... verstehe
Code:
Alles auswählen Aufklappen ATTFilter
ComboFix 14-05-13.01 - Benito 13.05.2014 19:50:29.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.8174.3573 [GMT 2:00]
ausgeführt von:: c:\users\Benito\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\1384835606.bdinstall.bin
c:\programdata\1385551167.bdinstall.bin
c:\programdata\1385551441.bdinstall.bin
c:\programdata\1388487424.12388.bin
c:\programdata\1388487424.40612.bin
c:\programdata\1388487424.53768.bin
c:\programdata\1388533439.bdinstall.bin
c:\programdata\1388533807.bdinstall.bin
c:\programdata\1391794359.bdinstall.bin
c:\programdata\1391794574.bdinstall.bin
c:\programdata\1391964202.6392.bin
c:\programdata\1391964202.6436.bin
c:\programdata\1391964202.6440.bin
c:\programdata\1391964202.6604.bin
c:\programdata\1391965097.5488.bin
c:\programdata\1391965097.bdinstall.bin
c:\programdata\1391965252.bdinstall.bin
c:\programdata\Local Settings\Temp
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\auth.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\burnlib.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\dsp_sps.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\enc_fhgaac.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\enc_flac.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\enc_lame.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\enc_vorbis.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\enc_wav.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\enc_wma.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_classicart.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_crasher.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_ff.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_find_on_disk.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_hotkeys.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_jumpex.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_jumpex_original.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_ml.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_nopro.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_orgler.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_play_remove.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_skinmanager.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_timerestore.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_tray.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\gen_undo.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_avi.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_cdda.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_dshow.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_flac.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_flv.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_linein.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_midi.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_mkv.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_mod.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_mp3.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_mp4.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_nsv.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_swf.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_vorbis.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_wav.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_wave.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_wm.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\in_wv.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_addons.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_autotag.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_bookmarks.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_devices.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_disc.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_downloads.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_enqplay.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_history.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_impex.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_local.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_nowplaying.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_online.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_orb.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_playlists.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_plg.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_pmp.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_rg.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_transcode.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ml_wire.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\ombrowser.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\out_disk.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\out_ds.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\out_wave.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\playlist.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\pmp_activesync.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\pmp_android.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\pmp_ipod.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\pmp_njb.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\pmp_p4s.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\pmp_usb.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\pmp_wifi.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\tagz.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\vis_avs.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\vis_milk2.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\vis_nsfs.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\winamp.lng
c:\users\Benito\AppData\Local\Temp\WLZ745F.tmp\winampa.lng
c:\users\Benito\AppData\Roaming\KW
c:\users\Benito\AppData\Roaming\KW\update.ini
c:\users\Benito\AppData\Roaming\Roaming
c:\users\Benito\AppData\Roaming\Roaming\HoldemManager\config\FTPRushTables.xml
c:\users\Benito\AppData\Roaming\Roaming\HoldemManager\Importing\Work Folder\Thumbs.db
c:\windows\AutoRun.ini
c:\windows\wininit.ini
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-04-13 bis 2014-05-13 ))))))))))))))))))))))))))))))
.
.
2014-05-13 17:55 . 2014-05-13 17:55 -------- d-----w- c:\users\postgres\AppData\Local\temp
2014-05-13 03:34 . 2014-03-26 17:01 254240 ----a-w- c:\windows\system32\drivers\VBoxDrv.sys
2014-05-13 03:34 . 2014-03-26 17:00 128288 ----a-w- c:\windows\system32\drivers\VBoxUSBMon.sys
2014-05-11 14:53 . 2014-05-11 14:55 -------- d-----w- C:\FRST
2014-05-11 14:36 . 2014-05-11 14:40 -------- d-----w- c:\users\Benito\AppData\Roaming\JonDo
2014-05-11 14:33 . 2014-05-11 14:33 -------- d-----w- c:\program files (x86)\JonDo
2014-05-11 13:27 . 2014-05-11 13:27 -------- d-----w- c:\users\Benito\AppData\Roaming\Wireshark
2014-05-11 13:01 . 2014-05-11 13:01 -------- d-----w- c:\program files (x86)\WinPcap
2014-05-11 12:59 . 2014-05-11 13:01 -------- d-----w- c:\program files\Wireshark
2014-05-11 12:41 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll
2014-05-11 12:41 . 2014-05-11 12:47 -------- d-----w- C:\AdwCleaner
2014-05-10 23:08 . 2014-05-10 23:08 -------- d-----w- c:\users\Benito\AppData\Roaming\Apowersoft
2014-05-10 23:08 . 2014-04-09 19:05 31920 ----a-w- c:\windows\system32\drivers\Apowersoft_AudioDevice.sys
2014-05-08 06:36 . 2014-05-08 06:36 -------- d-----w- c:\program files\TAP-Windows
2014-05-08 06:36 . 2014-05-08 06:36 -------- d-----w- c:\program files\OpenVPN
2014-05-05 01:02 . 2014-05-05 01:02 -------- d-----w- c:\users\Benito\AppData\Roaming\Apple Computer
2014-05-01 13:16 . 2014-05-01 13:16 -------- d-----w- c:\program files (x86)\MultiBit-0.5.18
2014-04-29 11:21 . 2014-04-29 11:21 -------- d-----w- c:\users\Benito\AppData\Local\Apple Computer
2014-04-29 10:55 . 2014-04-29 10:55 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2014-04-29 10:55 . 2014-04-29 10:55 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2014-04-29 10:55 . 2014-04-29 10:55 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2014-04-29 10:55 . 2014-04-29 10:55 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2014-04-29 10:55 . 2014-04-29 10:55 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2014-04-29 10:55 . 2014-04-29 10:55 -------- d-----w- c:\programdata\Apple Computer
2014-04-29 10:55 . 2014-04-29 10:55 -------- d-----w- c:\program files (x86)\Common Files\Apple
2014-04-29 10:55 . 2014-04-29 10:55 -------- d-----w- c:\users\Benito\AppData\Local\Apple
2014-04-29 10:55 . 2014-04-29 10:55 -------- d-----w- c:\programdata\Apple
2014-04-29 10:55 . 2014-04-29 10:55 -------- d-----w- c:\program files (x86)\Apple Software Update
2014-04-29 10:39 . 2014-04-29 10:39 -------- d-----w- c:\windows\de
2014-04-29 10:38 . 2014-04-29 10:38 -------- d-----w- c:\program files (x86)\Microsoft SQL Server Compact Edition
2014-04-29 10:37 . 2014-04-29 10:37 537432 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\11b8d5031cf639705\DXSETUP.exe
2014-04-29 10:37 . 2014-04-29 10:37 1801048 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\11b8d5031cf639705\dsetup32.dll
2014-04-29 10:37 . 2014-04-29 10:37 89944 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\11b8d5031cf639705\DSETUP.dll
2014-04-29 10:37 . 2014-04-29 10:37 94040 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\1059b50f1cf639704\DSETUP.dll
2014-04-29 10:37 . 2014-04-29 10:37 525656 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\1059b50f1cf639704\DXSETUP.exe
2014-04-29 10:37 . 2014-04-29 10:37 1691480 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\1059b50f1cf639704\dsetup32.dll
2014-04-29 10:37 . 2014-04-29 10:37 89944 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fa41df81cf639702\DSETUP.dll
2014-04-29 10:37 . 2014-04-29 10:37 537432 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fa41df81cf639702\DXSETUP.exe
2014-04-29 10:37 . 2014-04-29 10:37 1801048 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\fa41df81cf639702\dsetup32.dll
2014-04-23 02:27 . 2014-04-23 02:27 -------- d-----w- c:\program files (x86)\X-Rite
2014-04-23 02:27 . 2007-02-08 11:48 51600 ----a-w- c:\windows\system32\drivers\i1_x64.sys
2014-04-23 02:27 . 2005-12-13 22:53 7808 ----a-w- c:\windows\system32\drivers\i1display_x64.sys
2014-04-23 02:17 . 2007-02-08 11:48 51600 ----a-w- c:\windows\system32\drivers\i1iO2_x64.sys
2014-04-23 02:17 . 2006-05-18 14:13 7808 ----a-w- c:\windows\system32\drivers\SeqCal.sys
2014-04-23 02:17 . 2006-05-18 14:13 47104 ----a-w- c:\windows\system32\drivers\EyeOneX64.sys
2014-04-23 02:16 . 2014-04-23 02:16 -------- d-----w- c:\program files (x86)\GretagMacbeth
2014-04-17 12:15 . 2014-04-17 12:15 -------- d-sh--w- c:\windows\ftpcache
2014-04-14 16:57 . 2014-04-14 16:57 -------- d-----w- c:\users\Benito\AppData\Roaming\DropboxMaster
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-05-09 01:48 . 2012-11-09 21:48 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-05-09 01:48 . 2012-11-09 21:48 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-04-29 10:38 . 2011-03-28 17:36 23264 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-04-14 18:13 . 2013-09-29 15:57 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-04-10 07:42 . 2012-02-29 23:56 90655440 ----a-w- c:\windows\system32\MRT.exe
2014-03-31 19:41 . 2014-03-31 19:41 58568 ----a-w- c:\windows\SysWow64\sirenacm.dll
2014-03-31 19:34 . 2014-03-31 19:34 322248 ----a-w- c:\windows\WLXPGSS.SCR
2014-03-31 07:35 . 2012-02-29 23:13 270496 ------w- c:\windows\system32\MpSigStub.exe
2014-03-26 17:00 . 2014-03-26 17:00 156448 ----a-w- c:\windows\system32\drivers\VBoxNetFlt.sys
2014-03-26 17:00 . 2014-03-26 17:00 141600 ----a-w- c:\windows\system32\drivers\VBoxNetAdp.sys
2014-03-26 16:58 . 2014-03-26 16:58 204064 ----a-w- c:\windows\system32\VBoxNetFltNobj.dll
2014-03-17 08:16 . 2014-05-13 17:57 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{16A9530C-EA8E-4783-B316-2FADA9E18E45}\mpengine.dll
2014-03-17 08:16 . 2014-05-13 17:56 10521840 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{ECBEF26C-5FAD-4308-95CB-E1FAFD4E225B}\mpengine.dll
2014-03-06 10:21 . 2014-04-10 07:49 23549440 ----a-w- c:\windows\system32\mshtml.dll
2014-03-06 09:32 . 2014-04-10 07:49 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-03-06 09:31 . 2014-04-10 07:49 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2014-03-06 08:59 . 2014-04-10 07:49 66048 ----a-w- c:\windows\system32\iesetup.dll
2014-03-06 08:57 . 2014-04-10 07:49 548352 ----a-w- c:\windows\system32\vbscript.dll
2014-03-06 08:57 . 2014-04-10 07:49 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
2014-03-06 08:53 . 2014-04-10 07:49 2767360 ----a-w- c:\windows\system32\iertutil.dll
2014-03-06 08:40 . 2014-04-10 07:49 51200 ----a-w- c:\windows\system32\jsproxy.dll
2014-03-06 08:39 . 2014-04-10 07:49 33792 ----a-w- c:\windows\system32\iernonce.dll
2014-03-06 08:32 . 2014-04-10 07:49 574976 ----a-w- c:\windows\system32\ieui.dll
2014-03-06 08:32 . 2014-04-10 07:49 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2014-03-06 08:29 . 2014-04-10 07:49 139264 ----a-w- c:\windows\system32\ieUnatt.exe
2014-03-06 08:29 . 2014-04-10 07:49 111616 ----a-w- c:\windows\system32\ieetwcollector.exe
2014-03-06 08:28 . 2014-04-10 07:49 752640 ----a-w- c:\windows\system32\jscript9diag.dll
2014-03-06 08:15 . 2014-04-10 07:49 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2014-03-06 08:11 . 2014-04-10 07:49 5784064 ----a-w- c:\windows\system32\jscript9.dll
2014-03-06 08:09 . 2014-04-10 07:49 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2014-03-06 08:03 . 2014-04-10 07:49 586240 ----a-w- c:\windows\system32\ie4uinit.exe
2014-03-06 08:02 . 2014-04-10 07:49 61952 ----a-w- c:\windows\SysWow64\iesetup.dll
2014-03-06 08:02 . 2014-04-10 07:49 455168 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-03-06 08:01 . 2014-04-10 07:49 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2014-03-06 07:56 . 2014-04-10 07:49 38400 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2014-03-06 07:48 . 2014-04-10 07:49 195584 ----a-w- c:\windows\system32\msrating.dll
2014-03-06 07:46 . 2014-04-10 07:49 4254720 ----a-w- c:\windows\SysWow64\jscript9.dll
2014-03-06 07:42 . 2014-04-10 07:49 296960 ----a-w- c:\windows\system32\dxtrans.dll
2014-03-06 07:38 . 2014-04-10 07:49 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2014-03-06 07:36 . 2014-04-10 07:49 592896 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2014-03-06 07:21 . 2014-04-10 07:49 628736 ----a-w- c:\windows\system32\msfeeds.dll
2014-03-06 07:13 . 2014-04-10 07:49 32256 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2014-03-06 07:11 . 2014-04-10 07:49 2043904 ----a-w- c:\windows\system32\inetcpl.cpl
2014-03-06 06:53 . 2014-04-10 07:49 13551104 ----a-w- c:\windows\system32\ieframe.dll
2014-03-06 06:40 . 2014-04-10 07:49 1967104 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2014-03-06 06:22 . 2014-04-10 07:49 2260480 ----a-w- c:\windows\system32\wininet.dll
2014-03-06 05:58 . 2014-04-10 07:49 1400832 ----a-w- c:\windows\system32\urlmon.dll
2014-03-06 05:50 . 2014-04-10 07:49 846336 ----a-w- c:\windows\system32\ieapfltr.dll
2014-03-06 05:41 . 2014-04-10 07:49 1789440 ----a-w- c:\windows\SysWow64\wininet.dll
2014-03-04 09:44 . 2014-04-10 07:42 362496 ----a-w- c:\windows\system32\wow64win.dll
2014-03-04 09:44 . 2014-04-10 07:42 243712 ----a-w- c:\windows\system32\wow64.dll
2014-03-04 09:44 . 2014-04-10 07:42 13312 ----a-w- c:\windows\system32\wow64cpu.dll
2014-03-04 09:44 . 2014-04-10 07:42 16384 ----a-w- c:\windows\system32\ntvdm64.dll
2014-03-04 09:44 . 2014-04-10 07:42 1163264 ----a-w- c:\windows\system32\kernel32.dll
2014-03-04 09:17 . 2014-04-10 07:42 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2014-03-04 09:17 . 2014-04-10 07:42 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2014-03-04 09:16 . 2014-04-10 07:42 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2014-03-04 09:16 . 2014-04-10 07:42 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2014-03-04 08:09 . 2014-04-10 07:42 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2014-03-04 08:09 . 2014-04-10 07:42 2048 ----a-w- c:\windows\SysWow64\user.exe
2014-02-13 12:46 . 2014-02-13 12:46 354656 ----a-w- c:\windows\SysWow64\DivXControlPanelApplet.cpl
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 130736 ----a-w- c:\users\Benito\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 130736 ----a-w- c:\users\Benito\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-05-25 00:36 130736 ----a-w- c:\users\Benito\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Viber"="c:\users\Benito\AppData\Local\Viber\Viber.exe" [2013-07-31 912904]
"MouseServer"="c:\program files (x86)\MouseServer\MouseServer.exe" [2013-08-26 244736]
"RocketDock"="c:\program files (x86)\RocketDock\RocketDock.exe" [2007-09-02 495616]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-02-10 20922016]
"NetDrive"="c:\program files\NetDrive\netdrive.exe" [2014-05-08 3620864]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-11 3672384]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2013-03-28 642656]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2013-04-25 1075296]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"Adobe Acrobat Speed Launcher"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [2013-12-18 41336]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2013-12-18 840568]
"RoccatKonePure"="c:\program files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.EXE" [2013-06-10 561152]
"V0770Mon.exe"="c:\windows\V0770Mon.exe" [2012-06-01 32884]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-02-14 450560]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-02-20 689744]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-09-13 59720]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
c:\users\Benito\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Benito\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-4-18 33604728]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
JonDo.lnk - c:\program files (x86)\JonDo\JonDo.exe -m -s [2013-8-29 99192]
Logo Calibration Loader.lnk - c:\program files (x86)\GretagMacbeth\i1\Eye-One Match 3\CalibrationLoader\CalibrationLoader.exe [2014-4-23 708608]
ProfileReminder.lnk - c:\program files (x86)\GretagMacbeth\i1\Eye-One Match 3\ProfileReminder.exe [2014-4-23 954368]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage-Technologie;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R2 PDIHWCTL;PDIHWCTL;c:\windows\system32\drivers\pdihwctl.sys;c:\windows\SYSNATIVE\drivers\pdihwctl.sys [x]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
R2 UPDATESRV;Bitdefender Desktop Update Service;c:\program files\Bitdefender\Bitdefender\updatesrv.exe;c:\program files\Bitdefender\Bitdefender\updatesrv.exe [x]
R3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys;c:\windows\SYSNATIVE\drivers\Apowersoft_AudioDevice.sys [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 bdfwfpf_pc;bdfwfpf_pc;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [x]
R3 DFX11_1;DFX Audio Enhancer 11.1;c:\windows\system32\drivers\dfx11_1x64.sys;c:\windows\SYSNATIVE\drivers\dfx11_1x64.sys [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 EyeOneDisplay;EyeOneDisplay;c:\windows\system32\Drivers\i1display_x64.sys;c:\windows\SYSNATIVE\Drivers\i1display_x64.sys [x]
R3 fwlanusb4;FRITZ!WLAN N/G;c:\windows\system32\DRIVERS\fwlanusb4.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb4.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 lvpopf64;Logitech POP Suppression Filter;c:\windows\system32\DRIVERS\lvpopf64.sys;c:\windows\SYSNATIVE\DRIVERS\lvpopf64.sys [x]
R3 LVUVC64;Logitech QuickCam Pro 5000(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
R3 ndfs;ndfs;c:\program files\NetDrive\ndfs.sys;c:\program files\NetDrive\ndfs.sys [x]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys;c:\windows\SYSNATIVE\pwdrvio.sys [x]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys;c:\windows\SYSNATIVE\pwdspio.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssudserd.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 VBoxUSB;VirtualBox USB;c:\windows\system32\Drivers\VBoxUSB.sys;c:\windows\SYSNATIVE\Drivers\VBoxUSB.sys [x]
R4 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
S0 gzflt;gzflt;c:\windows\system32\DRIVERS\gzflt.sys;c:\windows\SYSNATIVE\DRIVERS\gzflt.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxDrv.sys [x]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxUSBMon.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 ndsvc;NetDrive Service;c:\program files\NetDrive\ndsvc.exe;c:\program files\NetDrive\ndsvc.exe [x]
S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x]
S2 postgresql-8.4;postgresql-8.4 - PostgreSQL Server 8.4;c:\program files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe runservice -N postgresql-8.4 -D C:/Program Files (x86)/PostgreSQL/8.4/data -w;c:\program files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe runservice -N postgresql-8.4 -D C:/Program Files (x86)/PostgreSQL/8.4/data -w [x]
S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 LVUSBS64;Logitech USB Monitor Filter;c:\windows\system32\drivers\LVUSBS64.sys;c:\windows\SYSNATIVE\drivers\LVUSBS64.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 V0770Vid;Live! Cam Sync HD VF0770 Driver;c:\windows\system32\DRIVERS\V0770Vid.sys;c:\windows\SYSNATIVE\DRIVERS\V0770Vid.sys [x]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp.sys [x]
S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetFlt.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-04-29 20:57 1078088 ----a-w- c:\program files (x86)\Google\Chrome\Application\34.0.1847.131\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-05-13 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-09 01:48]
.
2014-05-12 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4015719053-3797219543-3078460475-1000Core.job
- c:\users\Benito\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-01-25 00:11]
.
2014-05-13 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4015719053-3797219543-3078460475-1000UA.job
- c:\users\Benito\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-01-25 00:11]
.
2014-05-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-21 01:59]
.
2014-05-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-21 01:59]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco1]
@="{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}"
[HKEY_CLASSES_ROOT\CLSID\{AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47}]
2013-08-30 08:01 3358064 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco2]
@="{853B7E05-C47D-4985-909A-D0DC5C6D7303}"
[HKEY_CLASSES_ROOT\CLSID\{853B7E05-C47D-4985-909A-D0DC5C6D7303}]
2013-08-30 08:01 3358064 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ AccExtIco3]
@="{42D38F2E-98E9-4382-B546-E24E4D6D04BB}"
[HKEY_CLASSES_ROOT\CLSID\{42D38F2E-98E9-4382-B546-E24E4D6D04BB}]
2013-08-30 08:01 3358064 ----a-w- c:\program files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_v_1_1_0_x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Benito\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Benito\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Benito\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54 164016 ----a-w- c:\users\Benito\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2011-12-07 5889816]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-06-13 472984]
"XMouseButtonControl"="c:\program files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe" [2013-10-06 1171088]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2013-11-04 7204568]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = www.google.com
mStart Page = www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mDefault_Page_URL = www.google.com
mDefault_Search_URL = www.google.com
uInternet Settings,ProxyOverride = <local>
IE: {{07BA1DA9-F501-4796-8728-74D1B91A6CD5} - c:\program files (x86)\PokerStars.EU\PokerStarsUpdate.exe
IE: {{C4046502-6524-4d87-896C-878F57D1FF07} - c:\program files (x86)\PokerStars.IT\PokerStarsUpdate.exe
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{DE0522D4-BC58-40A7-A50A-6E2DA008BA92}: NameServer = 208.67.222.222,208.67.220.220
FF - ProfilePath - c:\users\Benito\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\
FF - prefs.js: browser.startup.homepage - about :home
FF - prefs.js: keyword.enabled - false
FF - prefs.js: network.proxy.ftp - 127.0.0.1
FF - prefs.js: network.proxy.ftp_port - 4001
FF - prefs.js: network.proxy.gopher - 127.0.0.1
FF - prefs.js: network.proxy.gopher_port - 4001
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 4001
FF - prefs.js: network.proxy.socks - 127.0.0.1
FF - prefs.js: network.proxy.socks_port - 4001
FF - prefs.js: network.proxy.ssl - 127.0.0.1
FF - prefs.js: network.proxy.ssl_port - 4001
FF - prefs.js: network.proxy.type - 1
.
.
------- Dateityp-Verknüpfung -------
.
inifile=%SystemRoot%\SysWow64\NOTEPAD.EXE %1
JSEFile=c:\windows\SysWow64\WScript.exe "%1" %*
txtfile=%SystemRoot%\SysWow64\NOTEPAD.EXE %1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{7e111a5c-3d11-4f56-9463-5310c3c69025} - (no file)
URLSearchHooks-{64ead72b-ffd4-4e01-aa3a-4c71665d73e4} - (no file)
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKLM-Run-Driver Genius - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Explorer_Run-43061 - c:\progra~3\LOCALS~1\Temp\msvrmv.cmd
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
ShellIconOverlayIdentifiers-{152C96EB-288E-4EDC-B7C6-D21F8250ADF3} - (no file)
ShellIconOverlayIdentifiers-{342DAA0B-D796-460D-8566-901E08A1CCAD} - (no file)
ShellIconOverlayIdentifiers-{57595DAE-1AE1-4D97-A49E-67CBB53B52DF} - (no file)
ShellIconOverlayIdentifiers-{33816773-98AE-4723-ADE0-EBE54C8B5A67} - (no file)
AddRemove-Driver Genius Professional Edition_is1 - c:\program files (x86)\Driver-Soft\DriverGenius\unins000.exe
AddRemove-PokerStars.it - c:\program files (x86)\PokerStars.IT\PokerStarsUninstall.exe
AddRemove-Titan Poker - c:\poker\Titan Poker\TitanPSetupUninstall1386726359841_da094e_de.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\postgresql-8.4]
"ImagePath"="\"c:\program files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe\" runservice -N \"postgresql-8.4\" -D \"C:/Program Files (x86)/PostgreSQL/8.4/data\" -w"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-4015719053-3797219543-3078460475-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-4015719053-3797219543-3078460475-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG*]
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
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
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\DbgagD\1*]
"value"="?\06\04\07\09\06\10t"
.
[HKEY_LOCAL_MACHINE\SYSTEM\BDSandBox\Benito\machine\SOFTWARE\Microsoft\Cryptography\RNG*]
@="!shallow!"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files (x86)\PostgreSQL\8.4\bin\pg_ctl.exe
c:\program files (x86)\PostgreSQL\8.4\bin\postgres.exe
c:\program files (x86)\PostgreSQL\8.4\bin\postgres.exe
c:\program files (x86)\PostgreSQL\8.4\bin\postgres.exe
c:\program files (x86)\PostgreSQL\8.4\bin\postgres.exe
c:\program files (x86)\PostgreSQL\8.4\bin\postgres.exe
c:\program files (x86)\JonDo\JonDo.exe
c:\program files (x86)\Java\jre7\bin\javaw.exe
c:\users\Benito\AppData\Roaming\Dropbox\bin\Dropbox.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-05-13 19:58:25 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2014-05-13 17:58
.
Vor Suchlauf: 16 Verzeichnis(se), 51.798.765.568 Bytes frei
Nach Suchlauf: 22 Verzeichnis(se), 54.889.758.720 Bytes frei
.
- - End Of File - - B9C5217A515A334F68BAD9B90DDBD0E9
A36C5E4F47E84449FF07ED3517B43A31