09 11:18 - 2013-11-26 01:40 - 00001116 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-09 11:11 - 2014-03-06 16:53 - 00183412 _____ () C:\windows\WindowsUpdate.log
2014-03-09 11:10 - 2011-11-07 23:54 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-03-09 11:09 - 2013-11-26 01:40 - 00001112 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-09 11:09 - 2013-11-26 01:09 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2014-03-09 11:09 - 2013-11-26 01:09 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2014-03-09 11:09 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-09 11:08 - 2014-03-09 11:04 - 00000112 _____ () C:\windows\setupact.log
2014-03-09 11:04 - 2014-03-09 11:04 - 00000000 _____ () C:\windows\setuperr.log
2014-03-08 20:43 - 2011-11-08 00:40 - 00699666 _____ () C:\windows\system32\perfh007.dat
2014-03-08 20:43 - 2011-11-08 00:40 - 00149774 _____ () C:\windows\system32\perfc007.dat
2014-03-08 20:43 - 2009-07-14 06:13 - 01620612 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-08 20:42 - 2014-03-05 19:08 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-08 17:13 - 2013-11-26 01:15 - 00000422 _____ () C:\windows\Tasks\SystemToolsDailyTest.job
2014-03-08 17:12 - 2013-11-26 01:15 - 00003464 _____ () C:\windows\System32\Tasks\SystemToolsDailyTest
2014-03-08 17:12 - 2013-11-25 19:00 - 00003488 _____ () C:\windows\System32\Tasks\PCDEventLauncher
2014-03-08 15:06 - 2011-11-07 23:36 - 00000000 ____D () C:\ProgramData\Sonic
2014-03-07 17:12 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\NDF
2014-03-07 17:10 - 2014-03-07 17:10 - 00003000 _____ () C:\windows\System32\Tasks\{61012C3F-26CC-4E01-A20A-37127768BDAE}
2014-03-07 17:08 - 2014-03-07 17:08 - 00003000 _____ () C:\windows\System32\Tasks\{A2C75968-E758-47A2-A933-B9772D3786FD}
2014-03-06 15:18 - 2014-03-06 15:18 - 02156544 _____ (Farbar) C:\Users\Schnuppel\Desktop\FRST64.exe
2014-03-06 15:18 - 2014-03-06 15:18 - 00000000 ____D () C:\Users\Schnuppel\Desktop\FRST-OlderVersion
2014-03-06 15:17 - 2014-03-06 15:17 - 00000096 _____ () C:\Users\Schnuppel\Downloads\Fixlist.txt
2014-03-06 15:16 - 2014-03-06 15:15 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-06 15:16 - 2014-03-06 15:15 - 00000000 ____D () C:\Program Files\iTunes
2014-03-06 15:16 - 2014-03-06 15:15 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Program Files\iPod
2014-03-05 19:23 - 2014-03-05 19:23 - 00448512 _____ (OldTimer Tools) C:\Users\Schnuppel\Desktop\TFC.exe
2014-03-05 19:16 - 2013-11-27 06:07 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-03-05 19:15 - 2014-03-05 19:15 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml (1).msi
2014-03-05 19:14 - 2014-03-05 19:14 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml.msi
2014-03-05 19:11 - 2014-03-05 19:11 - 00847848 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeSetup.exe
2014-03-05 19:08 - 2014-03-05 19:08 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-03-05 19:08 - 2014-01-12 14:20 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-03-05 19:08 - 2014-01-12 14:20 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-05 19:08 - 2013-11-25 04:30 - 00000000 ____D () C:\ProgramData\Apple
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Secunia PSI
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-03-05 19:04 - 2014-03-05 19:03 - 05329480 _____ (Secunia) C:\Users\Schnuppel\Downloads\PSISetup_3.0.0.9016.exe
2014-03-04 18:36 - 2014-02-27 09:57 - 00034900 _____ () C:\Users\Schnuppel\Downloads\FRST.txt
2014-03-04 18:31 - 2014-03-04 18:31 - 00987425 _____ () C:\Users\Schnuppel\Downloads\SecurityCheck.exe
2014-03-04 17:21 - 2014-03-04 17:21 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu (1).exe
2014-03-04 17:19 - 2014-03-04 17:19 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-04 17:15 - 2014-03-04 17:14 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu.exe
2014-03-03 15:20 - 2014-03-03 15:20 - 00000000 ____D () C:\windows\ERUNT
2014-03-03 15:19 - 2014-03-03 15:19 - 01037734 _____ (Thisisu) C:\Users\Schnuppel\Downloads\JRT.exe
2014-03-03 15:13 - 2014-01-12 09:40 - 00000000 ____D () C:\AdwCleaner
2014-03-03 15:10 - 2014-03-03 15:10 - 01244192 _____ () C:\Users\Schnuppel\Downloads\adwcleaner.exe
2014-03-03 15:02 - 2014-01-12 09:40 - 00000000 ____D () C:\ProgramData\Updater
2014-03-03 14:47 - 2014-03-03 14:47 - 00001111 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-03 14:43 - 2014-03-03 14:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Schnuppel\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-03 14:39 - 2014-03-03 14:39 - 00000100 _____ () C:\Users\Schnuppel\Desktop\Google Chrome öffnet sich... - Trojaner-Board.url
2014-03-01 18:44 - 2014-03-01 18:44 - 00017584 _____ () C:\ComboFix.txt
2014-03-01 18:44 - 2014-03-01 18:40 - 00000000 ____D () C:\Qoobox
2014-03-01 18:43 - 2014-03-01 18:39 - 00000000 ____D () C:\windows\erdnt
2014-03-01 18:43 - 2009-07-14 03:34 - 00000215 _____ () C:\windows\system.ini
2014-02-28 22:52 - 2011-11-07 23:06 - 01594892 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2014-02-27 09:58 - 2014-02-27 09:58 - 00026087 _____ () C:\Users\Schnuppel\Downloads\Addition.txt
2014-02-27 09:56 - 2014-02-27 09:55 - 02155520 _____ (Farbar) C:\Users\Schnuppel\Downloads\FRST64.exe
2014-02-24 22:53 - 2014-02-04 11:56 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Paint.NET
2014-02-18 23:03 - 2013-11-25 06:34 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-16 10:13 - 2013-11-26 01:40 - 00004112 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-16 10:13 - 2013-11-26 01:40 - 00003860 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-14 16:35 - 2013-11-25 19:00 - 00000000 ____D () C:\ProgramData\PCDr
2014-02-12 19:57 - 2013-12-06 23:08 - 00000000 ____D () C:\windows\system32\MRT
2014-02-12 19:56 - 2013-12-06 23:08 - 88567024 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-02-12 19:51 - 2014-02-12 19:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-12 19:51 - 2014-02-12 19:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-02-12 18:42 - 2014-02-12 18:17 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Skype
2014-02-12 18:42 - 2011-11-07 23:48 - 00000000 ____D () C:\ProgramData\Skype
2014-02-12 18:20 - 2014-02-12 18:20 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Windows Live Writer
2014-02-12 18:20 - 2014-02-12 18:20 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Windows Live Writer
Some content of TEMP:
====================
C:\Users\Schnuppel\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-16 12:34
==================== End Of Log ============================
|
|
10.03.2014, 11:02
| #18 |
| /// the machine /// TB-Ausbilder | Google Chrome öffnet sich... Revo Uninstaller - Download - Filepony
__________________damit Chrome deinstallieren, Reste entfernen lassen, neu installieren.
__________________ |
|
10.03.2014, 17:24
| #19 |
| | Google Chrome öffnet sich... erledigt hab ebend was geschrieben und wieder war eine zahl (5 und 6) zwischen den buchstaben. es öffnete sich wieder google hilfe, ab5er diesmal ging er erst später aus. Geändert von Sabine2711 (10.03.2014 um 17:35 Uhr) |
|
11.03.2014, 12:45
| #20 |
| /// the machine /// TB-Ausbilder | Google Chrome öffnet sich... Und das passiert wirklich nur wenn Chrome offen is? Nit vielleicht das Keyboard scheisse oder die Hardware ansich? Bitte mal FRST öffnen ,Haken setzen bei Additional und scannen, poste bitte beide Logfiles.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.03.2014, 13:10
| #21 |
| | Google Chrome öffnet sich... das war auch als ich mit den IE drin war, nur ebend seltener. jetzt geht es wieder ganz normal, keine zahlen, nichts. an meiner Tastatur kanns denk ich nicht liegen sonst wäre es vermutlich ja beständig und nicht mal und mal nicht. FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2014
Ran by Schnuppel (administrator) on SCHNUPPEL-PC on 11-03-2014 13:00:53
Running from C:\Users\Schnuppel\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Intel Corporation) C:\WINDOWS\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Avira Operations GmbH & Co. KG) C:\program files (x86)\avira\antivir desktop\ipmGui.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [Dell Registration] - C:\Program Files (x86)\System Registration\prodreg.exe [4165440 2011-08-04] (Dell, Inc.)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [RoxWatchTray] - c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [AccuWeatherWidget] - C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKCU - {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Chrome:
=======
CHR Extension: (Google Wallet) - C:\Users\Schnuppel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-10]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199304 2012-05-25] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
==================== Drivers (Whitelisted) ====================
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-01] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-17] (Avira Operations GmbH & Co. KG)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-11 13:00 - 2014-03-11 13:01 - 00008686 _____ () C:\Users\Schnuppel\Desktop\FRST.txt
2014-03-11 11:04 - 2014-03-11 11:04 - 00000056 _____ () C:\windows\setupact.log
2014-03-11 11:04 - 2014-03-11 11:04 - 00000000 _____ () C:\windows\setuperr.log
2014-03-10 21:45 - 2013-12-21 10:39 - 00600064 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-03-10 21:45 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-03-10 21:44 - 2014-02-01 10:20 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-10 21:44 - 2014-02-01 10:19 - 02241536 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-10 21:44 - 2014-02-01 10:19 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 19274240 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 15403520 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 03960320 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-10 21:44 - 2014-02-01 10:18 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-10 21:44 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-03-10 21:44 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-03-10 21:44 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-03-10 21:44 - 2014-02-01 08:40 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-10 21:44 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-03-10 21:44 - 2014-02-01 07:45 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2014-03-10 21:44 - 2014-02-01 07:38 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-10 12:39 - 2014-03-10 12:40 - 00002249 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-10 12:39 - 2014-03-10 12:39 - 00847848 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeSetup (1).exe
2014-03-10 12:38 - 2014-03-11 12:45 - 00001116 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-10 12:38 - 2014-03-11 12:45 - 00001112 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-10 12:38 - 2014-03-10 12:40 - 00004112 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-10 12:38 - 2014-03-10 12:40 - 00003860 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-10 12:38 - 2014-03-10 12:38 - 38146040 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeStandaloneSetup_33.0.1750.146.exe
2014-03-10 12:22 - 2014-03-10 12:22 - 00001266 _____ () C:\Users\Schnuppel\Desktop\Revo Uninstaller.lnk
2014-03-10 12:22 - 2014-03-10 12:22 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-10 12:21 - 2014-03-10 12:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Schnuppel\Downloads\revosetup95.exe
2014-03-07 17:10 - 2014-03-07 17:10 - 00003000 _____ () C:\windows\System32\Tasks\{61012C3F-26CC-4E01-A20A-37127768BDAE}
2014-03-07 17:08 - 2014-03-07 17:08 - 00003000 _____ () C:\windows\System32\Tasks\{A2C75968-E758-47A2-A933-B9772D3786FD}
2014-03-06 16:53 - 2014-03-11 12:30 - 00345294 _____ () C:\windows\WindowsUpdate.log
2014-03-06 15:18 - 2014-03-11 13:00 - 02157056 _____ (Farbar) C:\Users\Schnuppel\Desktop\FRST64.exe
2014-03-06 15:18 - 2014-03-11 13:00 - 00000000 ____D () C:\Users\Schnuppel\Desktop\FRST-OlderVersion
2014-03-06 15:17 - 2014-03-06 15:17 - 00000096 _____ () C:\Users\Schnuppel\Downloads\Fixlist.txt
2014-03-06 15:15 - 2014-03-06 15:16 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-06 15:15 - 2014-03-06 15:16 - 00000000 ____D () C:\Program Files\iTunes
2014-03-06 15:15 - 2014-03-06 15:16 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Program Files\iPod
2014-03-05 19:23 - 2014-03-05 19:23 - 00448512 _____ (OldTimer Tools) C:\Users\Schnuppel\Desktop\TFC.exe
2014-03-05 19:15 - 2014-03-05 19:15 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml (1).msi
2014-03-05 19:14 - 2014-03-05 19:14 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml.msi
2014-03-05 19:11 - 2014-03-05 19:11 - 00847848 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeSetup.exe
2014-03-05 19:08 - 2014-03-11 12:34 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-05 19:08 - 2014-03-05 19:08 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Secunia PSI
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-03-05 19:03 - 2014-03-05 19:04 - 05329480 _____ (Secunia) C:\Users\Schnuppel\Downloads\PSISetup_3.0.0.9016.exe
2014-03-04 18:31 - 2014-03-04 18:31 - 00987425 _____ () C:\Users\Schnuppel\Downloads\SecurityCheck.exe
2014-03-04 17:21 - 2014-03-04 17:21 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu (1).exe
2014-03-04 17:19 - 2014-03-04 17:19 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-04 17:14 - 2014-03-04 17:15 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu.exe
2014-03-03 15:20 - 2014-03-03 15:20 - 00000000 ____D () C:\windows\ERUNT
2014-03-03 15:19 - 2014-03-03 15:19 - 01037734 _____ (Thisisu) C:\Users\Schnuppel\Downloads\JRT.exe
2014-03-03 15:10 - 2014-03-03 15:10 - 01244192 _____ () C:\Users\Schnuppel\Downloads\adwcleaner.exe
2014-03-03 14:47 - 2014-03-03 14:47 - 00001111 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-03 14:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-03-03 14:43 - 2014-03-03 14:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Schnuppel\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-03 14:39 - 2014-03-03 14:39 - 00000100 _____ () C:\Users\Schnuppel\Desktop\Google Chrome öffnet sich... - Trojaner-Board.url
2014-03-01 18:44 - 2014-03-01 18:44 - 00017584 _____ () C:\ComboFix.txt
2014-03-01 18:41 - 2011-06-26 07:45 - 00256000 _____ () C:\windows\PEV.exe
2014-03-01 18:41 - 2010-11-07 18:20 - 00208896 _____ () C:\windows\MBR.exe
2014-03-01 18:41 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00098816 _____ () C:\windows\sed.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00080412 _____ () C:\windows\grep.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00068096 _____ () C:\windows\zip.exe
2014-03-01 18:40 - 2014-03-01 18:44 - 00000000 ____D () C:\Qoobox
2014-03-01 18:39 - 2014-03-01 18:43 - 00000000 ____D () C:\windows\erdnt
2014-02-27 09:58 - 2014-02-27 09:58 - 00026087 _____ () C:\Users\Schnuppel\Downloads\Addition.txt
2014-02-27 09:57 - 2014-03-11 13:00 - 00000000 ____D () C:\FRST
2014-02-27 09:57 - 2014-03-04 18:36 - 00034900 _____ () C:\Users\Schnuppel\Downloads\FRST.txt
2014-02-27 09:55 - 2014-02-27 09:56 - 02155520 _____ (Farbar) C:\Users\Schnuppel\Downloads\FRST64.exe
2014-02-12 19:51 - 2014-02-12 19:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-12 19:51 - 2014-02-12 19:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-02-12 18:20 - 2014-02-12 18:20 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Windows Live Writer
2014-02-12 18:20 - 2014-02-12 18:20 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Windows Live Writer
2014-02-12 18:17 - 2014-02-12 18:42 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Skype
2014-02-12 09:35 - 2014-01-01 00:05 - 00420008 _____ () C:\windows\SysWOW64\locale.nls
2014-02-12 09:35 - 2014-01-01 00:04 - 00420008 _____ () C:\windows\system32\locale.nls
2014-02-12 09:35 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2014-02-12 09:35 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-02-12 09:35 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-02-12 09:35 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2014-02-12 09:35 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-02-12 09:35 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2014-02-12 09:35 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\windows\system32\secproc.dll
2014-02-12 09:35 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\windows\system32\secproc_isv.dll
2014-02-12 09:35 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp_isv.dll
2014-02-12 09:35 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp.dll
2014-02-12 09:35 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\windows\system32\msdrm.dll
2014-02-12 09:35 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_isv.exe
2014-02-12 09:35 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\RMActivate.exe
2014-02-12 09:35 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp.exe
2014-02-12 09:35 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp_isv.exe
2014-02-12 09:35 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc.dll
2014-02-12 09:35 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_isv.dll
2014-02-12 09:35 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 09:35 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_ssp.dll
2014-02-12 09:35 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdrm.dll
2014-02-12 09:35 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_isv.exe
2014-02-12 09:35 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate.exe
2014-02-12 09:35 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 09:35 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 09:35 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\windows\SysWOW64\d2d1.dll
2014-02-12 09:35 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll
==================== One Month Modified Files and Folders =======
2014-03-11 13:01 - 2014-03-11 13:00 - 00008686 _____ () C:\Users\Schnuppel\Desktop\FRST.txt
2014-03-11 13:00 - 2014-03-06 15:18 - 02157056 _____ (Farbar) C:\Users\Schnuppel\Desktop\FRST64.exe
2014-03-11 13:00 - 2014-03-06 15:18 - 00000000 ____D () C:\Users\Schnuppel\Desktop\FRST-OlderVersion
2014-03-11 13:00 - 2014-02-27 09:57 - 00000000 ____D () C:\FRST
2014-03-11 12:52 - 2013-11-26 01:15 - 00000422 _____ () C:\windows\Tasks\SystemToolsDailyTest.job
2014-03-11 12:45 - 2014-03-10 12:38 - 00001116 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-11 12:45 - 2014-03-10 12:38 - 00001112 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-11 12:34 - 2014-03-05 19:08 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-11 12:30 - 2014-03-06 16:53 - 00345294 _____ () C:\windows\WindowsUpdate.log
2014-03-11 12:20 - 2011-11-08 00:40 - 00699666 _____ () C:\windows\system32\perfh007.dat
2014-03-11 12:20 - 2011-11-08 00:40 - 00149774 _____ () C:\windows\system32\perfc007.dat
2014-03-11 12:20 - 2009-07-14 06:13 - 01620612 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-11 11:14 - 2009-07-14 05:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-11 11:14 - 2009-07-14 05:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-11 11:06 - 2013-11-26 01:09 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2014-03-11 11:06 - 2013-11-26 01:09 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2014-03-11 11:06 - 2011-11-07 23:54 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-03-11 11:04 - 2014-03-11 11:04 - 00000056 _____ () C:\windows\setupact.log
2014-03-11 11:04 - 2014-03-11 11:04 - 00000000 _____ () C:\windows\setuperr.log
2014-03-11 11:04 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-10 22:02 - 2011-02-23 14:08 - 00000000 ____D () C:\windows\Panther
2014-03-10 21:31 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2014-03-10 21:15 - 2011-11-07 23:34 - 00000000 ____D () C:\Program Files (x86)\Dell Stage
2014-03-10 21:15 - 2011-11-07 23:11 - 00000000 ____D () C:\ProgramData\Dell
2014-03-10 21:14 - 2013-11-25 04:30 - 00000000 ____D () C:\ProgramData\Apple
2014-03-10 12:40 - 2014-03-10 12:39 - 00002249 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-10 12:40 - 2014-03-10 12:38 - 00004112 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-10 12:40 - 2014-03-10 12:38 - 00003860 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-10 12:39 - 2014-03-10 12:39 - 00847848 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeSetup (1).exe
2014-03-10 12:39 - 2013-11-26 01:39 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Google
2014-03-10 12:38 - 2014-03-10 12:38 - 38146040 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeStandaloneSetup_33.0.1750.146.exe
2014-03-10 12:38 - 2013-11-26 01:40 - 00000000 ____D () C:\Program Files (x86)\Google
2014-03-10 12:22 - 2014-03-10 12:22 - 00001266 _____ () C:\Users\Schnuppel\Desktop\Revo Uninstaller.lnk
2014-03-10 12:22 - 2014-03-10 12:22 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-10 12:21 - 2014-03-10 12:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Schnuppel\Downloads\revosetup95.exe
2014-03-10 12:13 - 2013-11-26 01:15 - 00003464 _____ () C:\windows\System32\Tasks\SystemToolsDailyTest
2014-03-10 12:13 - 2013-11-25 19:00 - 00003488 _____ () C:\windows\System32\Tasks\PCDEventLauncher
2014-03-08 15:06 - 2011-11-07 23:36 - 00000000 ____D () C:\ProgramData\Sonic
2014-03-07 17:12 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\NDF
2014-03-07 17:10 - 2014-03-07 17:10 - 00003000 _____ () C:\windows\System32\Tasks\{61012C3F-26CC-4E01-A20A-37127768BDAE}
2014-03-07 17:08 - 2014-03-07 17:08 - 00003000 _____ () C:\windows\System32\Tasks\{A2C75968-E758-47A2-A933-B9772D3786FD}
2014-03-06 15:17 - 2014-03-06 15:17 - 00000096 _____ () C:\Users\Schnuppel\Downloads\Fixlist.txt
2014-03-06 15:16 - 2014-03-06 15:15 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-06 15:16 - 2014-03-06 15:15 - 00000000 ____D () C:\Program Files\iTunes
2014-03-06 15:16 - 2014-03-06 15:15 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Program Files\iPod
2014-03-05 19:23 - 2014-03-05 19:23 - 00448512 _____ (OldTimer Tools) C:\Users\Schnuppel\Desktop\TFC.exe
2014-03-05 19:16 - 2013-11-27 06:07 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-03-05 19:15 - 2014-03-05 19:15 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml (1).msi
2014-03-05 19:14 - 2014-03-05 19:14 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml.msi
2014-03-05 19:11 - 2014-03-05 19:11 - 00847848 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeSetup.exe
2014-03-05 19:08 - 2014-03-05 19:08 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-03-05 19:08 - 2014-01-12 14:20 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-03-05 19:08 - 2014-01-12 14:20 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Secunia PSI
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-03-05 19:04 - 2014-03-05 19:03 - 05329480 _____ (Secunia) C:\Users\Schnuppel\Downloads\PSISetup_3.0.0.9016.exe
2014-03-04 18:36 - 2014-02-27 09:57 - 00034900 _____ () C:\Users\Schnuppel\Downloads\FRST.txt
2014-03-04 18:31 - 2014-03-04 18:31 - 00987425 _____ () C:\Users\Schnuppel\Downloads\SecurityCheck.exe
2014-03-04 17:21 - 2014-03-04 17:21 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu (1).exe
2014-03-04 17:19 - 2014-03-04 17:19 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-04 17:15 - 2014-03-04 17:14 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu.exe
2014-03-03 15:20 - 2014-03-03 15:20 - 00000000 ____D () C:\windows\ERUNT
2014-03-03 15:19 - 2014-03-03 15:19 - 01037734 _____ (Thisisu) C:\Users\Schnuppel\Downloads\JRT.exe
2014-03-03 15:13 - 2014-01-12 09:40 - 00000000 ____D () C:\AdwCleaner
2014-03-03 15:10 - 2014-03-03 15:10 - 01244192 _____ () C:\Users\Schnuppel\Downloads\adwcleaner.exe
2014-03-03 15:02 - 2014-01-12 09:40 - 00000000 ____D () C:\ProgramData\Updater
2014-03-03 14:47 - 2014-03-03 14:47 - 00001111 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-03 14:43 - 2014-03-03 14:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Schnuppel\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-03 14:39 - 2014-03-03 14:39 - 00000100 _____ () C:\Users\Schnuppel\Desktop\Google Chrome öffnet sich... - Trojaner-Board.url
2014-03-01 18:44 - 2014-03-01 18:44 - 00017584 _____ () C:\ComboFix.txt
2014-03-01 18:44 - 2014-03-01 18:40 - 00000000 ____D () C:\Qoobox
2014-03-01 18:43 - 2014-03-01 18:39 - 00000000 ____D () C:\windows\erdnt
2014-03-01 18:43 - 2009-07-14 03:34 - 00000215 _____ () C:\windows\system.ini
2014-02-28 22:52 - 2011-11-07 23:06 - 01594892 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2014-02-27 09:58 - 2014-02-27 09:58 - 00026087 _____ () C:\Users\Schnuppel\Downloads\Addition.txt
2014-02-27 09:56 - 2014-02-27 09:55 - 02155520 _____ (Farbar) C:\Users\Schnuppel\Downloads\FRST64.exe
2014-02-24 22:53 - 2014-02-04 11:56 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Paint.NET
2014-02-18 23:03 - 2013-11-25 06:34 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-14 16:35 - 2013-11-25 19:00 - 00000000 ____D () C:\ProgramData\PCDr
2014-02-12 19:57 - 2013-12-06 23:08 - 00000000 ____D () C:\windows\system32\MRT
2014-02-12 19:56 - 2013-12-06 23:08 - 88567024 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-02-12 19:51 - 2014-02-12 19:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-12 19:51 - 2014-02-12 19:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-02-12 18:42 - 2014-02-12 18:17 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Skype
2014-02-12 18:42 - 2011-11-07 23:48 - 00000000 ____D () C:\ProgramData\Skype
2014-02-12 18:20 - 2014-02-12 18:20 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Windows Live Writer
2014-02-12 18:20 - 2014-02-12 18:20 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Windows Live Writer
Some content of TEMP:
====================
C:\Users\Schnuppel\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-10 15:40
==================== End Of Log ============================
--- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-03-2014
Ran by Schnuppel at 2014-03-11 13:01:59
Running from C:\Users\Schnuppel\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe Flash Player 12 Plugin (HKLM-x32\...\{04840A3B-858C-46A5-8BBD-FFDB4C111FEB}) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Build-a-lot 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.60 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.60 - Dell Inc.)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.65 - ArcSoft)
Dell Product Registration (HKLM-x32\...\{2A0F2CC5-3065-492C-8380-B03AA7106B1A}) (Version: 1.1.3 - Dell Inc.)
Dell Stage (HKLM-x32\...\{E2F57269-065E-4B19-8CDA-AB6C401FAF1A}) (Version: 1.7.209.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.43 - ArcSoft)
Dell Support Center (HKLM\...\Dell Support Center) (Version: 3.1.5803.11 - Dell Inc.)
Dell Support Center (Version: 3.1.5803.11 - PC-Doctor, Inc.) Hidden
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1207.101.225 - ALPS ELECTRIC CO., LTD.)
Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.)
Dell VideoStage (x32 Version: 1.2.0.1712 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.44 - Creative Technology Ltd)
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden
DW WLAN Card (HKLM\...\DW WLAN Card) (Version: 5.100.82.88 - Dell Inc.)
Escape Whisper Valley (TM) (x32 Version: 2.2.0.95 - WildTangent) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
FileParade Bundle (HKLM-x32\...\FileParade Bundle) (Version: 1.0.0.0 - FileParade Bundle) <==== ATTENTION
Final Drive Fury (x32 Version: 2.2.0.95 - WildTangent) Hidden
Final Drive Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6341.0 - IDT)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
iTunes (HKLM\...\{0D924CB2-2EA4-4044-BAF7-770202D6BD0D}) (Version: 11.1.4.62 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Jewel Quest (x32 Version: 2.2.0.95 - WildTangent) Hidden
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Luxor (x32 Version: 2.2.0.95 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.09.25 - Dell Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Roxio Activation Module (x32 Version: 1.0 - Roxio) Hidden
Roxio BackOnTrack (x32 Version: 1.3.3 - Roxio) Hidden
Roxio Burn (x32 Version: 1.8 - Roxio) Hidden
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio Creator Starter (x32 Version: 1.0.439 - Roxio) Hidden
Roxio Creator Starter (x32 Version: 5.0.0 - Roxio) Hidden
Roxio Express Labeler 3 (x32 Version: 3.2.2 - Roxio) Hidden
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Samantha Swift (x32 Version: 2.2.0.95 - WildTangent) Hidden
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Updater (HKLM-x32\...\{D54E3D9F-FEB8-4D2D-A138-B69A5C80080B}) (Version: 2.6.53 - Creative Island Media, LLC) <==== ATTENTION
Wedding Dash - Ready, Aim, Love! (x32 Version: 2.2.0.95 - WildTangent) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.7600 - Broadcom Corporation)
WildTangent Games App (Dell Games) (x32 Version: 4.0.5.2 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent dell Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
==================== Restore Points =========================
28-02-2014 21:50:23 Windows Update
04-03-2014 08:13:05 Windows Update
05-03-2014 18:16:32 Installed MSXML 4.0 SP3 Parser
06-03-2014 19:00:16 Windows Update
10-03-2014 11:28:44 Revo Uninstaller's restore point - Google Chrome
10-03-2014 20:12:15 Removed Apple Software Update
10-03-2014 20:12:53 Removed Apple Mobile Device Support
10-03-2014 20:13:35 Removed Apple Application Support
10-03-2014 20:14:45 Removed Dell MusicStage
10-03-2014 20:15:28 Removed eBay
10-03-2014 20:30:13 Windows Modules Installer
10-03-2014 20:44:09 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0B46897F-81ED-4213-87AD-C37EF374AE43} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {1DA2C733-3970-48A8-9FF1-41DD60CAC34A} - System32\Tasks\{F14A2CED-E183-40E0-93E3-0EA41C439715} => C:\Program Files (x86)\Dell DataSafe Local Backup\dslauncher.exe [2011-08-01] ()
Task: {275BC924-79C4-4974-9CB4-0E870C1D48FE} - System32\Tasks\{A0EAF53A-EAEA-4FF6-9F31-C6222DA5712B} => C:\Program Files (x86)\Dell DataSafe Local Backup\dslauncher.exe [2011-08-01] ()
Task: {474FB7DD-77D8-4353-AB1F-082DEC889689} - System32\Tasks\{61012C3F-26CC-4E01-A20A-37127768BDAE} => Chrome.exe
Task: {57D99862-35F4-4C70-B521-DD9188E42DB4} - System32\Tasks\PCDoctorBackgroundMonitorTask => c:\Program Files\Dell Support Center\uaclauncher.exe [2011-03-22] (PC-Doctor, Inc.)
Task: {5FF2ECA2-EED2-4352-BD50-B4BDB13D92A3} - System32\Tasks\SystemToolsDailyTest => c:\Program Files\Dell Support Center\pcdrcui.exe [2011-03-22] (PC-Doctor, Inc.)
Task: {65D391BA-9ECF-4AD6-A834-982FCDAACDA2} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-05] (Adobe Systems Incorporated)
Task: {B41B2245-0259-47C3-AC2F-00C87BACDE8D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-10] (Google Inc.)
Task: {C4E045DC-1C4B-4853-AF80-DAB32A767818} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-10] (Google Inc.)
Task: {D08EF8DB-53BA-4E30-99CB-9C1D9435BBF1} - System32\Tasks\{A2C75968-E758-47A2-A933-B9772D3786FD} => Chrome.exe
Task: {F0F80572-7304-432E-883C-E652F71D3117} - System32\Tasks\PCDEventLauncher => c:\Program Files\Dell Support Center\sessionchecker.exe [2011-03-22] (PC-Doctor, Inc.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\PCDoctorBackgroundMonitorTask.job => c:\Program Files\Dell Support Center\uaclauncher.exe
Task: C:\windows\Tasks\SystemToolsDailyTest.job => c:\Program Files\Dell Support Center\pcdrcui.exe
==================== Loaded Modules (whitelisted) =============
2011-11-08 00:14 - 2011-03-26 02:28 - 00094208 _____ () C:\WINDOWS\System32\IccLibDll_x64.dll
2011-01-13 22:56 - 2011-01-13 22:56 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2010-11-17 17:35 - 2010-11-17 17:35 - 00514544 _____ () C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
2011-11-07 23:54 - 2011-08-18 17:05 - 02751808 _____ () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2013-11-26 01:35 - 2013-11-01 02:25 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2010-11-25 05:44 - 2010-11-25 05:44 - 00375280 _____ () c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll
2014-02-13 09:45 - 2014-02-13 09:45 - 00169472 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3e27ac2000641918e7215d97c63e957d\IsdiInterop.ni.dll
2011-11-07 23:03 - 2011-01-13 00:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/11/2014 11:09:00 AM) (Source: McLogEvent) (User: NT-AUTORITÄT)
Description: MCSCAN32 Engine Initialisation failed.
Engine returned error : 1
Error: (03/11/2014 11:06:35 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/10/2014 09:52:28 PM) (Source: McLogEvent) (User: NT-AUTORITÄT)
Description: MCSCAN32 Engine Initialisation failed.
Engine returned error : 1
Error: (03/10/2014 09:49:20 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/10/2014 09:37:53 PM) (Source: McLogEvent) (User: NT-AUTORITÄT)
Description: MCSCAN32 Engine Initialisation failed.
Engine returned error : 1
Error: (03/10/2014 09:34:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/10/2014 09:07:06 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5378743
Error: (03/10/2014 09:07:06 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5378743
Error: (03/10/2014 09:07:06 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (03/10/2014 07:37:31 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4103
System errors:
=============
Error: (03/10/2014 09:53:48 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (03/10/2014 09:53:48 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Presentation Foundation-Schriftartcache 3.0.0.0 erreicht.
Error: (03/10/2014 09:51:41 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X64 erreicht.
Error: (03/10/2014 09:51:07 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
Error: (03/10/2014 09:49:54 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (03/10/2014 09:37:33 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intel(R) Rapid Storage Technology" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (03/10/2014 09:37:33 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) Rapid Storage Technology erreicht.
Error: (03/10/2014 09:36:59 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X64 erreicht.
Error: (03/10/2014 09:36:58 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst SftService erreicht.
Error: (03/10/2014 05:31:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Gemeinsame Nutzung der Internetverbindung" wurde nicht richtig gestartet.
Microsoft Office Sessions:
=========================
Error: (03/11/2014 11:09:00 AM) (Source: McLogEvent)(User: NT-AUTORITÄT)
Description: 1
Error: (03/11/2014 11:06:35 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/10/2014 09:52:28 PM) (Source: McLogEvent)(User: NT-AUTORITÄT)
Description: 1
Error: (03/10/2014 09:49:20 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/10/2014 09:37:53 PM) (Source: McLogEvent)(User: NT-AUTORITÄT)
Description: 1
Error: (03/10/2014 09:34:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (03/10/2014 09:07:06 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5378743
Error: (03/10/2014 09:07:06 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5378743
Error: (03/10/2014 09:07:06 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (03/10/2014 07:37:31 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4103
==================== Memory info ===========================
Percentage of memory in use: 37%
Total physical RAM: 4004.27 MB
Available physical RAM: 2494.27 MB
Total Pagefile: 8006.73 MB
Available Pagefile: 6191.33 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:581.42 GB) (Free:536.12 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 8637ECAB)
Partition 1: (Not Active) - (Size=100 MB) - (Type=DE)
Partition 2: (Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=581 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
12.03.2014, 09:40
| #22 |
| /// the machine /// TB-Ausbilder | Google Chrome öffnet sich... Revo Uninstaller - Download - Filepony Damit alles deinstallieren was Du in der Additional.txt findest mit dem Zusatz <== ATTENTION Mit Revo auch Moderat die Reste entfernen lassen. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
13.03.2014, 18:49
| #23 |
| | Google Chrome öffnet sich...Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Schnuppel at 2014-03-13 18:42:43 Run:2
Running from C:\Users\Schnuppel\Desktop\FRST-OlderVersion
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
*****************
HKLM\SOFTWARE\Policies\Google => Key deleted successfully.
==== End of Fixlog ====
das mit dem Additional.txt hab ich nicht richtig verstanden.deswegen hab ich auch nichts gelöscht bzw gefunden ! mein lap läuft eigenartiger weise seid 2 tagen völlig problemlos. es ist wie es sein sollte. |
|
14.03.2014, 12:30
| #24 |
| /// the machine /// TB-Ausbilder | Google Chrome öffnet sich... In der Additional.txt findest du unter installed programs eine Liste aller installierter Software. Diese durchgehen, hinter einigen Programmen steht Attention, diese Software mit Revo Uninstaller deinstallieren.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
14.03.2014, 17:36
| #25 |
| | Google Chrome öffnet sich... Bin alle durch gegangen und hab nichts mit Attention gefunden. |
|
15.03.2014, 11:56
| #26 | |
| /// the machine /// TB-Ausbilder | Google Chrome öffnet sich... Da muss jemand zum Glaser  Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.03.2014, 22:27
| #27 |
| | Google Chrome öffnet sich... Hallo Schrauber, tut mir wirklich leid wenn ich mich Blutarm anstelle aber ich hab wirklich keinen schimmer von sowas  Ich brauch dann oft nen weilchen bis ich weiß was das alles heisst und wo ich was finde  Ich ging im Revo Uninstaller auf FileParade Bundle ... dann auf Analyse und Deinstallation, dann klickte ich Moderat .... an und da kam diese Meldung:" Uninstall ist fehlgeschlagen ! Vermutlich ungültiger deinstall Befehl ! " (ging bei keinem der 4 Vorschläge) Wo unter Updater was von Attention stand hab ich Deinstalliert und Moderat die Reste entfernt. Internet Updater (HKLM-x32\...\InternetUpdater) (Version: 2.6.56 - Parallel Lines Development, LLC) <==== ATTENTION UND Websteroids (HKLM-x32\...\Websteroids) (Version: 2.6.53 - Creative Island Media, LLC) <==== ATTENTION muß ich zu meiner Schande gestehen hab ich im Revo nicht finden können |
|
16.03.2014, 17:45
| #28 |
| /// the machine /// TB-Ausbilder | Google Chrome öffnet sich... Ok, dann jetzt bitte ein frisches FRST logfile. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
16.03.2014, 20:16
| #29 |
| | Google Chrome öffnet sich... Bis jetzt war nichts mehr gewesen. Ich hoffe das der Spuk nun vorbei ist. FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Schnuppel (administrator) on SCHNUPPEL-PC on 16-03-2014 20:13:41
Running from C:\Users\Schnuppel\Desktop\FRST-OlderVersion
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Intel Corporation) C:\WINDOWS\System32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\System32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(McAfee, Inc.) C:\Windows\system32\mfevtps.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\TOASTER.EXE
() C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [Dell Registration] - C:\Program Files (x86)\System Registration\prodreg.exe [4165440 2011-08-04] (Dell, Inc.)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [RoxWatchTray] - c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [AccuWeatherWidget] - C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe [968048 2012-02-01] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.facebook.de/
SearchScopes: HKCU - {2F1E335A-858A-4BE9-8F6B-D0AF1D018B53} URL =
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Chrome:
=======
CHR Extension: (Google Wallet) - C:\Users\Schnuppel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-10]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [199304 2012-05-25] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-11-04] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-11-04] (McAfee, Inc.)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
==================== Drivers (Whitelisted) ====================
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-01] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-17] (Avira Operations GmbH & Co. KG)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-11-04] (McAfee, Inc.)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179792 2013-11-04] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311120 2013-11-04] (McAfee, Inc.)
U3 mfeavfk01; No ImagePath
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519576 2013-11-04] (McAfee, Inc.)
R2 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [782360 2013-11-04] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [100912 2012-02-22] (McAfee, Inc.)
R2 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343696 2013-11-04] (McAfee, Inc.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-16 09:40 - 2014-03-16 09:40 - 00001604 _____ () C:\windows\PFRO.log
2014-03-15 09:41 - 2014-03-16 09:40 - 00000168 _____ () C:\windows\setupact.log
2014-03-15 09:41 - 2014-03-15 09:41 - 00000000 _____ () C:\windows\setuperr.log
2014-03-13 18:29 - 2014-03-13 18:29 - 00001266 _____ () C:\Users\Schnuppel\Desktop\Revo Uninstaller.lnk
2014-03-13 18:28 - 2014-03-13 18:28 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Schnuppel\Downloads\revosetup95 (1).exe
2014-03-12 20:31 - 2014-03-16 19:37 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-12 20:31 - 2014-03-12 20:31 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-03-11 20:04 - 2014-02-23 09:13 - 02241536 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-11 20:04 - 2014-02-23 09:13 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-11 20:04 - 2014-02-23 09:13 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-11 20:04 - 2014-02-23 09:12 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-11 20:04 - 2014-02-23 09:12 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-11 20:04 - 2014-02-23 09:11 - 03960320 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-11 20:04 - 2014-02-23 09:11 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-11 20:04 - 2014-02-23 09:11 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-03-11 20:04 - 2014-02-23 09:11 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-11 20:04 - 2014-02-23 09:11 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-03-11 20:04 - 2014-02-23 09:11 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-11 20:04 - 2014-02-23 09:11 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-11 20:04 - 2014-02-23 09:11 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-11 20:04 - 2014-02-23 07:54 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-03-11 20:04 - 2014-02-23 07:54 - 01140736 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-03-11 20:04 - 2014-02-23 07:53 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-03-11 20:04 - 2014-02-23 07:53 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-03-11 20:04 - 2014-02-23 07:53 - 02049024 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-03-11 20:04 - 2014-02-23 07:53 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-03-11 20:04 - 2014-02-23 07:53 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-03-11 20:04 - 2014-02-23 07:53 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-03-11 20:04 - 2014-02-23 07:53 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-03-11 20:04 - 2014-02-23 07:53 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-03-11 20:04 - 2014-02-23 07:53 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-03-11 20:04 - 2014-02-23 07:53 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-03-11 20:04 - 2014-02-23 07:53 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-03-11 20:04 - 2014-02-23 07:35 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-11 20:04 - 2014-02-23 07:31 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-03-11 20:04 - 2014-02-23 06:39 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2014-03-11 20:04 - 2014-02-23 06:35 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-11 20:03 - 2014-02-23 09:12 - 19273216 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-11 20:03 - 2014-02-23 09:11 - 15404032 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-11 20:03 - 2014-02-23 07:53 - 14358016 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-03-11 19:35 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-03-11 19:35 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-03-11 19:35 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-03-11 19:35 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\windows\SysWOW64\WindowsCodecs.dll
2014-03-11 19:35 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-03-11 19:35 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2014-03-11 19:35 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wer.dll
2014-03-11 19:35 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-03-11 18:57 - 2014-03-11 19:02 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\systweak
2014-03-11 18:57 - 2014-02-26 18:45 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\windows\system32\roboot64.exe
2014-03-11 17:35 - 2014-03-11 17:35 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-11 17:35 - 2014-03-11 17:35 - 00000000 ____D () C:\Program Files\iTunes
2014-03-11 17:35 - 2014-03-11 17:35 - 00000000 ____D () C:\Program Files\iPod
2014-03-11 17:35 - 2014-03-11 17:35 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-11 17:33 - 2014-03-11 17:34 - 148885840 _____ (Apple Inc.) C:\Users\Schnuppel\Downloads\iTunes64Setup (2).exe
2014-03-11 16:56 - 2014-03-11 16:56 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-03-11 16:56 - 2014-03-11 16:56 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-03-11 16:54 - 2014-03-11 16:55 - 148885840 _____ (Apple Inc.) C:\Users\Schnuppel\Downloads\iTunes64Setup (1).exe
2014-03-10 21:45 - 2013-12-21 10:39 - 00600064 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-03-10 21:45 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-03-10 12:39 - 2014-03-10 12:39 - 00847848 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeSetup (1).exe
2014-03-10 12:38 - 2014-03-16 20:04 - 00001116 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-10 12:38 - 2014-03-16 12:45 - 00001112 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-10 12:38 - 2014-03-10 12:40 - 00004112 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-10 12:38 - 2014-03-10 12:40 - 00003860 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-10 12:38 - 2014-03-10 12:38 - 38146040 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeStandaloneSetup_33.0.1750.146.exe
2014-03-10 12:22 - 2014-03-13 18:29 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-10 12:21 - 2014-03-10 12:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Schnuppel\Downloads\revosetup95.exe
2014-03-07 17:10 - 2014-03-07 17:10 - 00003000 _____ () C:\windows\System32\Tasks\{61012C3F-26CC-4E01-A20A-37127768BDAE}
2014-03-07 17:08 - 2014-03-07 17:08 - 00003000 _____ () C:\windows\System32\Tasks\{A2C75968-E758-47A2-A933-B9772D3786FD}
2014-03-06 16:53 - 2014-03-16 09:47 - 00738409 _____ () C:\windows\WindowsUpdate.log
2014-03-06 15:18 - 2014-03-16 20:13 - 00000000 ____D () C:\Users\Schnuppel\Desktop\FRST-OlderVersion
2014-03-06 15:17 - 2014-03-06 15:17 - 00000096 _____ () C:\Users\Schnuppel\Downloads\Fixlist.txt
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-03-05 19:23 - 2014-03-05 19:23 - 00448512 _____ (OldTimer Tools) C:\Users\Schnuppel\Desktop\TFC.exe
2014-03-05 19:15 - 2014-03-05 19:15 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml (1).msi
2014-03-05 19:14 - 2014-03-05 19:14 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml.msi
2014-03-05 19:11 - 2014-03-05 19:11 - 00847848 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeSetup.exe
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Secunia PSI
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-03-05 19:03 - 2014-03-05 19:04 - 05329480 _____ (Secunia) C:\Users\Schnuppel\Downloads\PSISetup_3.0.0.9016.exe
2014-03-04 18:31 - 2014-03-04 18:31 - 00987425 _____ () C:\Users\Schnuppel\Downloads\SecurityCheck.exe
2014-03-04 17:21 - 2014-03-04 17:21 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu (1).exe
2014-03-04 17:14 - 2014-03-04 17:15 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu.exe
2014-03-03 15:20 - 2014-03-03 15:20 - 00000000 ____D () C:\windows\ERUNT
2014-03-03 15:19 - 2014-03-03 15:19 - 01037734 _____ (Thisisu) C:\Users\Schnuppel\Downloads\JRT.exe
2014-03-03 15:10 - 2014-03-03 15:10 - 01244192 _____ () C:\Users\Schnuppel\Downloads\adwcleaner.exe
2014-03-03 14:47 - 2014-03-03 14:47 - 00001111 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-03 14:47 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2014-03-03 14:43 - 2014-03-03 14:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Schnuppel\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-01 18:44 - 2014-03-01 18:44 - 00017584 _____ () C:\ComboFix.txt
2014-03-01 18:41 - 2011-06-26 07:45 - 00256000 _____ () C:\windows\PEV.exe
2014-03-01 18:41 - 2010-11-07 18:20 - 00208896 _____ () C:\windows\MBR.exe
2014-03-01 18:41 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00098816 _____ () C:\windows\sed.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00080412 _____ () C:\windows\grep.exe
2014-03-01 18:41 - 2000-08-31 01:00 - 00068096 _____ () C:\windows\zip.exe
2014-03-01 18:40 - 2014-03-01 18:44 - 00000000 ____D () C:\Qoobox
2014-03-01 18:39 - 2014-03-01 18:43 - 00000000 ____D () C:\windows\erdnt
2014-02-27 09:58 - 2014-02-27 09:58 - 00026087 _____ () C:\Users\Schnuppel\Downloads\Addition.txt
2014-02-27 09:57 - 2014-03-16 20:13 - 00000000 ____D () C:\FRST
2014-02-27 09:57 - 2014-03-04 18:36 - 00034900 _____ () C:\Users\Schnuppel\Downloads\FRST.txt
2014-02-27 09:55 - 2014-02-27 09:56 - 02155520 _____ (Farbar) C:\Users\Schnuppel\Downloads\FRST64.exe
==================== One Month Modified Files and Folders =======
2014-03-16 20:13 - 2014-03-06 15:18 - 00000000 ____D () C:\Users\Schnuppel\Desktop\FRST-OlderVersion
2014-03-16 20:13 - 2014-02-27 09:57 - 00000000 ____D () C:\FRST
2014-03-16 20:07 - 2011-11-08 00:40 - 00699666 _____ () C:\windows\system32\perfh007.dat
2014-03-16 20:07 - 2011-11-08 00:40 - 00149774 _____ () C:\windows\system32\perfc007.dat
2014-03-16 20:07 - 2009-07-14 06:13 - 01620612 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-16 20:04 - 2014-03-10 12:38 - 00001116 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-16 19:37 - 2014-03-12 20:31 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-16 14:48 - 2013-11-26 01:15 - 00000422 _____ () C:\windows\Tasks\SystemToolsDailyTest.job
2014-03-16 14:46 - 2013-11-26 01:15 - 00003464 _____ () C:\windows\System32\Tasks\SystemToolsDailyTest
2014-03-16 14:46 - 2013-11-25 19:00 - 00003488 _____ () C:\windows\System32\Tasks\PCDEventLauncher
2014-03-16 12:45 - 2014-03-10 12:38 - 00001112 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-16 09:53 - 2009-07-14 05:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-16 09:53 - 2009-07-14 05:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-16 09:47 - 2014-03-06 16:53 - 00738409 _____ () C:\windows\WindowsUpdate.log
2014-03-16 09:42 - 2013-11-26 01:09 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2014-03-16 09:42 - 2013-11-26 01:09 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2014-03-16 09:42 - 2011-11-07 23:54 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-03-16 09:40 - 2014-03-16 09:40 - 00001604 _____ () C:\windows\PFRO.log
2014-03-16 09:40 - 2014-03-15 09:41 - 00000168 _____ () C:\windows\setupact.log
2014-03-16 09:40 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-15 09:41 - 2014-03-15 09:41 - 00000000 _____ () C:\windows\setuperr.log
2014-03-13 18:29 - 2014-03-13 18:29 - 00001266 _____ () C:\Users\Schnuppel\Desktop\Revo Uninstaller.lnk
2014-03-13 18:29 - 2014-03-10 12:22 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-03-13 18:28 - 2014-03-13 18:28 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Schnuppel\Downloads\revosetup95 (1).exe
2014-03-12 21:18 - 2013-11-25 04:40 - 00000000 ____D () C:\Users\Schnuppel\Desktop\Bine
2014-03-12 20:31 - 2014-03-12 20:31 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 20:31 - 2014-01-12 14:20 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 20:31 - 2014-01-12 14:20 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 09:12 - 2011-02-23 14:08 - 00000000 ____D () C:\windows\Panther
2014-03-12 08:44 - 2014-02-12 19:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-12 08:44 - 2014-02-12 19:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 08:44 - 2009-07-14 05:45 - 00322424 _____ () C:\windows\system32\FNTCACHE.DAT
2014-03-11 19:02 - 2014-03-11 18:57 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\systweak
2014-03-11 18:03 - 2013-12-22 13:29 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Adobe
2014-03-11 17:35 - 2014-03-11 17:35 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-11 17:35 - 2014-03-11 17:35 - 00000000 ____D () C:\Program Files\iTunes
2014-03-11 17:35 - 2014-03-11 17:35 - 00000000 ____D () C:\Program Files\iPod
2014-03-11 17:35 - 2014-03-11 17:35 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-11 17:34 - 2014-03-11 17:33 - 148885840 _____ (Apple Inc.) C:\Users\Schnuppel\Downloads\iTunes64Setup (2).exe
2014-03-11 16:56 - 2014-03-11 16:56 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-03-11 16:56 - 2014-03-11 16:56 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-03-11 16:56 - 2013-11-25 04:30 - 00000000 ____D () C:\ProgramData\Apple
2014-03-11 16:55 - 2014-03-11 16:54 - 148885840 _____ (Apple Inc.) C:\Users\Schnuppel\Downloads\iTunes64Setup (1).exe
2014-03-10 21:31 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\PolicyDefinitions
2014-03-10 21:15 - 2011-11-07 23:34 - 00000000 ____D () C:\Program Files (x86)\Dell Stage
2014-03-10 21:15 - 2011-11-07 23:11 - 00000000 ____D () C:\ProgramData\Dell
2014-03-10 12:40 - 2014-03-10 12:38 - 00004112 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-10 12:40 - 2014-03-10 12:38 - 00003860 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-10 12:39 - 2014-03-10 12:39 - 00847848 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeSetup (1).exe
2014-03-10 12:39 - 2013-11-26 01:39 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Google
2014-03-10 12:38 - 2014-03-10 12:38 - 38146040 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeStandaloneSetup_33.0.1750.146.exe
2014-03-10 12:38 - 2013-11-26 01:40 - 00000000 ____D () C:\Program Files (x86)\Google
2014-03-10 12:21 - 2014-03-10 12:21 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Schnuppel\Downloads\revosetup95.exe
2014-03-08 15:06 - 2011-11-07 23:36 - 00000000 ____D () C:\ProgramData\Sonic
2014-03-07 17:12 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\NDF
2014-03-07 17:10 - 2014-03-07 17:10 - 00003000 _____ () C:\windows\System32\Tasks\{61012C3F-26CC-4E01-A20A-37127768BDAE}
2014-03-07 17:08 - 2014-03-07 17:08 - 00003000 _____ () C:\windows\System32\Tasks\{A2C75968-E758-47A2-A933-B9772D3786FD}
2014-03-06 15:17 - 2014-03-06 15:17 - 00000096 _____ () C:\Users\Schnuppel\Downloads\Fixlist.txt
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Apple Computer
2014-03-06 15:15 - 2014-03-06 15:15 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple Computer
2014-03-05 19:23 - 2014-03-05 19:23 - 00448512 _____ (OldTimer Tools) C:\Users\Schnuppel\Desktop\TFC.exe
2014-03-05 19:16 - 2013-11-27 06:07 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0
2014-03-05 19:15 - 2014-03-05 19:15 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml (1).msi
2014-03-05 19:14 - 2014-03-05 19:14 - 02434048 _____ () C:\Users\Schnuppel\Downloads\msxml.msi
2014-03-05 19:11 - 2014-03-05 19:11 - 00847848 _____ (Google Inc.) C:\Users\Schnuppel\Downloads\ChromeSetup.exe
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Secunia PSI
2014-03-05 19:05 - 2014-03-05 19:05 - 00000000 ____D () C:\Program Files (x86)\Secunia
2014-03-05 19:04 - 2014-03-05 19:03 - 05329480 _____ (Secunia) C:\Users\Schnuppel\Downloads\PSISetup_3.0.0.9016.exe
2014-03-04 18:36 - 2014-02-27 09:57 - 00034900 _____ () C:\Users\Schnuppel\Downloads\FRST.txt
2014-03-04 18:31 - 2014-03-04 18:31 - 00987425 _____ () C:\Users\Schnuppel\Downloads\SecurityCheck.exe
2014-03-04 17:21 - 2014-03-04 17:21 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu (1).exe
2014-03-04 17:15 - 2014-03-04 17:14 - 02347384 _____ (ESET) C:\Users\Schnuppel\Downloads\esetsmartinstaller_enu.exe
2014-03-03 15:20 - 2014-03-03 15:20 - 00000000 ____D () C:\windows\ERUNT
2014-03-03 15:19 - 2014-03-03 15:19 - 01037734 _____ (Thisisu) C:\Users\Schnuppel\Downloads\JRT.exe
2014-03-03 15:13 - 2014-01-12 09:40 - 00000000 ____D () C:\AdwCleaner
2014-03-03 15:10 - 2014-03-03 15:10 - 01244192 _____ () C:\Users\Schnuppel\Downloads\adwcleaner.exe
2014-03-03 14:47 - 2014-03-03 14:47 - 00001111 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Users\Schnuppel\AppData\Roaming\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-03 14:47 - 2014-03-03 14:47 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-03 14:43 - 2014-03-03 14:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Schnuppel\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-01 18:44 - 2014-03-01 18:44 - 00017584 _____ () C:\ComboFix.txt
2014-03-01 18:44 - 2014-03-01 18:40 - 00000000 ____D () C:\Qoobox
2014-03-01 18:43 - 2014-03-01 18:39 - 00000000 ____D () C:\windows\erdnt
2014-03-01 18:43 - 2009-07-14 03:34 - 00000215 _____ () C:\windows\system.ini
2014-02-28 22:52 - 2011-11-07 23:06 - 01594892 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2014-02-27 09:58 - 2014-02-27 09:58 - 00026087 _____ () C:\Users\Schnuppel\Downloads\Addition.txt
2014-02-27 09:56 - 2014-02-27 09:55 - 02155520 _____ (Farbar) C:\Users\Schnuppel\Downloads\FRST64.exe
2014-02-26 18:45 - 2014-03-11 18:57 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\windows\system32\roboot64.exe
2014-02-24 22:53 - 2014-02-04 11:56 - 00000000 ____D () C:\Users\Schnuppel\AppData\Local\Paint.NET
2014-02-23 09:13 - 2014-03-11 20:04 - 02241536 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-02-23 09:13 - 2014-03-11 20:04 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-02-23 09:13 - 2014-03-11 20:04 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-02-23 09:12 - 2014-03-11 20:04 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-02-23 09:12 - 2014-03-11 20:04 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-02-23 09:12 - 2014-03-11 20:03 - 19273216 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-02-23 09:11 - 2014-03-11 20:04 - 03960320 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-02-23 09:11 - 2014-03-11 20:04 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-02-23 09:11 - 2014-03-11 20:04 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-02-23 09:11 - 2014-03-11 20:04 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-02-23 09:11 - 2014-03-11 20:04 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-02-23 09:11 - 2014-03-11 20:04 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-02-23 09:11 - 2014-03-11 20:04 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-02-23 09:11 - 2014-03-11 20:04 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-02-23 09:11 - 2014-03-11 20:03 - 15404032 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-02-23 07:54 - 2014-03-11 20:04 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-02-23 07:54 - 2014-03-11 20:04 - 01140736 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-02-23 07:53 - 2014-03-11 20:04 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-02-23 07:53 - 2014-03-11 20:04 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-02-23 07:53 - 2014-03-11 20:04 - 02049024 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-02-23 07:53 - 2014-03-11 20:04 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-02-23 07:53 - 2014-03-11 20:04 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-02-23 07:53 - 2014-03-11 20:04 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-02-23 07:53 - 2014-03-11 20:04 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-02-23 07:53 - 2014-03-11 20:04 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-02-23 07:53 - 2014-03-11 20:04 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-02-23 07:53 - 2014-03-11 20:04 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-02-23 07:53 - 2014-03-11 20:04 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-02-23 07:53 - 2014-03-11 20:03 - 14358016 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-02-23 07:35 - 2014-03-11 20:04 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-02-23 07:31 - 2014-03-11 20:04 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-02-23 06:39 - 2014-03-11 20:04 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2014-02-23 06:35 - 2014-03-11 20:04 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-18 23:03 - 2013-11-25 06:34 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-14 16:35 - 2013-11-25 19:00 - 00000000 ____D () C:\ProgramData\PCDr
Some content of TEMP:
====================
C:\Users\Schnuppel\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-10 15:40
==================== End Of Log ============================
--- --- --- |
|
17.03.2014, 10:52
| #30 |
| /// the machine /// TB-Ausbilder | Google Chrome öffnet sich... Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
Linear-Darstellung
