| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Internet v. a. mit Firefox sehr langsam (versteckter "Proxy")Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
21.03.2014, 22:09
| #1 |
| |  Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") Hallo zusammen! Seit einiger Zeit habe ich extreme Probleme beim Surfen mit dem Firefox (aktuell 28) unter Win 7 SP1. Laut dem Speedtest von Kabel Deutschland kommen von gebuchten 16 Mbit/s max. 5 an. Der IE 9 läuft zwar schneller, allerdings "hängt" der auch etwas. Leitung von KD und Modem sind in Ordnung. Ich habe bereits eine komplette Neuinstallation von Firefox durchgeführt, allerdings ohne Erfolg. Auch ein Reset des Kabelmodems (direkt über LAN mit Netbook verbunden) und TCP-Reset haben nichts gebracht. Virenscanner (auch verschiedene Onlinescanner) zeigten keine Funde. Obwohl im Firefox kein Proxy eingestellt ist, weicht die unter wieistmeineip.de angezeigte IP-Adresse von der in ipconfig ab. Mit Malewarebytes hatte ich bei einem Quickscan dann das Ergebnis, dass Einträge zum unerwünschten Programm "OpenCandy" gefunden wurden: Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.03.20.07 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 11.0.9600.16428 jana :: JANA-VAIO [Administrator] 21.03.2014 09:23:50 MBAM-log-2014-03-21 (09-55-33).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 295025 Laufzeit: 30 Minute(n), 39 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 4 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7b19203-6398-315f-e8e0-2f8174951c42&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate={installDate}&type=hp1000) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Bar (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7b19203-6398-315f-e8e0-2f8174951c42&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate={installDate}&type=hp1000) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7b19203-6398-315f-e8e0-2f8174951c42&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate={installDate}&type=hp1000) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=b7b19203-6398-315f-e8e0-2f8174951c42&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate={installDate}&type=hp1000) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. Infizierte Verzeichnisse: 3 C:\Users\jana\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\Users\jana\AppData\Roaming\OpenCandy\2BB230315A1E4201B7B8C945A31D6C5C (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. C:\Users\jana\AppData\Roaming\OpenCandy\9D92ADDC744D48BFB4FA76ACFF9C130C (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. Infizierte Dateien: 2 C:\Users\jana\Downloads\FreemakeVideoDownloaderSetup.exe (PUP.Optional.Ellora) -> Keine Aktion durchgeführt. C:\Users\jana\AppData\Roaming\OpenCandy\9D92ADDC744D48BFB4FA76ACFF9C130C\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt. (Ende) Ich bin mir nicht sicher, ob ich mir hier einen Schädling eingefangen habe, oder ob das Problem eine andere Ursache hat. Würde mich sehr über Unterstützung freuen! Danke schonmal! Hier mal andere Logfiles: FRST Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01
Ran by jana (administrator) on JANA-VAIO on 21-03-2014 20:30:07
Running from C:\Users\jana\Desktop
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VAIOCareService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(AnVir Software) C:\Program Files\AnVir Task Manager Free\anvir.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Sony Corporation) C:\Program Files\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1578280 2009-12-23] (Synaptics Incorporated)
HKLM\...\Run: [ISBMgr.exe] - C:\Program Files\Sony\ISB Utility\ISBMgr.exe [320880 2009-08-26] (Sony Corporation)
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [6756048 2012-11-08] (COMODO)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\VESWinlogon: C:\Windows\system32\VESWinlogon.dll (Sony Corporation)
HKU\S-1-5-21-1592874016-3910639467-1926928520-1000\...\Run: [SpybotSD TeaTimer] - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKU\S-1-5-21-1592874016-3910639467-1926928520-1000\...\Run: [EPSON SX230 Series] - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIHKE.EXE [212480 2012-05-06] (SEIKO EPSON CORPORATION)
AppInit_DLLs: C:\Windows\system32\guard32.dll => C:\Windows\system32\guard32.dll [301264 2012-11-08] (COMODO)
==================== Internet (Whitelisted) ====================
ProxyServer: 62.2.150.188:8000
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xECAB71C23B40CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225
FireFox:
========
FF ProfilePath: C:\Users\jana\AppData\Roaming\Mozilla\Firefox\Profiles\pwwy96n1.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=12.0.1.647 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.647 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-04-27]
========================== Services (Whitelisted) =================
R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
S3 Apache2.2; C:\xampp\apache\bin\httpd.exe [20549 2010-10-18] (Apache Software Foundation)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [1990464 2012-11-08] (COMODO)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [36352 2009-12-12] ()
S3 SampleCollector; C:\Program Files\Sony\VAIO Care\collsvc.exe [122880 2009-09-16] (Intel Corporation)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.RTM\RpcAgentSrv.exe [72344 2008-11-25] (SiSoftware)
R2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 SOHDBSvr; C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation)
S3 Tomcat6; C:\Program Files\Apache\Tomcat 6.0\bin\tomcat6.exe [61440 2010-07-19] (Apache Software Foundation)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-09-14] (Sony Corporation)
R2 VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [204648 2009-11-30] (Sony Corporation)
S3 VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [513392 2009-12-16] (Sony Corporation)
S3 VcmIAlzMgr; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [480624 2009-09-16] (Sony Corporation)
S3 VcmINSMgr; C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [361840 2009-09-01] (Sony Corporation)
R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [692224 2009-12-18] (Sony Corporation)
S3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [669040 2009-10-30] (Sony Corporation)
R2 VzCdbSvc; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-09-14] (Sony Corporation)
S3 XPrint-Client-Service; C:\Program Files\Schomaecker\XPrint-Client\XPrint-Client-Service\XPrint-Client-Service.exe [1144320 2008-08-28] (Schomäcker GmbH)
S3 postgresql-9.1; No ImagePath
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
==================== Drivers (Whitelisted) ====================
R1 CBDisk; C:\Windows\system32\drivers\{1ec00332-9da9-436d-9aaa-048787df45b7}.sys [57800 2012-12-09] (EldoS Corporation)
R1 CbFs; C:\Windows\system32\drivers\{E7224BCD-D889-4528-8456-60CE0724367E}.sys [145504 2012-12-09] (EldoS Corporation)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [19632 2012-11-08] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [494416 2012-11-08] (COMODO)
R2 drhard; C:\Windows\system32\Drivers\drhard.sys [23600 2005-12-01] (Licensed for Gebhard Software)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35088 2011-02-11] (CACE Technologies, Inc.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.RTM\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [25984 2009-12-12] (The OpenVPN Project)
S3 netr28u; No ImagePath
S3 NSNDIS5; \??\C:\Windows\system32\NSNDIS5.SYS [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-21 20:30 - 2014-03-21 20:30 - 00014140 _____ () C:\Users\jana\Desktop\FRST.txt
2014-03-21 20:29 - 2014-03-21 20:30 - 00000000 ____D () C:\FRST
2014-03-21 20:28 - 2014-03-21 20:28 - 01145856 _____ (Farbar) C:\Users\jana\Desktop\FRST.exe
2014-03-21 20:25 - 2014-03-21 20:25 - 00000470 _____ () C:\Users\jana\Desktop\defogger_disable.log
2014-03-21 20:25 - 2014-03-21 20:25 - 00000000 _____ () C:\Users\jana\defogger_reenable
2014-03-21 20:22 - 2014-03-21 20:22 - 00050477 _____ () C:\Users\jana\Desktop\Defogger.exe
2014-03-21 20:02 - 2014-03-21 20:02 - 00987442 _____ () C:\Users\jana\Downloads\SecurityCheck.exe
2014-03-21 17:38 - 2014-03-21 17:39 - 02002416 _____ (Trend Micro Inc.) C:\Users\jana\Downloads\HousecallLauncher(1).exe
2014-03-21 11:25 - 2014-03-21 11:25 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-21 11:25 - 2014-03-21 11:25 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-21 10:51 - 2014-03-21 16:14 - 00000000 ____D () C:\AdwCleaner
2014-03-21 10:49 - 2014-03-21 10:49 - 01950720 _____ () C:\Users\jana\Desktop\adwcleaner.exe
2014-03-21 08:48 - 2014-03-21 08:48 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-21 08:48 - 2014-03-21 08:48 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 08:47 - 2014-03-21 08:47 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-21 08:47 - 2014-03-21 08:47 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-21 08:47 - 2014-03-21 08:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-21 08:47 - 2014-03-21 08:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-21 08:25 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-20 23:33 - 2014-03-20 23:33 - 00283192 _____ (Mozilla) C:\Users\jana\Downloads\Firefox Setup Stub 28.0.exe
2014-03-20 23:13 - 2014-03-20 23:28 - 00010113 _____ () C:\Windows\IE10_main.log
2014-03-20 22:58 - 2014-03-20 22:59 - 00985600 _____ () C:\Users\jana\Downloads\MicrosoftFixit50123.msi
2014-03-20 22:46 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-03-20 22:46 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-20 22:46 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-20 22:46 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-03-20 22:46 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-03-20 22:46 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-20 22:46 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-20 22:46 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-03-20 22:46 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-20 22:46 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-03-20 22:46 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-03-20 22:42 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-19 08:09 - 2014-03-19 08:09 - 00001413 _____ () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-18 15:00 - 2014-03-18 15:01 - 00000000 ____D () C:\Windows\system32\Adobe
2014-03-17 21:37 - 2014-03-21 11:25 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-17 21:13 - 2014-03-17 21:13 - 00067805 _____ () C:\Users\jana\Desktop\bookmarks-2014-03-17.json
2014-03-15 14:13 - 2014-03-15 14:13 - 00011893 _____ () C:\Users\jana\Desktop\hijackthis.log
2014-03-12 13:50 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 13:50 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 13:50 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 13:50 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 13:50 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\sg_backup_2014-03-10-1147.spg
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\FirstBackup.spg
2014-03-10 11:43 - 2014-03-10 11:43 - 00659456 _____ (Speed Guide Inc.) C:\Users\jana\Downloads\TCPOptimizer.exe
2014-03-08 15:55 - 2014-03-08 15:56 - 00658048 _____ () C:\Windows\Minidump\030814-31496-01.dmp
2014-03-08 15:55 - 2014-03-08 15:55 - 210663785 _____ () C:\Windows\MEMORY.DMP
2014-03-08 11:30 - 2014-03-08 11:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-08 11:29 - 2014-03-08 11:29 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-03-08 11:29 - 2014-03-08 11:27 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-03-08 11:23 - 2014-03-08 11:23 - 00921512 _____ (Oracle Corporation) C:\Users\jana\Downloads\jre-7u51-windows-i586-iftw.exe
2014-03-08 10:36 - 2014-03-08 10:36 - 00000119 _____ () C:\Windows\onlineeye.INI
2014-03-08 10:28 - 2014-03-18 09:50 - 00000000 ____D () C:\Program Files\Onlineeye
2014-03-08 10:27 - 2014-03-08 10:26 - 06418833 _____ (pmaSoft) C:\Users\jana\Downloads\onlineeye.exe
2014-02-22 18:58 - 2014-02-22 18:58 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-22 18:57 - 2014-02-22 18:57 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Caesar III
2014-02-22 18:56 - 2014-02-22 18:57 - 00000000 ____D () C:\Program Files\Caesar III
2014-02-22 18:55 - 2014-02-22 18:55 - 00000000 ____D () C:\Users\jana\Downloads\c3
2014-02-22 18:54 - 2014-02-22 18:54 - 00000000 ____D () C:\Program Files\7-Zip
2014-02-22 18:51 - 2014-02-22 18:51 - 00614816 _____ (Chip Digital GmbH) C:\Users\jana\Downloads\7 Zip 32 Bit - CHIP-Downloader.exe
2014-02-22 18:26 - 2014-02-22 18:28 - 91742484 _____ () C:\Users\jana\Downloads\c3.rar
2014-02-20 21:45 - 2014-02-20 21:45 - 06951048 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight.exe
2014-02-20 21:39 - 2014-03-13 08:21 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-20 21:31 - 2014-02-20 21:30 - 06284664 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight4.0.60531.0.exe
2014-02-20 16:32 - 2014-02-20 16:32 - 00000000 __HDC () C:\ProgramData\{BF7D58F7-EE72-4F10-93D4-6A100BDAF0F0}
2014-02-20 16:31 - 2014-02-20 16:34 - 00000000 ____D () C:\Program Files\WinSysClean X5 Trial
2014-02-20 16:26 - 2014-03-18 09:46 - 00000000 ____D () C:\Program Files\PeerBlock
2014-02-20 15:53 - 2014-02-20 15:53 - 02374320 _____ (PeerBlock, LLC ) C:\Users\jana\Downloads\PeerBlock-Setup_v1.2_r693.exe
2014-02-20 15:39 - 2014-02-20 15:38 - 00718442 _____ (Stephan Plath ) C:\Users\jana\Downloads\RidNacs-2.0.3-Setup.exe
2014-02-20 15:19 - 2014-02-20 15:19 - 18491136 _____ (Ultimate Systems, Inc. ) C:\Users\jana\Downloads\nw_29342_wscxvsetupexe.exe
==================== One Month Modified Files and Folders =======
2014-03-21 20:30 - 2014-03-21 20:30 - 00014140 _____ () C:\Users\jana\Desktop\FRST.txt
2014-03-21 20:30 - 2014-03-21 20:29 - 00000000 ____D () C:\FRST
2014-03-21 20:28 - 2014-03-21 20:28 - 01145856 _____ (Farbar) C:\Users\jana\Desktop\FRST.exe
2014-03-21 20:26 - 2012-12-25 15:05 - 00000000 ____D () C:\Users\jana\Desktop\musikNEU
2014-03-21 20:25 - 2014-03-21 20:25 - 00000470 _____ () C:\Users\jana\Desktop\defogger_disable.log
2014-03-21 20:25 - 2014-03-21 20:25 - 00000000 _____ () C:\Users\jana\defogger_reenable
2014-03-21 20:25 - 2012-06-08 12:33 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-03-21 20:25 - 2010-11-11 20:53 - 00000000 ____D () C:\Users\jana
2014-03-21 20:23 - 2010-11-11 22:29 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Skype
2014-03-21 20:22 - 2014-03-21 20:22 - 00050477 _____ () C:\Users\jana\Desktop\Defogger.exe
2014-03-21 20:02 - 2014-03-21 20:02 - 00987442 _____ () C:\Users\jana\Downloads\SecurityCheck.exe
2014-03-21 19:52 - 2013-05-29 08:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-21 19:14 - 2013-04-16 18:25 - 00314862 _____ () C:\Users\jana\AppData\Local\census.cache
2014-03-21 19:14 - 2013-04-16 18:24 - 00133966 _____ () C:\Users\jana\AppData\Local\ars.cache
2014-03-21 17:39 - 2014-03-21 17:38 - 02002416 _____ (Trend Micro Inc.) C:\Users\jana\Downloads\HousecallLauncher(1).exe
2014-03-21 16:23 - 2010-11-11 19:55 - 01638192 _____ () C:\Windows\WindowsUpdate.log
2014-03-21 16:23 - 2009-07-14 05:34 - 00016352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-21 16:23 - 2009-07-14 05:34 - 00016352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-21 16:15 - 2013-11-29 20:37 - 00015872 _____ () C:\Windows\setupact.log
2014-03-21 16:15 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-21 16:14 - 2014-03-21 10:51 - 00000000 ____D () C:\AdwCleaner
2014-03-21 16:06 - 2013-11-29 20:36 - 00079096 _____ () C:\Windows\PFRO.log
2014-03-21 16:03 - 2013-11-06 21:33 - 00000000 ____D () C:\Program Files\Cain
2014-03-21 11:25 - 2014-03-21 11:25 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-21 11:25 - 2014-03-21 11:25 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-21 11:25 - 2014-03-17 21:37 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-21 11:25 - 2012-05-02 19:33 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Mozilla
2014-03-21 10:49 - 2014-03-21 10:49 - 01950720 _____ () C:\Users\jana\Desktop\adwcleaner.exe
2014-03-21 09:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-03-21 08:55 - 2013-12-11 00:11 - 00073043 _____ () C:\Windows\IE11_main.log
2014-03-21 08:48 - 2014-03-21 08:48 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-21 08:48 - 2014-03-21 08:48 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 08:47 - 2014-03-21 08:47 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-21 08:47 - 2014-03-21 08:47 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-21 08:47 - 2014-03-21 08:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-21 08:47 - 2014-03-21 08:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-21 08:04 - 2010-07-23 23:30 - 00000000 ____D () C:\Windows\InstDrvs
2014-03-20 23:33 - 2014-03-20 23:33 - 00283192 _____ (Mozilla) C:\Users\jana\Downloads\Firefox Setup Stub 28.0.exe
2014-03-20 23:28 - 2014-03-20 23:13 - 00010113 _____ () C:\Windows\IE10_main.log
2014-03-20 23:22 - 2010-12-06 23:22 - 00000300 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-03-20 22:59 - 2014-03-20 22:58 - 00985600 _____ () C:\Users\jana\Downloads\MicrosoftFixit50123.msi
2014-03-20 22:50 - 2010-11-11 19:46 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-03-20 14:45 - 2012-06-08 10:52 - 00000000 ____D () C:\Program Files\COMODO
2014-03-20 11:09 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-20 00:29 - 2013-08-15 08:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-20 00:21 - 2011-01-09 13:33 - 87350280 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-19 08:09 - 2014-03-19 08:09 - 00001413 _____ () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-18 21:17 - 2011-12-28 14:14 - 00000000 ____D () C:\Users\jana\Desktop\Filme
2014-03-18 20:29 - 2012-04-15 19:37 - 00000000 ____D () C:\Users\jana\Desktop\Filme2
2014-03-18 15:01 - 2014-03-18 15:00 - 00000000 ____D () C:\Windows\system32\Adobe
2014-03-18 09:50 - 2014-03-08 10:28 - 00000000 ____D () C:\Program Files\Onlineeye
2014-03-18 09:46 - 2014-02-20 16:26 - 00000000 ____D () C:\Program Files\PeerBlock
2014-03-17 21:13 - 2014-03-17 21:13 - 00067805 _____ () C:\Users\jana\Desktop\bookmarks-2014-03-17.json
2014-03-17 09:56 - 2012-08-16 08:56 - 00000000 ____D () C:\Users\jana\Desktop\aktuell
2014-03-15 16:51 - 2011-01-17 11:39 - 00164352 _____ () C:\Users\jana\Documents\Verdienstübersicht.xls
2014-03-15 14:13 - 2014-03-15 14:13 - 00011893 _____ () C:\Users\jana\Desktop\hijackthis.log
2014-03-13 11:17 - 2013-10-19 16:38 - 00000000 ____D () C:\Users\jana\Desktop\WS13
2014-03-13 11:02 - 2010-07-23 23:18 - 01586464 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-13 08:23 - 2013-05-04 22:21 - 00355240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 08:21 - 2014-02-20 21:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-11 22:52 - 2012-05-02 18:14 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-11 22:52 - 2011-08-29 17:04 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\sg_backup_2014-03-10-1147.spg
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\FirstBackup.spg
2014-03-10 11:43 - 2014-03-10 11:43 - 00659456 _____ (Speed Guide Inc.) C:\Users\jana\Downloads\TCPOptimizer.exe
2014-03-08 15:56 - 2014-03-08 15:55 - 00658048 _____ () C:\Windows\Minidump\030814-31496-01.dmp
2014-03-08 15:55 - 2014-03-08 15:55 - 210663785 _____ () C:\Windows\MEMORY.DMP
2014-03-08 15:55 - 2011-12-12 21:49 - 00000000 ____D () C:\Windows\Minidump
2014-03-08 11:30 - 2014-03-08 11:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-08 11:29 - 2014-03-08 11:29 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-03-08 11:27 - 2014-03-08 11:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-03-08 11:27 - 2010-11-11 20:31 - 00000000 ____D () C:\Program Files\Java
2014-03-08 11:23 - 2014-03-08 11:23 - 00921512 _____ (Oracle Corporation) C:\Users\jana\Downloads\jre-7u51-windows-i586-iftw.exe
2014-03-08 10:36 - 2014-03-08 10:36 - 00000119 _____ () C:\Windows\onlineeye.INI
2014-03-08 10:26 - 2014-03-08 10:27 - 06418833 _____ (pmaSoft) C:\Users\jana\Downloads\onlineeye.exe
2014-03-04 08:47 - 2011-02-06 18:02 - 00030208 _____ () C:\Users\jana\Documents\Vermögensplan.xls
2014-03-02 12:34 - 2011-04-23 13:33 - 00000000 ____D () C:\Users\jana\Desktop\Studium
2014-02-26 10:12 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-22 18:58 - 2014-02-22 18:58 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-22 18:57 - 2014-02-22 18:57 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Caesar III
2014-02-22 18:57 - 2014-02-22 18:56 - 00000000 ____D () C:\Program Files\Caesar III
2014-02-22 18:55 - 2014-02-22 18:55 - 00000000 ____D () C:\Users\jana\Downloads\c3
2014-02-22 18:54 - 2014-02-22 18:54 - 00000000 ____D () C:\Program Files\7-Zip
2014-02-22 18:51 - 2014-02-22 18:51 - 00614816 _____ (Chip Digital GmbH) C:\Users\jana\Downloads\7 Zip 32 Bit - CHIP-Downloader.exe
2014-02-22 18:28 - 2014-02-22 18:26 - 91742484 _____ () C:\Users\jana\Downloads\c3.rar
2014-02-20 21:45 - 2014-02-20 21:45 - 06951048 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight.exe
2014-02-20 21:30 - 2014-02-20 21:31 - 06284664 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight4.0.60531.0.exe
2014-02-20 16:34 - 2014-02-20 16:31 - 00000000 ____D () C:\Program Files\WinSysClean X5 Trial
2014-02-20 16:32 - 2014-02-20 16:32 - 00000000 __HDC () C:\ProgramData\{BF7D58F7-EE72-4F10-93D4-6A100BDAF0F0}
2014-02-20 15:53 - 2014-02-20 15:53 - 02374320 _____ (PeerBlock, LLC ) C:\Users\jana\Downloads\PeerBlock-Setup_v1.2_r693.exe
2014-02-20 15:38 - 2014-02-20 15:39 - 00718442 _____ (Stephan Plath ) C:\Users\jana\Downloads\RidNacs-2.0.3-Setup.exe
2014-02-20 15:19 - 2014-02-20 15:19 - 18491136 _____ (Ultimate Systems, Inc. ) C:\Users\jana\Downloads\nw_29342_wscxvsetupexe.exe
ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-1592874016-3910639467-1926928520-1000\$da5da012b751b1a7f7d3893de860eefe
Files to move or delete:
====================
C:\Users\jana\akvis-magnifier-setup.exe
C:\Users\jana\Fport.exe
C:\Users\jana\h2cdimage.exe
Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\SkypeSetup.exe
C:\Users\jana\AppData\Local\Temp\feedback.dll
C:\Users\jana\AppData\Local\Temp\Quarantine.exe
C:\Users\jana\AppData\Local\Temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-10 16:41
==================== End Of Log ============================
Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014 01
Ran by jana at 2014-03-21 20:32:22
Running from C:\Users\jana\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AV: COMODO Antivirus (Enabled - Up to date) {458BB331-2324-0753-3D5F-1472EB102AC0}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: COMODO Defense+ (Enabled - Up to date) {FEEA52D5-051E-08DD-07EF-2F009097607D}
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
AAVUpdateManager (HKLM\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.01.513.58212 - ABBYY) Hidden
AccessData FTK Imager (HKLM\...\{0ADC8340-4A94-4CE3-A721-B558F365F8D0}) (Version: 3.1.1.8 - AccessData)
ActiveState Komodo Edit 7.1.3 (HKLM\...\{F69166F9-0171-49DA-8B63-6B8DD8279770}) (Version: 7.1.3 - ActiveState Software Inc.)
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader 9.5.0 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A95000000001}) (Version: 9.5.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
AKVIS Magnifier (HKLM\...\{9FDD51C9-F7AA-40AF-A4FF-0500E45E4A06}) (Version: 6.0.1006.8910 - AKVIS)
AnVir Task Manager Free (HKLM\...\AnVir Task Manager Free) (Version: - AnVir Software)
Apache Tomcat 6.0 (remove only) (HKLM\...\Apache Tomcat 6.0) (Version: - )
ArcSoft WebCam Companion 3 (HKLM\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.193 - ArcSoft)
Caesar III (HKLM\...\Caesar III) (Version: - )
Cain & Abel 4.9.46 (HKLM\...\Cain & Abel 4.9.46) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 3.17 - Piriform)
COMODO Internet Security (HKLM\...\{D6AB1F5B-FED6-49A9-9747-327BD28FB3C7}) (Version: 5.10.31649.2253 - COMODO Security Solutions Inc.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DbVisualizer 7.1.4 (HKLM\...\8973-4025-0853-7287) (Version: 7.1.4 - DbVis Software AB)
Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM\...\Dev-C++) (Version: - )
Dia (nur entfernen) (HKLM\...\Dia) (Version: - )
Dr. Hardware 2013 13.0d (HKLM\...\Dr. Hardware 2013_is1) (Version: - Peter A. Gebhard)
Driver Magician Lite 4.21 (HKLM\...\Driver Magician Lite_is1) (Version: - GoldSolution Software, Inc.)
Einstellungen für VAIO-Inhaltsüberwachung (HKLM\...\{23825B69-36DF-4DAD-9CFD-118D11D80F16}) (Version: 2.4.1.09180 - Sony Corporation)
Epson Event Manager (HKLM\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX230 Series Printer Uninstall (HKLM\...\EPSON SX230 Series) (Version: - SEIKO EPSON Corporation)
Evernote (HKLM\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.0.545 - Evernote Corp.)
GIMP 2.6.11 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Update Helper (Version: 1.3.21.111 - Google Inc.) Hidden
HiJackThis (HKLM\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
inSSIDer (HKLM\...\{BF6379E6-9936-46B0-B6AC-C56EE3987D2E}) (Version: 2.1.1 - MetaGeek)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
Java(TM) Platform, Micro Edition Software Development Kit 3.0 (HKCU\...\nbi-javame-toolkit-3.0.0.0.20090408) (Version: - Sun Microsystems Inc.)
Java(TM) SE Development Kit 6 Update 22 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160220}) (Version: 1.6.0.220 - Oracle)
JMicron Ethernet Adapter NDIS Driver (HKLM\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.14.11 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.37.3 - JMicron Technology Corp.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM\...\{8E770F99-CF23-4BF9-BF4E-E3A2924FEB27}) (Version: 8.0.50727.762 - SAP)
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM\...\{CEC7A786-A9C8-4EF7-BB59-6518E3B3C878}) (Version: 8.0.50727.4053 - SAP)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 English (HKLM\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML4.0 redistributable (HKLM\...\{44D66AD9-AE19-4AFD-BE7E-A1B44C856697}) (Version: 4.0.0.0 - SAP)
MT66 Software Update (HKLM\...\{F2E4F3A5-A8F0-46F4-8E91-E8C1DE1FCFE5}_is1) (Version: - )
MusicStation (HKLM\...\{AB259D46-F851-41B0-9AFA-AED8998AD68A}) (Version: 2.0.0.1067 - Omnifone)
Norton Online Backup (HKLM\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.20.0 - Symantec)
Notepad++ (HKLM\...\Notepad++) (Version: 5.8.4 - )
OpenOffice.org 3.2 (HKLM\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
OpenVPN 2.1.1 (HKLM\...\OpenVPN) (Version: 2.1.1 - )
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.0.2 - Frank Heindörfer, Philip Chinery)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.201.0 - Tracker Software Products Ltd)
pgAdmin III 1.14 (HKLM\...\{58D1EDF1-038E-4F62-A08E-C47581465A57}) (Version: 1.14 - The pgAdmin Development Team)
Photomizer Pro (HKLM\...\{41B5224D-6857-4D8B-0001-C8949A33B608}) (Version: 2.0.13.426 - Engelmann Media GmbH)
PhotoScape (HKLM\...\PhotoScape) (Version: - )
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PMB (HKLM\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.0.00.10260 - Sony Corporation)
PostgreSQL 9.1 (HKLM\...\PostgreSQL 9.1) (Version: 9.1 - PostgreSQL Global Development Group)
Protege 4.3 (HKLM\...\Protege 4.3) (Version: 1.0.0.0 - Stanford Center for Biomedical Informatics Research)
Python 2.7.2 (HKLM\...\{2E295B5B-1AD4-4d36-97C2-A316084722CF}) (Version: 2.7.2150 - Python Software Foundation)
R for Windows 2.15.0 (HKLM\...\R for Windows 2.15.0_is1) (Version: 2.15.0 - R Development Core Team)
Rainmeter (HKLM\...\Rainmeter) (Version: - )
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 12.0) (Version: - RealNetworks)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6005 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Reg Organizer version 6.01 (HKLM\...\Reg Organizer_is1) (Version: 6.01 - ChemTable Software)
Setting Utility Series (HKLM\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.1.0.11200 - Sony Corporation)
SimpleScreenshot 1.40 (HKLM\...\SimpleScreenshot) (Version: - )
SiSoftware Sandra Lite 2014.RTM (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 20.10.2014.2 - SiSoftware)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Sony Home Network Library (HKLM\...\{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}) (Version: 2.0.1.10160 - Sony Corporation)
Sony Home Network Library (Version: 2.0.1.10160 - Sony Corporation) Hidden
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
STEUEReasy 2013 (HKLM\...\{4D0EAA2D-8EE2-43AB-BE00-18A1D0A9281C}) (Version: 18.09 - Wolters Kluwer Deutschland GmbH)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.10.0 - Synaptics Incorporated)
System Checkup 3.4 (HKLM\...\{4AC7B4E7-59B7-4E48-A60D-263C486FC33A}_is1) (Version: 3.4.0.53 - iolo technologies, LLC)
TeXnicCenter Version 1.0 Stable RC1 (HKLM\...\TeXnicCenter_is1) (Version: Version 1.0 Stable RC1 - TeXnicCenter.org)
TweakMe! (HKLM\...\{709D0207-B1F8-4ADC-BB2F-CDBE2367A475}_is1) (Version: 1.2.0.7 - pXc-coding.com)
VAIO Care (HKLM\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 5.0.3.11130 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (HKLM\...\{4882EBF5-CA37-4EF4-BCB8-9B0E78B907D0}) (Version: 3.6.0.09250 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (Version: 3.6.0.09250 - Sony Corporation) Hidden
VAIO Content Metadata Intelligent Network Service Manager (HKLM\...\{4427F384-B5BE-4769-B7D0-C784FC321EB1}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata Intelligent Network Service Manager (Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Metadata Manager Settings (HKLM\...\{12D0BE8D-538C-4AB1-86DE-C540308F50DA}) (Version: 3.6.0.09240 - Sony Corporation)
VAIO Content Metadata Manager Settings (Version: 3.6.0.09240 - Sony Corporation) Hidden
VAIO Content Metadata XML Interface Library (HKLM\...\{291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata XML Interface Library (Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Monitoring Settings (Version: 2.4.1.09180 - Sony Corporation) Hidden
VAIO Control Center (HKLM\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.1.0.10160 - Sony Corporation)
VAIO Data Restore Tool (HKLM\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.2.0.09150 - Sony Corporation)
VAIO Data Restore Tool (Version: 1.2.0.09150 - Sony Corporation) Hidden
VAIO Energie Verwaltung (HKLM\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.0.0.12150 - Sony Corporation)
VAIO Entertainment Platform (HKLM\...\{6B1F20F2-6321-4669-A58C-33DF8E7517FF}) (Version: 3.6.0.09150 - Sony Corporation)
VAIO Entertainment Platform (Version: 3.6.0.09150 - Sony Corporation) Hidden
VAIO Event Service (HKLM\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.1.0.11300 - Sony Corporation)
VAIO Gate (HKLM\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 1.3.0.09240 - Sony Corporation)
VAIO Gate Default (HKLM\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 1.0.0.10290 - Sony Corporation)
VAIO Hardware Diagnostics (Version: 3.9.1 - Sony Corporation) Hidden
VAIO Marketing Tools (HKLM\...\MarketingTools) (Version: - Sony Corporation)
VAIO Media plus (HKLM\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.0.1.10160 - Sony Corporation)
VAIO Media plus Opening Movie (HKLM\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 1.2.0.09100 - Sony Corporation)
VAIO Original Function Settings (Version: 2.0.0.07010 - Sony Corporation) Hidden
VAIO Original Funktion Einstellungen (HKLM\...\{A63E7492-A0BC-4BB9-89A7-352965222380}) (Version: 2.0.0.07010 - Sony Corporation)
VAIO Smart Network (HKLM\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.1.0.12170 - Sony Corporation)
VAIO Update 5 (HKLM\...\{5BEE8F1F-BD32-4553-8107-500439E43BD7}) (Version: 5.0.0.10300 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.0.10200 - Sony Corporation)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vistumbler (HKLM\...\Vistumbler) (Version: v10 - Vistumbler.net)
wGet-Installer (HKLM\...\{D901E911-3478-466F-8EA0-0AEE85F22E4B}) (Version: 1.09.0000 - GNU)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
Windows 7 USB/DVD Download Tool (HKLM\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Driver Package - Broadcom Bluetooth (09/09/2009 6.2.0.9405) (HKLM\...\BFEE6FC237B51D7CD2E0A40D81E188A6ED95001F) (Version: 09/09/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinSCP 4.3.7 (HKLM\...\winscp3_is1) (Version: 4.3.7 - Martin Prikryl)
WinSysClean X5 Trial (HKLM\...\WinSysClean X5 Trial) (Version: 15.00 - Ultimate Systems, Inc.)
WinSysClean X5 Trial (Version: 15.00 - Ultimate Systems, Inc.) Hidden
WinZip 17.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D8}) (Version: 17.0.10381 - WinZip Computing, S.L. )
X-Print 4.0 Client (HKLM\...\X-Print Client Uni Passau_is1) (Version: - Schomaecker GmbH)
==================== Restore Points =========================
09-03-2014 10:23:14 Windows Update
12-03-2014 18:12:16 Windows Update
12-03-2014 21:36:21 Windows Update
15-03-2014 07:45:17 Windows Modules Installer
17-03-2014 07:19:37 Windows Update
17-03-2014 09:30:53 Windows Modules Installer
18-03-2014 19:08:14 Windows Modules Installer
19-03-2014 23:18:25 Windows Update
20-03-2014 10:29:18 Removed Oracle VM VirtualBox 4.2.18
20-03-2014 10:42:12 Windows Update
20-03-2014 13:11:53 Windows Update
20-03-2014 21:42:40 Windows Update
20-03-2014 22:00:43 Installed Microsoft Fix it 50123
20-03-2014 22:04:17 Windows Update
20-03-2014 22:12:09 Windows Update
21-03-2014 07:42:26 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:04 - 2011-04-22 12:28 - 00432840 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {126C99D1-8F0F-4FBB-9506-133EC86278CD} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1592874016-3910639467-1926928520-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-03-29] (RealNetworks, Inc.)
Task: {313DEE4D-193A-4AC3-BE6B-39DE4F4492F7} - System32\Tasks\AnVir Task Manager => C:\Program Files\AnVir Task Manager Free\anvir.exe [2013-02-13] (AnVir Software)
Task: {383709C2-56D4-4139-97A1-DC60DEDF6310} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1592874016-3910639467-1926928520-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-03-29] (RealNetworks, Inc.)
Task: {475C701C-2F13-4FDB-9DDE-0730F979B1D9} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {4FBED1A8-06F0-4389-B239-65CD7A1DF6CE} - System32\Tasks\RegOrganizerQuickLaunch => C:\Program Files\Reg Organizer\RegOrganizer.exe [2013-01-28] (ChemTable Software)
Task: {6D42F8C7-53D3-40B9-B363-1FBC8FDD9513} - System32\Tasks\VAIO Care Service => C:\Program Files\Sony\VAIO Care\VAIOCareService.exe [2009-10-21] (Sony Corporation)
Task: {748F25EE-A5D9-4053-A9B8-B945F157295A} - System32\Tasks\SONY\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2009-10-30] (Sony Corporation)
Task: {836949B5-D072-462D-AF3D-4AA11B474F3F} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-09-24] (Sony Corporation)
Task: {88248CAD-6D29-467F-A5AE-1595BC70F1B2} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {90CF58AE-1DA3-438E-ABF1-D2CC7ED95FC9} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9121E016-75BC-4E66-86EC-699FAC08B274} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: {9FB32F12-0C32-41EA-80B6-D6D28B8C8689} - System32\Tasks\MT66 Software Update => C:\Program Files\Common Files\MT66 Software Update\UpdateClient.exe [2009-11-18] (MedienTeam66)
Task: {9FDA5A78-E20B-4442-B95B-E05501DE3030} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {B317CCD1-6F72-419C-9853-E5AC44558030} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-30] (Google Inc.)
Task: {B365C55C-105A-458B-813C-EC8348A2F3D0} - System32\Tasks\ReclaimerResumeInstall_jana => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe [2013-09-02] (RealNetworks, Inc.)
Task: {BD753479-91BF-4BF4-BCB4-2B464E6820E7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-30] (Google Inc.)
Task: {C878D519-6A24-40C4-B8BE-CFE4C05CE680} - System32\Tasks\{0507F77E-6EAA-4A4C-9008-33ADC8C4C3DB} => C:\Users\jana\Fport.exe [2001-05-04] ()
Task: {DB0FC8D5-25FD-4A5A-B61E-75E3565A3602} - System32\Tasks\ReclaimerResumeInstallLogin_jana => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe [2013-09-02] (RealNetworks, Inc.)
Task: {E808A515-6561-4333-BD85-3BD34D923A40} - System32\Tasks\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2009-10-19] (Sony Corporation)
Task: {F0144E4A-461B-42E4-861A-432540BDA2E4} - System32\Tasks\{83ECE4B7-6F12-4390-8349-28D243DE72D0} => C:\Program Files\Skype\\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MT66 Software Update.job => C:\Program Files\Common Files\MT66 Software Update\UpdateClient.exe
Task: C:\Windows\Tasks\ReclaimerResumeInstallLogin_jana.job => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe
Task: C:\Windows\Tasks\ReclaimerResumeInstall_jana.job => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe
==================== Loaded Modules (whitelisted) =============
2011-12-19 17:59 - 2012-10-05 01:33 - 00070352 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
2010-12-23 09:10 - 2001-10-28 17:42 - 00116224 _____ () C:\Windows\System32\pdfcmnnt.dll
2008-10-24 15:35 - 2008-10-24 15:35 - 00128296 _____ () C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
2010-11-11 20:35 - 2009-11-30 19:19 - 00010752 _____ () C:\Program Files\Sony\VAIO Event Service\VESBasePS.dll
2010-11-11 20:35 - 2009-11-30 19:20 - 00009728 _____ () C:\Program Files\Sony\VAIO Event Service\VESMgrSubPS.dll
2010-11-14 15:51 - 2010-11-14 15:51 - 00109056 _____ () C:\Program Files\Notepad++\NppShell_03.dll
2014-03-21 11:25 - 2014-03-15 09:40 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:31D9EFCC
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
==================== Disabled items from MSCONFIG ==============
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RescueTime.lnk => C:\Windows\pss\RescueTime.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^jana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk.disabled => C:\Windows\pss\OpenOffice.org 3.2.lnk.disabled.Startup
MSCONFIG\startupfolder: C:^Users^jana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Rainmeter.lnk.disabled => C:\Windows\pss\Rainmeter.lnk.disabled.Startup
MSCONFIG\startupreg: DriverScanner => "C:\Program Files\Uniblue\DriverScanner\launcher.exe" delay 20000
MSCONFIG\startupreg: Facebook Update => "C:\Users\jana\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: Google Update => "C:\Users\jana\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: MSC => "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: OnlineTime => "c:\program files\onlineeye\onlineeye.exe"
MSCONFIG\startupreg: SimpleScreenshot => C:\PROGRA~1\SSS\SIMPLESCREENSHOT.EXE
MSCONFIG\startupreg: SiteRanker => "C:\Program Files\SiteRanker\SiteRankTray.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
==================== Faulty Device Manager Devices =============
Name: 802.11n Wireless LAN Card
Description: 802.11n Wireless LAN Card
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Ralink Technology, Corp.
Service: netr28
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (03/21/2014 04:16:01 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/21/2014 04:16:00 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
Error: (03/21/2014 04:06:47 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/21/2014 04:06:46 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
Error: (03/21/2014 11:01:30 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/21/2014 11:01:29 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
Error: (03/21/2014 09:58:45 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/21/2014 09:58:44 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
Error: (03/21/2014 09:04:59 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/21/2014 09:04:58 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
System errors:
=============
Error: (03/21/2014 10:38:38 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 10:38:35 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 09:58:59 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 09:58:56 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 09:58:53 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 09:11:11 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80242016 fehlgeschlagen: Sicherheitsupdate für Internet Explorer 10 für Windows 7 (KB2909210)
Error: (03/21/2014 08:44:16 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 08:44:13 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 08:44:10 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/21/2014 08:44:07 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Microsoft Office Sessions:
=========================
Error: (03/21/2014 04:16:01 PM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/21/2014 04:16:00 PM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
Error: (03/21/2014 04:06:47 PM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/21/2014 04:06:46 PM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
Error: (03/21/2014 11:01:30 AM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/21/2014 11:01:29 AM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
Error: (03/21/2014 09:58:45 AM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/21/2014 09:58:44 AM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
Error: (03/21/2014 09:04:59 AM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/21/2014 09:04:58 AM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
CodeIntegrity Errors:
===================================
Date: 2012-01-01 19:46:22.480
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-01 19:40:04.640
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-01 17:36:24.918
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 49%
Total physical RAM: 2037 MB
Available physical RAM: 1036.08 MB
Total Pagefile: 4074.01 MB
Available Pagefile: 2660.74 MB
Total Virtual: 2047.88 MB
Available Virtual: 1911.84 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:226.04 GB) (Free:157.46 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: BE1562CA)
Partition: GPT Partition Type.
==================== End Of Log ============================
GMER im Anhang |
|
22.03.2014, 07:07
| #2 |
| /// the machine /// TB-Ausbilder    | Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") HI,
__________________Funde von MBAM löschen lassen. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ProxyServer: 62.2.150.188:8000
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
22.03.2014, 10:23
| #3 |
| | Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") Hallo schrauber,
__________________danke für Deine Antwort und die Anleitung. Die Funde von Malewarebyte hatte ich gestern schon aus der Quarantäne raus gelöscht. Die Tools habe ich ausgeführt. Hier die Logfiles: Fixlog.txt Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014 01
Ran by jana at 2014-03-22 08:53:28 Run:1
Running from C:\Users\jana\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
ProxyServer: 62.2.150.188:8000
*****************
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
==== End of Fixlog ====
AdwCleaner: Code:
ATTFilter # AdwCleaner v3.022 - Bericht erstellt am 22/03/2014 um 09:06:41
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Starter Service Pack 1 (32 bits)
# Benutzername : jana - JANA-VAIO
# Gestartet von : C:\Users\jana\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Mozilla Firefox v28.0 (de)
[ Datei : C:\Users\jana\AppData\Roaming\Mozilla\Firefox\Profiles\pwwy96n1.default\prefs.js ]
[ Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\cna66rr2.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [5102 octets] - [21/03/2014 10:51:54]
AdwCleaner[R1].txt - [784 octets] - [21/03/2014 11:16:12]
AdwCleaner[R2].txt - [1073 octets] - [21/03/2014 16:09:38]
AdwCleaner[R3].txt - [1194 octets] - [22/03/2014 09:01:40]
AdwCleaner[S0].txt - [4754 octets] - [21/03/2014 10:58:50]
AdwCleaner[S1].txt - [1135 octets] - [21/03/2014 16:14:24]
AdwCleaner[S2].txt - [1116 octets] - [22/03/2014 09:06:41]
########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1176 octets] ##########
JRT.txt Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Starter x86
Ran by jana on 22.03.2014 at 9:15:19,39
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Users\jana\AppData\Roaming\getrighttogo"
Successfully deleted: [Empty Folder] C:\Users\jana\appdata\local\{4F4BC5D8-6A18-4377-A8A9-7F83AF98921C}
Successfully deleted: [Empty Folder] C:\Users\jana\appdata\local\{57691940-A098-483A-9F7D-F9ED7AE6D341}
Successfully deleted: [Empty Folder] C:\Users\jana\appdata\local\{66025D84-FA1B-4E0B-BE1E-BF1D45AB74F6}
Successfully deleted: [Empty Folder] C:\Users\jana\appdata\local\{A62FEE8D-1B14-473C-8192-BA3A2362E4BC}
Successfully deleted: [Empty Folder] C:\Users\jana\appdata\local\{AF8F698D-B29A-44AD-B122-F968A0890C0C}
Successfully deleted: [Empty Folder] C:\Users\jana\appdata\local\{D7E2ABF0-45EB-487F-83BA-E36A7872C665}
Successfully deleted: [Empty Folder] C:\Users\jana\appdata\local\{DF063212-70C6-4769-8260-C84B559DFD39}
Successfully deleted: [Empty Folder] C:\Users\jana\appdata\local\{E4462C55-040E-4413-9DAB-C5F85A2BBAA0}
~~~ FireFox
Emptied folder: C:\Users\jana\AppData\Roaming\mozilla\firefox\profiles\pwwy96n1.default\minidumps [2 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.03.2014 at 10:01:35,94
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST.log FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01
Ran by jana (administrator) on JANA-VAIO on 22-03-2014 10:04:06
Running from C:\Users\jana\Desktop
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
(AnVir Software) C:\Program Files\AnVir Task Manager Free\anvir.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VAIOCareService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Sony Corporation) C:\Program Files\Sony\ISB Utility\ISBMgr.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1578280 2009-12-23] (Synaptics Incorporated)
HKLM\...\Run: [ISBMgr.exe] - C:\Program Files\Sony\ISB Utility\ISBMgr.exe [320880 2009-08-26] (Sony Corporation)
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [6756048 2012-11-08] (COMODO)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\VESWinlogon: C:\Windows\system32\VESWinlogon.dll (Sony Corporation)
HKU\S-1-5-21-1592874016-3910639467-1926928520-1000\...\Run: [SpybotSD TeaTimer] - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKU\S-1-5-21-1592874016-3910639467-1926928520-1000\...\Run: [EPSON SX230 Series] - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIHKE.EXE [212480 2012-05-06] (SEIKO EPSON CORPORATION)
AppInit_DLLs: C:\Windows\system32\guard32.dll => C:\Windows\system32\guard32.dll [301264 2012-11-08] (COMODO)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xECAB71C23B40CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225
FireFox:
========
FF ProfilePath: C:\Users\jana\AppData\Roaming\Mozilla\Firefox\Profiles\pwwy96n1.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=12.0.1.647 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.647 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-04-27]
========================== Services (Whitelisted) =================
R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
S3 Apache2.2; C:\xampp\apache\bin\httpd.exe [20549 2010-10-18] (Apache Software Foundation)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [1990464 2012-11-08] (COMODO)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [36352 2009-12-12] ()
S3 SampleCollector; C:\Program Files\Sony\VAIO Care\collsvc.exe [122880 2009-09-16] (Intel Corporation)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.RTM\RpcAgentSrv.exe [72344 2008-11-25] (SiSoftware)
R2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 SOHDBSvr; C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation)
S3 Tomcat6; C:\Program Files\Apache\Tomcat 6.0\bin\tomcat6.exe [61440 2010-07-19] (Apache Software Foundation)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-09-14] (Sony Corporation)
R2 VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [204648 2009-11-30] (Sony Corporation)
S3 VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [513392 2009-12-16] (Sony Corporation)
S3 VcmIAlzMgr; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [480624 2009-09-16] (Sony Corporation)
S3 VcmINSMgr; C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [361840 2009-09-01] (Sony Corporation)
R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [692224 2009-12-18] (Sony Corporation)
S3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [669040 2009-10-30] (Sony Corporation)
R2 VzCdbSvc; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-09-14] (Sony Corporation)
S3 XPrint-Client-Service; C:\Program Files\Schomaecker\XPrint-Client\XPrint-Client-Service\XPrint-Client-Service.exe [1144320 2008-08-28] (Schomäcker GmbH)
S3 postgresql-9.1; No ImagePath
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
==================== Drivers (Whitelisted) ====================
R1 CBDisk; C:\Windows\system32\drivers\{1ec00332-9da9-436d-9aaa-048787df45b7}.sys [57800 2012-12-09] (EldoS Corporation)
R1 CbFs; C:\Windows\system32\drivers\{E7224BCD-D889-4528-8456-60CE0724367E}.sys [145504 2012-12-09] (EldoS Corporation)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [19632 2012-11-08] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [494416 2012-11-08] (COMODO)
R2 drhard; C:\Windows\system32\Drivers\drhard.sys [23600 2005-12-01] (Licensed for Gebhard Software)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35088 2011-02-11] (CACE Technologies, Inc.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.RTM\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [25984 2009-12-12] (The OpenVPN Project)
S3 netr28u; No ImagePath
S3 NSNDIS5; \??\C:\Windows\system32\NSNDIS5.SYS [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-22 10:01 - 2014-03-22 10:01 - 00001668 _____ () C:\Users\jana\Desktop\JRT.txt
2014-03-22 09:14 - 2014-03-22 09:14 - 00000000 ____D () C:\Windows\ERUNT
2014-03-22 08:59 - 2014-03-22 08:59 - 01037734 _____ (Thisisu) C:\Users\jana\Desktop\JRT.exe
2014-03-21 22:08 - 2014-03-21 22:08 - 00008065 _____ () C:\Users\jana\Desktop\gmer.zip
2014-03-21 21:29 - 2014-03-21 21:29 - 00158184 _____ () C:\Users\jana\Desktop\gmer.log
2014-03-21 20:45 - 2014-03-21 20:45 - 00380416 _____ () C:\Users\jana\Desktop\Gmer-19357.exe
2014-03-21 20:32 - 2014-03-21 20:34 - 00033084 _____ () C:\Users\jana\Desktop\Addition.txt
2014-03-21 20:30 - 2014-03-22 10:05 - 00014031 _____ () C:\Users\jana\Desktop\FRST.txt
2014-03-21 20:29 - 2014-03-22 10:04 - 00000000 ____D () C:\FRST
2014-03-21 20:28 - 2014-03-21 20:28 - 01145856 _____ (Farbar) C:\Users\jana\Desktop\FRST.exe
2014-03-21 20:25 - 2014-03-21 20:25 - 00000470 _____ () C:\Users\jana\Desktop\defogger_disable.log
2014-03-21 20:25 - 2014-03-21 20:25 - 00000000 _____ () C:\Users\jana\defogger_reenable
2014-03-21 20:22 - 2014-03-21 20:22 - 00050477 _____ () C:\Users\jana\Desktop\Defogger.exe
2014-03-21 20:02 - 2014-03-21 20:02 - 00987442 _____ () C:\Users\jana\Downloads\SecurityCheck.exe
2014-03-21 17:38 - 2014-03-21 17:39 - 02002416 _____ (Trend Micro Inc.) C:\Users\jana\Downloads\HousecallLauncher(1).exe
2014-03-21 11:25 - 2014-03-21 11:25 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-21 11:25 - 2014-03-21 11:25 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-21 10:51 - 2014-03-22 09:06 - 00000000 ____D () C:\AdwCleaner
2014-03-21 10:49 - 2014-03-21 10:49 - 01950720 _____ () C:\Users\jana\Desktop\adwcleaner.exe
2014-03-21 08:48 - 2014-03-21 08:48 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-21 08:48 - 2014-03-21 08:48 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 08:47 - 2014-03-21 08:47 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-21 08:47 - 2014-03-21 08:47 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-21 08:47 - 2014-03-21 08:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-21 08:47 - 2014-03-21 08:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-21 08:25 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-20 23:33 - 2014-03-20 23:33 - 00283192 _____ (Mozilla) C:\Users\jana\Downloads\Firefox Setup Stub 28.0.exe
2014-03-20 23:13 - 2014-03-20 23:28 - 00010113 _____ () C:\Windows\IE10_main.log
2014-03-20 22:58 - 2014-03-20 22:59 - 00985600 _____ () C:\Users\jana\Downloads\MicrosoftFixit50123.msi
2014-03-20 22:46 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-03-20 22:46 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-20 22:46 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-20 22:46 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-03-20 22:46 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-03-20 22:46 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-20 22:46 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-20 22:46 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-03-20 22:46 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-20 22:46 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-03-20 22:46 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-03-20 22:42 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-19 08:09 - 2014-03-19 08:09 - 00001413 _____ () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-18 15:00 - 2014-03-18 15:01 - 00000000 ____D () C:\Windows\system32\Adobe
2014-03-17 21:37 - 2014-03-21 11:25 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-17 21:13 - 2014-03-17 21:13 - 00067805 _____ () C:\Users\jana\Desktop\bookmarks-2014-03-17.json
2014-03-15 14:13 - 2014-03-15 14:13 - 00011893 _____ () C:\Users\jana\Desktop\hijackthis.log
2014-03-12 13:50 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 13:50 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 13:50 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 13:50 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 13:50 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\sg_backup_2014-03-10-1147.spg
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\FirstBackup.spg
2014-03-10 11:43 - 2014-03-10 11:43 - 00659456 _____ (Speed Guide Inc.) C:\Users\jana\Downloads\TCPOptimizer.exe
2014-03-08 15:55 - 2014-03-08 15:56 - 00658048 _____ () C:\Windows\Minidump\030814-31496-01.dmp
2014-03-08 15:55 - 2014-03-08 15:55 - 210663785 _____ () C:\Windows\MEMORY.DMP
2014-03-08 11:30 - 2014-03-08 11:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-08 11:29 - 2014-03-08 11:29 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-03-08 11:29 - 2014-03-08 11:27 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-03-08 11:23 - 2014-03-08 11:23 - 00921512 _____ (Oracle Corporation) C:\Users\jana\Downloads\jre-7u51-windows-i586-iftw.exe
2014-03-08 10:36 - 2014-03-08 10:36 - 00000119 _____ () C:\Windows\onlineeye.INI
2014-03-08 10:28 - 2014-03-18 09:50 - 00000000 ____D () C:\Program Files\Onlineeye
2014-03-08 10:27 - 2014-03-08 10:26 - 06418833 _____ (pmaSoft) C:\Users\jana\Downloads\onlineeye.exe
2014-02-22 18:58 - 2014-02-22 18:58 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-22 18:57 - 2014-02-22 18:57 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Caesar III
2014-02-22 18:56 - 2014-02-22 18:57 - 00000000 ____D () C:\Program Files\Caesar III
2014-02-22 18:55 - 2014-02-22 18:55 - 00000000 ____D () C:\Users\jana\Downloads\c3
2014-02-22 18:54 - 2014-02-22 18:54 - 00000000 ____D () C:\Program Files\7-Zip
2014-02-22 18:51 - 2014-02-22 18:51 - 00614816 _____ (Chip Digital GmbH) C:\Users\jana\Downloads\7 Zip 32 Bit - CHIP-Downloader.exe
2014-02-22 18:26 - 2014-02-22 18:28 - 91742484 _____ () C:\Users\jana\Downloads\c3.rar
2014-02-20 21:45 - 2014-02-20 21:45 - 06951048 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight.exe
2014-02-20 21:39 - 2014-03-13 08:21 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-20 21:31 - 2014-02-20 21:30 - 06284664 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight4.0.60531.0.exe
2014-02-20 16:32 - 2014-02-20 16:32 - 00000000 __HDC () C:\ProgramData\{BF7D58F7-EE72-4F10-93D4-6A100BDAF0F0}
2014-02-20 16:31 - 2014-02-20 16:34 - 00000000 ____D () C:\Program Files\WinSysClean X5 Trial
2014-02-20 16:26 - 2014-03-18 09:46 - 00000000 ____D () C:\Program Files\PeerBlock
2014-02-20 15:53 - 2014-02-20 15:53 - 02374320 _____ (PeerBlock, LLC ) C:\Users\jana\Downloads\PeerBlock-Setup_v1.2_r693.exe
2014-02-20 15:39 - 2014-02-20 15:38 - 00718442 _____ (Stephan Plath ) C:\Users\jana\Downloads\RidNacs-2.0.3-Setup.exe
2014-02-20 15:19 - 2014-02-20 15:19 - 18491136 _____ (Ultimate Systems, Inc. ) C:\Users\jana\Downloads\nw_29342_wscxvsetupexe.exe
==================== One Month Modified Files and Folders =======
2014-03-22 10:05 - 2014-03-21 20:30 - 00014031 _____ () C:\Users\jana\Desktop\FRST.txt
2014-03-22 10:04 - 2014-03-21 20:29 - 00000000 ____D () C:\FRST
2014-03-22 10:01 - 2014-03-22 10:01 - 00001668 _____ () C:\Users\jana\Desktop\JRT.txt
2014-03-22 09:58 - 2012-06-08 12:33 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-03-22 09:52 - 2013-05-29 08:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-22 09:16 - 2009-07-14 05:34 - 00016352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-22 09:16 - 2009-07-14 05:34 - 00016352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-22 09:15 - 2010-11-11 19:55 - 01719733 _____ () C:\Windows\WindowsUpdate.log
2014-03-22 09:14 - 2014-03-22 09:14 - 00000000 ____D () C:\Windows\ERUNT
2014-03-22 09:08 - 2013-11-29 20:37 - 00016040 _____ () C:\Windows\setupact.log
2014-03-22 09:08 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-22 09:06 - 2014-03-21 10:51 - 00000000 ____D () C:\AdwCleaner
2014-03-22 08:59 - 2014-03-22 08:59 - 01037734 _____ (Thisisu) C:\Users\jana\Desktop\JRT.exe
2014-03-21 23:28 - 2010-11-11 22:29 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Skype
2014-03-21 23:22 - 2010-12-06 23:22 - 00000300 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-03-21 22:08 - 2014-03-21 22:08 - 00008065 _____ () C:\Users\jana\Desktop\gmer.zip
2014-03-21 21:29 - 2014-03-21 21:29 - 00158184 _____ () C:\Users\jana\Desktop\gmer.log
2014-03-21 20:45 - 2014-03-21 20:45 - 00380416 _____ () C:\Users\jana\Desktop\Gmer-19357.exe
2014-03-21 20:34 - 2014-03-21 20:32 - 00033084 _____ () C:\Users\jana\Desktop\Addition.txt
2014-03-21 20:28 - 2014-03-21 20:28 - 01145856 _____ (Farbar) C:\Users\jana\Desktop\FRST.exe
2014-03-21 20:26 - 2012-12-25 15:05 - 00000000 ____D () C:\Users\jana\Desktop\musikNEU
2014-03-21 20:25 - 2014-03-21 20:25 - 00000470 _____ () C:\Users\jana\Desktop\defogger_disable.log
2014-03-21 20:25 - 2014-03-21 20:25 - 00000000 _____ () C:\Users\jana\defogger_reenable
2014-03-21 20:25 - 2010-11-11 20:53 - 00000000 ____D () C:\Users\jana
2014-03-21 20:22 - 2014-03-21 20:22 - 00050477 _____ () C:\Users\jana\Desktop\Defogger.exe
2014-03-21 20:02 - 2014-03-21 20:02 - 00987442 _____ () C:\Users\jana\Downloads\SecurityCheck.exe
2014-03-21 19:14 - 2013-04-16 18:25 - 00314862 _____ () C:\Users\jana\AppData\Local\census.cache
2014-03-21 19:14 - 2013-04-16 18:24 - 00133966 _____ () C:\Users\jana\AppData\Local\ars.cache
2014-03-21 17:39 - 2014-03-21 17:38 - 02002416 _____ (Trend Micro Inc.) C:\Users\jana\Downloads\HousecallLauncher(1).exe
2014-03-21 16:06 - 2013-11-29 20:36 - 00079096 _____ () C:\Windows\PFRO.log
2014-03-21 16:03 - 2013-11-06 21:33 - 00000000 ____D () C:\Program Files\Cain
2014-03-21 11:25 - 2014-03-21 11:25 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-21 11:25 - 2014-03-21 11:25 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-21 11:25 - 2014-03-17 21:37 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-21 11:25 - 2012-05-02 19:33 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Mozilla
2014-03-21 10:49 - 2014-03-21 10:49 - 01950720 _____ () C:\Users\jana\Desktop\adwcleaner.exe
2014-03-21 09:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-03-21 08:55 - 2013-12-11 00:11 - 00073043 _____ () C:\Windows\IE11_main.log
2014-03-21 08:48 - 2014-03-21 08:48 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-21 08:48 - 2014-03-21 08:48 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-21 08:47 - 2014-03-21 08:47 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-21 08:47 - 2014-03-21 08:47 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-21 08:47 - 2014-03-21 08:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-21 08:47 - 2014-03-21 08:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-21 08:04 - 2010-07-23 23:30 - 00000000 ____D () C:\Windows\InstDrvs
2014-03-20 23:33 - 2014-03-20 23:33 - 00283192 _____ (Mozilla) C:\Users\jana\Downloads\Firefox Setup Stub 28.0.exe
2014-03-20 23:28 - 2014-03-20 23:13 - 00010113 _____ () C:\Windows\IE10_main.log
2014-03-20 22:59 - 2014-03-20 22:58 - 00985600 _____ () C:\Users\jana\Downloads\MicrosoftFixit50123.msi
2014-03-20 22:50 - 2010-11-11 19:46 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-03-20 14:45 - 2012-06-08 10:52 - 00000000 ____D () C:\Program Files\COMODO
2014-03-20 11:09 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-20 00:29 - 2013-08-15 08:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-20 00:21 - 2011-01-09 13:33 - 87350280 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-19 08:09 - 2014-03-19 08:09 - 00001413 _____ () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-18 21:17 - 2011-12-28 14:14 - 00000000 ____D () C:\Users\jana\Desktop\Filme
2014-03-18 20:29 - 2012-04-15 19:37 - 00000000 ____D () C:\Users\jana\Desktop\Filme2
2014-03-18 15:01 - 2014-03-18 15:00 - 00000000 ____D () C:\Windows\system32\Adobe
2014-03-18 09:50 - 2014-03-08 10:28 - 00000000 ____D () C:\Program Files\Onlineeye
2014-03-18 09:46 - 2014-02-20 16:26 - 00000000 ____D () C:\Program Files\PeerBlock
2014-03-17 21:13 - 2014-03-17 21:13 - 00067805 _____ () C:\Users\jana\Desktop\bookmarks-2014-03-17.json
2014-03-17 09:56 - 2012-08-16 08:56 - 00000000 ____D () C:\Users\jana\Desktop\aktuell
2014-03-15 16:51 - 2011-01-17 11:39 - 00164352 _____ () C:\Users\jana\Documents\Verdienstübersicht.xls
2014-03-15 14:13 - 2014-03-15 14:13 - 00011893 _____ () C:\Users\jana\Desktop\hijackthis.log
2014-03-13 11:17 - 2013-10-19 16:38 - 00000000 ____D () C:\Users\jana\Desktop\WS13
2014-03-13 11:02 - 2010-07-23 23:18 - 01586464 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-13 08:23 - 2013-05-04 22:21 - 00355240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 08:21 - 2014-02-20 21:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-11 22:52 - 2012-05-02 18:14 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-11 22:52 - 2011-08-29 17:04 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\sg_backup_2014-03-10-1147.spg
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\FirstBackup.spg
2014-03-10 11:43 - 2014-03-10 11:43 - 00659456 _____ (Speed Guide Inc.) C:\Users\jana\Downloads\TCPOptimizer.exe
2014-03-08 15:56 - 2014-03-08 15:55 - 00658048 _____ () C:\Windows\Minidump\030814-31496-01.dmp
2014-03-08 15:55 - 2014-03-08 15:55 - 210663785 _____ () C:\Windows\MEMORY.DMP
2014-03-08 15:55 - 2011-12-12 21:49 - 00000000 ____D () C:\Windows\Minidump
2014-03-08 11:30 - 2014-03-08 11:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-08 11:29 - 2014-03-08 11:29 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-03-08 11:27 - 2014-03-08 11:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-03-08 11:27 - 2010-11-11 20:31 - 00000000 ____D () C:\Program Files\Java
2014-03-08 11:23 - 2014-03-08 11:23 - 00921512 _____ (Oracle Corporation) C:\Users\jana\Downloads\jre-7u51-windows-i586-iftw.exe
2014-03-08 10:36 - 2014-03-08 10:36 - 00000119 _____ () C:\Windows\onlineeye.INI
2014-03-08 10:26 - 2014-03-08 10:27 - 06418833 _____ (pmaSoft) C:\Users\jana\Downloads\onlineeye.exe
2014-03-04 08:47 - 2011-02-06 18:02 - 00030208 _____ () C:\Users\jana\Documents\Vermögensplan.xls
2014-03-02 12:34 - 2011-04-23 13:33 - 00000000 ____D () C:\Users\jana\Desktop\Studium
2014-02-26 10:12 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-22 18:58 - 2014-02-22 18:58 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-22 18:57 - 2014-02-22 18:57 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Caesar III
2014-02-22 18:57 - 2014-02-22 18:56 - 00000000 ____D () C:\Program Files\Caesar III
2014-02-22 18:55 - 2014-02-22 18:55 - 00000000 ____D () C:\Users\jana\Downloads\c3
2014-02-22 18:54 - 2014-02-22 18:54 - 00000000 ____D () C:\Program Files\7-Zip
2014-02-22 18:51 - 2014-02-22 18:51 - 00614816 _____ (Chip Digital GmbH) C:\Users\jana\Downloads\7 Zip 32 Bit - CHIP-Downloader.exe
2014-02-22 18:28 - 2014-02-22 18:26 - 91742484 _____ () C:\Users\jana\Downloads\c3.rar
2014-02-20 21:45 - 2014-02-20 21:45 - 06951048 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight.exe
2014-02-20 21:30 - 2014-02-20 21:31 - 06284664 _____ (Microsoft Corporation) C:\Users\jana\Downloads\Silverlight4.0.60531.0.exe
2014-02-20 16:34 - 2014-02-20 16:31 - 00000000 ____D () C:\Program Files\WinSysClean X5 Trial
2014-02-20 16:32 - 2014-02-20 16:32 - 00000000 __HDC () C:\ProgramData\{BF7D58F7-EE72-4F10-93D4-6A100BDAF0F0}
2014-02-20 15:53 - 2014-02-20 15:53 - 02374320 _____ (PeerBlock, LLC ) C:\Users\jana\Downloads\PeerBlock-Setup_v1.2_r693.exe
2014-02-20 15:38 - 2014-02-20 15:39 - 00718442 _____ (Stephan Plath ) C:\Users\jana\Downloads\RidNacs-2.0.3-Setup.exe
2014-02-20 15:19 - 2014-02-20 15:19 - 18491136 _____ (Ultimate Systems, Inc. ) C:\Users\jana\Downloads\nw_29342_wscxvsetupexe.exe
ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-1592874016-3910639467-1926928520-1000\$da5da012b751b1a7f7d3893de860eefe
Files to move or delete:
====================
C:\Users\jana\akvis-magnifier-setup.exe
C:\Users\jana\Fport.exe
C:\Users\jana\h2cdimage.exe
Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\SkypeSetup.exe
C:\Users\jana\AppData\Local\Temp\feedback.dll
C:\Users\jana\AppData\Local\Temp\Quarantine.exe
C:\Users\jana\AppData\Local\Temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-10 16:41
==================== End Of Log ============================
--- --- --- Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014 01
Ran by jana at 2014-03-22 10:07:03
Running from C:\Users\jana\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AV: COMODO Antivirus (Enabled - Up to date) {458BB331-2324-0753-3D5F-1472EB102AC0}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: COMODO Defense+ (Enabled - Up to date) {FEEA52D5-051E-08DD-07EF-2F009097607D}
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
AAVUpdateManager (HKLM\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.01.513.58212 - ABBYY) Hidden
AccessData FTK Imager (HKLM\...\{0ADC8340-4A94-4CE3-A721-B558F365F8D0}) (Version: 3.1.1.8 - AccessData)
ActiveState Komodo Edit 7.1.3 (HKLM\...\{F69166F9-0171-49DA-8B63-6B8DD8279770}) (Version: 7.1.3 - ActiveState Software Inc.)
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader 9.5.0 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A95000000001}) (Version: 9.5.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
AKVIS Magnifier (HKLM\...\{9FDD51C9-F7AA-40AF-A4FF-0500E45E4A06}) (Version: 6.0.1006.8910 - AKVIS)
AnVir Task Manager Free (HKLM\...\AnVir Task Manager Free) (Version: - AnVir Software)
Apache Tomcat 6.0 (remove only) (HKLM\...\Apache Tomcat 6.0) (Version: - )
ArcSoft WebCam Companion 3 (HKLM\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.193 - ArcSoft)
Caesar III (HKLM\...\Caesar III) (Version: - )
Cain & Abel 4.9.46 (HKLM\...\Cain & Abel 4.9.46) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 3.17 - Piriform)
COMODO Internet Security (HKLM\...\{D6AB1F5B-FED6-49A9-9747-327BD28FB3C7}) (Version: 5.10.31649.2253 - COMODO Security Solutions Inc.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DbVisualizer 7.1.4 (HKLM\...\8973-4025-0853-7287) (Version: 7.1.4 - DbVis Software AB)
Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM\...\Dev-C++) (Version: - )
Dia (nur entfernen) (HKLM\...\Dia) (Version: - )
Dr. Hardware 2013 13.0d (HKLM\...\Dr. Hardware 2013_is1) (Version: - Peter A. Gebhard)
Driver Magician Lite 4.21 (HKLM\...\Driver Magician Lite_is1) (Version: - GoldSolution Software, Inc.)
Einstellungen für VAIO-Inhaltsüberwachung (HKLM\...\{23825B69-36DF-4DAD-9CFD-118D11D80F16}) (Version: 2.4.1.09180 - Sony Corporation)
Epson Event Manager (HKLM\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX230 Series Printer Uninstall (HKLM\...\EPSON SX230 Series) (Version: - SEIKO EPSON Corporation)
Evernote (HKLM\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.0.545 - Evernote Corp.)
GIMP 2.6.11 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Update Helper (Version: 1.3.21.111 - Google Inc.) Hidden
HiJackThis (HKLM\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
inSSIDer (HKLM\...\{BF6379E6-9936-46B0-B6AC-C56EE3987D2E}) (Version: 2.1.1 - MetaGeek)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
Java(TM) Platform, Micro Edition Software Development Kit 3.0 (HKCU\...\nbi-javame-toolkit-3.0.0.0.20090408) (Version: - Sun Microsystems Inc.)
Java(TM) SE Development Kit 6 Update 22 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160220}) (Version: 1.6.0.220 - Oracle)
JMicron Ethernet Adapter NDIS Driver (HKLM\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.14.11 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.37.3 - JMicron Technology Corp.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM\...\{8E770F99-CF23-4BF9-BF4E-E3A2924FEB27}) (Version: 8.0.50727.762 - SAP)
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM\...\{CEC7A786-A9C8-4EF7-BB59-6518E3B3C878}) (Version: 8.0.50727.4053 - SAP)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 English (HKLM\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML4.0 redistributable (HKLM\...\{44D66AD9-AE19-4AFD-BE7E-A1B44C856697}) (Version: 4.0.0.0 - SAP)
MT66 Software Update (HKLM\...\{F2E4F3A5-A8F0-46F4-8E91-E8C1DE1FCFE5}_is1) (Version: - )
MusicStation (HKLM\...\{AB259D46-F851-41B0-9AFA-AED8998AD68A}) (Version: 2.0.0.1067 - Omnifone)
Norton Online Backup (HKLM\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.20.0 - Symantec)
Notepad++ (HKLM\...\Notepad++) (Version: 5.8.4 - )
OpenOffice.org 3.2 (HKLM\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
OpenVPN 2.1.1 (HKLM\...\OpenVPN) (Version: 2.1.1 - )
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.0.2 - Frank Heindörfer, Philip Chinery)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.201.0 - Tracker Software Products Ltd)
pgAdmin III 1.14 (HKLM\...\{58D1EDF1-038E-4F62-A08E-C47581465A57}) (Version: 1.14 - The pgAdmin Development Team)
Photomizer Pro (HKLM\...\{41B5224D-6857-4D8B-0001-C8949A33B608}) (Version: 2.0.13.426 - Engelmann Media GmbH)
PhotoScape (HKLM\...\PhotoScape) (Version: - )
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PMB (HKLM\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.0.00.10260 - Sony Corporation)
PostgreSQL 9.1 (HKLM\...\PostgreSQL 9.1) (Version: 9.1 - PostgreSQL Global Development Group)
Protege 4.3 (HKLM\...\Protege 4.3) (Version: 1.0.0.0 - Stanford Center for Biomedical Informatics Research)
Python 2.7.2 (HKLM\...\{2E295B5B-1AD4-4d36-97C2-A316084722CF}) (Version: 2.7.2150 - Python Software Foundation)
R for Windows 2.15.0 (HKLM\...\R for Windows 2.15.0_is1) (Version: 2.15.0 - R Development Core Team)
Rainmeter (HKLM\...\Rainmeter) (Version: - )
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 12.0) (Version: - RealNetworks)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6005 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Reg Organizer version 6.01 (HKLM\...\Reg Organizer_is1) (Version: 6.01 - ChemTable Software)
Setting Utility Series (HKLM\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.1.0.11200 - Sony Corporation)
SimpleScreenshot 1.40 (HKLM\...\SimpleScreenshot) (Version: - )
SiSoftware Sandra Lite 2014.RTM (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 20.10.2014.2 - SiSoftware)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Sony Home Network Library (HKLM\...\{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}) (Version: 2.0.1.10160 - Sony Corporation)
Sony Home Network Library (Version: 2.0.1.10160 - Sony Corporation) Hidden
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
STEUEReasy 2013 (HKLM\...\{4D0EAA2D-8EE2-43AB-BE00-18A1D0A9281C}) (Version: 18.09 - Wolters Kluwer Deutschland GmbH)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.10.0 - Synaptics Incorporated)
System Checkup 3.4 (HKLM\...\{4AC7B4E7-59B7-4E48-A60D-263C486FC33A}_is1) (Version: 3.4.0.53 - iolo technologies, LLC)
TeXnicCenter Version 1.0 Stable RC1 (HKLM\...\TeXnicCenter_is1) (Version: Version 1.0 Stable RC1 - TeXnicCenter.org)
TweakMe! (HKLM\...\{709D0207-B1F8-4ADC-BB2F-CDBE2367A475}_is1) (Version: 1.2.0.7 - pXc-coding.com)
VAIO Care (HKLM\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 5.0.3.11130 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (HKLM\...\{4882EBF5-CA37-4EF4-BCB8-9B0E78B907D0}) (Version: 3.6.0.09250 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (Version: 3.6.0.09250 - Sony Corporation) Hidden
VAIO Content Metadata Intelligent Network Service Manager (HKLM\...\{4427F384-B5BE-4769-B7D0-C784FC321EB1}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata Intelligent Network Service Manager (Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Metadata Manager Settings (HKLM\...\{12D0BE8D-538C-4AB1-86DE-C540308F50DA}) (Version: 3.6.0.09240 - Sony Corporation)
VAIO Content Metadata Manager Settings (Version: 3.6.0.09240 - Sony Corporation) Hidden
VAIO Content Metadata XML Interface Library (HKLM\...\{291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata XML Interface Library (Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Monitoring Settings (Version: 2.4.1.09180 - Sony Corporation) Hidden
VAIO Control Center (HKLM\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.1.0.10160 - Sony Corporation)
VAIO Data Restore Tool (HKLM\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.2.0.09150 - Sony Corporation)
VAIO Data Restore Tool (Version: 1.2.0.09150 - Sony Corporation) Hidden
VAIO Energie Verwaltung (HKLM\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.0.0.12150 - Sony Corporation)
VAIO Entertainment Platform (HKLM\...\{6B1F20F2-6321-4669-A58C-33DF8E7517FF}) (Version: 3.6.0.09150 - Sony Corporation)
VAIO Entertainment Platform (Version: 3.6.0.09150 - Sony Corporation) Hidden
VAIO Event Service (HKLM\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.1.0.11300 - Sony Corporation)
VAIO Gate (HKLM\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 1.3.0.09240 - Sony Corporation)
VAIO Gate Default (HKLM\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 1.0.0.10290 - Sony Corporation)
VAIO Hardware Diagnostics (Version: 3.9.1 - Sony Corporation) Hidden
VAIO Marketing Tools (HKLM\...\MarketingTools) (Version: - Sony Corporation)
VAIO Media plus (HKLM\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.0.1.10160 - Sony Corporation)
VAIO Media plus Opening Movie (HKLM\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 1.2.0.09100 - Sony Corporation)
VAIO Original Function Settings (Version: 2.0.0.07010 - Sony Corporation) Hidden
VAIO Original Funktion Einstellungen (HKLM\...\{A63E7492-A0BC-4BB9-89A7-352965222380}) (Version: 2.0.0.07010 - Sony Corporation)
VAIO Smart Network (HKLM\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.1.0.12170 - Sony Corporation)
VAIO Update 5 (HKLM\...\{5BEE8F1F-BD32-4553-8107-500439E43BD7}) (Version: 5.0.0.10300 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.0.10200 - Sony Corporation)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vistumbler (HKLM\...\Vistumbler) (Version: v10 - Vistumbler.net)
wGet-Installer (HKLM\...\{D901E911-3478-466F-8EA0-0AEE85F22E4B}) (Version: 1.09.0000 - GNU)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
Windows 7 USB/DVD Download Tool (HKLM\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Driver Package - Broadcom Bluetooth (09/09/2009 6.2.0.9405) (HKLM\...\BFEE6FC237B51D7CD2E0A40D81E188A6ED95001F) (Version: 09/09/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinSCP 4.3.7 (HKLM\...\winscp3_is1) (Version: 4.3.7 - Martin Prikryl)
WinSysClean X5 Trial (HKLM\...\WinSysClean X5 Trial) (Version: 15.00 - Ultimate Systems, Inc.)
WinSysClean X5 Trial (Version: 15.00 - Ultimate Systems, Inc.) Hidden
WinZip 17.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D8}) (Version: 17.0.10381 - WinZip Computing, S.L. )
X-Print 4.0 Client (HKLM\...\X-Print Client Uni Passau_is1) (Version: - Schomaecker GmbH)
==================== Restore Points =========================
09-03-2014 10:23:14 Windows Update
12-03-2014 18:12:16 Windows Update
12-03-2014 21:36:21 Windows Update
15-03-2014 07:45:17 Windows Modules Installer
17-03-2014 07:19:37 Windows Update
17-03-2014 09:30:53 Windows Modules Installer
18-03-2014 19:08:14 Windows Modules Installer
19-03-2014 23:18:25 Windows Update
20-03-2014 10:29:18 Removed Oracle VM VirtualBox 4.2.18
20-03-2014 10:42:12 Windows Update
20-03-2014 13:11:53 Windows Update
20-03-2014 21:42:40 Windows Update
20-03-2014 22:00:43 Installed Microsoft Fix it 50123
20-03-2014 22:04:17 Windows Update
20-03-2014 22:12:09 Windows Update
21-03-2014 07:42:26 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:04 - 2011-04-22 12:28 - 00432840 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {126C99D1-8F0F-4FBB-9506-133EC86278CD} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1592874016-3910639467-1926928520-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-03-29] (RealNetworks, Inc.)
Task: {313DEE4D-193A-4AC3-BE6B-39DE4F4492F7} - System32\Tasks\AnVir Task Manager => C:\Program Files\AnVir Task Manager Free\anvir.exe [2013-02-13] (AnVir Software)
Task: {383709C2-56D4-4139-97A1-DC60DEDF6310} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1592874016-3910639467-1926928520-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-03-29] (RealNetworks, Inc.)
Task: {475C701C-2F13-4FDB-9DDE-0730F979B1D9} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {4FBED1A8-06F0-4389-B239-65CD7A1DF6CE} - System32\Tasks\RegOrganizerQuickLaunch => C:\Program Files\Reg Organizer\RegOrganizer.exe [2013-01-28] (ChemTable Software)
Task: {6D42F8C7-53D3-40B9-B363-1FBC8FDD9513} - System32\Tasks\VAIO Care Service => C:\Program Files\Sony\VAIO Care\VAIOCareService.exe [2009-10-21] (Sony Corporation)
Task: {748F25EE-A5D9-4053-A9B8-B945F157295A} - System32\Tasks\SONY\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2009-10-30] (Sony Corporation)
Task: {836949B5-D072-462D-AF3D-4AA11B474F3F} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-09-24] (Sony Corporation)
Task: {88248CAD-6D29-467F-A5AE-1595BC70F1B2} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {90CF58AE-1DA3-438E-ABF1-D2CC7ED95FC9} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9121E016-75BC-4E66-86EC-699FAC08B274} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: {9FB32F12-0C32-41EA-80B6-D6D28B8C8689} - System32\Tasks\MT66 Software Update => C:\Program Files\Common Files\MT66 Software Update\UpdateClient.exe [2009-11-18] (MedienTeam66)
Task: {9FDA5A78-E20B-4442-B95B-E05501DE3030} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {B317CCD1-6F72-419C-9853-E5AC44558030} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-30] (Google Inc.)
Task: {B365C55C-105A-458B-813C-EC8348A2F3D0} - System32\Tasks\ReclaimerResumeInstall_jana => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe [2013-09-02] (RealNetworks, Inc.)
Task: {BD753479-91BF-4BF4-BCB4-2B464E6820E7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-30] (Google Inc.)
Task: {C878D519-6A24-40C4-B8BE-CFE4C05CE680} - System32\Tasks\{0507F77E-6EAA-4A4C-9008-33ADC8C4C3DB} => C:\Users\jana\Fport.exe [2001-05-04] ()
Task: {DB0FC8D5-25FD-4A5A-B61E-75E3565A3602} - System32\Tasks\ReclaimerResumeInstallLogin_jana => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe [2013-09-02] (RealNetworks, Inc.)
Task: {E808A515-6561-4333-BD85-3BD34D923A40} - System32\Tasks\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2009-10-19] (Sony Corporation)
Task: {F0144E4A-461B-42E4-861A-432540BDA2E4} - System32\Tasks\{83ECE4B7-6F12-4390-8349-28D243DE72D0} => C:\Program Files\Skype\\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MT66 Software Update.job => C:\Program Files\Common Files\MT66 Software Update\UpdateClient.exe
Task: C:\Windows\Tasks\ReclaimerResumeInstallLogin_jana.job => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe
Task: C:\Windows\Tasks\ReclaimerResumeInstall_jana.job => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe
==================== Loaded Modules (whitelisted) =============
2011-12-19 17:59 - 2012-10-05 01:33 - 00070352 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
2010-12-23 09:10 - 2001-10-28 17:42 - 00116224 _____ () C:\Windows\System32\pdfcmnnt.dll
2008-10-24 15:35 - 2008-10-24 15:35 - 00128296 _____ () C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
2010-11-11 20:35 - 2009-11-30 19:19 - 00010752 _____ () C:\Program Files\Sony\VAIO Event Service\VESBasePS.dll
2010-11-11 20:35 - 2009-11-30 19:20 - 00009728 _____ () C:\Program Files\Sony\VAIO Event Service\VESMgrSubPS.dll
2010-11-14 15:51 - 2010-11-14 15:51 - 00109056 _____ () C:\Program Files\Notepad++\NppShell_03.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:31D9EFCC
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
==================== Disabled items from MSCONFIG ==============
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RescueTime.lnk => C:\Windows\pss\RescueTime.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^jana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk.disabled => C:\Windows\pss\OpenOffice.org 3.2.lnk.disabled.Startup
MSCONFIG\startupfolder: C:^Users^jana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Rainmeter.lnk.disabled => C:\Windows\pss\Rainmeter.lnk.disabled.Startup
MSCONFIG\startupreg: DriverScanner => "C:\Program Files\Uniblue\DriverScanner\launcher.exe" delay 20000
MSCONFIG\startupreg: Facebook Update => "C:\Users\jana\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: Google Update => "C:\Users\jana\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: MSC => "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: OnlineTime => "c:\program files\onlineeye\onlineeye.exe"
MSCONFIG\startupreg: SimpleScreenshot => C:\PROGRA~1\SSS\SIMPLESCREENSHOT.EXE
MSCONFIG\startupreg: SiteRanker => "C:\Program Files\SiteRanker\SiteRankTray.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
==================== Faulty Device Manager Devices =============
Name: 802.11n Wireless LAN Card
Description: 802.11n Wireless LAN Card
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Ralink Technology, Corp.
Service: netr28
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2012-01-01 19:46:22.480
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-01 19:40:04.640
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-01 17:36:24.918
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 37%
Total physical RAM: 2037 MB
Available physical RAM: 1265.49 MB
Total Pagefile: 4074.01 MB
Available Pagefile: 2974.97 MB
Total Virtual: 2047.88 MB
Available Virtual: 1931.76 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:226.04 GB) (Free:157.2 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: BE1562CA)
Partition: GPT Partition Type.
==================== End Of Log ============================
kleiner Nachtrag: Habe gerade versucht, über Firefox den Speedtest von KD aufzurufen. Seite lädt unendlich... Auch andere Seiten laden gefühlt noch langsamer und die IP-Adressen sind immer noch verschieden. Geändert von user2014 (22.03.2014 um 10:52 Uhr) |
|
23.03.2014, 10:01
| #4 |
| /// the machine /// TB-Ausbilder | Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") Revo Uninstaller - Download - Filepony damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.mozilla.org/de/kb/fi...einfach-loesen ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
23.03.2014, 20:46
| #5 |
| | Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") Hallo schrauber, erstmal danke soweit. Der Proxy ist jetzt weg. Die von wieistmeineip.de angezeigte Adresse stimmt mit der aus ipconfig wieder überein. Allerdings hat sich an der Internetgeschwindigkeit mit Firefox nichts verbessert: Speedtest von Kabeldeutschland (3 Test direkt hintereinander): 1 / 3 / 7 Mbit/s mit dem IE: 15 / 15 / 15 Mbit/s. Hier noch die Logfiles: ESET Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=006e0acd49e75f479dccbde9968d7d4f
# engine=17564
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-23 06:44:00
# local_time=2014-03-23 07:44:00 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=3074 16777213 100 100 33591 67327804 0 0
# compatibility_mode=5893 16776574 100 94 21984676 147231431 0 0
# scanned=249731
# found=3
# cleaned=0
# scan_time=31274
sh=C58264325E7D9AEBE8B576E5C6EB9FD3D6D6CC1C ft=0 fh=0000000000000000 vn="Win32/Bagle.gen.zip worm" ac=I fn="C:\ProgramData\Spybot - Search & Destroy\Recovery\USTechSupportMyCleanPC.zip"
sh=C58264325E7D9AEBE8B576E5C6EB9FD3D6D6CC1C ft=0 fh=0000000000000000 vn="Win32/Bagle.gen.zip worm" ac=I fn="C:\Users\All Users\Spybot - Search & Destroy\Recovery\USTechSupportMyCleanPC.zip"
sh=E1B7D2D1695162D7858D6DE751A25DCB9279A8A8 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\jana\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\7b6a63b4-7d02bb1b"
SecurityCheck Code:
ATTFilter Results of screen317's Security Check version 0.99.80 Windows 7 Service Pack 1 x86 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Microsoft Security Essentials COMODO Antivirus Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` MVPS Hosts File Spybot - Search & Destroy Malwarebytes Anti-Malware Version 1.75.0.1300 CCleaner Java DB 10.5.3.0 Java(TM) 6 Update 31 Java 7 Update 51 Java(TM) SE Development Kit 6 Update 22 Adobe Flash Player 12.0.0.77 Adobe Reader 9 Adobe Reader out of Date! Mozilla Firefox (28.0) ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials MSMpEng.exe Comodo Firewall cmdagent.exe Comodo Firewall cfp.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01
Ran by jana (administrator) on JANA-VAIO on 23-03-2014 20:26:37
Running from C:\Users\jana\Desktop
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
(AnVir Software) C:\Program Files\AnVir Task Manager Free\anvir.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VAIOCareService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Sony Corporation) C:\Program Files\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Don HO don.h@free.fr) C:\Program Files\Notepad++\notepad++.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1578280 2009-12-23] (Synaptics Incorporated)
HKLM\...\Run: [ISBMgr.exe] - C:\Program Files\Sony\ISB Utility\ISBMgr.exe [320880 2009-08-26] (Sony Corporation)
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [6756048 2012-11-08] (COMODO)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\VESWinlogon: C:\Windows\system32\VESWinlogon.dll (Sony Corporation)
HKU\S-1-5-21-1592874016-3910639467-1926928520-1000\...\Run: [SpybotSD TeaTimer] - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKU\S-1-5-21-1592874016-3910639467-1926928520-1000\...\Run: [EPSON SX230 Series] - C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIHKE.EXE [212480 2012-05-06] (SEIKO EPSON CORPORATION)
AppInit_DLLs: C:\Windows\system32\guard32.dll => C:\Windows\system32\guard32.dll [301264 2012-11-08] (COMODO)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xECAB71C23B40CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx
DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 83.169.184.161 83.169.184.225
FireFox:
========
FF ProfilePath: C:\Users\jana\AppData\Roaming\Mozilla\Firefox\Profiles\2f79urzn.default-1395568192327
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1210150.dll (Adobe Systems, Inc.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=12.0.1.647 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=12.0.1.647 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=12.0.1.647 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
========================== Services (Whitelisted) =================
R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
S3 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-02-06] (ArcSoft Inc.)
S3 Apache2.2; C:\xampp\apache\bin\httpd.exe [20549 2010-10-18] (Apache Software Foundation)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [1990464 2012-11-08] (COMODO)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [36352 2009-12-12] ()
S3 SampleCollector; C:\Program Files\Sony\VAIO Care\collsvc.exe [122880 2009-09-16] (Intel Corporation)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.RTM\RpcAgentSrv.exe [72344 2008-11-25] (SiSoftware)
R2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 SOHDBSvr; C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation)
S3 Tomcat6; C:\Program Files\Apache\Tomcat 6.0\bin\tomcat6.exe [61440 2010-07-19] (Apache Software Foundation)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [69632 2009-09-14] (Sony Corporation)
R2 VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [204648 2009-11-30] (Sony Corporation)
S3 VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [513392 2009-12-16] (Sony Corporation)
S3 VcmIAlzMgr; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [480624 2009-09-16] (Sony Corporation)
S3 VcmINSMgr; C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [361840 2009-09-01] (Sony Corporation)
R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [692224 2009-12-18] (Sony Corporation)
S3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [669040 2009-10-30] (Sony Corporation)
R2 VzCdbSvc; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [206336 2009-09-14] (Sony Corporation)
S3 XPrint-Client-Service; C:\Program Files\Schomaecker\XPrint-Client\XPrint-Client-Service\XPrint-Client-Service.exe [1144320 2008-08-28] (Schomäcker GmbH)
S3 postgresql-9.1; No ImagePath
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
==================== Drivers (Whitelisted) ====================
R1 CBDisk; C:\Windows\system32\drivers\{1ec00332-9da9-436d-9aaa-048787df45b7}.sys [57800 2012-12-09] (EldoS Corporation)
R1 CbFs; C:\Windows\system32\drivers\{E7224BCD-D889-4528-8456-60CE0724367E}.sys [145504 2012-12-09] (EldoS Corporation)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [19632 2012-11-08] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [494416 2012-11-08] (COMODO)
R2 drhard; C:\Windows\system32\Drivers\drhard.sys [23600 2005-12-01] (Licensed for Gebhard Software)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35088 2011-02-11] (CACE Technologies, Inc.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2014.RTM\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [25984 2009-12-12] (The OpenVPN Project)
S3 netr28u; No ImagePath
S3 NSNDIS5; \??\C:\Windows\system32\NSNDIS5.SYS [X]
S3 taphss6; system32\DRIVERS\taphss6.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-23 19:48 - 2014-03-23 19:48 - 00000310 _____ () C:\Users\jana\Desktop\esetReport.txt
2014-03-23 10:59 - 2014-03-23 10:59 - 00000000 ____D () C:\Program Files\ESET
2014-03-23 10:56 - 2014-03-23 10:56 - 02347384 _____ (ESET) C:\Users\jana\Downloads\esetsmartinstaller_enu.exe
2014-03-23 10:47 - 2014-03-23 10:47 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-23 10:46 - 2014-03-23 10:47 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-23 10:46 - 2014-03-23 10:47 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-23 10:33 - 2014-03-23 10:33 - 00001226 _____ () C:\Users\jana\Desktop\Revo Uninstaller.lnk
2014-03-23 10:33 - 2014-03-23 10:33 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-03-23 10:32 - 2014-03-23 10:32 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\jana\Desktop\revosetup95.exe
2014-03-23 10:27 - 2014-03-23 10:27 - 00007911 _____ () C:\Users\jana\Desktop\bookmarks.html
2014-03-23 10:16 - 2014-03-23 10:16 - 00000000 ____D () C:\Users\jana\AppData\Local\Skype
2014-03-23 10:15 - 2014-03-23 10:15 - 00002687 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-23 10:15 - 2014-03-23 10:15 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-03-22 10:28 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-22 10:01 - 2014-03-22 10:01 - 00001668 _____ () C:\Users\jana\Desktop\JRT.txt
2014-03-22 09:14 - 2014-03-22 09:14 - 00000000 ____D () C:\Windows\ERUNT
2014-03-22 09:02 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-22 09:02 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-22 09:02 - 2014-03-01 05:10 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-22 09:02 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-22 09:02 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-22 09:02 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-22 09:02 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-22 09:02 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-22 09:02 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-22 09:02 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-22 09:02 - 2014-03-01 04:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-22 09:02 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-22 09:02 - 2014-03-01 04:31 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-22 09:02 - 2014-03-01 04:25 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-22 09:02 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-22 09:02 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-22 09:02 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-22 09:02 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-22 09:02 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-22 09:02 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-22 09:02 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-22 09:02 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-22 08:59 - 2014-03-22 08:59 - 01037734 _____ (Thisisu) C:\Users\jana\Desktop\JRT.exe
2014-03-21 22:08 - 2014-03-21 22:08 - 00008065 _____ () C:\Users\jana\Desktop\gmer.zip
2014-03-21 21:29 - 2014-03-21 21:29 - 00158184 _____ () C:\Users\jana\Desktop\gmer.log
2014-03-21 20:45 - 2014-03-21 20:45 - 00380416 _____ () C:\Users\jana\Desktop\Gmer-19357.exe
2014-03-21 20:32 - 2014-03-22 10:08 - 00028327 _____ () C:\Users\jana\Desktop\Addition.txt
2014-03-21 20:30 - 2014-03-23 20:27 - 00014180 _____ () C:\Users\jana\Desktop\FRST.txt
2014-03-21 20:29 - 2014-03-23 20:26 - 00000000 ____D () C:\FRST
2014-03-21 20:28 - 2014-03-21 20:28 - 01145856 _____ (Farbar) C:\Users\jana\Desktop\FRST.exe
2014-03-21 20:25 - 2014-03-21 20:25 - 00000470 _____ () C:\Users\jana\Desktop\defogger_disable.log
2014-03-21 20:25 - 2014-03-21 20:25 - 00000000 _____ () C:\Users\jana\defogger_reenable
2014-03-21 20:22 - 2014-03-21 20:22 - 00050477 _____ () C:\Users\jana\Desktop\Defogger.exe
2014-03-21 20:02 - 2014-03-21 20:02 - 00987442 _____ () C:\Users\jana\Downloads\SecurityCheck.exe
2014-03-21 17:38 - 2014-03-21 17:39 - 02002416 _____ (Trend Micro Inc.) C:\Users\jana\Downloads\HousecallLauncher(1).exe
2014-03-21 10:51 - 2014-03-22 09:06 - 00000000 ____D () C:\AdwCleaner
2014-03-21 10:49 - 2014-03-21 10:49 - 01950720 _____ () C:\Users\jana\Desktop\adwcleaner.exe
2014-03-21 08:48 - 2014-03-21 08:48 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-21 08:47 - 2014-03-21 08:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-21 08:47 - 2014-03-21 08:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-21 08:25 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-20 23:33 - 2014-03-20 23:33 - 00283192 _____ (Mozilla) C:\Users\jana\Downloads\Firefox Setup Stub 28.0.exe
2014-03-20 23:13 - 2014-03-20 23:28 - 00010113 _____ () C:\Windows\IE10_main.log
2014-03-20 22:58 - 2014-03-20 22:59 - 00985600 _____ () C:\Users\jana\Downloads\MicrosoftFixit50123.msi
2014-03-20 22:46 - 2013-10-02 01:42 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-03-20 22:46 - 2013-10-02 01:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-20 22:46 - 2013-10-02 01:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-20 22:46 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-03-20 22:46 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-03-20 22:46 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-20 22:46 - 2013-10-02 00:45 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-20 22:46 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-03-20 22:46 - 2013-10-02 00:00 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-20 22:46 - 2013-10-01 23:53 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-03-20 22:46 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-03-20 22:42 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-19 08:09 - 2014-03-19 08:09 - 00001413 _____ () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-18 15:00 - 2014-03-18 15:01 - 00000000 ____D () C:\Windows\system32\Adobe
2014-03-17 21:13 - 2014-03-17 21:13 - 00067805 _____ () C:\Users\jana\Desktop\bookmarks-2014-03-17.json
2014-03-15 14:13 - 2014-03-15 14:13 - 00011893 _____ () C:\Users\jana\Desktop\hijackthis.log
2014-03-12 13:50 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 13:50 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 13:50 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 13:50 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 13:50 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\sg_backup_2014-03-10-1147.spg
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\FirstBackup.spg
2014-03-10 11:43 - 2014-03-10 11:43 - 00659456 _____ (Speed Guide Inc.) C:\Users\jana\Downloads\TCPOptimizer.exe
2014-03-08 15:55 - 2014-03-08 15:56 - 00658048 _____ () C:\Windows\Minidump\030814-31496-01.dmp
2014-03-08 15:55 - 2014-03-08 15:55 - 210663785 _____ () C:\Windows\MEMORY.DMP
2014-03-08 11:30 - 2014-03-08 11:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-08 11:29 - 2014-03-08 11:29 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-03-08 11:29 - 2014-03-08 11:27 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-08 11:28 - 2014-03-08 11:27 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-03-08 11:23 - 2014-03-08 11:23 - 00921512 _____ (Oracle Corporation) C:\Users\jana\Downloads\jre-7u51-windows-i586-iftw.exe
2014-03-08 10:36 - 2014-03-08 10:36 - 00000119 _____ () C:\Windows\onlineeye.INI
2014-03-08 10:28 - 2014-03-18 09:50 - 00000000 ____D () C:\Program Files\Onlineeye
2014-03-08 10:27 - 2014-03-08 10:26 - 06418833 _____ (pmaSoft) C:\Users\jana\Downloads\onlineeye.exe
2014-02-22 18:58 - 2014-02-22 18:58 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-22 18:57 - 2014-02-22 18:57 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Caesar III
2014-02-22 18:56 - 2014-02-22 18:57 - 00000000 ____D () C:\Program Files\Caesar III
2014-02-22 18:55 - 2014-02-22 18:55 - 00000000 ____D () C:\Users\jana\Downloads\c3
2014-02-22 18:54 - 2014-02-22 18:54 - 00000000 ____D () C:\Program Files\7-Zip
2014-02-22 18:51 - 2014-02-22 18:51 - 00614816 _____ (Chip Digital GmbH) C:\Users\jana\Downloads\7 Zip 32 Bit - CHIP-Downloader.exe
2014-02-22 18:26 - 2014-02-22 18:28 - 91742484 _____ () C:\Users\jana\Downloads\c3.rar
==================== One Month Modified Files and Folders =======
2014-03-23 20:27 - 2014-03-21 20:30 - 00014180 _____ () C:\Users\jana\Desktop\FRST.txt
2014-03-23 20:26 - 2014-03-21 20:29 - 00000000 ____D () C:\FRST
2014-03-23 20:21 - 2012-06-08 12:33 - 01474832 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-03-23 19:52 - 2013-05-29 08:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-23 19:48 - 2014-03-23 19:48 - 00000310 _____ () C:\Users\jana\Desktop\esetReport.txt
2014-03-23 10:59 - 2014-03-23 10:59 - 00000000 ____D () C:\Program Files\ESET
2014-03-23 10:56 - 2014-03-23 10:56 - 02347384 _____ (ESET) C:\Users\jana\Downloads\esetsmartinstaller_enu.exe
2014-03-23 10:47 - 2014-03-23 10:47 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-23 10:47 - 2014-03-23 10:46 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-03-23 10:47 - 2014-03-23 10:46 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-03-23 10:47 - 2012-05-02 19:33 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Mozilla
2014-03-23 10:33 - 2014-03-23 10:33 - 00001226 _____ () C:\Users\jana\Desktop\Revo Uninstaller.lnk
2014-03-23 10:33 - 2014-03-23 10:33 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-03-23 10:32 - 2014-03-23 10:32 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\jana\Desktop\revosetup95.exe
2014-03-23 10:28 - 2010-11-11 22:29 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Skype
2014-03-23 10:27 - 2014-03-23 10:27 - 00007911 _____ () C:\Users\jana\Desktop\bookmarks.html
2014-03-23 10:27 - 2010-11-11 19:55 - 01780014 _____ () C:\Windows\WindowsUpdate.log
2014-03-23 10:16 - 2014-03-23 10:16 - 00000000 ____D () C:\Users\jana\AppData\Local\Skype
2014-03-23 10:16 - 2010-11-11 22:29 - 00000000 ____D () C:\ProgramData\Skype
2014-03-23 10:15 - 2014-03-23 10:15 - 00002687 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-03-23 10:15 - 2014-03-23 10:15 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-03-23 10:15 - 2013-02-05 08:35 - 00000000 ___RD () C:\Program Files\Skype
2014-03-23 10:08 - 2009-07-14 05:34 - 00016352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-23 10:08 - 2009-07-14 05:34 - 00016352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-23 10:01 - 2013-11-29 20:37 - 00016208 _____ () C:\Windows\setupact.log
2014-03-23 10:01 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-22 10:08 - 2014-03-21 20:32 - 00028327 _____ () C:\Users\jana\Desktop\Addition.txt
2014-03-22 10:01 - 2014-03-22 10:01 - 00001668 _____ () C:\Users\jana\Desktop\JRT.txt
2014-03-22 09:14 - 2014-03-22 09:14 - 00000000 ____D () C:\Windows\ERUNT
2014-03-22 09:06 - 2014-03-21 10:51 - 00000000 ____D () C:\AdwCleaner
2014-03-22 08:59 - 2014-03-22 08:59 - 01037734 _____ (Thisisu) C:\Users\jana\Desktop\JRT.exe
2014-03-21 23:22 - 2010-12-06 23:22 - 00000300 _____ () C:\Windows\Tasks\MT66 Software Update.job
2014-03-21 22:08 - 2014-03-21 22:08 - 00008065 _____ () C:\Users\jana\Desktop\gmer.zip
2014-03-21 21:29 - 2014-03-21 21:29 - 00158184 _____ () C:\Users\jana\Desktop\gmer.log
2014-03-21 20:45 - 2014-03-21 20:45 - 00380416 _____ () C:\Users\jana\Desktop\Gmer-19357.exe
2014-03-21 20:28 - 2014-03-21 20:28 - 01145856 _____ (Farbar) C:\Users\jana\Desktop\FRST.exe
2014-03-21 20:26 - 2012-12-25 15:05 - 00000000 ____D () C:\Users\jana\Desktop\musikNEU
2014-03-21 20:25 - 2014-03-21 20:25 - 00000470 _____ () C:\Users\jana\Desktop\defogger_disable.log
2014-03-21 20:25 - 2014-03-21 20:25 - 00000000 _____ () C:\Users\jana\defogger_reenable
2014-03-21 20:25 - 2010-11-11 20:53 - 00000000 ____D () C:\Users\jana
2014-03-21 20:22 - 2014-03-21 20:22 - 00050477 _____ () C:\Users\jana\Desktop\Defogger.exe
2014-03-21 20:02 - 2014-03-21 20:02 - 00987442 _____ () C:\Users\jana\Downloads\SecurityCheck.exe
2014-03-21 19:14 - 2013-04-16 18:25 - 00314862 _____ () C:\Users\jana\AppData\Local\census.cache
2014-03-21 19:14 - 2013-04-16 18:24 - 00133966 _____ () C:\Users\jana\AppData\Local\ars.cache
2014-03-21 17:39 - 2014-03-21 17:38 - 02002416 _____ (Trend Micro Inc.) C:\Users\jana\Downloads\HousecallLauncher(1).exe
2014-03-21 16:06 - 2013-11-29 20:36 - 00079096 _____ () C:\Windows\PFRO.log
2014-03-21 16:03 - 2013-11-06 21:33 - 00000000 ____D () C:\Program Files\Cain
2014-03-21 10:49 - 2014-03-21 10:49 - 01950720 _____ () C:\Users\jana\Desktop\adwcleaner.exe
2014-03-21 09:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-03-21 08:55 - 2013-12-11 00:11 - 00073043 _____ () C:\Windows\IE11_main.log
2014-03-21 08:48 - 2014-03-21 08:48 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-21 08:47 - 2014-03-21 08:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-21 08:47 - 2014-03-21 08:47 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-21 08:47 - 2014-03-21 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-21 08:47 - 2014-03-21 08:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-21 08:47 - 2014-03-21 08:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-21 08:04 - 2010-07-23 23:30 - 00000000 ____D () C:\Windows\InstDrvs
2014-03-20 23:33 - 2014-03-20 23:33 - 00283192 _____ (Mozilla) C:\Users\jana\Downloads\Firefox Setup Stub 28.0.exe
2014-03-20 23:28 - 2014-03-20 23:13 - 00010113 _____ () C:\Windows\IE10_main.log
2014-03-20 22:59 - 2014-03-20 22:58 - 00985600 _____ () C:\Users\jana\Downloads\MicrosoftFixit50123.msi
2014-03-20 22:50 - 2010-11-11 19:46 - 00000000 ____D () C:\Windows\system32\Drivers\de-DE
2014-03-20 14:45 - 2012-06-08 10:52 - 00000000 ____D () C:\Program Files\COMODO
2014-03-20 11:09 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-20 00:29 - 2013-08-15 08:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-20 00:21 - 2011-01-09 13:33 - 87350280 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-19 08:09 - 2014-03-19 08:09 - 00001413 _____ () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-18 21:17 - 2011-12-28 14:14 - 00000000 ____D () C:\Users\jana\Desktop\Filme
2014-03-18 20:29 - 2012-04-15 19:37 - 00000000 ____D () C:\Users\jana\Desktop\Filme2
2014-03-18 15:01 - 2014-03-18 15:00 - 00000000 ____D () C:\Windows\system32\Adobe
2014-03-18 09:50 - 2014-03-08 10:28 - 00000000 ____D () C:\Program Files\Onlineeye
2014-03-18 09:46 - 2014-02-20 16:26 - 00000000 ____D () C:\Program Files\PeerBlock
2014-03-17 21:13 - 2014-03-17 21:13 - 00067805 _____ () C:\Users\jana\Desktop\bookmarks-2014-03-17.json
2014-03-17 09:56 - 2012-08-16 08:56 - 00000000 ____D () C:\Users\jana\Desktop\aktuell
2014-03-15 16:51 - 2011-01-17 11:39 - 00164352 _____ () C:\Users\jana\Documents\Verdienstübersicht.xls
2014-03-15 14:13 - 2014-03-15 14:13 - 00011893 _____ () C:\Users\jana\Desktop\hijackthis.log
2014-03-13 11:17 - 2013-10-19 16:38 - 00000000 ____D () C:\Users\jana\Desktop\WS13
2014-03-13 11:02 - 2010-07-23 23:18 - 01586464 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-13 08:23 - 2013-05-04 22:21 - 00355240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 08:21 - 2014-02-20 21:39 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-11 22:52 - 2012-05-02 18:14 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-03-11 22:52 - 2011-08-29 17:04 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\sg_backup_2014-03-10-1147.spg
2014-03-10 11:47 - 2014-03-10 11:47 - 00002055 _____ () C:\Users\jana\Downloads\FirstBackup.spg
2014-03-10 11:43 - 2014-03-10 11:43 - 00659456 _____ (Speed Guide Inc.) C:\Users\jana\Downloads\TCPOptimizer.exe
2014-03-08 15:56 - 2014-03-08 15:55 - 00658048 _____ () C:\Windows\Minidump\030814-31496-01.dmp
2014-03-08 15:55 - 2014-03-08 15:55 - 210663785 _____ () C:\Windows\MEMORY.DMP
2014-03-08 15:55 - 2011-12-12 21:49 - 00000000 ____D () C:\Windows\Minidump
2014-03-08 11:30 - 2014-03-08 11:30 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-08 11:29 - 2014-03-08 11:29 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-03-08 11:27 - 2014-03-08 11:29 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-08 11:27 - 2014-03-08 11:28 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-03-08 11:27 - 2010-11-11 20:31 - 00000000 ____D () C:\Program Files\Java
2014-03-08 11:23 - 2014-03-08 11:23 - 00921512 _____ (Oracle Corporation) C:\Users\jana\Downloads\jre-7u51-windows-i586-iftw.exe
2014-03-08 10:36 - 2014-03-08 10:36 - 00000119 _____ () C:\Windows\onlineeye.INI
2014-03-08 10:26 - 2014-03-08 10:27 - 06418833 _____ (pmaSoft) C:\Users\jana\Downloads\onlineeye.exe
2014-03-04 08:47 - 2011-02-06 18:02 - 00030208 _____ () C:\Users\jana\Documents\Vermögensplan.xls
2014-03-02 12:34 - 2011-04-23 13:33 - 00000000 ____D () C:\Users\jana\Desktop\Studium
2014-03-01 05:30 - 2014-03-22 09:02 - 17074688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 05:11 - 2014-03-22 09:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 05:10 - 2014-03-22 09:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 04:52 - 2014-03-22 09:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 04:51 - 2014-03-22 09:02 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-22 09:02 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 04:43 - 2014-03-22 09:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 04:43 - 2014-03-22 09:02 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 04:40 - 2014-03-22 09:02 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 04:38 - 2014-03-22 09:02 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 04:38 - 2014-03-22 09:02 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 04:37 - 2014-03-22 09:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 04:31 - 2014-03-22 09:02 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 04:25 - 2014-03-22 09:02 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 04:16 - 2014-03-22 09:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:14 - 2014-03-22 09:02 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:03 - 2014-03-22 09:02 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:00 - 2014-03-22 09:02 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 03:57 - 2014-03-22 09:02 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 03:32 - 2014-03-22 09:02 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 03:27 - 2014-03-22 09:02 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:25 - 2014-03-22 09:02 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-26 10:12 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-22 18:58 - 2014-02-22 18:58 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-02-22 18:57 - 2014-02-22 18:57 - 00000000 ____D () C:\Users\jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Caesar III
2014-02-22 18:57 - 2014-02-22 18:56 - 00000000 ____D () C:\Program Files\Caesar III
2014-02-22 18:55 - 2014-02-22 18:55 - 00000000 ____D () C:\Users\jana\Downloads\c3
2014-02-22 18:54 - 2014-02-22 18:54 - 00000000 ____D () C:\Program Files\7-Zip
2014-02-22 18:51 - 2014-02-22 18:51 - 00614816 _____ (Chip Digital GmbH) C:\Users\jana\Downloads\7 Zip 32 Bit - CHIP-Downloader.exe
2014-02-22 18:28 - 2014-02-22 18:26 - 91742484 _____ () C:\Users\jana\Downloads\c3.rar
ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-1592874016-3910639467-1926928520-1000\$da5da012b751b1a7f7d3893de860eefe
Files to move or delete:
====================
C:\Users\jana\akvis-magnifier-setup.exe
C:\Users\jana\Fport.exe
C:\Users\jana\h2cdimage.exe
Some content of TEMP:
====================
C:\Users\Gast\AppData\Local\Temp\SkypeSetup.exe
C:\Users\jana\AppData\Local\Temp\feedback.dll
C:\Users\jana\AppData\Local\Temp\Quarantine.exe
C:\Users\jana\AppData\Local\Temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-10 16:41
==================== End Of Log ============================
Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-03-2014 01
Ran by jana at 2014-03-23 20:29:01
Running from C:\Users\jana\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AV: COMODO Antivirus (Enabled - Up to date) {458BB331-2324-0753-3D5F-1472EB102AC0}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: COMODO Defense+ (Enabled - Up to date) {FEEA52D5-051E-08DD-07EF-2F009097607D}
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
AAVUpdateManager (HKLM\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
ABBYY FineReader 9.0 Sprint (HKLM\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
ABBYY FineReader 9.0 Sprint (Version: 9.01.513.58212 - ABBYY) Hidden
AccessData FTK Imager (HKLM\...\{0ADC8340-4A94-4CE3-A721-B558F365F8D0}) (Version: 3.1.1.8 - AccessData)
ActiveState Komodo Edit 7.1.3 (HKLM\...\{F69166F9-0171-49DA-8B63-6B8DD8279770}) (Version: 7.1.3 - ActiveState Software Inc.)
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader 9.5.0 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A95000000001}) (Version: 9.5.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
AKVIS Magnifier (HKLM\...\{9FDD51C9-F7AA-40AF-A4FF-0500E45E4A06}) (Version: 6.0.1006.8910 - AKVIS)
AnVir Task Manager Free (HKLM\...\AnVir Task Manager Free) (Version: - AnVir Software)
Apache Tomcat 6.0 (remove only) (HKLM\...\Apache Tomcat 6.0) (Version: - )
ArcSoft WebCam Companion 3 (HKLM\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.193 - ArcSoft)
Caesar III (HKLM\...\Caesar III) (Version: - )
Cain & Abel 4.9.46 (HKLM\...\Cain & Abel 4.9.46) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 3.17 - Piriform)
COMODO Internet Security (HKLM\...\{D6AB1F5B-FED6-49A9-9747-327BD28FB3C7}) (Version: 5.10.31649.2253 - COMODO Security Solutions Inc.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DbVisualizer 7.1.4 (HKLM\...\8973-4025-0853-7287) (Version: 7.1.4 - DbVis Software AB)
Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM\...\Dev-C++) (Version: - )
Dia (nur entfernen) (HKLM\...\Dia) (Version: - )
Dr. Hardware 2013 13.0d (HKLM\...\Dr. Hardware 2013_is1) (Version: - Peter A. Gebhard)
Driver Magician Lite 4.21 (HKLM\...\Driver Magician Lite_is1) (Version: - GoldSolution Software, Inc.)
Einstellungen für VAIO-Inhaltsüberwachung (HKLM\...\{23825B69-36DF-4DAD-9CFD-118D11D80F16}) (Version: 2.4.1.09180 - Sony Corporation)
Epson Event Manager (HKLM\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON SX230 Series Printer Uninstall (HKLM\...\EPSON SX230 Series) (Version: - SEIKO EPSON Corporation)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
Evernote (HKLM\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.0.545 - Evernote Corp.)
GIMP 2.6.11 (HKLM\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Update Helper (Version: 1.3.21.111 - Google Inc.) Hidden
HiJackThis (HKLM\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
inSSIDer (HKLM\...\{BF6379E6-9936-46B0-B6AC-C56EE3987D2E}) (Version: 2.1.1 - MetaGeek)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.14.10.2230 - Intel Corporation)
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java DB 10.5.3.0 (HKLM\...\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}) (Version: 10.5.3.0 - Sun Microsystems, Inc)
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
Java(TM) Platform, Micro Edition Software Development Kit 3.0 (HKCU\...\nbi-javame-toolkit-3.0.0.0.20090408) (Version: - Sun Microsystems Inc.)
Java(TM) SE Development Kit 6 Update 22 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0160220}) (Version: 1.6.0.220 - Oracle)
JMicron Ethernet Adapter NDIS Driver (HKLM\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.14.11 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.37.3 - JMicron Technology Corp.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM\...\{8E770F99-CF23-4BF9-BF4E-E3A2924FEB27}) (Version: 8.0.50727.762 - SAP)
Microsoft redistributable runtime DLLs VS2005 SP1(x86) (HKLM\...\{CEC7A786-A9C8-4EF7-BB59-6518E3B3C878}) (Version: 8.0.50727.4053 - SAP)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 English (HKLM\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML4.0 redistributable (HKLM\...\{44D66AD9-AE19-4AFD-BE7E-A1B44C856697}) (Version: 4.0.0.0 - SAP)
MT66 Software Update (HKLM\...\{F2E4F3A5-A8F0-46F4-8E91-E8C1DE1FCFE5}_is1) (Version: - )
MusicStation (HKLM\...\{AB259D46-F851-41B0-9AFA-AED8998AD68A}) (Version: 2.0.0.1067 - Omnifone)
Norton Online Backup (HKLM\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.20.0 - Symantec)
Notepad++ (HKLM\...\Notepad++) (Version: 5.8.4 - )
OpenOffice.org 3.2 (HKLM\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
OpenVPN 2.1.1 (HKLM\...\OpenVPN) (Version: 2.1.1 - )
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.0.2 - Frank Heindörfer, Philip Chinery)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.201.0 - Tracker Software Products Ltd)
pgAdmin III 1.14 (HKLM\...\{58D1EDF1-038E-4F62-A08E-C47581465A57}) (Version: 1.14 - The pgAdmin Development Team)
Photomizer Pro (HKLM\...\{41B5224D-6857-4D8B-0001-C8949A33B608}) (Version: 2.0.13.426 - Engelmann Media GmbH)
PhotoScape (HKLM\...\PhotoScape) (Version: - )
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PMB (HKLM\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.0.00.10260 - Sony Corporation)
PostgreSQL 9.1 (HKLM\...\PostgreSQL 9.1) (Version: 9.1 - PostgreSQL Global Development Group)
Protege 4.3 (HKLM\...\Protege 4.3) (Version: 1.0.0.0 - Stanford Center for Biomedical Informatics Research)
Python 2.7.2 (HKLM\...\{2E295B5B-1AD4-4d36-97C2-A316084722CF}) (Version: 2.7.2150 - Python Software Foundation)
R for Windows 2.15.0 (HKLM\...\R for Windows 2.15.0_is1) (Version: 2.15.0 - R Development Core Team)
Rainmeter (HKLM\...\Rainmeter) (Version: - )
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 12.0) (Version: - RealNetworks)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6005 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Reg Organizer version 6.01 (HKLM\...\Reg Organizer_is1) (Version: 6.01 - ChemTable Software)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Setting Utility Series (HKLM\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.1.0.11200 - Sony Corporation)
SimpleScreenshot 1.40 (HKLM\...\SimpleScreenshot) (Version: - )
SiSoftware Sandra Lite 2014.RTM (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 20.10.2014.2 - SiSoftware)
Skype™ 6.14 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Sony Home Network Library (HKLM\...\{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}) (Version: 2.0.1.10160 - Sony Corporation)
Sony Home Network Library (Version: 2.0.1.10160 - Sony Corporation) Hidden
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
STEUEReasy 2013 (HKLM\...\{4D0EAA2D-8EE2-43AB-BE00-18A1D0A9281C}) (Version: 18.09 - Wolters Kluwer Deutschland GmbH)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.10.0 - Synaptics Incorporated)
System Checkup 3.4 (HKLM\...\{4AC7B4E7-59B7-4E48-A60D-263C486FC33A}_is1) (Version: 3.4.0.53 - iolo technologies, LLC)
TeXnicCenter Version 1.0 Stable RC1 (HKLM\...\TeXnicCenter_is1) (Version: Version 1.0 Stable RC1 - TeXnicCenter.org)
TweakMe! (HKLM\...\{709D0207-B1F8-4ADC-BB2F-CDBE2367A475}_is1) (Version: 1.2.0.7 - pXc-coding.com)
VAIO Care (HKLM\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 5.0.3.11130 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (HKLM\...\{4882EBF5-CA37-4EF4-BCB8-9B0E78B907D0}) (Version: 3.6.0.09250 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (Version: 3.6.0.09250 - Sony Corporation) Hidden
VAIO Content Metadata Intelligent Network Service Manager (HKLM\...\{4427F384-B5BE-4769-B7D0-C784FC321EB1}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata Intelligent Network Service Manager (Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Metadata Manager Settings (HKLM\...\{12D0BE8D-538C-4AB1-86DE-C540308F50DA}) (Version: 3.6.0.09240 - Sony Corporation)
VAIO Content Metadata Manager Settings (Version: 3.6.0.09240 - Sony Corporation) Hidden
VAIO Content Metadata XML Interface Library (HKLM\...\{291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata XML Interface Library (Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Monitoring Settings (Version: 2.4.1.09180 - Sony Corporation) Hidden
VAIO Control Center (HKLM\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.1.0.10160 - Sony Corporation)
VAIO Data Restore Tool (HKLM\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.2.0.09150 - Sony Corporation)
VAIO Data Restore Tool (Version: 1.2.0.09150 - Sony Corporation) Hidden
VAIO Energie Verwaltung (HKLM\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.0.0.12150 - Sony Corporation)
VAIO Entertainment Platform (HKLM\...\{6B1F20F2-6321-4669-A58C-33DF8E7517FF}) (Version: 3.6.0.09150 - Sony Corporation)
VAIO Entertainment Platform (Version: 3.6.0.09150 - Sony Corporation) Hidden
VAIO Event Service (HKLM\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.1.0.11300 - Sony Corporation)
VAIO Gate (HKLM\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 1.3.0.09240 - Sony Corporation)
VAIO Gate Default (HKLM\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 1.0.0.10290 - Sony Corporation)
VAIO Hardware Diagnostics (Version: 3.9.1 - Sony Corporation) Hidden
VAIO Marketing Tools (HKLM\...\MarketingTools) (Version: - Sony Corporation)
VAIO Media plus (HKLM\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.0.1.10160 - Sony Corporation)
VAIO Media plus Opening Movie (HKLM\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 1.2.0.09100 - Sony Corporation)
VAIO Original Function Settings (Version: 2.0.0.07010 - Sony Corporation) Hidden
VAIO Original Funktion Einstellungen (HKLM\...\{A63E7492-A0BC-4BB9-89A7-352965222380}) (Version: 2.0.0.07010 - Sony Corporation)
VAIO Smart Network (HKLM\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.1.0.12170 - Sony Corporation)
VAIO Update 5 (HKLM\...\{5BEE8F1F-BD32-4553-8107-500439E43BD7}) (Version: 5.0.0.10300 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.0.10200 - Sony Corporation)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
Vistumbler (HKLM\...\Vistumbler) (Version: v10 - Vistumbler.net)
wGet-Installer (HKLM\...\{D901E911-3478-466F-8EA0-0AEE85F22E4B}) (Version: 1.09.0000 - GNU)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
Windows 7 USB/DVD Download Tool (HKLM\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Driver Package - Broadcom Bluetooth (09/09/2009 6.2.0.9405) (HKLM\...\BFEE6FC237B51D7CD2E0A40D81E188A6ED95001F) (Version: 09/09/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) (HKLM\...\BF20603967CFDCB2BBF91950E8A56DFBC5C833FE) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinSCP 4.3.7 (HKLM\...\winscp3_is1) (Version: 4.3.7 - Martin Prikryl)
WinSysClean X5 Trial (HKLM\...\WinSysClean X5 Trial) (Version: 15.00 - Ultimate Systems, Inc.)
WinSysClean X5 Trial (Version: 15.00 - Ultimate Systems, Inc.) Hidden
WinZip 17.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240D8}) (Version: 17.0.10381 - WinZip Computing, S.L. )
X-Print 4.0 Client (HKLM\...\X-Print Client Uni Passau_is1) (Version: - Schomaecker GmbH)
==================== Restore Points =========================
12-03-2014 18:12:16 Windows Update
12-03-2014 21:36:21 Windows Update
15-03-2014 07:45:17 Windows Modules Installer
17-03-2014 07:19:37 Windows Update
17-03-2014 09:30:53 Windows Modules Installer
18-03-2014 19:08:14 Windows Modules Installer
19-03-2014 23:18:25 Windows Update
20-03-2014 10:29:18 Removed Oracle VM VirtualBox 4.2.18
20-03-2014 10:42:12 Windows Update
20-03-2014 13:11:53 Windows Update
20-03-2014 21:42:40 Windows Update
20-03-2014 22:00:43 Installed Microsoft Fix it 50123
20-03-2014 22:04:17 Windows Update
20-03-2014 22:12:09 Windows Update
21-03-2014 07:42:26 Windows Update
22-03-2014 09:27:45 Windows Update
23-03-2014 09:37:41 Revo Uninstaller's restore point - Mozilla Firefox 28.0 (x86 de)
==================== Hosts content: ==========================
2009-07-14 03:04 - 2011-04-22 12:28 - 00432840 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
There are 1000 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {126C99D1-8F0F-4FBB-9506-133EC86278CD} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1592874016-3910639467-1926928520-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-03-29] (RealNetworks, Inc.)
Task: {313DEE4D-193A-4AC3-BE6B-39DE4F4492F7} - System32\Tasks\AnVir Task Manager => C:\Program Files\AnVir Task Manager Free\anvir.exe [2013-02-13] (AnVir Software)
Task: {383709C2-56D4-4139-97A1-DC60DEDF6310} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1592874016-3910639467-1926928520-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-03-29] (RealNetworks, Inc.)
Task: {475C701C-2F13-4FDB-9DDE-0730F979B1D9} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {4FBED1A8-06F0-4389-B239-65CD7A1DF6CE} - System32\Tasks\RegOrganizerQuickLaunch => C:\Program Files\Reg Organizer\RegOrganizer.exe [2013-01-28] (ChemTable Software)
Task: {6D42F8C7-53D3-40B9-B363-1FBC8FDD9513} - System32\Tasks\VAIO Care Service => C:\Program Files\Sony\VAIO Care\VAIOCareService.exe [2009-10-21] (Sony Corporation)
Task: {748F25EE-A5D9-4053-A9B8-B945F157295A} - System32\Tasks\SONY\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2009-10-30] (Sony Corporation)
Task: {836949B5-D072-462D-AF3D-4AA11B474F3F} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-09-24] (Sony Corporation)
Task: {88248CAD-6D29-467F-A5AE-1595BC70F1B2} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {90CF58AE-1DA3-438E-ABF1-D2CC7ED95FC9} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9121E016-75BC-4E66-86EC-699FAC08B274} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: {9FB32F12-0C32-41EA-80B6-D6D28B8C8689} - System32\Tasks\MT66 Software Update => C:\Program Files\Common Files\MT66 Software Update\UpdateClient.exe [2009-11-18] (MedienTeam66)
Task: {9FDA5A78-E20B-4442-B95B-E05501DE3030} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-12-16] (Sony Corporation)
Task: {B317CCD1-6F72-419C-9853-E5AC44558030} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-30] (Google Inc.)
Task: {B365C55C-105A-458B-813C-EC8348A2F3D0} - System32\Tasks\ReclaimerResumeInstall_jana => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe [2013-09-02] (RealNetworks, Inc.)
Task: {BD753479-91BF-4BF4-BCB4-2B464E6820E7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-30] (Google Inc.)
Task: {C878D519-6A24-40C4-B8BE-CFE4C05CE680} - System32\Tasks\{0507F77E-6EAA-4A4C-9008-33ADC8C4C3DB} => C:\Users\jana\Fport.exe [2001-05-04] ()
Task: {DB0FC8D5-25FD-4A5A-B61E-75E3565A3602} - System32\Tasks\ReclaimerResumeInstallLogin_jana => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe [2013-09-02] (RealNetworks, Inc.)
Task: {E808A515-6561-4333-BD85-3BD34D923A40} - System32\Tasks\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2009-10-19] (Sony Corporation)
Task: {F0144E4A-461B-42E4-861A-432540BDA2E4} - System32\Tasks\{83ECE4B7-6F12-4390-8349-28D243DE72D0} => C:\Program Files\Skype\\Phone\Skype.exe [2014-02-10] (Skype Technologies S.A.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MT66 Software Update.job => C:\Program Files\Common Files\MT66 Software Update\UpdateClient.exe
Task: C:\Windows\Tasks\ReclaimerResumeInstallLogin_jana.job => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe
Task: C:\Windows\Tasks\ReclaimerResumeInstall_jana.job => C:\Users\jana\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\10.60\agent\rnupgagent.exe
==================== Loaded Modules (whitelisted) =============
2011-12-19 17:59 - 2012-10-05 01:33 - 00070352 _____ () C:\Program Files\COMODO\COMODO Internet Security\scanners\smart.cav
2010-12-23 09:10 - 2001-10-28 17:42 - 00116224 _____ () C:\Windows\System32\pdfcmnnt.dll
2008-10-24 15:35 - 2008-10-24 15:35 - 00128296 _____ () C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
2010-11-11 20:35 - 2009-11-30 19:19 - 00010752 _____ () C:\Program Files\Sony\VAIO Event Service\VESBasePS.dll
2010-11-11 20:35 - 2009-11-30 19:20 - 00009728 _____ () C:\Program Files\Sony\VAIO Event Service\VESMgrSubPS.dll
2010-11-14 15:51 - 2010-11-14 15:51 - 00109056 _____ () C:\Program Files\Notepad++\NppShell_03.dll
2014-03-23 10:46 - 2014-03-15 09:40 - 03642480 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-03-11 22:52 - 2014-03-11 22:52 - 16276872 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll
2010-08-15 19:34 - 2010-08-15 19:34 - 00204800 _____ () C:\Program Files\Notepad++\plugins\ComparePlugin.dll
2008-09-06 13:51 - 2008-09-06 13:51 - 00014336 _____ () C:\Program Files\Notepad++\plugins\NppExport.dll
2010-08-21 13:56 - 2010-08-21 13:56 - 01563648 _____ () C:\Program Files\Notepad++\plugins\NppFTP.dll
2007-08-05 02:10 - 2007-08-05 02:10 - 00250368 _____ () C:\Program Files\Notepad++\plugins\Config\tidy\libTidy.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:31D9EFCC
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
==================== Disabled items from MSCONFIG ==============
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^RescueTime.lnk => C:\Windows\pss\RescueTime.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^jana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk.disabled => C:\Windows\pss\OpenOffice.org 3.2.lnk.disabled.Startup
MSCONFIG\startupfolder: C:^Users^jana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Rainmeter.lnk.disabled => C:\Windows\pss\Rainmeter.lnk.disabled.Startup
MSCONFIG\startupreg: DriverScanner => "C:\Program Files\Uniblue\DriverScanner\launcher.exe" delay 20000
MSCONFIG\startupreg: Facebook Update => "C:\Users\jana\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: Google Update => "C:\Users\jana\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: MSC => "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: OnlineTime => "c:\program files\onlineeye\onlineeye.exe"
MSCONFIG\startupreg: SimpleScreenshot => C:\PROGRA~1\SSS\SIMPLESCREENSHOT.EXE
MSCONFIG\startupreg: SiteRanker => "C:\Program Files\SiteRanker\SiteRankTray.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
==================== Faulty Device Manager Devices =============
Name: 802.11n Wireless LAN Card
Description: 802.11n Wireless LAN Card
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Ralink Technology, Corp.
Service: netr28
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (03/23/2014 10:37:37 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {34eb94df-d219-4661-87f8-668f2f7ec798}
Error: (03/23/2014 10:01:14 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/23/2014 10:01:13 AM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
Error: (03/22/2014 07:08:53 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {56F9312C-C989-4E04-8C23-299DEE3A36F5}) (Fehlercode = 0x80042019)
Error: (03/22/2014 07:08:52 PM) (Source: VzCdbSvc) (User: )
Description: Das Plug-In-Modul konnte nicht geladen werden. (GUID = {48512A59-C8A5-4805-9048-23C9E4194BFA}) (Fehlercode = 0x80042000)
System errors:
=============
Error: (03/23/2014 03:32:30 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/23/2014 03:32:28 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/23/2014 03:32:13 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/23/2014 03:32:10 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/23/2014 03:32:08 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/23/2014 10:39:34 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/23/2014 10:39:32 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/23/2014 10:39:27 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/23/2014 10:39:24 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (03/23/2014 10:38:36 AM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Microsoft Office Sessions:
=========================
Error: (03/23/2014 10:37:37 AM) (Source: VSS)(User: )
Description: 0x80070005, Zugriff verweigert
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {34eb94df-d219-4661-87f8-668f2f7ec798}
Error: (03/23/2014 10:01:14 AM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/23/2014 10:01:13 AM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
Error: (03/22/2014 07:08:53 PM) (Source: VzCdbSvc)(User: )
Description: {56F9312C-C989-4E04-8C23-299DEE3A36F5}0x80042019
Error: (03/22/2014 07:08:52 PM) (Source: VzCdbSvc)(User: )
Description: {48512A59-C8A5-4805-9048-23C9E4194BFA}0x80042000
CodeIntegrity Errors:
===================================
Date: 2012-01-01 19:46:22.480
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-01 19:40:04.640
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2012-01-01 17:36:24.918
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files\ThreatFire\TFWAH.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 51%
Total physical RAM: 2037 MB
Available physical RAM: 986.21 MB
Total Pagefile: 4074.01 MB
Available Pagefile: 2595.67 MB
Total Virtual: 2047.88 MB
Available Virtual: 1931.18 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:226.04 GB) (Free:156.58 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: BE1562CA)
Partition: GPT Partition Type.
==================== End Of Log ============================
|
|
24.03.2014, 12:28
| #6 |
| /// the machine /// TB-Ausbilder | Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") Adobe updatne. Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Revo Uninstaller - Download - Filepony damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.mozilla.org/de/kb/fi...einfach-loesen
__________________ --> Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") |
|
24.03.2014, 15:55
| #7 |
| | Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") Hallo schrauber, Update ist erledigt. Hab heute den Firefox sogar schon zweimal de- und wie installiert und auch das Profil zusätzlich noch mal zurückgesetzt. Die TMP-files sind auch gelöscht. Leider hat sich an der Geschwindigkeit noch nichts verbessert  Am FF kann das Problem wohl nicht mehr liegen. Virus etc. ist auch nicht auf der Platte, oder? Seitens der Firewall bzw. Virenscanner wird FF nicht blockiert. Hab die heute mal nacheinander abgeschaltet, ohne dass sich FF verschnellert hätte. Vorhin beim ersten (!) Start von FF kam der Hinweis, dass FF anscheinend langsam ist. Profil nochmals zurücksetzen hat nichts gebracht. Allerdings kam die Meldung dann auch nicht mehr. Gibt es noch eine andere Möglichkeit, woran das Ganze liegen könnte? Oder wäre es am einfachsten, das ganze OS neu aufzuspielen? Danke für Deine Geduld! |
|
25.03.2014, 10:36
| #8 |
| /// the machine /// TB-Ausbilder | Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") Teste mal folgendes: FF im Safe Mode ohne Addons Antivirenprogramm deinstallieren
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.03.2014, 08:53
| #9 |
| | Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") Hallo schrauber, FF ohne Add-Ons brachte leider keine Verbesserung. Ich habe dann den Virenscanner von Comodo deinstalliert (aktuell läuft wieder Security Essentials). Eine leichte Verbesserung der Geschwindigkeit ergab sich danach. Allerdings schwankt sie enorm. Gestern abends jedenfalls konnte ich mal wieder ohne Probleme über die Mediathek was anschauen... Habe vor gut 15 Minuten mal einen Vergleich zwischen FF und IE beim Speedtest gemacht: FF Speedtest über Kabel Deutschland: ping/down/up 19 ms / 2Mbit/s / 0Mbit/s 18/4/0 35/3/1 FF Speedtest über speedtest.net: 37 ms / 6.67 Mbps / 0.97 Mbps 65/6.96/1 35/7.78/0.98 IE Speedtest über Kabel Deutschland: ping/down/up 17 ms / 15Mbit/s / 1Mbit/s 51/15/1 53/15/1 IE Speedtest über speedtest.net: 45 ms / 16.38 Mbps / 1 Mbps 55/16.14/0.99 55/16.15/1 Ich habe in den letzten Wochen immer wieder mal solche Vergleiche gemacht. Vorher sah das ganze so aus, dass IE weit schneller war als FF. Zudem zeigte speedtest.net viel mehr Power als KD. Bei KD hatte ich das schonmal angeführt, um auszuschließen, dass der speedtest defekt ist. Mit den neuen Ergebnissen zeigt hinkt zwar KD immer noch hinten nach, allerdings ist speedtest.net nicht gleich enorm besser... Hättest Du vielleicht noch einen Tippp? |
|
28.03.2014, 08:19
| #10 |
| /// the machine /// TB-Ausbilder | Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") KD Router schon neu gestartet? Ich hab gestern auch so Stress gehabt mit KD, bis ich das Teil mal neu gestartet hab.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
28.03.2014, 08:29
| #11 |
| | Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") Hallo schrauber, von KD hab ich keinen Router, nur das ganz einfache Modem. WLAN brauch ich nicht. Das Modem hab ich schon zig-mal resettet. Über Nacht schalt ich das Teil jetzt so gut wie immer aus. Das hat bisher allerdings auch keine wirkliche Verbesserung gebracht. Und laut Kundenservice von KD sind alle Leistungsmerkmale des Modems auch ok... Werde heute im Laufe des Tages noch probieren, eine alte FF-Version zu installieren. Und mal checken, ob damit die Probleme auch auftreten bzw. bei welcher Updateversion sie anfangen. |
|
29.03.2014, 08:08
| #12 |
| /// the machine /// TB-Ausbilder | Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") Mach das mal. Ich hab mittlerweile das dritte Modem von denen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Internet v. a. mit Firefox sehr langsam (versteckter "Proxy") |
| 4d36e972-e325-11ce-bfc1-08002be10318, adobe, antivirus, device driver, diagnostics, entfernen, error, firefox 28.0, flash player, home, hängt, langsam, microsoft fix it, minidump, mozilla, programm, proxy, pup.optional.ellora, pup.optional.helperbar.a, pup.optional.opencandy, rundll, safer networking, scan, schädling, security, services.exe, speedtest, svchost.exe, symantec, tracker, virtualbox, win32/bagle.gen.zip |
Linear-Darstellung
