| |
| |||||||
Log-Analyse und Auswertung: dhl Mail versandschein.exe - gmer findet wmpnetwk.exeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
14.04.2014, 10:54
| #16 |
 |  dhl Mail versandschein.exe - gmer findet wmpnetwk.exe und hier der 4. und letzte FRST log Teil: Code:
ATTFilter 2014-04-06 00:54 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-04-06 00:54 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-04-06 00:54 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-04-06 00:54 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-04-06 00:54 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-04-06 00:54 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-04-06 00:54 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-04-06 00:53 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-04-06 00:53 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-04-06 00:51 - 2014-04-10 21:24 - 00007058 _____ () C:\Windows\PFRO.log 2014-04-06 00:46 - 2014-04-06 00:46 - 00033436 _____ () C:\Windows\system32\emptyregdb.dat 2014-04-06 00:39 - 2014-04-08 00:41 - 00000000 __SHD () C:\Users\Elisabeth\IETldCache 2014-04-06 00:20 - 2014-04-06 00:47 - 01055718 _____ () C:\Windows\comsetup.log 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Vorlagen 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Startmenü 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Netzwerkumgebung 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Lokale Einstellungen 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Eigene Dateien 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Documents\Eigene Musik 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Documents\Eigene Bilder 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\AppData\Local\Verlauf 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\AppData\Local\Anwendungsdaten 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Anwendungsdaten 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 __HDL () C:\Users\Besitzer\Druckumgebung 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 ____D () C:\Users\Besitzer 2014-04-06 00:19 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-04-06 00:19 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-04-06 00:17 - 2014-04-07 02:15 - 00068328 _____ () C:\Users\Elisabeth\AppData\Local\GDIPFONTCACHEV1.DAT 2014-04-06 00:17 - 2014-04-06 00:17 - 00000000 ___DC () C:\Users\Elisabeth\AppData\Local\MigWiz 2014-04-06 00:08 - 2014-04-10 18:00 - 00000000 ____D () C:\Users\Elisabeth 2014-04-06 00:08 - 2014-04-08 00:19 - 00000000 ___RD () C:\Users\Elisabeth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-06 00:08 - 2014-04-07 21:15 - 00000000 ___RD () C:\Users\Elisabeth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-04-06 00:08 - 2014-04-06 00:08 - 00000020 ___SH () C:\Users\Elisabeth\ntuser.ini 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Vorlagen 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Startmenü 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Netzwerkumgebung 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Lokale Einstellungen 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Eigene Dateien 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Documents\Eigene Musik 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Documents\Eigene Bilder 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\AppData\Local\Verlauf 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\AppData\Local\Anwendungsdaten 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Anwendungsdaten 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 __HDL () C:\Users\Elisabeth\Druckumgebung 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\VirtualStore 2014-04-06 00:08 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Elisabeth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-04-06 00:08 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Elisabeth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-04-05 23:58 - 2014-04-05 23:58 - 00001421 _____ () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-04-05 23:57 - 2014-04-05 23:58 - 00001455 _____ () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-05 23:57 - 2014-04-05 23:58 - 00000000 ___RD () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-05 23:57 - 2014-04-05 23:58 - 00000000 ___RD () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-04-05 23:57 - 2014-04-05 23:57 - 00000020 ___SH () C:\Users\Ente\ntuser.ini 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Vorlagen 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Startmenü 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Netzwerkumgebung 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Lokale Einstellungen 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Eigene Dateien 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Druckumgebung 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Documents\Eigene Musik 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Documents\Eigene Bilder 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\AppData\Local\Verlauf 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\AppData\Local\Anwendungsdaten 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Anwendungsdaten 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 ____D () C:\Users\Ente\AppData\Local\VirtualStore 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 ____D () C:\Users\Ente 2014-04-05 23:57 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-04-05 23:57 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-04-05 22:39 - 2014-01-19 09:33 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-04-05 22:23 - 2014-04-05 22:23 - 00001313 _____ () C:\Windows\TSSysprep.log 2014-04-05 22:22 - 2014-04-13 21:39 - 02036107 _____ () C:\Windows\WindowsUpdate.log 2014-04-05 22:21 - 2014-04-05 22:21 - 00010698 _____ () C:\Windows\avmcoins.log 2014-04-01 13:04 - 2014-04-06 00:33 - 00000000 __RSD () C:\Users\Elisabeth\Documents\My Stationery 2014-03-19 14:49 - 2014-04-06 00:45 - 00000000 ____D () C:\01b85af5a2f368cf877f ==================== One Month Modified Files and Folders ======= 2014-04-14 07:50 - 2014-04-14 07:49 - 00008355 _____ () C:\Users\Elisabeth\Desktop\FRST.txt 2014-04-14 07:49 - 2014-04-14 07:49 - 00000000 ____D () C:\Users\Elisabeth\Desktop\FRST-OlderVersion 2014-04-14 07:49 - 2014-04-08 23:40 - 00000000 ____D () C:\FRST 2014-04-14 07:49 - 2014-04-08 23:39 - 02157568 _____ (Farbar) C:\Users\Elisabeth\Desktop\FRST64.exe 2014-04-14 07:48 - 2014-04-14 07:48 - 00000948 _____ () C:\Users\Elisabeth\Desktop\checkup.txt 2014-04-14 07:34 - 2014-04-14 07:39 - 00987448 _____ () C:\Users\Elisabeth\Desktop\SecurityCheck.exe 2014-04-14 07:34 - 2014-04-14 07:34 - 00987448 _____ () C:\Users\Elisabeth\Downloads\SecurityCheck.exe 2014-04-14 07:06 - 2014-04-08 17:40 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-04-14 06:45 - 2014-04-09 00:49 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-14 06:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-04-13 21:39 - 2014-04-05 22:22 - 02036107 _____ () C:\Windows\WindowsUpdate.log 2014-04-13 18:21 - 2009-07-14 06:45 - 00019968 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-04-13 18:21 - 2009-07-14 06:45 - 00019968 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-04-13 18:16 - 2014-04-06 08:16 - 00691810 _____ () C:\Windows\system32\perfh007.dat 2014-04-13 18:16 - 2014-04-06 08:16 - 00145116 _____ () C:\Windows\system32\perfc007.dat 2014-04-13 18:16 - 2009-07-14 07:13 - 01597238 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-13 18:13 - 2014-04-13 18:12 - 02347384 _____ (ESET) C:\Users\Elisabeth\Downloads\esetsmartinstaller_enu.exe 2014-04-13 18:12 - 2009-07-14 06:51 - 00022872 _____ () C:\Windows\setupact.log 2014-04-13 18:09 - 2014-04-08 18:01 - 00000000 ____D () C:\ProgramData\MFAData 2014-04-13 18:04 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-04-12 09:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-04-12 09:30 - 2014-04-07 00:10 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-12 09:29 - 2014-04-06 13:56 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-12 09:25 - 2014-04-06 13:56 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-04-11 13:48 - 2014-04-11 13:48 - 00000884 _____ () C:\Users\Elisabeth\Desktop\JRT.txt 2014-04-11 13:20 - 2014-04-11 13:20 - 00000000 ____D () C:\Windows\ERUNT 2014-04-11 13:16 - 2014-04-11 13:16 - 01016261 _____ (Thisisu) C:\Users\Elisabeth\Downloads\JRT.exe 2014-04-11 13:13 - 2014-04-11 13:13 - 00004206 _____ () C:\Users\Elisabeth\Desktop\AdwCleaner[S0].txt 2014-04-11 13:07 - 2014-04-11 13:03 - 00000000 ____D () C:\AdwCleaner 2014-04-11 13:01 - 2014-04-11 13:01 - 01426178 _____ () C:\Users\Elisabeth\Downloads\adwcleaner.exe 2014-04-11 13:00 - 2014-04-11 13:00 - 00001158 _____ () C:\Users\Elisabeth\Desktop\mbam.txt 2014-04-11 11:29 - 2014-04-09 00:48 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-04-11 11:29 - 2014-04-09 00:47 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-04-11 11:25 - 2014-04-11 11:25 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Elisabeth\Downloads\mbam-setup-2.0.1.1004.exe 2014-04-10 21:32 - 2014-04-10 21:32 - 00000000 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml 2014-04-10 21:29 - 2014-04-10 21:32 - 00049952 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys 2014-04-10 21:24 - 2014-04-06 00:51 - 00007058 _____ () C:\Windows\PFRO.log 2014-04-10 18:37 - 2014-04-10 18:37 - 00019909 _____ () C:\ComboFix.txt 2014-04-10 18:37 - 2014-04-10 17:25 - 00000000 ____D () C:\Qoobox 2014-04-10 18:37 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-04-10 18:37 - 2008-08-11 12:02 - 00000000 ____D () C:\Users\drucker 2014-04-10 18:05 - 2014-04-10 17:24 - 00000000 ____D () C:\Windows\erdnt 2014-04-10 18:02 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-04-10 18:00 - 2014-04-06 00:08 - 00000000 ____D () C:\Users\Elisabeth 2014-04-10 17:20 - 2014-04-10 17:19 - 05196025 ____R (Swearware) C:\Users\Elisabeth\Downloads\ComboFix.exe 2014-04-10 17:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-04-09 12:42 - 2014-04-09 12:42 - 00000000 ____D () C:\Program Files (x86)\7-Zip 2014-04-09 12:41 - 2014-04-09 12:41 - 01110476 _____ () C:\Users\Elisabeth\Downloads\7z920.exe 2014-04-09 09:50 - 2014-04-09 09:50 - 00000620 _____ () C:\Users\Elisabeth\Documents\gmer.txt 2014-04-09 02:45 - 2014-04-08 17:41 - 00000000 ____D () C:\ProgramData\aqax 2014-04-09 02:39 - 2014-04-08 18:11 - 00000000 ____D () C:\ProgramData\AVG2014 2014-04-09 02:35 - 2014-04-09 02:35 - 00000000 _____ () C:\Users\Elisabeth\defogger_reenable 2014-04-09 02:27 - 2014-04-09 02:27 - 00380416 _____ () C:\Users\Elisabeth\Desktop\Gmer-19357.exe 2014-04-09 02:21 - 2014-04-09 02:21 - 00050477 _____ () C:\Users\Elisabeth\Desktop\Defogger.exe 2014-04-09 00:47 - 2014-04-09 00:47 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-08 19:26 - 2014-04-08 18:01 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\Avg2014 2014-04-08 18:42 - 2014-04-08 18:42 - 00000000 ____D () C:\Users\Elisabeth\AppData\Roaming\AVG2014 2014-04-08 18:37 - 2014-04-08 18:37 - 00000993 _____ () C:\Users\Public\Desktop\AVG 2014.lnk 2014-04-08 18:37 - 2014-04-08 18:37 - 00000000 ____D () C:\Users\Elisabeth\AppData\Roaming\TuneUp Software 2014-04-08 18:21 - 2007-09-13 14:43 - 00000000 ____D () C:\Users\Elisabeth\Documents\PGR 3 Pfarren 2014-04-08 18:11 - 2014-04-08 18:11 - 00000000 ____D () C:\$AVG 2014-04-08 18:04 - 2014-04-08 18:04 - 00000000 ____D () C:\Program Files (x86)\AVG 2014-04-08 18:01 - 2014-04-08 18:01 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\MFAData 2014-04-08 17:58 - 2014-04-08 00:27 - 01570646 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-04-08 17:44 - 2014-04-08 17:41 - 00000000 ____D () C:\ProgramData\imusoruc 2014-04-08 17:43 - 2014-04-08 17:41 - 00000000 ____D () C:\ProgramData\Sun 2014-04-08 17:42 - 2014-04-08 17:42 - 00000000 ____D () C:\Users\Elisabeth\AppData\Roaming\Macromedia 2014-04-08 17:42 - 2014-04-08 17:42 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\Macromedia 2014-04-08 17:40 - 2014-04-08 17:40 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-04-08 17:40 - 2014-04-08 17:40 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-04-08 17:40 - 2014-04-08 17:40 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-04-08 17:40 - 2014-04-08 17:40 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-04-08 17:40 - 2014-04-08 17:40 - 00000000 ____D () C:\Windows\system32\Macromed 2014-04-08 17:36 - 2014-04-08 17:33 - 115763632 _____ (Microsoft Corporation) C:\Users\Elisabeth\Downloads\SQLEXPR_x86_ENU.exe 2014-04-08 17:26 - 2014-04-08 17:23 - 139132360 _____ (Microsoft Corporation) C:\Users\Elisabeth\Downloads\SQLEXPR_x64_DEU.exe 2014-04-08 17:22 - 2007-09-13 17:38 - 00000000 ____D () C:\WINLine 2014-04-08 17:21 - 2014-04-08 17:18 - 123669448 _____ (Microsoft Corporation) C:\Users\Elisabeth\Downloads\SQLEXPR_x86_DEU.exe 2014-04-08 17:07 - 2014-04-08 03:00 - 00000000 ____D () C:\Users\Elisabeth\Desktop\winline_alt 2014-04-08 03:12 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports 2014-04-08 02:27 - 2014-04-08 02:27 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-04-08 02:27 - 2014-04-08 02:27 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-04-08 02:27 - 2014-04-08 02:24 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-04-08 02:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help 2014-04-08 02:25 - 2014-04-08 02:25 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-04-08 01:51 - 2014-04-08 01:51 - 09918976 _____ () C:\Users\Elisabeth\Downloads\layout 01-10-2007.exe 2014-04-08 01:43 - 2014-04-06 17:56 - 00001437 _____ () C:\Users\Elisabeth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-08 01:38 - 2014-04-08 00:02 - 00016341 _____ () C:\Windows\IE11_main.log 2014-04-08 01:00 - 2014-04-08 01:00 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-04-08 01:00 - 2014-04-08 01:00 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-04-08 01:00 - 2014-04-08 01:00 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-04-08 01:00 - 2014-04-08 01:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-04-08 01:00 - 2014-04-08 01:00 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-04-08 01:00 - 2014-04-08 01:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-04-08 01:00 - 2014-04-08 01:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-04-08 01:00 - 2014-04-08 01:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-04-08 01:00 - 2014-04-08 01:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-04-08 01:00 - 2014-04-08 01:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-04-08 00:59 - 2014-04-08 00:59 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-04-08 00:59 - 2014-04-08 00:59 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-04-08 00:59 - 2014-04-08 00:59 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-04-08 00:59 - 2014-04-08 00:59 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-04-08 00:59 - 2014-04-08 00:59 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-04-08 00:59 - 2014-04-08 00:59 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-04-08 00:59 - 2014-04-08 00:59 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-04-08 00:59 - 2014-04-08 00:59 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-04-08 00:59 - 2014-04-08 00:59 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-04-08 00:59 - 2014-04-08 00:59 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-04-08 00:57 - 2014-04-07 12:01 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-04-08 00:43 - 2014-04-06 01:30 - 00000000 __SHD () C:\Users\Elisabeth\IECompatCache 2014-04-08 00:41 - 2014-04-06 01:30 - 00000000 __SHD () C:\Users\Elisabeth\PrivacIE 2014-04-08 00:41 - 2014-04-06 00:39 - 00000000 __SHD () C:\Users\Elisabeth\IETldCache 2014-04-08 00:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-04-08 00:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-04-08 00:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-04-08 00:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-04-08 00:28 - 2014-04-08 00:28 - 00000000 ___HD () C:\Windows\msdownld.tmp 2014-04-08 00:28 - 2014-04-08 00:28 - 00000000 ____D () C:\Windows\RegisteredPackages 2014-04-08 00:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Cursors 2014-04-08 00:22 - 2014-04-08 00:22 - 00001009 _____ () C:\Users\Ente\Desktop\WINLine Assistent.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00001009 _____ () C:\Users\Elisabeth\Desktop\WINLine Assistent.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00001009 _____ () C:\Users\Besitzer\Desktop\WINLine Assistent.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00001009 _____ () C:\Users\Administrator\Desktop\WINLine Assistent.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00000752 _____ () C:\Users\Ente\Desktop\Budgetierung.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00000752 _____ () C:\Users\Elisabeth\Desktop\Budgetierung.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00000752 _____ () C:\Users\Besitzer\Desktop\Budgetierung.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00000752 _____ () C:\Users\Administrator\Desktop\Budgetierung.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00000609 _____ () C:\Users\Ente\Desktop\WINLine Start.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00000609 _____ () C:\Users\Elisabeth\Desktop\WINLine Start.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00000609 _____ () C:\Users\Besitzer\Desktop\WINLine Start.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00000609 _____ () C:\Users\Administrator\Desktop\WINLine Start.lnk 2014-04-08 00:22 - 2014-04-08 00:22 - 00000000 ____D () C:\Program Files (x86)\WINLineAssistent 2014-04-08 00:20 - 2014-04-08 00:19 - 00000000 ____D () C:\Program Files (x86)\Budgetierung 2014-04-08 00:19 - 2014-04-08 00:19 - 00253952 ____N (Microsoft Corporation) C:\Windows\Setup1.exe 2014-04-08 00:19 - 2014-04-06 00:08 - 00000000 ___RD () C:\Users\Elisabeth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-08 00:18 - 2014-04-08 00:18 - 00074752 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE 2014-04-08 00:18 - 2014-04-08 00:18 - 00000000 ____D () C:\Program Files (x86)\Mesonic 2014-04-07 23:12 - 2014-04-07 22:53 - 00010232 _____ () C:\Windows\IE10_main.log 2014-04-07 22:57 - 2014-04-07 22:57 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-04-07 22:57 - 2014-04-07 22:57 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-04-07 22:52 - 2014-04-07 00:10 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-04-07 21:47 - 2014-04-07 21:23 - 00000000 ____D () C:\Users\Elisabeth\AppData\Roaming\FRITZ! 2014-04-07 21:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-04-07 21:34 - 2014-04-07 21:31 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\FRITZ! 2014-04-07 21:15 - 2014-04-06 00:08 - 00000000 ___RD () C:\Users\Elisabeth\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-04-07 21:11 - 2009-07-14 06:45 - 00312496 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-04-07 21:09 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender 2014-04-07 21:09 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-04-07 21:08 - 2009-07-14 09:46 - 00000000 ____D () C:\Program Files\Windows Journal 2014-04-07 19:30 - 2014-04-08 02:27 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Local\Microsoft Help 2014-04-07 19:30 - 2014-04-07 19:30 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help 2014-04-07 19:30 - 2014-04-07 19:30 - 00000000 ____D () C:\Users\Default User\AppData\Local\Microsoft Help 2014-04-07 16:55 - 2014-04-07 16:55 - 00000000 ____D () C:\Users\Elisabeth\AppData\Roaming\AGFEO 2014-04-07 16:54 - 2014-04-07 15:04 - 00000000 ____D () C:\Program Files (x86)\AGFEO 2014-04-07 16:54 - 2007-10-30 20:54 - 00000000 ____D () C:\agfeo 2014-04-07 16:30 - 2007-09-13 14:43 - 00000000 ____D () C:\Users\Elisabeth\Documents\Ministranten 2014-04-07 14:40 - 2014-04-07 14:34 - 00000000 ____D () C:\ProgramData\Adobe 2014-04-07 14:39 - 2014-04-07 14:39 - 00000000 ____D () C:\Users\Elisabeth\AppData\Roaming\Adobe 2014-04-07 14:39 - 2014-04-07 14:32 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\Adobe 2014-04-07 14:38 - 2014-04-07 14:38 - 00000000 ____D () C:\ProgramData\McAfee 2014-04-07 14:35 - 2014-04-07 14:35 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-04-07 12:01 - 2014-04-07 12:01 - 00000000 ____D () C:\Program Files\Okidata 2014-04-07 12:00 - 2014-04-07 12:00 - 00000000 ____D () C:\ProgramData\OPPU 2014-04-07 10:32 - 2014-04-07 01:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-04-07 09:41 - 2014-04-09 00:46 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Elisabeth\Desktop\mbam-setup-2.0.1.1004.exe 2014-04-07 02:15 - 2014-04-07 02:15 - 00000000 ____D () C:\Users\Elisabeth\AppData\Roaming\Windows Live Writer 2014-04-07 02:15 - 2014-04-07 02:15 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\Windows Live Writer 2014-04-07 02:15 - 2014-04-06 13:32 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\Windows Live 2014-04-07 02:15 - 2014-04-06 00:17 - 00068328 _____ () C:\Users\Elisabeth\AppData\Local\GDIPFONTCACHEV1.DAT 2014-04-07 01:45 - 2014-04-07 01:45 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\Mozilla 2014-04-07 01:45 - 2014-04-07 01:40 - 00000000 ____D () C:\Users\Elisabeth\AppData\Roaming\Mozilla 2014-04-07 01:42 - 2014-04-07 01:42 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-04-07 01:41 - 2014-04-07 01:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-07 01:40 - 2014-04-07 01:40 - 00002102 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-04-07 01:40 - 2014-04-07 01:40 - 00000000 ____D () C:\Users\Elisabeth\AppData\Roaming\Thunderbird 2014-04-07 01:40 - 2014-04-07 01:40 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\Thunderbird 2014-04-07 01:40 - 2014-04-07 01:40 - 00000000 ____D () C:\ProgramData\Mozilla 2014-04-07 01:39 - 2014-04-07 01:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-04-07 00:37 - 2014-04-07 00:37 - 00002703 _____ () C:\Users\Elisabeth\Desktop\Excel 2007.lnk 2014-04-07 00:37 - 2014-04-07 00:37 - 00002697 _____ () C:\Users\Elisabeth\Desktop\Word 2007.lnk 2014-04-07 00:29 - 2014-04-07 00:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works 2014-04-07 00:12 - 2014-04-07 00:12 - 00000000 ____D () C:\Program Files\Microsoft Office 2014-04-07 00:12 - 2009-07-14 09:46 - 00000000 ____D () C:\Windows\ShellNew 2014-04-07 00:11 - 2014-04-07 00:11 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\Microsoft Help 2014-04-06 23:43 - 2009-07-14 09:46 - 00000000 __SHD () C:\Windows\BitLockerDiscoveryVolumeContents 2014-04-06 23:43 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-04-06 23:43 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Portable Devices 2014-04-06 23:43 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-04-06 23:43 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-04-06 23:43 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar 2014-04-06 23:43 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Portable Devices 2014-04-06 23:43 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-04-06 23:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing 2014-04-06 23:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\sppui 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\manifeststore 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\AdvancedInstallers 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sppui 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Setup 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\manifeststore 2014-04-06 23:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers 2014-04-06 23:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\migwiz 2014-04-06 23:41 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-04-06 22:16 - 2009-07-14 04:36 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll 2014-04-06 22:16 - 2009-07-14 04:36 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll 2014-04-06 21:26 - 2014-04-06 21:26 - 00000000 ____D () C:\Windows\system32\SPReview 2014-04-06 21:24 - 2014-04-06 21:24 - 00000000 ____D () C:\Windows\system32\EventProviders 2014-04-06 19:33 - 2014-04-06 19:33 - 00003542 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask 2014-04-06 18:19 - 2014-04-06 01:34 - 00002155 _____ () C:\Windows\epplauncher.mif 2014-04-06 18:19 - 2014-04-06 01:31 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-04-06 18:18 - 2014-04-06 01:32 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-04-06 14:35 - 2014-04-06 14:22 - 00004423 _____ () C:\Windows\IE9_main.log 2014-04-06 14:12 - 2014-04-06 14:12 - 00000000 ____D () C:\Windows\Temp0D49E688-0220-328D-1D11-D4497845549C-Signatures 2014-04-06 08:17 - 2014-04-06 08:17 - 00008192 __RSH () C:\BOOTSECT.BAK 2014-04-06 08:17 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2014-04-06 08:17 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2014-04-06 08:17 - 2009-07-14 06:45 - 00000000 ____D () C:\Windows\Setup 2014-04-06 08:17 - 2007-09-12 18:39 - 00000355 __RSH () C:\Boot.ini.saved 2014-04-06 08:16 - 2014-04-06 08:16 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-04-06 08:16 - 2014-04-06 08:16 - 00000000 ____D () C:\Windows\SysWOW64\de 2014-04-06 08:16 - 2014-04-06 08:16 - 00000000 ____D () C:\Windows\SysWOW64\0407 2014-04-06 08:16 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2014-04-06 08:16 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2014-04-06 08:16 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\SysWOW64\sysprep 2014-04-06 08:16 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2014-04-06 08:16 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2014-04-06 08:16 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\system32\winrm 2014-04-06 08:16 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker 2014-04-06 08:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-04-06 08:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\com 2014-04-06 08:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\IME 2014-04-06 08:15 - 2014-04-06 08:16 - 00295922 _____ () C:\Windows\system32\perfi007.dat 2014-04-06 08:15 - 2014-04-06 08:16 - 00038104 _____ () C:\Windows\system32\perfd007.dat 2014-04-06 08:15 - 2014-04-06 08:15 - 00000000 ____D () C:\Windows\system32\de 2014-04-06 08:15 - 2014-04-06 08:15 - 00000000 ____D () C:\Windows\system32\0407 2014-04-06 08:15 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\system32\WCN 2014-04-06 08:15 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\system32\slmgr 2014-04-06 08:15 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-04-06 08:15 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns 2014-04-06 08:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\MUI 2014-04-06 08:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\com 2014-04-06 01:16 - 2014-04-06 01:16 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf 2014-04-06 00:53 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore 2014-04-06 00:47 - 2014-04-06 00:20 - 01055718 _____ () C:\Windows\comsetup.log 2014-04-06 00:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Registration 2014-04-06 00:46 - 2014-04-06 00:46 - 00033436 _____ () C:\Windows\system32\emptyregdb.dat 2014-04-06 00:45 - 2014-03-19 14:49 - 00000000 ____D () C:\01b85af5a2f368cf877f 2014-04-06 00:45 - 2013-10-21 18:13 - 00000000 ____D () C:\98cc01e8b4006edca8 2014-04-06 00:45 - 2013-10-18 10:52 - 00000000 ____D () C:\107c93b5e2101329ba 2014-04-06 00:45 - 2012-04-15 13:57 - 00000000 ____D () C:\0c8369b35abff8a45498dee098 2014-04-06 00:45 - 2008-08-14 09:08 - 00000000 ____D () C:\Gigaset_WLAN54 2014-04-06 00:40 - 2008-08-11 11:33 - 00000000 ____D () C:\Users\Besitzer\Documents\PDF Files 2014-04-06 00:39 - 2007-09-14 16:00 - 00000000 ____D () C:\Users\Elisabeth\Documents\Verwaltung 2014-04-06 00:37 - 2009-02-14 16:44 - 00000000 ____D () C:\Users\Elisabeth\Documents\privat_Ernst 2014-04-06 00:37 - 2008-11-24 14:37 - 00000000 ____D () C:\Users\Elisabeth\Documents\SEM 2014-04-06 00:37 - 2007-09-13 14:43 - 00000000 ____D () C:\Users\Elisabeth\Documents\Privat_Göstl 2014-04-06 00:37 - 2007-09-13 14:43 - 00000000 ____D () C:\Users\Elisabeth\Documents\Pfarren Korr 2014-04-06 00:36 - 2007-09-13 14:43 - 00000000 ____D () C:\Users\Elisabeth\Documents\Pfarrbrief 2014-04-06 00:33 - 2014-04-01 13:04 - 00000000 __RSD () C:\Users\Elisabeth\Documents\My Stationery 2014-04-06 00:33 - 2008-02-21 22:52 - 00000000 ____D () C:\Users\Elisabeth\Documents\PDF Files 2014-04-06 00:31 - 2007-09-13 14:42 - 00000000 ____D () C:\Users\Elisabeth\Documents\Liturgie 2014-04-06 00:31 - 2007-09-13 14:42 - 00000000 ____D () C:\Users\Elisabeth\Documents\Firmung 2014-04-06 00:30 - 2007-11-02 13:08 - 00000000 ____D () C:\Users\Elisabeth\Documents\EvasDateien 2014-04-06 00:29 - 2008-11-24 19:09 - 00000000 ____D () C:\Users\Elisabeth\Documents\Erstkommunion 2014-04-06 00:29 - 2008-02-21 12:09 - 00000000 ___SD () C:\Users\Elisabeth\Documents\Eigene Datenquellen 2014-04-06 00:29 - 2007-09-14 11:42 - 00000000 ____D () C:\Users\Elisabeth\Documents\Eigene PaperPort-Dokumente 2014-04-06 00:27 - 2011-01-21 15:01 - 00000000 ____D () C:\Users\Elisabeth\Documents\Bibliothek 2014-04-06 00:27 - 2007-09-13 14:42 - 00000000 ____D () C:\Users\Elisabeth\Documents\Dekanat 2014-04-06 00:27 - 2007-09-13 14:42 - 00000000 ____D () C:\Users\Elisabeth\Documents\Aktionen 2014-04-06 00:25 - 2011-10-05 09:28 - 00000000 ___RD () C:\Users\Elisabeth\Desktop\members.aon.at 2014-04-06 00:25 - 2009-06-12 10:37 - 00000000 ___HD () C:\Users\Elisabeth\Documents\.TemporaryItems 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Vorlagen 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Startmenü 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Netzwerkumgebung 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Lokale Einstellungen 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Eigene Dateien 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Documents\Eigene Musik 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Documents\Eigene Bilder 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\AppData\Local\Verlauf 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\AppData\Local\Anwendungsdaten 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 _SHDL () C:\Users\Besitzer\Anwendungsdaten 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 __HDL () C:\Users\Besitzer\Druckumgebung 2014-04-06 00:19 - 2014-04-06 00:19 - 00000000 ____D () C:\Users\Besitzer 2014-04-06 00:17 - 2014-04-06 00:17 - 00000000 ___DC () C:\Users\Elisabeth\AppData\Local\MigWiz 2014-04-06 00:14 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries 2014-04-06 00:08 - 2014-04-06 00:08 - 00000020 ___SH () C:\Users\Elisabeth\ntuser.ini 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Vorlagen 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Startmenü 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Netzwerkumgebung 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Lokale Einstellungen 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Eigene Dateien 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Documents\Eigene Musik 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Documents\Eigene Bilder 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\AppData\Local\Verlauf 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\AppData\Local\Anwendungsdaten 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 _SHDL () C:\Users\Elisabeth\Anwendungsdaten 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 __HDL () C:\Users\Elisabeth\Druckumgebung 2014-04-06 00:08 - 2014-04-06 00:08 - 00000000 ____D () C:\Users\Elisabeth\AppData\Local\VirtualStore 2014-04-05 23:58 - 2014-04-05 23:58 - 00001421 _____ () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-04-05 23:58 - 2014-04-05 23:57 - 00001455 _____ () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-05 23:58 - 2014-04-05 23:57 - 00000000 ___RD () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-05 23:58 - 2014-04-05 23:57 - 00000000 ___RD () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-04-05 23:57 - 2014-04-05 23:57 - 00000020 ___SH () C:\Users\Ente\ntuser.ini 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Vorlagen 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Startmenü 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Netzwerkumgebung 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Lokale Einstellungen 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Eigene Dateien 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Druckumgebung 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Documents\Eigene Musik 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Documents\Eigene Bilder 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\AppData\Local\Verlauf 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\AppData\Local\Anwendungsdaten 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 _SHDL () C:\Users\Ente\Anwendungsdaten 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 ____D () C:\Users\Ente\AppData\Local\VirtualStore 2014-04-05 23:57 - 2014-04-05 23:57 - 00000000 ____D () C:\Users\Ente 2014-04-05 23:04 - 2014-04-06 08:17 - 00000000 ____D () C:\Windows\Panther 2014-04-05 22:23 - 2014-04-05 22:23 - 00001313 _____ () C:\Windows\TSSysprep.log 2014-04-05 22:23 - 2009-07-14 06:46 - 00001774 _____ () C:\Windows\DtcInstall.log 2014-04-05 22:23 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-04-05 22:21 - 2014-04-05 22:21 - 00010698 _____ () C:\Windows\avmcoins.log 2014-04-05 22:20 - 2009-07-14 09:46 - 00000000 ____D () C:\Windows\CSC 2014-04-05 19:49 - 2007-09-12 17:41 - 00000000 ___RD () C:\Programme 2014-04-04 11:11 - 2008-05-30 21:38 - 00043012 ____H () C:\Users\Elisabeth\Documents\.DS_Store 2014-04-03 16:02 - 2014-04-08 17:57 - 157883928 _____ (AVG Technologies) C:\Users\Elisabeth\Desktop\avgfreexalla_34171.exe 2014-04-03 09:51 - 2014-04-09 00:47 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-04-03 09:51 - 2014-04-09 00:47 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-04-03 09:50 - 2014-04-09 00:47 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-31 13:43 - 2014-04-07 00:18 - 03710504 _____ (Piriform Ltd) C:\Users\Elisabeth\Desktop\ccsetup412_slim.exe Some content of TEMP: ==================== C:\Users\Elisabeth\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-09 03:27 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-04-2014 01
Ran by Elisabeth at 2014-04-14 07:55:25
Running from C:\Users\Elisabeth\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
AGFEO TK-Suite Basic 3 (HKLM-x32\...\tksuite_tksuite_basic) (Version: - AGFEO)
AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4355 - AVG Technologies)
AVG 2014 (Version: 14.0.3882 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4355 - AVG Technologies) Hidden
Budgetierung (HKLM-x32\...\ST6UNST #1) (Version: - )
DA0 3.6 und ODBC (HKLM-x32\...\{F534FFD4-F013-11D3-8031-0090272C6495}) (Version: - )
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
NVIDIA Grafiktreiber 307.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.83 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.109.706 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 307.83 (Version: 307.83 - NVIDIA Corporation) Hidden
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
OKI Network Extension (HKLM-x32\...\{38ADB9A6-798C-11D6-A855-00105A80791C}) (Version: 1.00.000 - Okidata)
Realtek AC'97 Audio (HKLM-x32\...\{FB08F381-6533-4108-B7DD-039E11FBC27E}) (Version: - )
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
WINLine (HKLM-x32\...\{4C94C4BC-97DC-4E29-83E7-1B9B4388C330}) (Version: - )
WINLine Assistent Version 7.1 (HKLM-x32\...\WINLine Assistent_is1) (Version: - )
==================== Restore Points =========================
14-04-2014 04:04:15 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2009-07-14 04:34 - 2014-04-10 18:02 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {28FBB271-854B-47A4-9D82-A82B12F09C63} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-08] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-04-08 02:27 - 2013-01-31 11:25 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2006-12-01 14:41 - 2006-12-01 14:41 - 00028672 _____ () C:\Program Files (x86)\AGFEO\Tk-Suite-Basic\tkserver\tkmedia_lib.dll
2006-12-01 14:41 - 2006-12-01 14:41 - 00036864 _____ () C:\Program Files (x86)\AGFEO\Tk-Suite-Basic\tkserver\tkmedia_capi.dll
2006-12-01 14:41 - 2006-12-01 14:41 - 00020480 _____ () C:\Program Files (x86)\AGFEO\Tk-Suite-Basic\tkserver\tkmedia_serial.dll
2006-12-01 14:41 - 2006-12-01 14:41 - 00020480 _____ () C:\Program Files (x86)\AGFEO\Tk-Suite-Basic\tkserver\tkmedia_xport.dll
2005-04-26 09:10 - 2005-04-26 09:10 - 04005888 _____ () C:\Program Files (x86)\AGFEO\Tk-Suite-Basic\tools\qt-mt334.dll
2005-04-26 09:10 - 2005-04-26 09:10 - 00061440 _____ () C:\Program Files (x86)\AGFEO\Tk-Suite-Basic\tools\styles\qwindowsxpstyle.dll
2014-04-07 01:41 - 2014-03-15 10:40 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/14/2014 07:39:06 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/14/2014 07:21:09 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/14/2014 05:59:39 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/14/2014 05:59:16 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/14/2014 05:58:16 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/13/2014 06:17:11 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/13/2014 06:17:06 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (04/12/2014 10:01:33 AM) (Source: Application Hang) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 3c8
Startzeit: 01cf56240a19ddf4
Endzeit: 94
Anwendungspfad: C:\Windows\Explorer.EXE
Berichts-ID: 85958fb4-c218-11e3-8ebb-404e57434401
System errors:
=============
Error: (04/13/2014 07:15:56 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
Error: (04/13/2014 07:15:02 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst lmhosts erreicht.
Error: (04/13/2014 06:41:52 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Error: (04/13/2014 06:06:19 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (04/13/2014 06:05:25 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.0.5" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (04/13/2014 03:33:25 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (04/13/2014 03:32:54 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.0.5" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (04/13/2014 11:17:29 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (04/13/2014 11:16:27 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "vToolbarUpdater18.0.5" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (04/13/2014 07:26:00 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2014-04-10 18:00:29.462
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-04-10 18:00:28.978
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 60%
Total physical RAM: 2047.55 MB
Available physical RAM: 800.86 MB
Total Pagefile: 4095.11 MB
Available Pagefile: 2429.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (WinXPHomeSP2) (Fixed) (Total:68.36 GB) (Free:2.99 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Daten) (Fixed) (Total:80.68 GB) (Free:65.81 GB) NTFS
Drive f: () (Removable) (Total:3.94 GB) (Free:2.69 GB) FAT32
Drive g: (DATA ES) (Removable) (Total:0.96 GB) (Free:0.75 GB) FAT32
Drive h: () (Removable) (Total:13.73 GB) (Free:10.9 GB) FAT32
Drive i: () (Removable) (Total:0.06 GB) (Free:0.04 GB) FAT
Drive j: (HDDRIVE2GO) (Fixed) (Total:335.35 GB) (Free:260.6 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: E869E869)
Partition: GPT Partition Type.
========================================================
Disk: 1 (Size: 983 MB) (Disk ID: E1E4A198)
Partition: GPT Partition Type.
========================================================
Disk: 2 (Size: 4 GB) (Disk ID: 01B14E06)
Partition 1: (Active) - (Size=4 GB) - (Type=0B)
========================================================
Disk: 3 (Size: 14 GB) (Disk ID: 6E06FA57)
Partition 1: (Not Active) - (Size=14 GB) - (Type=0C)
========================================================
Disk: 4 (Size: 62 MB) (Disk ID: DAD556B8)
Partition: GPT Partition Type.
========================================================
Disk: 5 (Size: 335 GB) (Disk ID: 750A8025)
Partition 1: (Not Active) - (Size=335 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Ja! Bei jedem Herunterfahren erscheint die Meldung "Es wird gewartet, dass Hintergrundprogramme beendet werden." Dann erscheint das Tast Host Window - schließt sich (mal schneller, mal langsamer) - und erst dann wird heruntergefahren. Firefox ist sehr langsam und hat vorhin einen Appcrash gemeldet: Code:
ATTFilter Problemsignatur:
Problemereignisname: APPCRASH
Anwendungsname: firefox.exe
Anwendungsversion: 28.0.0.5186
Anwendungszeitstempel: 53240e37
Fehlermodulname: xul.dll
Fehlermodulversion: 28.0.0.5186
Fehlermodulzeitstempel: 53240e04
Ausnahmecode: c0000005
Ausnahmeoffset: 00184729
Betriebsystemversion: 6.1.7601.2.1.0.256.1
Gebietsschema-ID: 3079
Zusatzinformation 1: a7aa
Zusatzinformation 2: a7aa91f17ea749d42a4de3b390fa5b3d
Zusatzinformation 3: a7aa
Zusatzinformation 4: a7aa91f17ea749d42a4de3b390fa5b3d
Außerdem: Der infizierte Win7-Computer war in unserem Heim-Netzwerk: 1 x win xp SP3 Laptop Gericom MP 1 x win xp SP3 Laptop Lenovo ThinkPad (Ethernet und WLAN) 1 x Mac OS 10.6 Apple Powerbook (Intel) - war ausgeschaltet und seither nie eingeschaltet 1 x Router Siemens Gigaset SE361 WLAN 1 x Apple TimeCapsule Festplatte + Router (Ethernet und WLAN) 1 x Telefonanlage ISDN Agfeo AS 35 all in one (verbunden mit dem infizierten Computer über Fritz Card S0-Bus) 1 x Netzwerkdrucker OKI B430dn Bis auf das Apple Powerbook war also alles über den Router bzw. einen zusätzlichen HUB (alles Ethernet) aktiv verbunden, WLAN sollte eigentlich überall deaktiviert sein. Und - vielleicht bin ich ja paranoid - alle Handys (eigene und Gäste) haben in den letzten Tagen bei uns "gesponnen". Symptome waren z.B.: beim Einschalten Tastatur gesperrt, Kalender aufgerufen, beim ersten Wählen einer Nummer kam manchmal keine Verbindung zustande. |
|
15.04.2014, 10:33
| #17 |
| /// the machine /// TB-Ausbilder    | dhl Mail versandschein.exe - gmer findet wmpnetwk.exe Firefox würde ich mal neu installieren.
__________________Für das Herunterfahren: http://www.trojaner-board.de/126216-...epair-aio.html Deine Aufzählunf zielt also darauf ab dass du wissen möchtest ob deser Rechner nun alle Geräte im Netz infiziert hat? Nein, gar nit möglich.
__________________ |
|
| Themen zu dhl Mail versandschein.exe - gmer findet wmpnetwk.exe |
| antivirus, anzeige, autostart, avg, avg antivirus, booten, desktop, detected, dhl mail, dhl versandschein.exe flash keyboard, error, fehler, file, flash update, free, gmer, harddisk, hängen, log, log file, mail, malwarebytes, tastatur, temp, update, windows, windows media player, wmp |
Linear-Darstellung
