| |
| |||||||
Log-Analyse und Auswertung: TR/Dropper.MSIL.GENWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
26.05.2014, 15:04
| #1 |
| |  TR/Dropper.MSIL.GEN Hallo, Ich habe von Viren leider wenig arbeite und kein Virus aufgrund meiner Abschlussarbeit gerade gar nicht gebrauchen. Avira Free Antivirus hat mir heute gemeldet, dass en Virus gefunden wurde: TR/Dropper.MSIL.GEN Ich habe ihn nun schon in Quarantäne verschoben, das war leider bevor ich gelesen habe, dass man nichts vorher tun soll. Ich habe folgende Reportdatei bekommen: Avira Free Antivirus Erstellungsdatum der Reportdatei: Montag, 26. Mai 2014 13:29 Das Programm läuft als uneingeschränkte Vollversion. Online-Dienste stehen zur Verfügung. Lizenznehmer : Avira Antivirus Free Seriennummer : 0000149996-AVHOE-0000001 Plattform : Windows 7 Home Premium Windowsversion : (Service Pack 1) [6.1.7601] Boot Modus : Normal gebootet Benutzername : SYSTEM Computername : SVENJA-PC Versionsinformationen: BUILD.DAT : 14.0.4.642 57086 Bytes 09.05.2014 11:16:00 AVSCAN.EXE : 14.0.4.632 1030736 Bytes 15.05.2014 12:05:49 AVSCANRC.DLL : 14.0.4.620 62032 Bytes 15.05.2014 12:05:50 LUKE.DLL : 14.0.4.620 57936 Bytes 15.05.2014 12:06:14 AVSCPLR.DLL : 14.0.4.620 89680 Bytes 15.05.2014 12:05:50 AVREG.DLL : 14.0.4.632 261200 Bytes 15.05.2014 12:05:47 avlode.dll : 14.0.4.638 583760 Bytes 15.05.2014 12:05:46 avlode.rdf : 14.0.4.22 64276 Bytes 17.05.2014 12:05:26 VBASE000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 11:52:26 VBASE001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 11:52:44 VBASE002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 11:53:04 VBASE003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 11:53:19 VBASE004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 11:53:47 VBASE005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 11:54:36 VBASE006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 15:27:31 VBASE007.VDF : 7.11.145.136 2117120 Bytes 28.04.2014 10:24:37 VBASE008.VDF : 7.11.145.137 2048 Bytes 28.04.2014 10:24:37 VBASE009.VDF : 7.11.145.138 2048 Bytes 28.04.2014 10:24:38 VBASE010.VDF : 7.11.145.139 2048 Bytes 28.04.2014 10:24:38 VBASE011.VDF : 7.11.145.140 2048 Bytes 28.04.2014 10:24:38 VBASE012.VDF : 7.11.145.141 2048 Bytes 28.04.2014 10:24:38 VBASE013.VDF : 7.11.146.20 166912 Bytes 29.04.2014 15:25:29 VBASE014.VDF : 7.11.146.131 194048 Bytes 01.05.2014 18:53:24 VBASE015.VDF : 7.11.146.243 167936 Bytes 03.05.2014 20:20:48 VBASE016.VDF : 7.11.147.97 122368 Bytes 05.05.2014 13:42:43 VBASE017.VDF : 7.11.147.207 169472 Bytes 06.05.2014 19:32:23 VBASE018.VDF : 7.11.148.61 174080 Bytes 08.05.2014 14:22:31 VBASE019.VDF : 7.11.148.149 257024 Bytes 09.05.2014 23:41:02 VBASE020.VDF : 7.11.148.241 135168 Bytes 12.05.2014 12:05:35 VBASE021.VDF : 7.11.149.61 139264 Bytes 13.05.2014 15:11:08 VBASE022.VDF : 7.11.149.169 160256 Bytes 15.05.2014 01:21:23 VBASE023.VDF : 7.11.150.31 189440 Bytes 17.05.2014 12:05:27 VBASE024.VDF : 7.11.150.119 157696 Bytes 20.05.2014 07:27:28 VBASE025.VDF : 7.11.151.25 219648 Bytes 23.05.2014 08:53:35 VBASE026.VDF : 7.11.151.117 175104 Bytes 26.05.2014 10:32:04 VBASE027.VDF : 7.11.151.118 2048 Bytes 26.05.2014 10:32:04 VBASE028.VDF : 7.11.151.119 2048 Bytes 26.05.2014 10:32:04 VBASE029.VDF : 7.11.151.120 2048 Bytes 26.05.2014 10:32:04 VBASE030.VDF : 7.11.151.121 2048 Bytes 26.05.2014 10:32:04 VBASE031.VDF : 7.11.151.132 126976 Bytes 26.05.2014 10:32:05 Engineversion : 8.3.18.32 AEVDF.DLL : 8.3.0.4 118976 Bytes 20.03.2014 14:56:38 AESCRIPT.DLL : 8.1.4.204 528584 Bytes 17.05.2014 12:05:26 AESCN.DLL : 8.3.0.4 135360 Bytes 23.05.2014 12:05:24 AESBX.DLL : 8.2.20.24 1409224 Bytes 08.05.2014 14:22:30 AERDL.DLL : 8.2.0.138 704888 Bytes 02.12.2013 15:56:32 AEPACK.DLL : 8.4.0.24 778440 Bytes 13.05.2014 15:11:07 AEOFFICE.DLL : 8.3.0.4 205000 Bytes 17.04.2014 19:31:21 AEHEUR.DLL : 8.1.4.1084 6705352 Bytes 23.05.2014 12:05:23 AEHELP.DLL : 8.3.0.0 274808 Bytes 11.03.2014 18:19:24 AEGEN.DLL : 8.1.7.26 450752 Bytes 17.04.2014 19:31:21 AEEXP.DLL : 8.4.1.342 594120 Bytes 23.05.2014 12:05:25 AEEMU.DLL : 8.1.3.2 393587 Bytes 29.09.2013 11:55:02 AECORE.DLL : 8.3.0.6 241864 Bytes 19.03.2014 15:46:35 AEBB.DLL : 8.1.1.4 53619 Bytes 29.09.2013 11:55:00 AVWINLL.DLL : 14.0.4.620 24144 Bytes 15.05.2014 12:05:39 AVPREF.DLL : 14.0.4.632 50256 Bytes 15.05.2014 12:05:46 AVREP.DLL : 14.0.4.620 219216 Bytes 15.05.2014 12:05:47 AVARKT.DLL : 14.0.4.632 225872 Bytes 15.05.2014 12:05:40 AVEVTLOG.DLL : 14.0.4.620 182352 Bytes 15.05.2014 12:05:43 SQLITE3.DLL : 14.0.4.620 452176 Bytes 15.05.2014 12:06:22 AVSMTP.DLL : 14.0.4.620 76368 Bytes 15.05.2014 12:05:51 NETNT.DLL : 14.0.4.620 13392 Bytes 15.05.2014 12:06:15 RCIMAGE.DLL : 14.0.4.620 4979280 Bytes 15.05.2014 12:05:39 RCTEXT.DLL : 14.0.4.620 73808 Bytes 15.05.2014 12:05:39 Konfiguration für den aktuellen Suchlauf: Job Name..............................: AVGuardAsyncScan Konfigurationsdatei...................: C:\ProgramData\Avira\AntiVir Desktop\TEMP\AVGUARD_538317df\guard_slideup.avp Protokollierung.......................: standard Primäre Aktion........................: Reparieren Sekundäre Aktion......................: Quarantäne Durchsuche Masterbootsektoren.........: ein Durchsuche Bootsektoren...............: aus Durchsuche aktive Programme...........: ein Durchsuche Registrierung..............: aus Suche nach Rootkits...................: aus Integritätsprüfung von Systemdateien..: aus Prüfe alle Dateien....................: Alle Dateien Durchsuche Archive....................: ein Rekursionstiefe einschränken..........: 20 Archiv Smart Extensions...............: ein Makrovirenheuristik...................: ein Dateiheuristik........................: Vollständig Beginn des Suchlaufs: Montag, 26. Mai 2014 13:29 Der Suchlauf über gestartete Prozesse wird begonnen: Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '42' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '83' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '98' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '167' Modul(e) wurden durchsucht Durchsuche Prozess 'EgisTicketService.exe' - '35' Modul(e) wurden durchsucht Durchsuche Prozess 'vpnagent.exe' - '76' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '79' Modul(e) wurden durchsucht Durchsuche Prozess 'Dwm.exe' - '35' Modul(e) wurden durchsucht Durchsuche Prozess 'spoolsv.exe' - '92' Modul(e) wurden durchsucht Durchsuche Prozess 'Explorer.EXE' - '195' Modul(e) wurden durchsucht Durchsuche Prozess 'sched.exe' - '60' Modul(e) wurden durchsucht Durchsuche Prozess 'taskhost.exe' - '75' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '61' Modul(e) wurden durchsucht Durchsuche Prozess 'schedul2.exe' - '23' Modul(e) wurden durchsucht Durchsuche Prozess 'armsvc.exe' - '29' Modul(e) wurden durchsucht Durchsuche Prozess 'avguard.exe' - '109' Modul(e) wurden durchsucht Durchsuche Prozess 'AppleMobileDeviceService.exe' - '70' Modul(e) wurden durchsucht Durchsuche Prozess 'SeaPort.EXE' - '54' Modul(e) wurden durchsucht Durchsuche Prozess 'mDNSResponder.exe' - '36' Modul(e) wurden durchsucht Durchsuche Prozess 'CxAudMsg64.exe' - '29' Modul(e) wurden durchsucht Durchsuche Prozess 'dsiwmis.exe' - '33' Modul(e) wurden durchsucht Durchsuche Prozess 'ePowerSvc.exe' - '45' Modul(e) wurden durchsucht Durchsuche Prozess 'LMworker.exe' - '27' Modul(e) wurden durchsucht Durchsuche Prozess 'LMutilps32.exe' - '39' Modul(e) wurden durchsucht Durchsuche Prozess 'GREGsvc.exe' - '24' Modul(e) wurden durchsucht Durchsuche Prozess 'RIconMan.exe' - '38' Modul(e) wurden durchsucht Durchsuche Prozess 'UpdaterService.exe' - '27' Modul(e) wurden durchsucht Durchsuche Prozess 'lxeccoms.exe' - '53' Modul(e) wurden durchsucht Durchsuche Prozess 'NOBuAgent.exe' - '30' Modul(e) wurden durchsucht Durchsuche Prozess 'IScheduleSvc.exe' - '71' Modul(e) wurden durchsucht Durchsuche Prozess 'HelperService.exe' - '56' Modul(e) wurden durchsucht Durchsuche Prozess 'ConversionService.exe' - '38' Modul(e) wurden durchsucht Durchsuche Prozess 'PsiService_2.exe' - '26' Modul(e) wurden durchsucht Durchsuche Prozess 'RS_Service.exe' - '27' Modul(e) wurden durchsucht Durchsuche Prozess 'Samsung Link.exe' - '15' Modul(e) wurden durchsucht Durchsuche Prozess 'Samsung Link.exe' - '66' Modul(e) wurden durchsucht Durchsuche Prozess 'igfxtray.exe' - '31' Modul(e) wurden durchsucht Durchsuche Prozess 'hkcmd.exe' - '30' Modul(e) wurden durchsucht Durchsuche Prozess 'igfxpers.exe' - '51' Modul(e) wurden durchsucht Durchsuche Prozess 'SynTPEnh.exe' - '65' Modul(e) wurden durchsucht Durchsuche Prozess 'ePowerTray.exe' - '53' Modul(e) wurden durchsucht Durchsuche Prozess 'schedhlp.exe' - '27' Modul(e) wurden durchsucht Durchsuche Prozess 'lxecmon.exe' - '50' Modul(e) wurden durchsucht Durchsuche Prozess 'ezprint.exe' - '65' Modul(e) wurden durchsucht Durchsuche Prozess 'sftvsa.exe' - '32' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '38' Modul(e) wurden durchsucht Durchsuche Prozess 'Samsung Link Tray Agent.exe' - '83' Modul(e) wurden durchsucht Durchsuche Prozess 'Nexus.exe' - '108' Modul(e) wurden durchsucht Durchsuche Prozess 'sidebar.exe' - '73' Modul(e) wurden durchsucht Durchsuche Prozess 'TeamViewer_Service.exe' - '96' Modul(e) wurden durchsucht Durchsuche Prozess 'TrueImageTryStartService.exe' - '43' Modul(e) wurden durchsucht Durchsuche Prozess 'EgisTSR.exe' - '74' Modul(e) wurden durchsucht Durchsuche Prozess 'OptProReminder.exe' - '36' Modul(e) wurden durchsucht Durchsuche Prozess 'TuneUpUtilitiesService64.exe' - '72' Modul(e) wurden durchsucht Durchsuche Prozess 'WsxService.exe' - '24' Modul(e) wurden durchsucht Durchsuche Prozess 'CltMngSvc.exe' - '49' Modul(e) wurden durchsucht Durchsuche Prozess 'iCloudServices.exe' - '77' Modul(e) wurden durchsucht Durchsuche Prozess 'ApplePhotoStreams.exe' - '125' Modul(e) wurden durchsucht Durchsuche Prozess 'AcerVCM.exe' - '48' Modul(e) wurden durchsucht Durchsuche Prozess 'BackupManagerTray.exe' - '80' Modul(e) wurden durchsucht Durchsuche Prozess 'LManager.exe' - '72' Modul(e) wurden durchsucht Durchsuche Prozess 'TrueImageMonitor.exe' - '40' Modul(e) wurden durchsucht Durchsuche Prozess 'sftlist.exe' - '85' Modul(e) wurden durchsucht Durchsuche Prozess 'Dropbox.exe' - '106' Modul(e) wurden durchsucht Durchsuche Prozess 'TimounterMonitor.exe' - '37' Modul(e) wurden durchsucht Durchsuche Prozess 'cltmng.exe' - '88' Modul(e) wurden durchsucht Durchsuche Prozess 'cltmngui.exe' - '90' Modul(e) wurden durchsucht Durchsuche Prozess 'avgnt.exe' - '98' Modul(e) wurden durchsucht Durchsuche Prozess 'TuneUpUtilitiesApp64.exe' - '31' Modul(e) wurden durchsucht Durchsuche Prozess 'vpnui.exe' - '76' Modul(e) wurden durchsucht Durchsuche Prozess 'MMDx64Fx.exe' - '31' Modul(e) wurden durchsucht Durchsuche Prozess 'LMutilps.exe' - '30' Modul(e) wurden durchsucht Durchsuche Prozess 'soffice.exe' - '24' Modul(e) wurden durchsucht Durchsuche Prozess 'wmiprvse.exe' - '64' Modul(e) wurden durchsucht Durchsuche Prozess 'igfxext.exe' - '28' Modul(e) wurden durchsucht Durchsuche Prozess 'igfxsrvc.exe' - '32' Modul(e) wurden durchsucht Durchsuche Prozess 'unsecapp.exe' - '31' Modul(e) wurden durchsucht Durchsuche Prozess 'wmiprvse.exe' - '33' Modul(e) wurden durchsucht Durchsuche Prozess 'soffice.bin' - '96' Modul(e) wurden durchsucht Durchsuche Prozess 'ePowerEvent.exe' - '21' Modul(e) wurden durchsucht Durchsuche Prozess 'CVHSVC.EXE' - '82' Modul(e) wurden durchsucht Durchsuche Prozess 'avshadow.exe' - '20' Modul(e) wurden durchsucht Durchsuche Prozess 'SearchIndexer.exe' - '60' Modul(e) wurden durchsucht Durchsuche Prozess 'SynTPHelper.exe' - '22' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '38' Modul(e) wurden durchsucht Durchsuche Prozess 'APSDaemon.exe' - '86' Modul(e) wurden durchsucht Durchsuche Prozess 'ApplePhotoStreamsDownloader.exe' - '117' Modul(e) wurden durchsucht Durchsuche Prozess 'IAStorDataMgrSvc.exe' - '55' Modul(e) wurden durchsucht Durchsuche Prozess 'iviRegMgr.exe' - '26' Modul(e) wurden durchsucht Durchsuche Prozess 'LMS.exe' - '33' Modul(e) wurden durchsucht Durchsuche Prozess 'UNS.exe' - '45' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '49' Modul(e) wurden durchsucht Durchsuche Prozess 'wmplayer.exe' - '120' Modul(e) wurden durchsucht Durchsuche Prozess 'netlogger.exe' - '28' Modul(e) wurden durchsucht Durchsuche Prozess 'dlm.exe' - '64' Modul(e) wurden durchsucht Durchsuche Prozess 'SnapDo_RBCB_p5v4.exe' - '76' Modul(e) wurden durchsucht Durchsuche Prozess 'msiexec.exe' - '74' Modul(e) wurden durchsucht Durchsuche Prozess 'SearchProtocolHost.exe' - '39' Modul(e) wurden durchsucht Durchsuche Prozess 'SearchFilterHost.exe' - '28' Modul(e) wurden durchsucht Durchsuche Prozess 'FreeYouTubeToMP3Converter.exe' - '137' Modul(e) wurden durchsucht Durchsuche Prozess 'avscan.exe' - '122' Modul(e) wurden durchsucht Durchsuche Prozess 'SnapDo.exe' - '144' Modul(e) wurden durchsucht Durchsuche Prozess 'firefox.exe' - '119' Modul(e) wurden durchsucht Durchsuche Prozess 'linmsl.exe' - '55' Modul(e) wurden durchsucht Durchsuche Prozess 'conhost.exe' - '22' Modul(e) wurden durchsucht Durchsuche Prozess 'plugin-container.exe' - '81' Modul(e) wurden durchsucht Durchsuche Prozess 'FlashPlayerPlugin_13_0_0_214.exe' - '54' Modul(e) wurden durchsucht Durchsuche Prozess 'FlashPlayerPlugin_13_0_0_214.exe' - '69' Modul(e) wurden durchsucht Durchsuche Prozess 'msiexec.exe' - '62' Modul(e) wurden durchsucht Durchsuche Prozess 'MsiExec.exe' - '59' Modul(e) wurden durchsucht Durchsuche Prozess 'rundll32.exe' - '70' Modul(e) wurden durchsucht Durchsuche Prozess 'csc.exe' - '34' Modul(e) wurden durchsucht Durchsuche Prozess 'conhost.exe' - '22' Modul(e) wurden durchsucht Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht Durchsuche Prozess 'services.exe' - '36' Modul(e) wurden durchsucht Durchsuche Prozess 'lsass.exe' - '74' Modul(e) wurden durchsucht Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht Durchsuche Prozess 'winlogon.exe' - '34' Modul(e) wurden durchsucht Der Suchlauf über die ausgewählten Dateien wird begonnen: Beginne mit der Suche in 'C:\Users\Svenja\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe' C:\Users\Svenja\AppData\Local\Smartbar\Application\SmartbarVersionsHelper.exe [FUND] Ist das Trojanische Pferd TR/Dropper.MSIL.Gen [HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '568bb9d9.qua' verschoben! Ende des Suchlaufs: Montag, 26. Mai 2014 13:30 Benötigte Zeit: 01:14 Minute(n) Der Suchlauf wurde vollständig durchgeführt. 0 Verzeichnisse wurden überprüft 2359 Dateien wurden geprüft 1 Viren bzw. unerwünschte Programme wurden gefunden 0 Dateien wurden als verdächtig eingestuft 0 Dateien wurden gelöscht 0 Viren bzw. unerwünschte Programme wurden repariert 1 Dateien wurden in die Quarantäne verschoben 0 Dateien wurden umbenannt 0 Dateien konnten nicht durchsucht werden 2358 Dateien ohne Befall 9 Archive wurden durchsucht 0 Warnungen 1 Hinweise Ist mein Computer überhaupt infiziert? Kann ich diese eine befallene Datei aus der Quarantäne löschen? Ich sage jetzt schon einmal vielen vielen Dank für die HIlfe!!! Viele Grüße Svenja |
|
26.05.2014, 18:07
| #2 |
| /// the machine /// TB-Ausbilder    | TR/Dropper.MSIL.GEN hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
27.05.2014, 14:09
| #3 |
| | TR/Dropper.MSIL.GEN Vielen Dank
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-05-2014 02
Ran by Svenja (administrator) on SVENJA-PC on 27-05-2014 14:20:14
Running from C:\Users\Svenja\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Egis Technology Inc. ) C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\Program Files (x86)\LPT\srpts.exe
( ) C:\Windows\System32\lxeccoms.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Egis Technology Inc. ) C:\Program Files\Acer ProShield\EgisTSR.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
(Winstep Software Technologies) C:\Program Files (x86)\Winstep\Nexus.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe
(Winstep Software Technologies) C:\Program Files (x86)\Winstep\WsxService.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Smartbar) C:\Users\Svenja\AppData\Local\Smartbar\Application\SnapDo.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(PC Utilities Pro) C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TimounterMonitor.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesApp64.exe
(Dropbox, Inc.) C:\Users\Svenja\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunes.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
() C:\Users\Svenja\AppData\Local\LPT\srptm.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2697512 2011-02-17] (Synaptics Incorporated)
HKLM\...\Run: [ProShieldTSR] => C:\Program Files\Acer ProShield\EgisTSR.exe [165936 2011-06-04] (Egis Technology Inc. )
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831528 2011-05-10] (Acer Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [140568 2007-12-03] (Acronis)
HKLM\...\Run: [lxecmon.exe] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] ()
HKLM\...\Run: [EzPrint] => C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] ()
HKLM\...\Run: [Samsung Link] => C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe [600928 2014-01-17] (Copyright 2013 SAMSUNG)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1110096 2011-07-01] (Dritek System Inc.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2622104 2007-12-03] (Acronis)
HKLM-x32\...\Run: [AcronisTimounterMonitor] => C:\Program Files (x86)\Acronis\TrueImageHome\TimounterMonitor.exe [911184 2007-12-03] (Acronis)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-15] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707984 2013-10-10] (Cisco Systems, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4000574522-944529959-3706375610-1000\...\Run: [Nexus] => C:\Program Files (x86)\Winstep\Nexus.exe [16954496 2012-03-22] (Winstep Software Technologies)
HKU\S-1-5-21-4000574522-944529959-3706375610-1000\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [79664 2012-06-10] (PC Utilities Pro)
HKU\S-1-5-21-4000574522-944529959-3706375610-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)
HKU\S-1-5-21-4000574522-944529959-3706375610-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-09-15] (Apple Inc.)
HKU\S-1-5-21-4000574522-944529959-3706375610-1000\...\Run: [Browser Infrastructure Helper] => C:\Users\Svenja\AppData\Local\Smartbar\Application\SnapDo.exe [28192 2014-04-08] (Smartbar)
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [202560 2014-05-14] (Client Connect LTD)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [171840 2014-05-14] (Client Connect LTD)
Lsa: [Authentication Packages] msv1_0 relog_ap
Lsa: [Notification Packages] scecli EgisPwdFilter EgisDSPwdFilter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk
ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Svenja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Svenja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Svenja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=M15FA4865-A955-47BC-991A-DA5713FD08AD&SearchSource=55&CUI=&UM=5&UP=SP699E2267-0E45-4F4D-8D40-EBE532C5641C&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoyEyah5AJ-r0YUIfV8hznTlM38W4H_nsfdJht0vwocsTsn0f8pSdD1LWXJBjGxu8vlzuxfT7o7f-QKzNjoWcWt1_yZ29CJI84NVI8Q4rn8JBc2YpgLndRQEZS7iiIK7&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoyEyah5AJ-r0YUIfV8hznTlM38W4H_nsfdJht0vwocsTsn0f8pSdD1LWXJBjGxu8vlzuxfT7o7f-QKzNjoWcWt1_yZ29CJI84NVI8Q4rn8JBc2YpgLndRQEZS7iiIK7&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoyEyah5AJ-r0YUIfV8hznTlM38W4H_nsfdJht0vwocsTsn0f8pSdD1LWXJBjGxu8vlzuxfT7o7f-QKzNjoWcWt1_yZ29CJI84NVI8Q4rn8JBc2YpgLndRQEZS7iiIK7&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoyEyah5AJ-r0YUIfV8hznTlM38W4H_nsfdJht0vwocsTsn0f8pSdD1LWXJBjGxu8vlzuxfT7o7f-QKzNjoWcWt1_yZ29CJI84NVI8Q4rn8JBc2YpgLndRQEZS7iiIK7&q={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoyEyah5AJ-r0YUIfV8hznTlM38W4H_nsfdJht0vwocsTsn0f8pSdD1LWXJBjGxu8vlzuxfT7o7f-QKzNjoWcWt1_yZ29CJI84NVI8Q4rn8JBc2YpgLndRQEZS7iiIK7&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoyEyah5AJ-r0YUIfV8hznTlM38W4H_nsfdJht0vwocsTsn0f8pSdD1LWXJBjGxu8vlzuxfT7o7f-QKzNjoWcWt1_yZ29CJI84NVI8Q4rn8JBc2YpgLndRQEZS7iiIK7&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: SmartbarInternetExplorerBHOEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: SmartbarInternetExplorerBHOEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: SwissAcademic.Citavi.Picker.IEPicker - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: EgisPBIE Sign-in Helper - {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} - C:\Program Files\Acer ProShield\x86\EgisPBIE.dll (Egis Technology Inc.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GbR)
Toolbar: HKLM-x32 - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Svenja\AppData\Roaming\Mozilla\Firefox\Profiles\vv6gkwnm.default
FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3325585&octid=EB_ORIGINAL_CTID&ISID=M15FA4865-A955-47BC-991A-DA5713FD08AD&SearchSource=69&CUI=&SSPV=&Lay=1&UM=5&UP=SP699E2267-0E45-4F4D-8D40-EBE532C5641C
FF DefaultSearchEngine: Google Default
FF SelectedSearchEngine: Google Default
FF Homepage: hxxp://t-online.de/
FF Keyword.URL: hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQme9oxsQRSyyp0BoyEyah5AJ-r0YUIfV8hznTlM38W4H_nsfdJht0vwocsTsn0f8pSdD1LWXJBjGxu8vlzuxfT7o7f-QKzNjoWcWt1_yZ29CJI84NVI8Q4rn8JBc2YpgLndRQEZS7iiIK7&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @mcafee.com/MSC,version=10 - c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @mcafee.com/MSC,version=10 - c:\progra~2\mcafee\msc\npmcsn~1.dll No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: samsung.com/SamsungLinkPCPlugin - C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll No File
FF SearchPlugin: C:\Users\Svenja\AppData\Roaming\Mozilla\Firefox\Profiles\vv6gkwnm.default\searchplugins\google-default.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Spartipps von SparPilot.com - C:\Users\Svenja\AppData\Roaming\Mozilla\Firefox\Profiles\vv6gkwnm.default\Extensions\sparpilot@sparpilot.com [2013-03-10]
FF Extension: Snap.Do - C:\Users\Svenja\AppData\Roaming\Mozilla\Firefox\Profiles\vv6gkwnm.default\Extensions\{00b320b8-5713-c2ca-0459-a2f9fe0c3cb8} [2014-05-26]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\Svenja\AppData\Roaming\Mozilla\Firefox\Profiles\vv6gkwnm.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2013-12-09]
FF Extension: Adblock Plus - C:\Users\Svenja\AppData\Roaming\Mozilla\Firefox\Profiles\vv6gkwnm.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-02]
FF HKLM-x32\...\Firefox\Extensions: [{B7082FAA-CB62-4872-9106-E42DD88EDE45}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF HKLM-x32\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files\Acer ProShield\FFExt
FF Extension: Online Accounts Extension - C:\Program Files\Acer ProShield\FFExt [2012-05-28]
FF HKLM-x32\...\Firefox\Extensions: [{d4da7309-b89a-45ec-8ebb-cfb2ae13618b}] - C:\Program Files\Acer ProShield\FFExt20
FF Extension: Online Accounts Extension - C:\Program Files\Acer ProShield\FFExt20 [2012-05-28]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-01-08]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2013-01-08]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-15] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1039440 2014-05-15] (Avira Operations GmbH & Co. KG)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2496832 2014-05-14] (Client Connect LTD)
R2 EgisTec Ticket Service; C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe [212016 2011-06-04] (Egis Technology Inc. )
R2 LPTSystemUpdater; C:\Program Files (x86)\LPT\srpts.exe [37920 2014-04-08] ()
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( )
R2 lxec_device; C:\Windows\SysWOW64\lxeccoms.exe [598696 2010-04-14] ( )
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [609632 2014-01-17] (Copyright 2013 SAMSUNG)
S3 TDslMgrService; C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exe [307200 2008-10-23] (T-Systems Enterprise Services GmbH)
R2 TryAndDecideService; C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe [498792 2007-12-03] ()
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2028864 2011-12-08] (TuneUp Software)
S2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [X]
R2 Winstep Xtreme Service; C:\Program Files (x86)\Winstep\WsxService [X]
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-15] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [19008 2007-08-01] (T-Systems Enterprise Services GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [11856 2010-10-07] (TuneUp Software)
S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-10-10] (Cisco Systems, Inc.)
S0 mfewfpk; system32\drivers\mfewfpk.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-27 14:20 - 2014-05-27 14:20 - 00024845 _____ () C:\Users\Svenja\Downloads\FRST.txt
2014-05-27 14:19 - 2014-05-27 14:20 - 00000000 ____D () C:\FRST
2014-05-27 14:19 - 2014-05-27 14:19 - 02066944 _____ (Farbar) C:\Users\Svenja\Downloads\FRST64.exe
2014-05-27 01:34 - 2014-05-27 01:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf
2014-05-26 14:57 - 2014-05-26 14:57 - 00000000 ____D () C:\Windows\Profiles\Svenja
2014-05-26 13:29 - 2014-05-26 14:29 - 00000000 ____D () C:\Program Files (x86)\LPT
2014-05-26 13:28 - 2014-05-26 13:28 - 00002448 _____ () C:\Users\Svenja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-05-26 13:28 - 2014-05-26 13:28 - 00002386 _____ () C:\Users\Svenja\Desktop\Search.lnk
2014-05-26 13:28 - 2014-05-26 13:28 - 00000000 ____D () C:\Users\Svenja\AppData\Local\Smartbar
2014-05-26 13:28 - 2014-05-26 13:28 - 00000000 ____D () C:\Users\Svenja\AppData\Local\LPT
2014-05-25 20:00 - 2014-05-25 20:01 - 00000000 ____D () C:\Users\Svenja\AppData\Local\SearchProtect
2014-05-25 20:00 - 2014-05-25 20:00 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-05-17 10:58 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-17 10:58 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-17 10:58 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-17 10:58 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-17 10:58 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-17 10:58 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 13:12 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-15 13:12 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-15 13:12 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 13:12 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 13:08 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 13:08 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 13:08 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 13:08 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 13:08 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 13:08 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 13:08 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 13:08 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 13:08 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 13:08 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 13:08 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 13:08 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 13:08 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 13:08 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 13:08 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 13:08 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 13:08 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 13:08 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 13:08 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 13:08 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 13:08 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 13:08 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 13:08 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 13:08 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 13:08 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 13:08 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 13:08 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 13:08 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 13:08 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 13:08 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-10 14:47 - 2014-05-10 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-07 17:31 - 2014-05-17 11:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-07 12:15 - 2014-05-07 12:15 - 00000000 ____D () C:\Users\Svenja\AppData\Local\{3DB9C815-4AC8-499C-A944-6606EC67C896}
2014-05-07 10:54 - 2014-05-21 16:35 - 00000000 ____D () C:\Users\Svenja\AppData\Roaming\f4analyse
2014-05-07 10:53 - 2014-05-07 10:53 - 00001023 _____ () C:\Users\Public\Desktop\f4analyse.lnk
2014-05-07 10:53 - 2014-05-07 10:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\f4analyse
2014-05-07 10:53 - 2014-05-07 10:53 - 00000000 ____D () C:\Program Files (x86)\f4analyse
2014-05-07 10:52 - 2014-05-07 10:52 - 25073985 _____ () C:\Users\Svenja\Downloads\f4-analyse-windows-de.zip
2014-05-07 10:47 - 2014-05-07 10:51 - 00000966 _____ () C:\Users\Public\Desktop\f4_2012.lnk
2014-05-07 10:46 - 2014-05-07 10:46 - 02324134 _____ () C:\Users\Svenja\Downloads\f4_2012_installer analyse.exe
2014-05-07 10:10 - 2014-05-07 10:10 - 06736720 _____ (Mikogo GmbH) C:\Users\Svenja\Downloads\mikogo.exe
2014-05-07 10:10 - 2014-05-07 10:10 - 00000000 ____D () C:\Users\Svenja\Documents\Mikogo
2014-05-07 10:10 - 2014-05-07 10:10 - 00000000 ____D () C:\Users\Svenja\AppData\Local\Mikogo
2014-05-07 00:34 - 2014-05-07 00:36 - 79687955 _____ () C:\Users\Svenja\Downloads\MAXQDA11_Demo.exe
2014-05-03 01:07 - 2014-05-27 01:27 - 00000000 ____D () C:\Users\Svenja\AppData\Roaming\DropboxMaster
2014-04-30 13:50 - 2014-04-30 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-28 00:23 - 2014-05-07 12:15 - 00000000 ____D () C:\Users\Svenja\AppData\Local\Windows Live
2014-04-28 00:22 - 2014-04-28 00:23 - 00000000 ____D () C:\Users\Svenja\AppData\Local\{E21AF412-4DD0-4D60-A189-9C3949EE910A}
==================== One Month Modified Files and Folders =======
2014-05-27 14:20 - 2014-05-27 14:20 - 00024845 _____ () C:\Users\Svenja\Downloads\FRST.txt
2014-05-27 14:20 - 2014-05-27 14:19 - 00000000 ____D () C:\FRST
2014-05-27 14:19 - 2014-05-27 14:19 - 02066944 _____ (Farbar) C:\Users\Svenja\Downloads\FRST64.exe
2014-05-27 14:04 - 2012-05-28 10:25 - 01714461 _____ () C:\Windows\WindowsUpdate.log
2014-05-27 13:43 - 2013-01-18 11:21 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-27 11:38 - 2012-12-23 16:15 - 00068687 _____ () C:\Windows\setupact.log
2014-05-27 01:35 - 2013-06-24 23:47 - 00000000 ____D () C:\Users\Svenja\Desktop\Fotos_Iphone
2014-05-27 01:34 - 2014-05-27 01:34 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf
2014-05-27 01:34 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-27 01:34 - 2009-07-14 06:45 - 00016752 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-27 01:29 - 2012-12-29 22:03 - 00000000 ____D () C:\Users\Svenja\AppData\Roaming\Dropbox
2014-05-27 01:28 - 2012-12-29 22:06 - 00000000 ___RD () C:\Users\Svenja\Dropbox
2014-05-27 01:27 - 2014-05-03 01:07 - 00000000 ____D () C:\Users\Svenja\AppData\Roaming\DropboxMaster
2014-05-27 01:25 - 2013-02-17 20:03 - 00060806 _____ () C:\ProgramData\lxecscan.log
2014-05-27 01:25 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-27 01:24 - 2012-12-23 16:15 - 00113880 _____ () C:\Windows\PFRO.log
2014-05-26 14:57 - 2014-05-26 14:57 - 00000000 ____D () C:\Windows\Profiles\Svenja
2014-05-26 14:29 - 2014-05-26 13:29 - 00000000 ____D () C:\Program Files (x86)\LPT
2014-05-26 13:28 - 2014-05-26 13:28 - 00002448 _____ () C:\Users\Svenja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-05-26 13:28 - 2014-05-26 13:28 - 00002386 _____ () C:\Users\Svenja\Desktop\Search.lnk
2014-05-26 13:28 - 2014-05-26 13:28 - 00000000 ____D () C:\Users\Svenja\AppData\Local\Smartbar
2014-05-26 13:28 - 2014-05-26 13:28 - 00000000 ____D () C:\Users\Svenja\AppData\Local\LPT
2014-05-26 13:28 - 2013-09-11 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-26 13:28 - 2013-09-11 13:17 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-26 13:27 - 2013-09-11 13:17 - 00000000 ____D () C:\Users\Svenja\AppData\Roaming\OpenCandy
2014-05-26 13:27 - 2013-09-11 13:17 - 00000000 ____D () C:\Users\Svenja\AppData\Roaming\DVDVideoSoft
2014-05-25 22:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-05-25 20:01 - 2014-05-25 20:00 - 00000000 ____D () C:\Users\Svenja\AppData\Local\SearchProtect
2014-05-25 20:00 - 2014-05-25 20:00 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-05-25 00:03 - 2013-02-05 11:12 - 00001384 _____ () C:\Windows\wininit.ini
2014-05-25 00:03 - 2012-12-29 22:03 - 00000000 ____D () C:\Users\Svenja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-25 00:03 - 2012-12-22 15:54 - 00000000 ___RD () C:\Users\Svenja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-24 18:33 - 2013-03-04 17:40 - 00000000 ____D () C:\ProgramData\Lx_cats
2014-05-23 14:37 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-21 16:35 - 2014-05-07 10:54 - 00000000 ____D () C:\Users\Svenja\AppData\Roaming\f4analyse
2014-05-21 03:34 - 2013-03-10 16:38 - 00000000 ____D () C:\Users\Svenja\AppData\Roaming\F4
2014-05-20 13:12 - 2012-05-28 20:18 - 00700134 _____ () C:\Windows\system32\perfh007.dat
2014-05-20 13:12 - 2012-05-28 20:18 - 00149984 _____ () C:\Windows\system32\perfc007.dat
2014-05-20 13:12 - 2009-07-14 07:13 - 01622236 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-20 10:51 - 2012-12-23 11:32 - 00000000 ____D () C:\Users\Svenja\AppData\Roaming\vlc
2014-05-17 11:20 - 2012-12-22 15:54 - 00000000 ___RD () C:\Users\Svenja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-17 11:16 - 2014-05-07 17:31 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-17 10:58 - 2013-02-17 21:32 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-17 10:57 - 2013-07-21 03:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-17 10:55 - 2012-12-23 15:58 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-15 14:05 - 2013-09-29 14:00 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-05-15 14:05 - 2013-09-29 14:00 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-05-14 01:43 - 2013-01-18 11:21 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 01:43 - 2013-01-18 11:21 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 01:43 - 2013-01-18 11:21 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-10 18:54 - 2012-12-23 15:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-10 14:47 - 2014-05-10 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 19:42 - 2013-07-19 17:48 - 00105588 _____ () C:\ProgramData\lxec.log
2014-05-09 13:52 - 2012-12-25 16:50 - 00000000 ____D () C:\Users\Svenja\Desktop\Svenja
2014-05-09 08:14 - 2014-05-15 13:12 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-15 13:12 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-07 13:58 - 2013-03-04 17:44 - 00243004 _____ () C:\ProgramData\lxecJSW.log
2014-05-07 12:15 - 2014-05-07 12:15 - 00000000 ____D () C:\Users\Svenja\AppData\Local\{3DB9C815-4AC8-499C-A944-6606EC67C896}
2014-05-07 12:15 - 2014-04-28 00:23 - 00000000 ____D () C:\Users\Svenja\AppData\Local\Windows Live
2014-05-07 10:53 - 2014-05-07 10:53 - 00001023 _____ () C:\Users\Public\Desktop\f4analyse.lnk
2014-05-07 10:53 - 2014-05-07 10:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\f4analyse
2014-05-07 10:53 - 2014-05-07 10:53 - 00000000 ____D () C:\Program Files (x86)\f4analyse
2014-05-07 10:52 - 2014-05-07 10:52 - 25073985 _____ () C:\Users\Svenja\Downloads\f4-analyse-windows-de.zip
2014-05-07 10:51 - 2014-05-07 10:47 - 00000966 _____ () C:\Users\Public\Desktop\f4_2012.lnk
2014-05-07 10:46 - 2014-05-07 10:46 - 02324134 _____ () C:\Users\Svenja\Downloads\f4_2012_installer analyse.exe
2014-05-07 10:10 - 2014-05-07 10:10 - 06736720 _____ (Mikogo GmbH) C:\Users\Svenja\Downloads\mikogo.exe
2014-05-07 10:10 - 2014-05-07 10:10 - 00000000 ____D () C:\Users\Svenja\Documents\Mikogo
2014-05-07 10:10 - 2014-05-07 10:10 - 00000000 ____D () C:\Users\Svenja\AppData\Local\Mikogo
2014-05-07 00:36 - 2014-05-07 00:34 - 79687955 _____ () C:\Users\Svenja\Downloads\MAXQDA11_Demo.exe
2014-05-06 06:40 - 2014-05-17 10:58 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-17 10:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-17 10:58 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-17 10:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-17 10:58 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-17 10:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-04-30 14:40 - 2014-04-30 13:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-28 00:23 - 2014-04-28 00:22 - 00000000 ____D () C:\Users\Svenja\AppData\Local\{E21AF412-4DD0-4D60-A189-9C3949EE910A}
Some content of TEMP:
====================
C:\Users\Svenja\AppData\Local\Temp\avgnt.exe
C:\Users\Svenja\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpszcun3.dll
C:\Users\Svenja\AppData\Local\Temp\nso2045.exe
C:\Users\Svenja\AppData\Local\Temp\nsu1B36.exe
C:\Users\Svenja\AppData\Local\Temp\nsuC45D.exe
C:\Users\Svenja\AppData\Local\Temp\nszBFE9.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-19 02:02
==================== End Of Log ============================
--- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-05-2014 02
Ran by Svenja at 2014-05-27 15:08:18
Running from C:\Users\Svenja\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1710 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.0.1710 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3007 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0913.2011 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)
Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3501 - Acer Incorporated)
Acronis*True*Image*Home (HKLM-x32\...\{633A06C3-B709-479A-AAB3-5EE94AD9EE4B}) (Version: 11.0.8064 - Acronis)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.0) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.0 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Bing Bar (HKLM-x32\...\{C28D96C0-6A90-459E-A077-A6706F4EC0FC}) (Version: 7.0.765.0 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.26 - Piriform)
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.04072 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.04072 - Cisco Systems, Inc.) Hidden
Citavi (HKLM-x32\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.3.0.0 - Swiss Academic Software)
Civilization III (HKLM-x32\...\{0AD84416-63A4-4CF3-BDDF-8FA866711FB0}) (Version: - )
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.52.0.50 - Conexant)
Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.0.5.899 - Corel Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 5.1.3 - CEWE Stiftung u Co. KGaA)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
DSL-Manager (HKLM-x32\...\{90A455A7-0FC8-4508-B7FA-8F135B8F041A}) (Version: - )
eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 14.4.20130909 - Landesfinanzdirektion Thüringen)
f4 2012 (HKLM-x32\...\f42012) (Version: - audiotranskription.de)
f4analyse (HKLM-x32\...\f4analyse) (Version: - audiotranskription.de)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free YouTube Download version 3.2.35.514 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.35.514 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.35.514 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.35.514 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
iCloud (HKLM\...\{EAFB2AD8-D92B-464C-8D97-B9CB94703C4A}) (Version: 3.0.2.163 - Apple Inc.)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Install Absolute Data Protect (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 1.0.0.42 - Absolute Software)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2345 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.6.0.1002 - Intel Corporation)
iTunes (HKLM\...\{F73A118B-8271-47E2-8790-0C636B2539C5}) (Version: 11.1.0.126 - Apple Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 6.0.8s1 - Acer Inc.)
Lexmark Pro800-Pro900 Series (HKLM\...\Lexmark Pro800-Pro900 Series) (Version: - Lexmark International, Inc.)
LPT System Updater Service (x32 Version: 1.0.0.0 - LPT) Hidden <==== ATTENTION
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
Nexus 12.2 (HKLM-x32\...\Winstep Xtreme_is1) (Version: - )
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
Optimizer Pro v3.0 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.0 - PC Utilities Pro) <==== ATTENTION
PDF Architect (HKLM-x32\...\{30B41B7A-3C9D-44DE-A7A1-949011F33CC3}) (Version: 1.0.41.8362 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.1 - pdfforge)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ProShield (HKLM-x32\...\InstallShield_{08CCD7B4-9EED-4926-805D-C4FFF869989A}) (Version: 1.0.48.3 - Egis Technology Inc.)
ProShield (Version: 1.0.48.3 - Egis Technology Inc.) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.74 - Realtek Semiconductor Corp.)
Samsung Link 1.8.0.1401171024 (HKLM\...\8474-7877-9059-0204) (Version: 1.8.0.1401171024 - Copyright 2013 SAMSUNG)
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.13.2.14 - Client Connect LTD) <==== ATTENTION
Secure Download Manager (HKLM-x32\...\{E98D115E-D621-4723-8AF0-147BADA9A466}) (Version: 3.1.40 - Kivuto Solutions Inc.)
Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Snap.Do (HKLM-x32\...\{AB65D81D-303A-4DDB-AC7C-12C9CD9F67FB}) (Version: 11.71.1.16545 - ReSoft Ltd.) <==== ATTENTION
Snap.Do Engine (HKCU\...\{13b9e649-e414-4859-b05d-d57c4db91c07}) (Version: 11.71.1.16545 - ReSoft Ltd.) <==== ATTENTION
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.14.0 - Synaptics Incorporated)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.16642 - TeamViewer)
TuneUp Utilities 2011 (HKLM-x32\...\TuneUp Utilities 2011) (Version: 10.0.4500.49 - TuneUp Software)
TuneUp Utilities 2011 (x32 Version: 10.0.4500.49 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4500.49 - TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN)
VLC media player 2.0.6 (HKLM-x32\...\VLC media player) (Version: 2.0.6 - VideoLAN)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Zattoo4 4.0.5 (HKLM-x32\...\Zattoo4) (Version: 4.0.5 - Zattoo Inc.)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
==================== Restore Points =========================
07-05-2014 15:30:18 Windows Update
11-05-2014 17:00:09 Windows-Sicherung
17-05-2014 08:51:56 Windows Update
18-05-2014 20:18:54 Windows-Sicherung
25-05-2014 17:11:10 Windows-Sicherung
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1AD40224-8A44-4765-9BE6-5BB30BFBA28D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd)
Task: {28EC779E-C205-42F8-97EC-5B1EB2166975} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {63E57CB1-4AA1-4827-B2BD-D6E85BFA1B95} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {649EA244-2B6B-461B-8659-241CAA5D3D98} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files (x86)\TuneUp Utilities 2011\OneClick.exe [2011-12-08] (TuneUp Software)
Task: {7A0613B2-5879-4018-AC31-5C25CE761240} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {7F892335-7DB0-4189-8874-1DBC10535E65} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06] (Adobe Systems Incorporated)
Task: {BFB191A4-27F4-44CD-BBB9-7DC87B97E97E} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2011-06-18] (Acer)
Task: {D48FC7E8-B4F6-4EDD-86FE-46F55D401909} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-06] (Acer Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2011-06-04 14:15 - 2011-06-04 14:15 - 01407536 _____ () C:\Program Files\Acer ProShield\LIBEAY32.dll
2013-02-17 20:03 - 2009-11-04 09:17 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxecdrpp.dll
2012-12-23 15:11 - 2012-11-28 19:50 - 00019880 _____ () C:\Windows\system32\spool\PRTPROCS\x64\TeamViewer_PrintProcessor.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00037920 _____ () C:\Program Files (x86)\LPT\srpts.exe
2013-12-25 03:36 - 2014-01-17 11:24 - 00013824 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll
2014-03-26 20:35 - 2014-03-26 20:35 - 00515584 _____ () C:\Windows\Temp\sqlite-3.7.2-sqlitejdbc.dll
2013-12-25 03:36 - 2014-01-17 11:24 - 01394176 _____ () C:\Program Files\Samsung\Samsung Link\scone_proxy.dll
2013-12-25 03:36 - 2014-01-17 11:24 - 01435648 _____ () C:\Program Files\Samsung\Samsung Link\scone_stub.dll
2011-11-08 13:39 - 2011-03-26 09:29 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-02-17 20:01 - 2011-01-23 20:47 - 00770728 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
2013-02-17 20:01 - 2011-01-23 20:47 - 00148280 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
2013-12-25 03:36 - 2014-01-17 11:24 - 00048640 _____ () C:\Program Files\Samsung\Samsung Link\JniIO.dll
2007-12-03 12:26 - 2007-12-03 12:26 - 00498792 _____ () C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
2014-04-08 11:26 - 2014-04-08 11:26 - 00023072 _____ () C:\Users\Svenja\AppData\Local\LPT\srptm.exe
2012-11-28 15:13 - 2012-11-28 15:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00081952 _____ () C:\Program Files (x86)\LPT\srpt.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00023072 _____ () C:\Program Files (x86)\LPT\srptc.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00018976 _____ () C:\Program Files (x86)\LPT\Smartbar.Common.dll
2011-04-24 04:29 - 2011-04-24 04:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-04-24 04:29 - 2011-04-24 04:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 04:29 - 2011-04-24 04:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2013-02-17 20:01 - 2010-04-01 13:23 - 00389120 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecscw.dll
2013-02-17 20:01 - 2009-05-27 08:16 - 00192512 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecdatr.dll
2013-02-17 20:01 - 2010-04-01 13:24 - 01159168 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecDRS.dll
2013-02-17 20:01 - 2009-03-10 01:43 - 00155648 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxeccaps.dll
2013-02-17 20:01 - 2009-02-20 04:48 - 00381440 _____ () C:\Windows\system32\lxecsm.dll
2013-02-17 20:01 - 2009-04-28 03:56 - 00024064 _____ () C:\Windows\system32\lxecsmr.dll
2013-02-17 20:01 - 2010-04-05 06:56 - 00716954 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Epwizard.DLL
2013-02-17 20:01 - 2010-04-05 06:55 - 00159890 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\customui.dll
2013-02-17 20:01 - 2010-04-05 06:54 - 00123033 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Eputil.DLL
2013-02-17 20:01 - 2010-04-05 06:54 - 00143502 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Imagutil.DLL
2013-02-17 20:01 - 2010-04-05 06:55 - 00061604 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Epfunct.DLL
2013-02-17 20:01 - 2009-06-23 07:09 - 02203648 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\EPWizRes.dll
2013-02-17 20:01 - 2009-06-23 07:10 - 00045056 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\epstring.dll
2013-02-17 20:01 - 2009-06-23 07:11 - 00102400 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\EPOEMDll.dll
2013-02-17 20:01 - 2009-04-07 15:25 - 00409600 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\iptk.dll
2013-02-17 20:02 - 2009-03-02 10:25 - 00151552 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecptp.dll
2012-12-23 11:20 - 2012-02-22 09:41 - 01085376 _____ () C:\Program Files (x86)\Winstep\wodTelnetDLX.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00047136 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00069152 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\srau.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00165920 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 02336288 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00067104 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\spbl.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00155680 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00014368 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\siem.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00066080 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\sppsm.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00696864 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00014880 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00078880 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00027168 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00056864 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\srut.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00029216 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\srsbs.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00065568 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00054304 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\smti.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00031264 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\srom.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00030752 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\smtu.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00038944 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\smta.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00044064 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\srbu.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00024096 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\sgml.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00061984 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00024608 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\srpdm.dll
2014-04-08 11:25 - 2014-04-08 11:25 - 00043552 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2014-04-08 11:24 - 2014-04-08 11:24 - 00026656 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00035360 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00193056 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\sgmu.dll
2014-04-08 11:23 - 2014-04-08 11:23 - 00061440 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll
2014-04-08 11:26 - 2014-04-08 11:26 - 00255520 _____ () C:\Users\Svenja\AppData\Local\Smartbar\Application\srns.dll
2014-05-27 14:55 - 2014-05-27 14:55 - 00043008 _____ () c:\users\svenja\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpspadi8.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Svenja\AppData\Roaming\Dropbox\bin\libcef.dll
2007-12-03 11:58 - 2007-12-03 11:58 - 01336600 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\fox.dll
2012-08-10 17:51 - 2012-08-10 17:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2014-05-10 14:47 - 2014-05-10 14:47 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-05-26 13:28 - 2014-04-08 11:25 - 00099872 _____ () C:\Users\Svenja\AppData\Roaming\Mozilla\Firefox\Profiles\vv6gkwnm.default\extensions\{00b320b8-5713-c2ca-0459-a2f9fe0c3cb8}\components\SmartbarFireFoxRemotePlugin_29.dll
2014-02-18 18:02 - 2014-02-18 18:02 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\367540c92c2004ff2c6695778fed5dd6\IsdiInterop.ni.dll
2011-11-08 13:51 - 2011-05-20 20:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-04-30 13:50 - 2014-04-30 13:50 - 03019888 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-04-30 13:50 - 2014-04-30 13:50 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-04-30 13:50 - 2014-04-30 13:50 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: Microsoft-6zu4-Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (05/27/2014 02:57:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: cltmngui.exe, Version: 2.13.2.14, Zeitstempel: 0x5373c8ef
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0001f182
ID des fehlerhaften Prozesses: 0x14ec
Startzeit der fehlerhaften Anwendung: 0xcltmngui.exe0
Pfad der fehlerhaften Anwendung: cltmngui.exe1
Pfad des fehlerhaften Moduls: cltmngui.exe2
Berichtskennung: cltmngui.exe3
Error: (05/27/2014 02:55:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/27/2014 02:43:34 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 644
Startzeit: 01cf7939bc4a0df0
Endzeit: 0
Anwendungspfad: C:\Windows\Explorer.EXE
Berichts-ID:
Error: (05/27/2014 11:38:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 30390539
Error: (05/27/2014 11:38:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 30390539
Error: (05/27/2014 11:38:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (05/27/2014 01:28:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 29.0.1.5239, Zeitstempel: 0x5369959a
Name des fehlerhaften Moduls: SPVC32.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5373c948
Ausnahmecode: 0xc0000005
Fehleroffset: 0x6106e4ae
ID des fehlerhaften Prozesses: 0x1fdc
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Error: (05/27/2014 01:27:39 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 29.0.1.5239, Zeitstempel: 0x5369959a
Name des fehlerhaften Moduls: SPVC32.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x5373c948
Ausnahmecode: 0xc0000005
Fehleroffset: 0x6125f29b
ID des fehlerhaften Prozesses: 0x1fdc
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Error: (05/27/2014 01:26:07 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (05/26/2014 00:30:38 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (05/27/2014 02:55:26 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
mfewfpk
Error: (05/27/2014 02:54:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/27/2014 02:54:22 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.
Error: (05/27/2014 02:54:18 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AllShare Framework DMS" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error: (05/27/2014 02:48:41 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
Error: (05/27/2014 01:27:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (05/27/2014 01:27:02 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Error: (05/27/2014 01:27:02 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Error: (05/27/2014 01:26:27 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
mfewfpk
Error: (05/27/2014 01:25:18 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Microsoft Office Sessions:
=========================
Error: (05/25/2014 00:52:15 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 136484 seconds with 19440 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Percentage of memory in use: 56%
Total physical RAM: 3947.86 MB
Available physical RAM: 1720.64 MB
Total Pagefile: 7893.9 MB
Available Pagefile: 5129.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:334.64 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: F4E63270)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=453 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
28.05.2014, 10:58
| #4 |
| /// the machine /// TB-Ausbilder | TR/Dropper.MSIL.GEN Adware & Co. deinstallieren
Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter: Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
30.05.2014, 15:18
| #5 |
| | TR/Dropper.MSIL.GEN Vielen Dank für die Anweisungen hier das JRT- Protokoll ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Home Premium x64 Ran by Svenja on 30.05.2014 at 15:49:12,22 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{17E0663B-F78A-4B4C-BB24-CD613576EBAC} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{28BA2498-9447-4238-9D7A-D9C87DD7C346} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{291DE6AE-A132-48E6-BAB7-B5C77210C5EE} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{29EA6576-F86C-41DE-807E-E1770BF7EB75} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{38556D6B-6B41-4135-933B-BE0194B75B21} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{3B01226D-2ECF-4E10-86D7-3CD24CED9592} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{3DB9C815-4AC8-499C-A944-6606EC67C896} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{424D57EE-A99B-4EF1-95EC-13D93848A70B} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{4617194C-51ED-47B9-84AE-EF40D81946FF} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{4644DD6B-CFF5-4824-8E41-75171CB264CA} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{51FFDAA8-3158-4C29-9000-7E7192012478} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{614FEA14-D6C3-4FCE-8662-511E5D6731AE} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{64312ECB-D4E6-4D47-BF05-58E11CA03E6D} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{67E2E082-0EAC-426C-8B90-DB9D64C1076A} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{688B9FB4-64C1-4EEF-A25E-A82BEEE9307B} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{6B0947CB-1D08-4E35-A68E-AAA3ED11B235} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{742AFE9C-DB9C-4FED-8264-AFB591ECADB8} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{7CEBBFA2-31C6-41BD-9C9E-896153FC3F02} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{7DDC92B2-59FD-46AA-977A-4DAD358C674E} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{85BAAFA7-3433-46B6-B689-B163A89335DD} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{870623BF-8CC3-49C5-BB7A-EA9F00264F6E} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{871441FE-4A86-4D05-98CE-DDDE71DA4246} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{872F0A64-7D34-4F02-9905-168E312F59AB} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{91028A66-AB78-4308-A487-9BD4FE8F0B54} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{930C7E63-C75C-4096-8AE9-9AED27672E6E} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{98A5D600-427C-4E3E-BF10-BCE3499D6D40} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{A34C00FD-0002-45D4-8B79-66EAB5E369CC} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{A36E3FD0-B225-42FF-8735-2F5714109A86} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{AE5E57AB-3983-4602-8D3B-461EC60C21EA} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{B7501470-5669-4607-BED2-DDE242D15A79} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{BD67BDD6-1901-4A3B-A750-B1E9BAC9545D} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{C197CE82-1E13-4622-A3D4-672936153A61} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{C1C07D9B-5628-4F61-BDC6-CDA077020B3D} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{C492D61F-51D0-42C1-8E41-28308C9A196B} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{C4D7A0F9-2CD4-489B-88F6-A67FAE4F33FA} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{C80C058E-07E7-4BB1-866E-64950BAF3461} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{CBB0960C-D536-4360-8AEC-4B1D95F804E0} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{E21AF412-4DD0-4D60-A189-9C3949EE910A} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{E91BF1D6-7A7B-40FB-A837-24B95944CEA2} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{EA1525BF-D6F0-4087-A728-BC45EE84791D} Successfully deleted: [Empty Folder] C:\Users\Svenja\appdata\local\{EBCF99A4-5417-45C9-AD00-0AA4EC4848D4} ~~~ FireFox Emptied folder: C:\Users\Svenja\AppData\Roaming\mozilla\firefox\profiles\vv6gkwnm.default\minidumps [265 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 30.05.2014 at 15:58:45,52 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-05-2014 02
Ran by Svenja at 2014-05-30 16:13:36
Running from C:\Users\Svenja\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1710 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.0.1710 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3007 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0913.2011 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated)
Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3501 - Acer Incorporated)
Acronis*True*Image*Home (HKLM-x32\...\{633A06C3-B709-479A-AAB3-5EE94AD9EE4B}) (Version: 11.0.8064 - Acronis)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.0) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.0 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.642 - Avira)
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.26 - Piriform)
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.04072 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.04072 - Cisco Systems, Inc.) Hidden
Citavi (HKLM-x32\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.3.0.0 - Swiss Academic Software)
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.52.0.50 - Conexant)
Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.0.5.899 - Corel Inc.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 5.1.3 - CEWE Stiftung u Co. KGaA)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
DSL-Manager (HKLM-x32\...\{90A455A7-0FC8-4508-B7FA-8F135B8F041A}) (Version: - )
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 14.4.20130909 - Landesfinanzdirektion Thüringen)
f4 2012 (HKLM-x32\...\f42012) (Version: - audiotranskription.de)
f4analyse (HKLM-x32\...\f4analyse) (Version: - audiotranskription.de)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free YouTube Download version 3.2.35.514 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.35.514 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.35.514 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.35.514 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
iCloud (HKLM\...\{EAFB2AD8-D92B-464C-8D97-B9CB94703C4A}) (Version: 3.0.2.163 - Apple Inc.)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Install Absolute Data Protect (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 1.0.0.42 - Absolute Software)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2345 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.6.0.1002 - Intel Corporation)
iTunes (HKLM\...\{F73A118B-8271-47E2-8790-0C636B2539C5}) (Version: 11.1.0.126 - Apple Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 6.0.8s1 - Acer Inc.)
Lexmark Pro800-Pro900 Series (HKLM\...\Lexmark Pro800-Pro900 Series) (Version: - Lexmark International, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8942 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.8942 - NTI Corporation) Hidden
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.1 - pdfforge)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ProShield (HKLM-x32\...\InstallShield_{08CCD7B4-9EED-4926-805D-C4FFF869989A}) (Version: 1.0.48.3 - Egis Technology Inc.)
ProShield (Version: 1.0.48.3 - Egis Technology Inc.) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.74 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Samsung Link 1.8.0.1401171024 (HKLM\...\8474-7877-9059-0204) (Version: 1.8.0.1401171024 - Copyright 2013 SAMSUNG)
Secure Download Manager (HKLM-x32\...\{E98D115E-D621-4723-8AF0-147BADA9A466}) (Version: 3.1.40 - Kivuto Solutions Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.14.0 - Synaptics Incorporated)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.16642 - TeamViewer)
TuneUp Utilities 2011 (HKLM-x32\...\TuneUp Utilities 2011) (Version: 10.0.4500.49 - TuneUp Software)
TuneUp Utilities 2011 (x32 Version: 10.0.4500.49 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4500.49 - TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN)
VLC media player 2.0.6 (HKLM-x32\...\VLC media player) (Version: 2.0.6 - VideoLAN)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
==================== Restore Points =========================
17-05-2014 08:51:56 Windows Update
18-05-2014 20:18:54 Windows-Sicherung
25-05-2014 17:11:10 Windows-Sicherung
30-05-2014 11:31:53 Revo Uninstaller's restore point - Snap.Do
30-05-2014 11:37:44 Revo Uninstaller's restore point - Snap.Do Engine
30-05-2014 11:41:24 Revo Uninstaller's restore point - Optimizer Pro v3.0
30-05-2014 11:43:13 Revo Uninstaller's restore point - Search Protect
30-05-2014 11:45:28 Revo Uninstaller's restore point - PDF Architect
30-05-2014 11:48:48 Revo Uninstaller's restore point - Zattoo4 4.0.5
30-05-2014 11:50:06 Revo Uninstaller's restore point - Bing Bar
30-05-2014 11:52:28 Revo Uninstaller's restore point - Civilization III
30-05-2014 11:58:03 Revo Uninstaller's restore point - Civilization III
30-05-2014 11:59:22 Revo Uninstaller's restore point - eBay Worldwide
30-05-2014 11:59:35 eBay Worldwide wird entfernt
30-05-2014 12:00:23 Revo Uninstaller's restore point - GIMP 2.6.11
30-05-2014 12:03:06 Revo Uninstaller's restore point - newsXpresso
30-05-2014 12:03:38 Removed newsXpresso
30-05-2014 12:24:09 Revo Uninstaller's restore point - Nexus 12.2
30-05-2014 13:25:30 Revo Uninstaller's restore point - Malwarebytes Anti-Malware Version 2.0.2.1012
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1AD40224-8A44-4765-9BE6-5BB30BFBA28D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-12-19] (Piriform Ltd)
Task: {28EC779E-C205-42F8-97EC-5B1EB2166975} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {63E57CB1-4AA1-4827-B2BD-D6E85BFA1B95} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {649EA244-2B6B-461B-8659-241CAA5D3D98} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files (x86)\TuneUp Utilities 2011\OneClick.exe [2011-12-08] (TuneUp Software)
Task: {7A0613B2-5879-4018-AC31-5C25CE761240} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {7F892335-7DB0-4189-8874-1DBC10535E65} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06] (Adobe Systems Incorporated)
Task: {BFB191A4-27F4-44CD-BBB9-7DC87B97E97E} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2011-06-18] (Acer)
Task: {D48FC7E8-B4F6-4EDD-86FE-46F55D401909} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-06] (Acer Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2011-06-04 14:15 - 2011-06-04 14:15 - 01407536 _____ () C:\Program Files\Acer ProShield\LIBEAY32.dll
2013-02-17 20:03 - 2009-11-04 09:17 - 00189440 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxecdrpp.dll
2012-12-23 15:11 - 2012-11-28 19:50 - 00019880 _____ () C:\Windows\system32\spool\PRTPROCS\x64\TeamViewer_PrintProcessor.dll
2011-11-08 13:39 - 2011-03-26 09:29 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-02-17 20:01 - 2011-01-23 20:47 - 00770728 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
2013-02-17 20:01 - 2011-01-23 20:47 - 00148280 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
2013-12-25 03:36 - 2014-01-17 11:24 - 00013824 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll
2013-12-25 03:36 - 2014-01-17 11:24 - 00048640 _____ () C:\Program Files\Samsung\Samsung Link\JniIO.dll
2014-03-26 20:35 - 2014-03-26 20:35 - 00515584 _____ () C:\Windows\Temp\sqlite-3.7.2-sqlitejdbc.dll
2013-12-25 03:36 - 2014-01-17 11:24 - 01394176 _____ () C:\Program Files\Samsung\Samsung Link\scone_proxy.dll
2013-12-25 03:36 - 2014-01-17 11:24 - 01435648 _____ () C:\Program Files\Samsung\Samsung Link\scone_stub.dll
2007-12-03 12:26 - 2007-12-03 12:26 - 00498792 _____ () C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
2012-11-28 15:13 - 2012-11-28 15:13 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-11-28 15:13 - 2012-11-28 15:13 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-02-17 20:01 - 2010-04-01 13:23 - 00389120 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecscw.dll
2013-02-17 20:01 - 2009-05-27 08:16 - 00192512 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecdatr.dll
2013-02-17 20:01 - 2010-04-01 13:24 - 01159168 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecDRS.dll
2013-02-17 20:01 - 2009-03-10 01:43 - 00155648 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxeccaps.dll
2013-02-17 20:01 - 2009-02-20 04:48 - 00381440 _____ () C:\Windows\system32\lxecsm.dll
2013-02-17 20:01 - 2009-04-28 03:56 - 00024064 _____ () C:\Windows\system32\lxecsmr.dll
2013-02-17 20:01 - 2010-04-05 06:56 - 00716954 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Epwizard.DLL
2013-02-17 20:01 - 2010-04-05 06:55 - 00159890 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\customui.dll
2013-02-17 20:01 - 2010-04-05 06:54 - 00123033 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Eputil.DLL
2013-02-17 20:01 - 2010-04-05 06:54 - 00143502 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Imagutil.DLL
2013-02-17 20:01 - 2010-04-05 06:55 - 00061604 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\Epfunct.DLL
2013-02-17 20:01 - 2009-06-23 07:09 - 02203648 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\EPWizRes.dll
2013-02-17 20:01 - 2009-06-23 07:10 - 00045056 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\epstring.dll
2013-02-17 20:01 - 2009-06-23 07:11 - 00102400 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\EPOEMDll.dll
2013-02-17 20:01 - 2009-04-07 15:25 - 00409600 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\iptk.dll
2013-02-17 20:02 - 2009-03-02 10:25 - 00151552 _____ () C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecptp.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2011-04-24 04:29 - 2011-04-24 04:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2014-05-30 15:43 - 2014-05-30 15:43 - 00043008 _____ () c:\users\svenja\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgo9lkb.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Svenja\AppData\Roaming\Dropbox\bin\libcef.dll
2007-12-03 11:58 - 2007-12-03 11:58 - 01336600 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\fox.dll
2012-08-10 17:51 - 2012-08-10 17:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2011-04-24 04:29 - 2011-04-24 04:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 04:29 - 2011-04-24 04:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2014-02-18 18:02 - 2014-02-18 18:02 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\367540c92c2004ff2c6695778fed5dd6\IsdiInterop.ni.dll
2011-11-08 13:51 - 2011-05-20 20:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-05-10 14:47 - 2014-05-10 14:47 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
Name: Microsoft-6zu4-Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
Error: (05/25/2014 00:52:15 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6695.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 136484 seconds with 19440 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Percentage of memory in use: 52%
Total physical RAM: 3947.86 MB
Available physical RAM: 1866.14 MB
Total Pagefile: 7893.9 MB
Available Pagefile: 5275.73 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:344.91 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: F4E63270)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=453 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
31.05.2014, 15:05
| #6 |
| /// the machine /// TB-Ausbilder | TR/Dropper.MSIL.GENESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> TR/Dropper.MSIL.GEN |
|
| Themen zu TR/Dropper.MSIL.GEN |
| antivirus, csrss.exe, desktop, explorer.exe, infiziert, lsass.exe, löschen, msiexec.exe, namen, programm, prozesse, rundll32.exe, service.exe, spoolsv.exe, svchost.exe, tr/dropper.msil.gen, windows, winlogon.exe |
Revo Uninstaller herunter.
dann auf 
und dann auf 
.
Linear-Darstellung
