Windows Firewall Fehler 0X8007042c bei Neuinstallation HP Photosmart B110 Software

schnapper · 02.05.2014, 15:52

Zitat:

Zitat von felix1

Ich würde Dir anraten, den Rechner erst mal der Antimaleware-Fraktion vorzustellen.
Ansonsten persönliche Daten sichern und neu installieren. Und dann ohne den Norton-Sch...

Windows 7 Home Premium 64 bit:
Vor ein paar Tagen hat der seit 1,5 Jahren installierte HP Photosmart B110 die Treiber verloren (Fehlercode =28)
- Treiber konnte nicht nachinstalliert werden.
- Deinstallation von kompletter HP-Software durchgeführt.
- Neuinstallation HP Software für Drucker brachte Fehler: Das Installationsprogramm konnte auf den Registrierungschlüssel: HKey_Local_Machine\System nicht zugreifen.
- Zurücksetzen mit Systemwiederherstellung brach ebenfalls ab
- nach Deinstallation von zuletzt installierter Software "linkedin" druckt der Drucker nun, aber Scannen geht noch nicht.
Bei dem Versuch die weitere Software von HP zu installieren bricht diese mit Fehler: nowlauching = X:Ihpzfw01.exe mpostinstallfirewallexceptionlist

- Ausschalten der Norton Firewall und manuelles Einschalten der Windowsfirewall geht nicht mehr (Fehler =x8007042c)
- Verwende Norton Internet Securtiy 2014 = Scan ohne Fehler
jedoch Fehler: Hinweis von Norton Auto-Fix: Produkt-Dienstabhängigkeit: Basisfitlermodul
- Deinstallation von Norton brachte Windows Firewall nicht zum einschalten = gleichen Fehler
Anbei Logdateien Frst.txt, germ.txt; malware.txt

Wer kann mir helfen, die WindowsFirewall wieder zu aktivieren. Ohne diese kann wohl die HP Software nicht installiert werden, ansonsten bleibt nur Neuinstallation.

Danke im voraus.

Gruss schnapper

Frst.txt
FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2014
Ran by Manfred (administrator) on BRIGITTE on 02-05-2014 16:03:58
Running from D:\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Seagate Technology LLC) C:\Program Files (x86)\Sync\FreeAgentService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.0.43\NST.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\nis.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(LG Electronics) C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\Dual Smart Solution.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Microsoft Corporation) E:\Programme\Office14\ONENOTEM.EXE
(Samsung Electronics.) C:\Program Files (x86)\Samsung SSD Magician\Samsung Magician.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\TestDDCCI.exe
(TODO: <Company name>) C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\SmartHookTestApp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Seagate LLC) C:\Program Files (x86)\FreeAgent Status\stxmenumgr.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
() C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\nis.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.0.43\NST.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6468712 2012-03-20] (Realtek Semiconductor)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] => C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2793304 2009-10-14] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BCSSync] => E:\Programme\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TrayServer] => C:\Program Files (x86)\MAGIX\Video_deluxe_17_Premium_Download-Version\TrayServer.exe [90112 2008-08-07] (MAGIX AG)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKLM-x32\...\Run: [MaxMenuMgr] => C:\Program Files (x86)\FreeAgent Status\StxMenuMgr.exe [185640 2009-05-01] (Seagate LLC)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5545328 2014-02-28] (Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2009-11-18] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694072 2013-10-15] (Western Digital Technologies, Inc.)
HKU\S-1-5-21-2704392838-2996191318-1376066437-1000\...\Run: [] => [X]
HKU\S-1-5-21-2704392838-2996191318-1376066437-1000\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-04-19] (Nokia)
HKU\S-1-5-21-2704392838-2996191318-1376066437-1000\...\Run: [GoogleChromeAutoLaunch_6742BB263859D7795075AD892932A8EA] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-2704392838-2996191318-1376066437-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-2704392838-2996191318-1376066437-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-2704392838-2996191318-1376066437-1000\...\Run: [Google+ Auto Backup] => C:\Users\Manfred\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-2704392838-2996191318-1376066437-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2704392838-2996191318-1376066437-1000\...\Run: [KSS] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
HKU\S-1-5-21-2704392838-2996191318-1376066437-1000\...\RunOnce: [Uninstall C:\Users\Manfred\AppData\Local\Microsoft\SkyDrive\17.0.4024.1220] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Manfred\AppData\Local\Microsoft\SkyDrive\17.0.4024.1220"
HKU\S-1-5-21-2704392838-2996191318-1376066437-1000\...\MountPoints2: {99e382cb-5cbb-11e2-b140-3085a99cc7f1} - I:\LaunchU3.exe -a
HKU\S-1-5-21-2704392838-2996191318-1376066437-1000\...\MountPoints2: {b18bb9ce-23a0-11e2-ada4-806e6f6e6963} - G:\Bin\ASSETUP.exe
AppInit_DLLs: C:\PROGRA~2\Linkey\IEEXTE~1\iedll64.dll => C:\PROGRA~2\Linkey\IEEXTE~1\iedll64.dll File Not Found
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dual Smart Solution.lnk
ShortcutTarget: Dual Smart Solution.lnk -> C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\Dual Smart Solution.exe (LG Electronics)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> E:\Programme\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Magician.lnk
ShortcutTarget: Samsung Magician.lnk -> C:\Program Files (x86)\Samsung SSD Magician\Samsung Magician.exe (Samsung Electronics.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.default-search.net?sid=476&aid=122&itype=n&ver=12302&tm=322&src=hmp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF5AD42CFB1B7CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
URLSearchHook: HKLM-x32 - Default Value = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=122&itype=n&ver=12302&tm=322&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=122&itype=n&ver=12302&tm=322&src=ds&p={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=122&itype=n&ver=12302&tm=322&src=ds&p={searchTerms}
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=21&locale=de_DE&gct=kwd&qsrc=2869
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Norton Identity Protection - {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} - C:\Program Files (x86)\Norton Identity Safe\Engine64\2014.7.0.43\coIEPlg.dll (Symantec Corporation)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - E:\Programme\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - E:\Programme\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Norton Identity Safe Toolbar - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - C:\Program Files (x86)\Norton Identity Safe\Engine64\2014.7.0.43\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.2.0.38\coIEPlg.dll (Symantec Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default
FF SearchEngineOrder.1: default-search.net
FF SearchEngineOrder.3: Bing 
FF Homepage: https://www.google.com/
FF Keyword.URL: hxxp://www.default-search.net/search?sid=476&aid=122&itype=n&ver=12302&tm=322&src=ds&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - E:\PROGRA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - E:\PROGRA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: German Dictionary - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\Extensions\de-DE@dictionaries.addons.mozilla.org [2012-11-01]
FF Extension: iCloud Bookmarks - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\Extensions\firefoxdav@icloud.com [2013-12-26]
FF Extension: Pin It button - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\Extensions\pinterest@robertnyman.com.xpi [2013-09-19]
FF Extension: WEB.DE MailCheck - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\Extensions\toolbar@web.de.xpi [2012-11-01]
FF Extension: Password Exporter - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\Extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}.xpi [2012-11-01]
FF Extension: Adblock Plus - C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-11-01]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-29]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-04-27]
FF HKLM-x32\...\Firefox\Extensions: [{F04D2D30-776C-4d02-8627-8E4385ECA58D}] - C:\ProgramData\Norton\{92622AAD-05E8-4459-B256-765CE1E929FB}\NST_2014.7.0.43\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\IPSFF [2014-04-28]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.0.100\coFFPlgn\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://www.google.com/"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\gcswf32.dll No File
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll No File
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (YouTube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-10-31]
CHR Extension: (Adblock Plus) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-10-30]
CHR Extension: (Google-Suche) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-10-31]
CHR Extension: (iCloud-Lesezeichen) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2014-01-01]
CHR Extension: (Feedly - News, Blogs and Youtube) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob [2013-04-20]
CHR Extension: (Skype Click to Call) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-01-01]
CHR Extension: (Norton Identity Protection) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2014-04-29]
CHR Extension: (Google Wallet) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Google Mail) - C:\Users\Manfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-10-31]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\Exts\Chrome.crx [2014-04-28]
CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] -  [2014-04-28]

==================== Services (Whitelisted) =================

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 FreeAgentGoNext Service; C:\Program Files (x86)\Sync\FreeAgentService.exe [181544 2009-05-01] (Seagate Technology LLC)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [163608 2012-03-06] (Intel Corporation)
R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
S3 Microsoft SharePoint Workspace Audit Service; E:\Programme\Office14\GROOVE.EXE [30814400 2013-12-19] (Microsoft Corporation)
R2 NCO; C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.0.43\NST.exe [130104 2014-03-11] (Symantec Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe [276376 2014-03-12] (Symantec Corporation)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-02-28] (Western Digital Technologies, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [271728 2014-02-28] (Western Digital Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\BASHDefs\20140409.001\BHDrvx64.sys [1525976 2014-04-09] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1502000.026\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 ccSet_NST; C:\Windows\system32\drivers\NSTx64\7DE07000.02B\ccSetx64.sys [162392 2013-09-27] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-04-28] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\IPSDefs\20140430.001\IDSvia64.sys [525016 2014-04-27] (Symantec Corporation)
S3 LGDDCDevice; C:\Windows\SysWOW64\LGI2CDriver.sys [16384 2012-10-17] (LG Soft India)
S3 LGII2CDevice; C:\Windows\SysWOW64\LGPII2CDriver.sys [19968 2012-10-17] ()
R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140501.034\ENG64.SYS [126040 2014-04-28] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.0.0.100\Definitions\VirusDefs\20140501.034\EX64.SYS [2099288 2014-04-28] (Symantec Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1502000.026\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1502000.026\SRTSPX64.SYS [36952 2013-07-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1502000.026\SYMDS64.SYS [493656 2013-08-01] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1502000.026\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-04-28] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1502000.026\Ironx64.SYS [264280 2013-07-31] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1502000.026\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S3 EraserUtilDrv11312; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11312.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-02 13:54 - 2014-05-02 13:54 - 00001305 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-05-02 13:54 - 2014-05-02 13:54 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-05-02 13:54 - 2014-05-02 13:54 - 00000000 ____D () C:\Windows\de
2014-05-02 13:53 - 2014-05-02 13:53 - 00000382 _____ () C:\Windows\DirectX.log
2014-05-02 13:53 - 2014-05-02 13:53 - 00000000 ____D () C:\Program Files\Windows Live
2014-05-02 10:25 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-02 10:25 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-02 10:25 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-02 10:25 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-01 20:09 - 2014-05-01 20:09 - 00005360 _____ () C:\Windows\DPINST.LOG
2014-05-01 11:02 - 2014-05-02 13:26 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-01 11:01 - 2014-05-01 11:01 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-01 11:01 - 2014-05-01 11:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-01 11:01 - 2014-05-01 11:01 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-01 11:01 - 2014-05-01 11:01 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-01 11:01 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-01 11:01 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-01 11:01 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-04-29 21:25 - 2014-04-29 21:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-29 17:53 - 2014-05-02 16:03 - 00000000 ____D () C:\FRST
2014-04-29 17:34 - 2014-04-29 17:48 - 00000000 ____D () C:\ProgramData\SpeedyPC Software
2014-04-29 17:34 - 2014-04-29 17:34 - 00000000 ____D () C:\Users\Manfred\AppData\Roaming\SpeedyPC Software
2014-04-29 17:34 - 2014-04-29 17:34 - 00000000 ____D () C:\Users\Manfred\AppData\Roaming\DriverCure
2014-04-29 09:19 - 2014-04-29 09:19 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-04-28 22:00 - 2014-04-28 22:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-04-28 21:53 - 2014-04-28 22:00 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-04-28 21:53 - 2014-04-28 22:00 - 00002501 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-04-28 21:53 - 2014-04-28 21:53 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2014-04-28 21:53 - 2014-04-28 21:53 - 00008222 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2014-04-28 21:53 - 2014-04-28 21:53 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-04-28 21:52 - 2014-04-28 22:00 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-04-28 21:52 - 2014-04-28 22:00 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-04-28 21:52 - 2014-04-28 21:52 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security
2014-04-28 20:37 - 2014-04-28 20:37 - 00001106 _____ () C:\Users\Public\Desktop\Taxpool-Buchhalter EÜR.lnk
2014-04-28 20:37 - 2014-04-28 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Taxpool-Buchhalter EÜR
2014-04-28 20:36 - 2014-04-28 20:37 - 00000000 ____D () C:\Program Files (x86)\Taxpool-Buchhalter
2014-04-28 20:23 - 2014-04-28 20:23 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Identity Safe
2014-04-28 20:23 - 2014-04-28 20:23 - 00000000 ____D () C:\Windows\system32\Drivers\NSTx64
2014-04-28 20:23 - 2014-04-28 20:23 - 00000000 ____D () C:\Program Files (x86)\Norton Identity Safe
2014-04-28 17:27 - 2014-04-28 17:27 - 00000000 __SHD () C:\Users\Manfred\AppData\Local\EmieUserList
2014-04-28 17:27 - 2014-04-28 17:27 - 00000000 __SHD () C:\Users\Manfred\AppData\Local\EmieSiteList
2014-04-28 17:19 - 2014-04-28 17:20 - 00000000 ____D () C:\NPE
2014-04-28 13:57 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-04-28 13:57 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-04-27 19:15 - 2014-04-27 19:15 - 00000000 ____D () C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2014-04-27 19:15 - 2014-04-27 19:14 - 00001077 _____ () C:\Users\Manfred\Desktop\Kaspersky Security Scan.lnk
2014-04-27 19:14 - 2014-04-27 19:14 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-04-27 19:14 - 2014-04-27 19:14 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-04-27 18:37 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-04-27 18:37 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-04-27 18:37 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-04-27 18:37 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-04-27 18:37 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-04-27 18:37 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-04-27 18:37 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-04-27 18:37 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-04-27 18:37 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-04-27 18:37 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-04-27 18:37 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-04-27 18:37 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-04-27 18:37 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-04-27 18:37 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-04-27 18:37 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-04-27 18:37 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-04-27 18:36 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-04-27 18:36 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-04-27 18:36 - 2012-08-23 16:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-04-27 18:36 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-04-27 18:36 - 2012-08-23 15:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-04-27 18:36 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-04-27 18:36 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-04-27 18:36 - 2012-08-23 11:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-04-27 18:36 - 2012-05-04 13:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-04-27 18:36 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-04-27 18:29 - 2014-04-28 17:39 - 00067623 _____ () C:\Users\Manfred\Desktop\HP Installationsfehler – Windows 7.hta
2014-04-27 17:51 - 2014-04-27 17:51 - 00067623 _____ () C:\Users\Administrator\Desktop\HP Installationsfehler – Windows 7.hta
2014-04-27 17:41 - 2014-04-27 17:46 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\HpUpdate
2014-04-27 17:41 - 2014-04-27 17:41 - 00001189 _____ () C:\Users\Public\Desktop\Shop für HP Zubehör.lnk
2014-04-27 17:40 - 2014-04-27 17:40 - 00002006 _____ () C:\Users\Public\Desktop\HP ePrinterCenter.lnk
2014-04-27 17:40 - 2014-04-27 17:40 - 00001357 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk
2014-04-27 17:40 - 2014-04-27 17:40 - 00001351 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk
2014-04-27 17:40 - 2014-04-27 17:40 - 00000000 ____D () C:\ProgramData\HP Product Assistant
2014-04-27 17:39 - 2014-04-27 17:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-04-27 17:37 - 2014-04-29 20:11 - 00233370 _____ () C:\Windows\hpoins47.dat
2014-04-27 16:30 - 2014-05-02 13:13 - 00002565 _____ () C:\Windows\setupact.log
2014-04-27 16:30 - 2014-04-27 16:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-27 16:29 - 2014-05-02 13:13 - 00627886 _____ () C:\Windows\PFRO.log
2014-04-27 16:07 - 2014-04-27 16:07 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-04-27 16:07 - 2014-04-27 16:07 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-27 16:07 - 2014-04-27 16:07 - 00000000 ____D () C:\Program Files\CCleaner
2014-04-26 21:49 - 2014-04-26 21:49 - 00000000 __SHD () C:\found.001
2014-04-26 18:28 - 2014-04-26 18:28 - 00000000 __SHD () C:\found.000
2014-04-25 18:51 - 2014-04-26 19:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-25 18:18 - 2014-04-25 19:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-25 18:18 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-25 18:18 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-04-25 17:57 - 2014-04-27 18:19 - 00002008 _____ () C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2014-04-25 15:00 - 2014-04-25 15:00 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\OpenOffice
2014-04-25 14:58 - 2014-04-25 14:58 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieUserList
2014-04-25 14:58 - 2014-04-25 14:58 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieSiteList
2014-04-25 14:57 - 2014-04-25 14:57 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\PC Suite
2014-04-25 14:57 - 2014-04-25 14:57 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\HP
2014-04-25 14:57 - 2014-04-25 14:57 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-04-25 14:35 - 2014-04-25 14:35 - 00002143 _____ () C:\Users\Manfred\Desktop\Photosmart All-in-One Printer Scanner Copier - Verknüpfung.lnk
2014-04-25 14:33 - 2014-04-25 14:33 - 00000000 ____D () C:\Program Files\Western Digital
2014-04-25 14:32 - 2014-04-28 21:40 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-22 21:13 - 2014-04-25 19:05 - 00000000 ____D () C:\Users\dub_cm_auto
2014-04-21 14:47 - 2014-04-21 14:47 - 00004224 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-19 13:52 - 2014-04-19 13:52 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-04-19 12:09 - 2014-05-02 13:13 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-04-19 12:09 - 2014-04-25 19:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-04-19 12:09 - 2014-04-25 19:05 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-04-19 12:09 - 2014-04-25 14:33 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-04-19 12:09 - 2014-04-19 12:09 - 00001117 _____ () C:\Users\Public\Desktop\WD Drive Utilities.lnk
2014-04-19 12:09 - 2014-04-19 12:09 - 00000000 ____D () C:\Users\Manfred\AppData\Local\Western_Digital_Technolog
2014-04-19 12:09 - 2014-04-19 12:09 - 00000000 ____D () C:\Users\Manfred\AppData\Local\Western Digital
2014-04-19 12:08 - 2014-04-25 14:33 - 00000000 ____D () C:\ProgramData\Western Digital
2014-04-15 11:06 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-15 11:06 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-15 11:06 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-15 11:06 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-15 11:06 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-15 11:06 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-15 11:06 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-15 11:06 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-15 11:06 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-15 11:06 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-15 11:06 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-15 11:06 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-15 11:06 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-15 11:06 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-15 11:06 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-15 11:06 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-15 11:06 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-15 11:06 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-15 11:06 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-15 11:06 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-15 11:06 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-15 11:06 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-15 11:06 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-15 11:06 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-15 11:06 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-15 11:06 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-15 11:06 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-15 11:06 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-15 11:06 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-15 11:06 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-15 11:06 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-15 11:06 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-15 11:06 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-15 11:06 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-15 11:06 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-15 11:06 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-15 11:06 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-15 11:06 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-15 11:06 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-15 11:06 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-15 11:06 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-15 11:06 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-15 11:06 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-15 11:06 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-13 18:03 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-13 18:03 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-13 18:03 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-13 18:03 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-13 09:29 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-13 09:29 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-13 09:29 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-13 09:29 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-13 09:29 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-13 09:29 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-13 09:29 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-13 09:29 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-13 09:29 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-13 09:29 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-13 09:29 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-13 09:29 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-13 09:29 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-13 09:29 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-13 09:29 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-13 09:29 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-13 09:29 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

==================== One Month Modified Files and Folders =======

2014-05-02 16:03 - 2014-04-29 17:53 - 00000000 ____D () C:\FRST
2014-05-02 15:59 - 2013-01-01 11:10 - 00000000 ____D () C:\Users\Manfred\AppData\Roaming\Skype
2014-05-02 15:22 - 2012-11-04 19:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-02 15:20 - 2012-10-31 22:28 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-02 14:30 - 2012-11-04 19:28 - 00000000 ____D () C:\Users\Manfred\Tracing
2014-05-02 14:30 - 2012-10-31 22:23 - 01663256 _____ () C:\Windows\WindowsUpdate.log
2014-05-02 13:54 - 2014-05-02 13:54 - 00001305 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-05-02 13:54 - 2014-05-02 13:54 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-05-02 13:54 - 2014-05-02 13:54 - 00000000 ____D () C:\Windows\de
2014-05-02 13:54 - 2014-02-25 21:43 - 00001490 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-05-02 13:54 - 2012-10-31 23:49 - 00001374 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-05-02 13:53 - 2014-05-02 13:53 - 00000382 _____ () C:\Windows\DirectX.log
2014-05-02 13:53 - 2014-05-02 13:53 - 00000000 ____D () C:\Program Files\Windows Live
2014-05-02 13:53 - 2013-01-01 17:49 - 00002534 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-05-02 13:53 - 2012-10-31 23:49 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-05-02 13:52 - 2014-02-25 21:42 - 00002204 _____ () C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-05-02 13:26 - 2014-05-01 11:02 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-02 13:20 - 2009-07-14 06:45 - 00015952 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-02 13:20 - 2009-07-14 06:45 - 00015952 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-02 13:17 - 2009-07-14 19:58 - 00702980 _____ () C:\Windows\system32\perfh007.dat
2014-05-02 13:17 - 2009-07-14 19:58 - 00150620 _____ () C:\Windows\system32\perfc007.dat
2014-05-02 13:17 - 2009-07-14 07:13 - 01629444 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-02 13:14 - 2012-10-31 22:28 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-02 13:13 - 2014-04-27 16:30 - 00002565 _____ () C:\Windows\setupact.log
2014-05-02 13:13 - 2014-04-27 16:29 - 00627886 _____ () C:\Windows\PFRO.log
2014-05-02 13:13 - 2014-04-19 12:09 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat
2014-05-02 13:13 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-02 08:08 - 2013-11-01 20:37 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{0D0130BB-6504-4CFB-8FA0-B437A7528E14}
2014-05-01 20:09 - 2014-05-01 20:09 - 00005360 _____ () C:\Windows\DPINST.LOG
2014-05-01 11:01 - 2014-05-01 11:01 - 00001106 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-01 11:01 - 2014-05-01 11:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-05-01 11:01 - 2014-05-01 11:01 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-01 11:01 - 2014-05-01 11:01 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-01 08:47 - 2012-11-04 22:27 - 00000000 ____D () C:\Users\Manfred\AppData\Roaming\vlc
2014-04-30 14:23 - 2012-11-01 00:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-29 21:25 - 2014-04-29 21:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-29 20:14 - 2012-11-01 23:04 - 00036548 _____ () C:\ProgramData\hpzinstall.log
2014-04-29 20:11 - 2014-04-27 17:37 - 00233370 _____ () C:\Windows\hpoins47.dat
2014-04-29 20:11 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-29 18:31 - 2012-10-31 22:23 - 00000000 ____D () C:\Users\Manfred
2014-04-29 17:48 - 2014-04-29 17:34 - 00000000 ____D () C:\ProgramData\SpeedyPC Software
2014-04-29 17:34 - 2014-04-29 17:34 - 00000000 ____D () C:\Users\Manfred\AppData\Roaming\SpeedyPC Software
2014-04-29 17:34 - 2014-04-29 17:34 - 00000000 ____D () C:\Users\Manfred\AppData\Roaming\DriverCure
2014-04-29 17:31 - 2009-07-14 06:45 - 00532504 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-04-29 17:24 - 2012-10-31 22:32 - 00000000 ____D () C:\Windows\System32\Tasks\ASUS
2014-04-29 17:23 - 2012-11-04 21:26 - 00162680 _____ () C:\Users\Manfred\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-29 16:01 - 2014-05-02 10:25 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-02 10:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-02 10:25 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-02 10:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 10:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-29 09:19 - 2014-04-29 09:19 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Identity Safe
2014-04-28 22:22 - 2012-11-04 19:07 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-28 22:22 - 2012-11-04 19:07 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-28 22:22 - 2012-11-04 19:07 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-28 22:00 - 2014-04-28 22:00 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security
2014-04-28 22:00 - 2014-04-28 21:53 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-04-28 22:00 - 2014-04-28 21:53 - 00002501 _____ () C:\Users\Public\Desktop\Norton Internet Security.lnk
2014-04-28 22:00 - 2014-04-28 21:52 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security
2014-04-28 22:00 - 2014-04-28 21:52 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64
2014-04-28 21:53 - 2014-04-28 21:53 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2014-04-28 21:53 - 2014-04-28 21:53 - 00008222 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2014-04-28 21:53 - 2014-04-28 21:53 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared
2014-04-28 21:52 - 2014-04-28 21:52 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security
2014-04-28 21:52 - 2012-10-31 22:48 - 00000000 ____D () C:\ProgramData\Norton
2014-04-28 21:40 - 2014-04-25 14:32 - 00000000 ____D () C:\ProgramData\Package Cache
2014-04-28 21:00 - 2013-05-28 17:43 - 00000082 _____ () C:\Windows\odbc_merge.INI
2014-04-28 20:37 - 2014-04-28 20:37 - 00001106 _____ () C:\Users\Public\Desktop\Taxpool-Buchhalter EÜR.lnk
2014-04-28 20:37 - 2014-04-28 20:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Taxpool-Buchhalter EÜR
2014-04-28 20:37 - 2014-04-28 20:36 - 00000000 ____D () C:\Program Files (x86)\Taxpool-Buchhalter
2014-04-28 20:23 - 2014-04-28 20:23 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Identity Safe
2014-04-28 20:23 - 2014-04-28 20:23 - 00000000 ____D () C:\Windows\system32\Drivers\NSTx64
2014-04-28 20:23 - 2014-04-28 20:23 - 00000000 ____D () C:\Program Files (x86)\Norton Identity Safe
2014-04-28 17:39 - 2014-04-27 18:29 - 00067623 _____ () C:\Users\Manfred\Desktop\HP Installationsfehler – Windows 7.hta
2014-04-28 17:28 - 2013-11-30 17:27 - 00000000 ____D () C:\Users\Manfred\AppData\Local\NPE
2014-04-28 17:27 - 2014-04-28 17:27 - 00000000 __SHD () C:\Users\Manfred\AppData\Local\EmieUserList
2014-04-28 17:27 - 2014-04-28 17:27 - 00000000 __SHD () C:\Users\Manfred\AppData\Local\EmieSiteList
2014-04-28 17:20 - 2014-04-28 17:19 - 00000000 ____D () C:\NPE
2014-04-28 17:20 - 2012-12-05 20:53 - 00000000 ____D () C:\Users\Manfred\AppData\Local\CrashDumps
2014-04-27 19:16 - 2014-03-04 08:53 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-04-27 19:16 - 2014-03-04 08:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-04-27 19:16 - 2013-01-01 11:10 - 00000000 ____D () C:\ProgramData\Skype
2014-04-27 19:15 - 2014-04-27 19:15 - 00000000 ____D () C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2014-04-27 19:14 - 2014-04-27 19:15 - 00001077 _____ () C:\Users\Manfred\Desktop\Kaspersky Security Scan.lnk
2014-04-27 19:14 - 2014-04-27 19:14 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-04-27 19:14 - 2014-04-27 19:14 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-04-27 18:38 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-04-27 18:37 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-27 18:19 - 2014-04-25 17:57 - 00002008 _____ () C:\Users\Public\Desktop\HP Print and Scan Doctor.lnk
2014-04-27 17:51 - 2014-04-27 17:51 - 00067623 _____ () C:\Users\Administrator\Desktop\HP Installationsfehler – Windows 7.hta
2014-04-27 17:47 - 2012-11-03 20:53 - 00163072 _____ () C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-27 17:46 - 2014-04-27 17:41 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\HpUpdate
2014-04-27 17:41 - 2014-04-27 17:41 - 00001189 _____ () C:\Users\Public\Desktop\Shop für HP Zubehör.lnk
2014-04-27 17:41 - 2014-04-27 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2014-04-27 17:41 - 2012-11-01 23:04 - 00000000 ____D () C:\Program Files (x86)\HP
2014-04-27 17:40 - 2014-04-27 17:40 - 00002006 _____ () C:\Users\Public\Desktop\HP ePrinterCenter.lnk
2014-04-27 17:40 - 2014-04-27 17:40 - 00001357 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk
2014-04-27 17:40 - 2014-04-27 17:40 - 00001351 _____ () C:\Users\Public\Desktop\HP Solution Center.lnk
2014-04-27 17:40 - 2014-04-27 17:40 - 00000000 ____D () C:\ProgramData\HP Product Assistant
2014-04-27 17:40 - 2012-11-01 23:04 - 00000000 ____D () C:\ProgramData\HP
2014-04-27 16:30 - 2014-04-27 16:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-27 16:27 - 2012-10-31 23:19 - 00000000 ____D () C:\Windows\Panther
2014-04-27 16:07 - 2014-04-27 16:07 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-04-27 16:07 - 2014-04-27 16:07 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-04-27 16:07 - 2014-04-27 16:07 - 00000000 ____D () C:\Program Files\CCleaner
2014-04-27 16:02 - 2012-10-31 22:28 - 00002251 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-04-26 21:49 - 2014-04-26 21:49 - 00000000 __SHD () C:\found.001
2014-04-26 19:47 - 2014-04-25 18:51 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-04-26 18:28 - 2014-04-26 18:28 - 00000000 __SHD () C:\found.000
2014-04-25 19:05 - 2014-04-25 18:18 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-04-25 19:05 - 2014-04-22 21:13 - 00000000 ____D () C:\Users\dub_cm_auto
2014-04-25 19:05 - 2014-04-19 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital
2014-04-25 19:05 - 2014-04-19 12:09 - 00000000 ____D () C:\Program Files\Common Files\Western Digital
2014-04-25 19:05 - 2013-10-24 20:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-25 19:05 - 2012-11-03 20:53 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-25 19:05 - 2012-11-03 20:53 - 00000000 ___RD () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-04-25 19:05 - 2012-11-03 20:52 - 00000000 ____D () C:\Users\Administrator
2014-04-25 19:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-04-25 19:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-04-25 18:15 - 2012-11-03 21:10 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Mozilla
2014-04-25 18:11 - 2013-05-01 17:24 - 00000000 ____D () C:\ProgramData\PC Suite
2014-04-25 17:46 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-04-25 17:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-04-25 15:00 - 2014-04-25 15:00 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\OpenOffice
2014-04-25 14:58 - 2014-04-25 14:58 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieUserList
2014-04-25 14:58 - 2014-04-25 14:58 - 00000000 __SHD () C:\Users\Administrator\AppData\Local\EmieSiteList
2014-04-25 14:57 - 2014-04-25 14:57 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\PC Suite
2014-04-25 14:57 - 2014-04-25 14:57 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\HP
2014-04-25 14:57 - 2014-04-25 14:57 - 00000000 ____D () C:\Users\Administrator\AppData\Roaming\Adobe
2014-04-25 14:57 - 2012-11-03 20:53 - 00001421 _____ () C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-25 14:57 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-04-25 14:42 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-25 14:35 - 2014-04-25 14:35 - 00002143 _____ () C:\Users\Manfred\Desktop\Photosmart All-in-One Printer Scanner Copier - Verknüpfung.lnk
2014-04-25 14:33 - 2014-04-25 14:33 - 00000000 ____D () C:\Program Files\Western Digital
2014-04-25 14:33 - 2014-04-19 12:09 - 00000000 ____D () C:\Program Files (x86)\Western Digital
2014-04-25 14:33 - 2014-04-19 12:08 - 00000000 ____D () C:\ProgramData\Western Digital
2014-04-21 14:47 - 2014-04-21 14:47 - 00004224 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-21 14:47 - 2013-10-24 20:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-21 14:47 - 2013-06-30 09:07 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-21 14:45 - 2012-10-31 22:56 - 00000000 ____D () C:\Users\Manfred\AppData\Local\Adobe
2014-04-20 09:24 - 2013-01-01 11:10 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-19 16:09 - 2013-05-30 17:13 - 00000000 ____D () C:\Users\Manfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft ICE
2014-04-19 13:52 - 2014-04-19 13:52 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital
2014-04-19 12:09 - 2014-04-19 12:09 - 00001117 _____ () C:\Users\Public\Desktop\WD Drive Utilities.lnk
2014-04-19 12:09 - 2014-04-19 12:09 - 00000000 ____D () C:\Users\Manfred\AppData\Local\Western_Digital_Technolog
2014-04-19 12:09 - 2014-04-19 12:09 - 00000000 ____D () C:\Users\Manfred\AppData\Local\Western Digital
2014-04-14 20:13 - 2014-04-13 18:03 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-14 20:05 - 2014-04-13 18:03 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-14 20:05 - 2014-04-13 18:03 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-14 20:04 - 2014-04-13 18:03 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-14 04:24 - 2014-04-25 18:18 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-04-25 18:18 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-04-13 12:05 - 2013-08-14 22:05 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-13 12:05 - 2012-11-21 18:38 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-13 12:03 - 2012-11-01 09:05 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-03 09:51 - 2014-05-01 11:01 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-04-03 09:51 - 2014-05-01 11:01 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-04-03 09:50 - 2014-05-01 11:01 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

Files to move or delete:
====================
C:\ProgramData\PKP_DLeo.DAT
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT


Some content of TEMP:
====================
C:\Users\Manfred\AppData\Local\Temp\avgnt.exe
C:\Users\Manfred\AppData\Local\Temp\HPInstaller.exe
C:\Users\Manfred\AppData\Local\Temp\NEventMessages.dll
C:\Users\Manfred\AppData\Local\Temp\NOSEventMessages.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-29 09:59

==================== End Of Log ============================

--- --- ---

--- --- ---

Germ.txt

Code:

ATTFilter

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-05-02 16:12:48
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-2 SAMSUNG_ rev.CXM0 119,24GB
Running: Gmer-19357.exe; Driver: C:\Users\Manfred\AppData\Local\Temp\pgryqpod.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                                       fffff800031fa000 45 bytes [00, 00, 10, 02, 4D, 6D, 43, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575                                                                                       fffff800031fa02f 16 bytes [00, 02, 00, 00, 00, 00, 00, ...]

---- User code sections - GMER 2.1 ----

.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtTerminateProcess                          0000000077d9fcb0 5 bytes JMP 00000001002a091c
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtWriteVirtualMemory                        0000000077d9fe14 5 bytes JMP 00000001002a0048
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtOpenEvent                                 0000000077d9fea8 5 bytes JMP 00000001002a02ee
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtCreateThread                              0000000077da0004 5 bytes JMP 00000001002a04b2
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory                      0000000077da0038 5 bytes JMP 00000001002a09fe
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtResumeThread                              0000000077da0068 5 bytes JMP 00000001002a0ae0
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtTerminateThread                           0000000077da0084 5 bytes JMP 0000000100020050
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtCreateMutant                              0000000077da079c 5 bytes JMP 00000001002a012a
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtCreateSymbolicLinkObject                  0000000077da088c 5 bytes JMP 00000001002a0758
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtCreateThreadEx                            0000000077da08a4 5 bytes JMP 00000001002a0676
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtLoadDriver                                0000000077da0df4 5 bytes JMP 00000001002a03d0
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtSetContextThread                          0000000077da1920 5 bytes JMP 00000001002a0594
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtSetSystemInformation                      0000000077da1be4 5 bytes JMP 00000001002a083a
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\ntdll.dll!NtSuspendThread                             0000000077da1d70 5 bytes JMP 00000001002a020c
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\syswow64\USER32.dll!RecordShutdownReason + 882                 00000000759e1492 7 bytes JMP 00000001002b059e
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\sechost.dll!SetServiceObjectSecurity + 206            00000000775f524f 7 bytes JMP 00000001002a0f52
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfigA + 380                00000000775f53d0 7 bytes JMP 00000001002b0210
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 149               00000000775f5677 1 byte JMP 00000001002b0048
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 151               00000000775f5679 5 bytes {JMP 0xffffffff88cba9d1}
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\sechost.dll!CreateServiceA + 542                      00000000775f589a 7 bytes JMP 00000001002a0ca6
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\sechost.dll!CreateServiceW + 382                      00000000775f5a1d 7 bytes JMP 00000001002b03d8
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\sechost.dll!QueryServiceConfigW + 370                 00000000775f5c9b 7 bytes JMP 00000001002b012c
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\sechost.dll!ControlServiceExA + 231                   00000000775f5d87 7 bytes JMP 00000001002b02f4
.text     C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe[1876] C:\Windows\SysWOW64\sechost.dll!I_ScBroadcastServiceControlMessage + 123  00000000775f7240 7 bytes JMP 00000001002a0e6e
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1300] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69     0000000075a81465 2 bytes [A8, 75]
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe[1300] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155    0000000075a814bb 2 bytes [A8, 75]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe[2788] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                     0000000075a81465 2 bytes [A8, 75]
.text     C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe[2788] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                    0000000075a814bb 2 bytes [A8, 75]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[4288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69          0000000075a81465 2 bytes [A8, 75]
.text     C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe[4288] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155         0000000075a814bb 2 bytes [A8, 75]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[4584] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                               0000000075a81465 2 bytes [A8, 75]
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[4584] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                              0000000075a814bb 2 bytes [A8, 75]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Samsung SSD Magician\Samsung Magician.exe[4144] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                           0000000075a81465 2 bytes [A8, 75]
.text     C:\Program Files (x86)\Samsung SSD Magician\Samsung Magician.exe[4144] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                          0000000075a814bb 2 bytes [A8, 75]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\TestDDCCI.exe[4900] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69         0000000075a81465 2 bytes [A8, 75]
.text     C:\Program Files (x86)\LG Soft India Pvt Ltd\Dual Smart Solution\bin\TestDDCCI.exe[4900] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155        0000000075a814bb 2 bytes [A8, 75]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe[3904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                 0000000075a81465 2 bytes [A8, 75]
.text     C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe[3904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                0000000075a814bb 2 bytes [A8, 75]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe[4224] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                  0000000075a81465 2 bytes [A8, 75]
.text     C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe[4224] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                 0000000075a814bb 2 bytes [A8, 75]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe[5284] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                        0000000075a81465 2 bytes [A8, 75]
.text     C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe[5284] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                       0000000075a814bb 2 bytes [A8, 75]
.text     ...                                                                                                                                                      * 2
.text     C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                        0000000075a81465 2 bytes [A8, 75]
.text     C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe[5940] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                       0000000075a814bb 2 bytes [A8, 75]
.text     ...                                                                                                                                                      * 2
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtTerminateProcess                                                                       0000000077d9fcb0 5 bytes JMP 00000001001f091c
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtWriteVirtualMemory                                                                     0000000077d9fe14 5 bytes JMP 00000001001f0048
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtOpenEvent                                                                              0000000077d9fea8 5 bytes JMP 00000001001f02ee
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtCreateThread                                                                           0000000077da0004 5 bytes JMP 00000001001f04b2
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory                                                                   0000000077da0038 5 bytes JMP 00000001001f09fe
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtResumeThread                                                                           0000000077da0068 5 bytes JMP 00000001001f0ae0
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtTerminateThread                                                                        0000000077da0084 5 bytes JMP 0000000100020050
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtCreateMutant                                                                           0000000077da079c 5 bytes JMP 00000001001f012a
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtCreateSymbolicLinkObject                                                               0000000077da088c 5 bytes JMP 00000001001f0758
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtCreateThreadEx                                                                         0000000077da08a4 5 bytes JMP 00000001001f0676
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtLoadDriver                                                                             0000000077da0df4 5 bytes JMP 00000001001f03d0
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtSetContextThread                                                                       0000000077da1920 5 bytes JMP 00000001001f0594
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtSetSystemInformation                                                                   0000000077da1be4 5 bytes JMP 00000001001f083a
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\ntdll.dll!NtSuspendThread                                                                          0000000077da1d70 5 bytes JMP 00000001001f020c
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\sechost.dll!SetServiceObjectSecurity + 206                                                         00000000775f524f 7 bytes JMP 00000001001f0f52
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfigA + 380                                                             00000000775f53d0 7 bytes JMP 0000000100200210
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 149                                                            00000000775f5677 1 byte JMP 0000000100200048
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\sechost.dll!ChangeServiceConfig2W + 151                                                            00000000775f5679 5 bytes {JMP 0xffffffff88c0a9d1}
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\sechost.dll!CreateServiceA + 542                                                                   00000000775f589a 7 bytes JMP 00000001001f0ca6
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\sechost.dll!CreateServiceW + 382                                                                   00000000775f5a1d 7 bytes JMP 00000001002003d8
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\sechost.dll!QueryServiceConfigW + 370                                                              00000000775f5c9b 7 bytes JMP 000000010020012c
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\sechost.dll!ControlServiceExA + 231                                                                00000000775f5d87 7 bytes JMP 00000001002002f4
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\SysWOW64\sechost.dll!I_ScBroadcastServiceControlMessage + 123                                               00000000775f7240 7 bytes JMP 00000001001f0e6e
.text     D:\Downloads\Gmer-19357.exe[8532] C:\Windows\syswow64\USER32.dll!RecordShutdownReason + 882                                                              00000000759e1492 7 bytes JMP 00000001002004bc

---- Threads - GMER 2.1 ----

Thread    C:\Windows\SysWOW64\ntdll.dll [400:1052]                                                                                                                 0000000000418f7a
Thread    C:\Windows\SysWOW64\ntdll.dll [400:2300]                                                                                                                 0000000070af1130
Thread    C:\Windows\SysWOW64\ntdll.dll [400:3484]                                                                                                                 000000007021f6c8
Thread    C:\Windows\SysWOW64\ntdll.dll [400:3488]                                                                                                                 000000007021f6c8
Thread    C:\Windows\SysWOW64\ntdll.dll [4652:4656]                                                                                                                0000000000418f7a

---- EOF - GMER 2.1 ----

malware.txt

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 01.05.2014
Suchlauf-Zeit: 11:09:45
Logdatei: malmarebytes.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.05.01.06
Rootkit Datenbank: v2014.03.27.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Manfred

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 314173
Verstrichene Zeit: 6 Min, 6 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 8
PUP.Optional.Linkey.A, HKU\S-1-5-21-2704392838-2996191318-1376066437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}, , [b08adf6da0db3501a49675a89f6315eb], 
PUP.Optional.Linkey.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}, , [b08adf6da0db3501a49675a89f6315eb], 
PUP.Optional.Linkey.A, HKU\S-1-5-21-2704392838-2996191318-1376066437-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}, , [b08adf6da0db3501a49675a89f6315eb], 
PUP.Optional.Linkey.A, HKU\S-1-5-21-2704392838-2996191318-1376066437-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}, , [b08adf6da0db3501a49675a89f6315eb], 
PUP.Optional.SiteFinder.A, HKU\S-1-5-21-2704392838-2996191318-1376066437-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}, , [2a10dc701b60261019bc889449b91ee2], 
PUP.Optional.SiteFinder.A, HKU\S-1-5-21-2704392838-2996191318-1376066437-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}, , [2a10dc701b60261019bc889449b91ee2], 
PUP.Optional.SettingsManager.A, HKLM\SOFTWARE\WOW6432NODE\SYSTEMK\General, , [69d17ece12696dc9aea83f3dcb3725db], 
PUP.Optional.Softonic.A, HKU\S-1-5-21-2704392838-2996191318-1376066437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, , [51e96fdd4a312115fa540276bb4742be], 

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 8
PUP.Optional.SimilarSites.A, C:\Users\Manfred\AppData\Roaming\SimilarSites, , [0634b795b6c540f64e36bab422e05fa1], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\content, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\locale, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\locale\en-US, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\skin, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\skin\classic, , [3a00a1ab49328aac06815d114bb76c94], 

Dateien: 20
PUP.Optional.DefaultSearch.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\searchplugins\default-search.xml, , [380288c4d9a2ac8acb82e09c32d06d93], 
PUP.Optional.DefaultSearch.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml, , [1c1ea2aaa6d57bbb73db5725bc468e72], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome.manifest, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\install.rdf, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\content\aff.js, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\content\jquery-1.8.3.min.js, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\content\options.js, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\content\options.xul, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\content\overlay.js, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\content\overlay.xul, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\content\popup.html, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\content\popup.js, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\content\tabs_listener.js, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\locale\en-US\settings.dtd, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\skin\classic\button.png, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\skin\classic\icon.png, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\skin\classic\main.css, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\skin\classic\overlay.css, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.SiteFinder.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\extensions\sitefinder@sitefinder.com\chrome\skin\classic\sitefinder.css, , [3a00a1ab49328aac06815d114bb76c94], 
PUP.Optional.DefaultSearch.A, C:\Users\Manfred\AppData\Roaming\Mozilla\Firefox\Profiles\lzp84sgo.default\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "hxxp://www.default-search.net/search?sid=476&aid=122&itype=n&ver=12302&tm=322&src=ds&p=");), ,[76c4cc80502b3ff7a91562ff9074dc24]

Physische Sektoren: 0
(No malicious items detected)


(end)

Windows Firewall Fehler 0X8007042c bei Neuinstallation HP Photosmart B110 Software

Plagegeister aller Art und deren Bekämpfung: Windows Firewall Fehler 0X8007042c bei Neuinstallation HP Photosmart B110 Software

Windows Firewall Fehler 0X8007042c bei Neuinstallation HP Photosmart B110 Software

Ähnliche Themen: Windows Firewall Fehler 0X8007042c bei Neuinstallation HP Photosmart B110 Software