| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: appdata\local\temp\ct3317892\plugins\tbverifier.dll modul nicht gefundenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
02.06.2014, 15:23
| #1 |
| |  appdata\local\temp\ct3317892\plugins\tbverifier.dll modul nicht gefunden habe folgendes bereits über Frst.txt ausgeführt mit folgendem Ergebnis: den usernamen habe ich hier durch xxx erstetzt Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-06-2014 01 Ran by xxx (administrator) on xxx-PC on 02-06-2014 15:53:53 Running from C:\Users\xxx\Downloads\Trojaner remover\frst64 Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SAGE\MSSQL\Binn\sqlservr.exe (soft-evolution) C:\Program Files (x86)\Pimero 2013\PimeroService.exe (Mario Eschweiler Softwareentwicklung & EDV-Service) C:\Program Files (x86)\Message-Bob\Message-Bob.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Microsoft Corporation) C:\Windows\splwow64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (sw4you, Siegfried Weckmann) C:\Program Files (x86)\Hardcopy\hardcopy.exe (SPAMfighter ApS) C:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe () C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe () C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe (Sage KHK Software) C:\Program Files (x86)\Common Files\Sage KHK Shared\REGISTRY.EXE (Sage Software) C:\Program Files (x86)\Common Files\Sage Software Shared\Deploymentservice.exe (SPAMfighter ApS) C:\Program Files (x86)\Fighters\SPAMfighter\sfus.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Stardock) C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.exe (Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe (SPAMfighter ApS) C:\Program Files (x86)\Fighters\FighterSuiteService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe (Microsoft Corporation) C:\Windows\System32\mobsync.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe (Microsoft Corporation) C:\Windows\System32\prevhost.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Malwarebytes Corp.) C:\Users\xxx\Downloads\Trojaner remover\frst64\mbar-1.07.0.1009.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Malwarebytes Corporation) C:\Users\xxx\Downloads\Trojaner remover\mbar entpackt\mbar\mbar.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com) HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com) HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5015040 2012-02-09] (VIA) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [sfagent] => C:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe [1197704 2012-04-24] (SPAMfighter ApS) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [TrojanScanner] => C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1655568 2013-11-22] (Simply Super Software) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3888648 2014-05-26] (AVAST Software) HKU\S-1-5-21-2394992463-1038646235-1264321974-1000\...\Run: [Message-Bob] => C:\Program Files (x86)\Message-Bob\Message-Bob.exe [442368 2003-04-09] (Mario Eschweiler Softwareentwicklung & EDV-Service) HKU\S-1-5-21-2394992463-1038646235-1264321974-1000\...\Run: [DynDNS Updater] => C:\Program Files (x86)\DynDNS Updater\DynDNS.exe [1352704 2006-09-17] (Kana Solution) HKU\S-1-5-21-2394992463-1038646235-1264321974-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.) HKU\S-1-5-21-2394992463-1038646235-1264321974-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.) HKU\S-1-5-21-2394992463-1038646235-1264321974-1000\...\Run: [ConduitFloatingPlugin_cfigonhgidedenkkhlilmefgodjpefna] => "C:\Windows\SysWOW64\Rundll32.exe" "C:\Users\xxx\AppData\Local\Temp\CT3317892\plugins\TBVerifier.dll",RunConduitFloatingPlugin cfigonhgidedenkkhlilmefgodjpefna <===== ATTENTION HKU\S-1-5-21-2394992463-1038646235-1264321974-1000\...\MountPoints2: {fa976203-5b6a-11e3-a2cf-c86000df6581} - G:\LaunchU3.exe -a HKU\S-1-5-21-2394992463-1038646235-1264321974-1001\...\Run: [GAINWARD] => C:\Program Files (x86)\EXPERTool\TBPanel.exe [3670856 2012-02-29] (Gainward Co.) HKU\S-1-5-21-2394992463-1038646235-1264321974-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKU\S-1-5-21-2394992463-1038646235-1264321974-1001\...\Run: [Copernic Desktop Search - Home] => C:\Program Files (x86)\Copernic Desktop Search - Home\DesktopSearchService.exe [1648600 2011-11-22] (Copernic Inc.) HKU\S-1-5-21-2394992463-1038646235-1264321974-1001\...\Run: [Message-Bob] => C:\Program Files (x86)\Message-Bob\Message-Bob.exe [442368 2003-04-09] (Mario Eschweiler Softwareentwicklung & EDV-Service) IFEO\spyhunter4.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2012\TUAutoReactivator64.exe" Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you, Siegfried Weckmann) Startup: C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk ShortcutTarget: Stardock ObjectDock.lnk -> C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe (Stardock) Startup: C:\Users\technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x109691D3EFE8CD01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - HTML Quick Edit - {C420F40F-9AD0-4EC5-BF71-01B8384CD66C} - C:\Program Files (x86)\HTML Quick Edit Bar\HTMLQuickEditBar.dll (Shatran Software) DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: leaf - {3c4a8a13-029e-430d-b8c1-46e834d20b31} - No File Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: leaf - {3c4a8a13-029e-430d-b8c1-46e834d20b31} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\..\Interfaces\{00A7A589-7F2A-41C8-BD6D-369D298C0C7D}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Tcpip\..\Interfaces\{36F04DDD-0AF7-4D11-8714-F0CAF3740DF6}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 FireFox: ======== FF ProfilePath: C:\Users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\t5unno3x.default FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: https://www.google.de/ FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF user.js: detected! => C:\Users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\t5unno3x.default\user.js FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Quick Start - C:\Users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\t5unno3x.default\Extensions\quick_start@gmail.com [2014-05-30] FF Extension: Adblock Plus - C:\Users\xxx\AppData\Roaming\Mozilla\Firefox\Profiles\t5unno3x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-16] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012-06-07] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-06-02] FF HKCU\...\Firefox\Extensions: [{df340737-4d2d-473e-a376-cc713ef560ba}] - C:\Program Files (x86)\Copernic Desktop Search - Home\Firefox70Connector FF Extension: Verbindung zu Copernic Desktop Search - Home - C:\Program Files (x86)\Copernic Desktop Search - Home\Firefox70Connector [2012-06-11] Chrome: ======= CHR StartupUrls: "hxxp://start.qone8.com/?type=hp&ts=1397572893&from=smt&uid=ST1000DM003-9YN162_W1D0RV8EXXXXW1D0RV8E" CHR Extension: (RadioTotal1) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfigonhgidedenkkhlilmefgodjpefna [2014-04-15] CHR Extension: (avast! Online Security) - C:\Users\xxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-04-22] CHR HKCU\...\Chrome\Extension: [cfigonhgidedenkkhlilmefgodjpefna] - C:\Users\xxx\AppData\Local\CRE\cfigonhgidedenkkhlilmefgodjpefna.crx [2013-11-21] CHR HKLM-x32\...\Chrome\Extension: [cfigonhgidedenkkhlilmefgodjpefna] - C:\Users\xxx\AppData\Local\CRE\cfigonhgidedenkkhlilmefgodjpefna.crx [2013-11-21] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-22] CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Users\xxx\AppData\Local\Temp\YontooLayers.crx [2014-04-22] ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-22] (AVAST Software) R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe [81920 2008-06-13] (Firebird Project) R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe [2723840 2008-06-13] (Firebird Project) R2 MSSQL$SAGE; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SAGE\MSSQL\Binn\sqlservr.exe [43040096 2011-06-17] (Microsoft Corporation) R2 PimeroService; C:\Program Files (x86)\Pimero 2013\PimeroService.exe [25088 2013-12-09] (soft-evolution) R2 Registry; C:\Program Files (x86)\Common Files\Sage KHK Shared\REGISTRY.EXE [86016 2009-03-04] (Sage KHK Software) R2 SageDeploymentService; C:\Program Files (x86)\Common Files\Sage Software Shared\Deploymentservice.exe [428400 2013-07-09] (Sage Software) R2 SPAMfighter Update Service; C:\Program Files (x86)\Fighters\SPAMfighter\sfus.exe [215688 2012-04-24] (SPAMfighter ApS) S4 SQLAgent$SAGE; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.SAGE\MSSQL\Binn\SQLAGENT.EXE [370016 2011-06-17] (Microsoft Corporation) R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com) R2 Suite Service; C:\Program Files (x86)\Fighters\FighterSuiteService.exe [1324680 2012-01-23] (SPAMfighter ApS) R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2144056 2013-12-11] (TuneUp Software) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-11-11] (VIA Technologies, Inc.) ==================== Drivers (Whitelisted) ==================== R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-04-22] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-22] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-22] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-22] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-15] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-15] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-15] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-04-22] () R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [79872 2009-06-10] (AVM GmbH) S3 Cardex; C:\Windows\SysWOW64\drivers\TBPANELX64.SYS [15648 2007-03-16] (Windows (R) Server 2003 DDK provider) R3 FPCIBASE; C:\Windows\System32\DRIVERS\fpcibase.sys [899328 2009-06-10] (AVM Berlin) R3 Fwleaf; C:\Windows\System32\DRIVERS\fwleaf.sys [27432 2012-09-12] (NETGEAR) R3 leafnets; C:\Windows\System32\DRIVERS\leafnets.sys [29696 2011-05-26] (Leaf Networks) R3 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [91352 2014-06-02] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119000 2014-06-02] (Malwarebytes Corporation) R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-05-30] (Windows (R) Win 7 DDK provider) S3 TBPanel; No ImagePath R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-03-29] (TuneUp Software) S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] S3 WPRO_41_1742; system32\drivers\WPRO_41_1742.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-06-02 15:40 - 2014-06-02 15:41 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2014-06-02 15:40 - 2014-06-02 15:40 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-02 15:40 - 2014-06-02 15:40 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-02 15:39 - 2014-06-02 15:39 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-06-02 15:30 - 2014-06-02 15:53 - 00000000 ____D () C:\FRST 2014-05-30 17:14 - 2014-05-30 17:14 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-05-30 17:14 - 2014-05-30 17:14 - 00000827 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-05-30 17:14 - 2014-05-30 17:14 - 00000000 ____D () C:\Program Files\CCleaner 2014-05-30 17:13 - 2014-05-30 17:13 - 00000000 ____D () C:\Users\xxx\Downloads\ccleaner 2014-05-30 16:26 - 2014-05-30 16:26 - 00000000 __SHD () C:\Users\xxx\AppData\Local\EmieUserList 2014-05-30 16:26 - 2014-05-30 16:26 - 00000000 __SHD () C:\Users\xxx\AppData\Local\EmieSiteList 2014-05-30 15:57 - 2014-06-02 15:07 - 00000000 ____D () C:\ProgramData\Spyware Terminator 2014-05-30 15:57 - 2014-05-30 15:57 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys 2014-05-30 15:57 - 2014-05-30 15:57 - 00001047 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk 2014-05-30 15:57 - 2014-05-30 15:57 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Spyware Terminator 2014-05-30 15:57 - 2014-05-30 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012 2014-05-30 15:57 - 2014-05-30 15:57 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator 2014-05-30 15:53 - 2014-05-30 15:56 - 00000000 ____D () C:\Users\xxx\Downloads\spyware 2014-05-30 15:43 - 2014-05-30 15:43 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\QuickScan 2014-05-22 13:31 - 2014-05-22 13:31 - 00001135 _____ () C:\Users\xxx\Desktop\Duplicate Cleaner Free.lnk 2014-05-22 13:31 - 2014-05-22 13:31 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Free 2014-05-22 13:31 - 2014-05-22 13:31 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\DigitalVolcano 2014-05-22 13:31 - 2014-05-22 13:31 - 00000000 ____D () C:\Program Files (x86)\Duplicate Cleaner 2014-05-22 13:10 - 2014-05-23 16:58 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Awesome Duplicate Photo Finder 2014-05-22 13:10 - 2014-05-22 13:10 - 00001220 _____ () C:\Users\xxx\Desktop\Awesome Duplicate Photo Finder.lnk 2014-05-22 13:10 - 2014-05-22 13:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Awesome Duplicate Photo Finder 2014-05-22 13:10 - 2014-05-22 13:10 - 00000000 ____D () C:\Program Files (x86)\Awesome Duplicate Photo Finder 2014-05-21 16:28 - 2014-05-30 15:19 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\AllDup 2014-05-21 16:28 - 2014-05-21 16:28 - 00000988 _____ () C:\Users\Public\Desktop\AllDup.lnk 2014-05-21 16:28 - 2014-05-21 16:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AllDup 2014-05-21 16:28 - 2014-05-21 16:28 - 00000000 ____D () C:\ProgramData\AllDup 2014-05-21 16:28 - 2014-05-21 16:28 - 00000000 ____D () C:\Program Files (x86)\AllDup 2014-05-21 16:28 - 2010-06-11 10:50 - 00089888 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtFrame.ocx 2014-05-21 16:28 - 2009-10-13 00:01 - 00077504 _____ (Michael Thummerer Software Design) C:\Windows\SysWOW64\mtScrollContainer.ocx 2014-05-21 16:28 - 2008-01-29 07:57 - 00450560 _____ (LogicNP Software (hxxp://www.ssware.com)) C:\Windows\SysWOW64\fldrvw90.ocx 2014-05-21 15:34 - 2014-05-21 15:34 - 00000000 ____D () C:\Program Files (x86)\Prismatic Software 2014-05-21 13:21 - 2014-05-21 13:21 - 00001115 _____ () C:\Users\Public\Desktop\Picasa 3.lnk 2014-05-21 13:18 - 2014-05-21 13:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3 2014-05-21 13:04 - 2014-05-21 13:04 - 00000000 ____D () C:\Users\xxx\Documents\Quellordner (zB neue Fotos von der Digitalkamera) 2014-05-21 13:04 - 2014-05-21 13:04 - 00000000 ____D () C:\Users\xxx\Documents\Demo-Fotos 2014-05-21 13:04 - 2014-05-21 13:04 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\mresreg 2014-05-21 13:03 - 2014-05-21 13:03 - 00001097 _____ () C:\Users\Public\Desktop\FotoSortierer XL.lnk 2014-05-21 13:03 - 2014-05-21 13:03 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\IN-MEDIAKG 2014-05-21 13:03 - 2014-05-21 13:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs} 2014-05-21 13:03 - 2014-05-21 13:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FotoSortierer XL 2014-05-21 13:03 - 2014-05-21 13:03 - 00000000 ____D () C:\Program Files (x86)\mresreg 2014-05-21 13:03 - 2014-05-21 13:03 - 00000000 ____D () C:\Program Files (x86)\FotoSortierer XL 2014-05-19 19:07 - 2014-05-19 19:07 - 00001899 _____ () C:\Users\Public\Desktop\IrfanView Thumbnails.lnk 2014-05-19 19:07 - 2014-05-19 19:07 - 00001007 _____ () C:\Users\Public\Desktop\IrfanView.lnk 2014-05-19 19:07 - 2014-05-19 19:07 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\IrfanView 2014-05-19 19:07 - 2014-05-19 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView 2014-05-19 19:07 - 2014-05-19 19:07 - 00000000 ____D () C:\Program Files (x86)\IrfanView 2014-05-19 18:32 - 2014-05-19 18:32 - 00001190 _____ () C:\Users\xxx\Desktop\Amazon.lnk 2014-05-19 18:32 - 2014-05-19 18:32 - 00001048 _____ () C:\Users\xxx\Desktop\Advanced Renamer.lnk 2014-05-19 18:32 - 2014-05-19 18:32 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Hulubulu 2014-05-19 18:32 - 2014-05-19 18:32 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\dlg 2014-05-19 18:32 - 2014-05-19 18:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Renamer 2014-05-19 18:32 - 2014-05-19 18:32 - 00000000 ____D () C:\Program Files (x86)\Advanced Renamer 2014-05-16 14:25 - 2014-05-16 14:25 - 00001844 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Q-Dir.lnk 2014-05-16 14:25 - 2014-05-16 14:25 - 00001838 _____ () C:\Users\Public\Desktop\Q-Dir.lnk 2014-05-16 14:25 - 2014-05-16 14:25 - 00000000 ____D () C:\Users\xxx\Documents\Favorites_Q_Dir 2014-05-16 14:25 - 2014-05-16 14:25 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Q-Dir 2014-05-16 14:25 - 2014-05-16 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Q-Dir 2014-05-16 14:25 - 2014-05-16 14:25 - 00000000 ____D () C:\Program Files (x86)\Q-Dir 2014-05-16 14:24 - 2014-05-20 18:02 - 00015323 _____ () C:\Windows\Q-Dir.ini 2014-05-16 13:43 - 2014-05-16 13:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SimilarImages 2014-05-16 03:08 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-16 03:08 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-16 03:08 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-16 03:08 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-16 03:08 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-16 03:08 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-15 05:02 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-15 05:02 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-15 05:02 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-15 05:02 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-15 05:02 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-15 05:02 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-15 05:02 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-15 05:02 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-15 05:02 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-15 05:02 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-15 05:02 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-15 05:02 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-15 05:02 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-15 05:02 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-15 05:02 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-15 05:02 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-15 05:02 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-15 05:02 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-15 05:02 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-15 05:02 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-15 05:02 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-15 05:02 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-15 05:02 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-15 05:02 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-15 05:02 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-15 05:02 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-15 05:02 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-15 05:02 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-15 05:02 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-15 05:02 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-15 05:02 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-15 05:02 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-15 05:02 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-15 05:02 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-14 19:55 - 2014-05-21 16:57 - 00000000 ____D () C:\Program Files (x86)\SimilarImages 2014-05-14 19:54 - 2014-05-16 13:43 - 09337248 _____ () C:\Users\xxx\Downloads\setup-SimilarImages-2013.11.exe 2014-05-14 17:55 - 2014-05-14 20:04 - 00000000 ____D () C:\Users\xxx\Downloads\ordner inhalte vergleichen freeware freeFileSync 2014-05-14 10:56 - 2014-05-14 10:56 - 17938608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-05-13 18:37 - 2014-05-13 18:37 - 00001107 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-05-13 18:37 - 2014-05-13 18:37 - 00001095 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk 2014-05-12 13:46 - 2014-05-12 13:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-07 03:01 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-05-07 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-05-07 03:01 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-05-07 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-05-07 03:00 - 2014-05-16 03:24 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-07 03:00 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-05-07 03:00 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-05-07 03:00 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-05-07 03:00 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-05-07 03:00 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-05-07 03:00 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-05-07 03:00 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-05-07 03:00 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-05-07 03:00 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-05-07 03:00 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-05-07 03:00 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-05-07 03:00 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-05-07 03:00 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-05-07 03:00 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-05-07 03:00 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-05-07 03:00 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-05-07 03:00 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-05-07 03:00 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-05-07 03:00 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-05-07 03:00 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-05-07 03:00 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-05-07 03:00 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-05-07 03:00 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-05-07 03:00 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-05-07 03:00 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-05-07 03:00 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-05-07 03:00 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-05-07 03:00 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-05-07 03:00 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-05-07 03:00 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-05-07 03:00 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-05-07 03:00 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-05-07 03:00 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-05-07 03:00 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-05-07 03:00 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-05-07 03:00 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-05-07 03:00 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-05-07 03:00 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-05-07 03:00 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-05-07 03:00 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll ==================== One Month Modified Files and Folders ======= 2014-06-02 15:54 - 2012-06-02 12:31 - 00000000 ____D () C:\Users\xxx\AppData\Local\Temp 2014-06-02 15:53 - 2014-06-02 15:30 - 00000000 ____D () C:\FRST 2014-06-02 15:41 - 2014-06-02 15:40 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2014-06-02 15:40 - 2014-06-02 15:40 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-06-02 15:40 - 2014-06-02 15:40 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-06-02 15:39 - 2014-06-02 15:39 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-06-02 15:39 - 2013-11-22 13:30 - 00000000 ____D () C:\Users\xxx\Downloads\Trojaner remover 2014-06-02 15:27 - 2009-07-14 06:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-06-02 15:27 - 2009-07-14 06:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-06-02 15:25 - 2011-04-12 09:43 - 00768238 _____ () C:\Windows\system32\perfh007.dat 2014-06-02 15:25 - 2011-04-12 09:43 - 00174488 _____ () C:\Windows\system32\perfc007.dat 2014-06-02 15:25 - 2009-07-14 07:13 - 01811562 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-06-02 15:23 - 2012-06-02 12:31 - 01258100 _____ () C:\Windows\WindowsUpdate.log 2014-06-02 15:19 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-06-02 15:18 - 2012-06-02 20:05 - 00027738 _____ () C:\Windows\setupact.log 2014-06-02 15:17 - 2012-06-13 09:10 - 00000000 ____D () C:\Windows\Minidump 2014-06-02 15:07 - 2014-05-30 15:57 - 00000000 ____D () C:\ProgramData\Spyware Terminator 2014-06-02 14:56 - 2012-06-02 13:31 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-06-02 14:29 - 2012-07-04 17:48 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-06-02 13:13 - 2013-06-10 13:56 - 00000000 ____D () C:\Users\xxx\AppData\Local\BCAE05C4-7C62-4B5F-93E3-76AC982F8E6F.aplzod 2014-06-02 13:12 - 2012-06-10 13:59 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-02 12:54 - 2012-06-08 12:59 - 00528392 _____ () C:\Windows\PFRO.log 2014-05-30 17:54 - 2012-06-15 15:50 - 00000000 ____D () C:\Users\xxx\AppData\Local\Lookeen 2014-05-30 17:38 - 2013-11-22 13:08 - 00003378 _____ () C:\Windows\System32\Tasks\BackgroundContainer Startup Task 2014-05-30 17:38 - 2012-06-02 12:31 - 00000000 ___RD () C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-30 17:14 - 2014-05-30 17:14 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-05-30 17:14 - 2014-05-30 17:14 - 00000827 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-05-30 17:14 - 2014-05-30 17:14 - 00000000 ____D () C:\Program Files\CCleaner 2014-05-30 17:14 - 2012-06-06 20:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-05-30 17:13 - 2014-05-30 17:13 - 00000000 ____D () C:\Users\xxx\Downloads\ccleaner 2014-05-30 16:26 - 2014-05-30 16:26 - 00000000 __SHD () C:\Users\xxx\AppData\Local\EmieUserList 2014-05-30 16:26 - 2014-05-30 16:26 - 00000000 __SHD () C:\Users\xxx\AppData\Local\EmieSiteList 2014-05-30 15:57 - 2014-05-30 15:57 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys 2014-05-30 15:57 - 2014-05-30 15:57 - 00001047 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk 2014-05-30 15:57 - 2014-05-30 15:57 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Spyware Terminator 2014-05-30 15:57 - 2014-05-30 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012 2014-05-30 15:57 - 2014-05-30 15:57 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator 2014-05-30 15:56 - 2014-05-30 15:53 - 00000000 ____D () C:\Users\xxx\Downloads\spyware 2014-05-30 15:43 - 2014-05-30 15:43 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\QuickScan 2014-05-30 15:42 - 2009-07-14 06:45 - 10626280 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-30 15:29 - 2012-06-18 20:10 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\OLXTeamOutlook 2014-05-30 15:19 - 2014-05-21 16:28 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\AllDup 2014-05-23 18:53 - 2014-01-16 14:41 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\apsec 2014-05-23 18:53 - 2012-06-12 12:25 - 00000000 ____D () C:\Users\xxx\Documents\dakota_s 2014-05-23 16:58 - 2014-05-22 13:10 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Awesome Duplicate Photo Finder 2014-05-22 13:31 - 2014-05-22 13:31 - 00001135 _____ () C:\Users\xxx\Desktop\Duplicate Cleaner Free.lnk 2014-05-22 13:31 - 2014-05-22 13:31 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Free 2014-05-22 13:31 - 2014-05-22 13:31 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\DigitalVolcano 2014-05-22 13:31 - 2014-05-22 13:31 - 00000000 ____D () C:\Program Files (x86)\Duplicate Cleaner 2014-05-22 13:30 - 2013-10-28 20:22 - 00000000 ____D () C:\Users\xxx\Downloads\foto doppel finden 2014-05-22 13:10 - 2014-05-22 13:10 - 00001220 _____ () C:\Users\xxx\Desktop\Awesome Duplicate Photo Finder.lnk 2014-05-22 13:10 - 2014-05-22 13:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Awesome Duplicate Photo Finder 2014-05-22 13:10 - 2014-05-22 13:10 - 00000000 ____D () C:\Program Files (x86)\Awesome Duplicate Photo Finder 2014-05-21 16:57 - 2014-05-14 19:55 - 00000000 ____D () C:\Program Files (x86)\SimilarImages 2014-05-21 16:28 - 2014-05-21 16:28 - 00000988 _____ () C:\Users\Public\Desktop\AllDup.lnk 2014-05-21 16:28 - 2014-05-21 16:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AllDup 2014-05-21 16:28 - 2014-05-21 16:28 - 00000000 ____D () C:\ProgramData\AllDup 2014-05-21 16:28 - 2014-05-21 16:28 - 00000000 ____D () C:\Program Files (x86)\AllDup 2014-05-21 15:34 - 2014-05-21 15:34 - 00000000 ____D () C:\Program Files (x86)\Prismatic Software 2014-05-21 13:21 - 2014-05-21 13:21 - 00001115 _____ () C:\Users\Public\Desktop\Picasa 3.lnk 2014-05-21 13:21 - 2012-06-02 12:33 - 00000000 ____D () C:\Users\xxx\AppData\Local\Google 2014-05-21 13:18 - 2014-05-21 13:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3 2014-05-21 13:18 - 2012-06-02 12:33 - 00000000 ____D () C:\Program Files (x86)\Google 2014-05-21 13:04 - 2014-05-21 13:04 - 00000000 ____D () C:\Users\xxx\Documents\Quellordner (zB neue Fotos von der Digitalkamera) 2014-05-21 13:04 - 2014-05-21 13:04 - 00000000 ____D () C:\Users\xx\Documents\Demo-Fotos 2014-05-21 13:04 - 2014-05-21 13:04 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\mresreg 2014-05-21 13:03 - 2014-05-21 13:03 - 00001097 _____ () C:\Users\Public\Desktop\FotoSortierer XL.lnk 2014-05-21 13:03 - 2014-05-21 13:03 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\IN-MEDIAKG 2014-05-21 13:03 - 2014-05-21 13:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs} 2014-05-21 13:03 - 2014-05-21 13:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FotoSortierer XL 2014-05-21 13:03 - 2014-05-21 13:03 - 00000000 ____D () C:\Program Files (x86)\mresreg 2014-05-21 13:03 - 2014-05-21 13:03 - 00000000 ____D () C:\Program Files (x86)\FotoSortierer XL 2014-05-20 18:02 - 2014-05-16 14:24 - 00015323 _____ () C:\Windows\Q-Dir.ini 2014-05-19 19:07 - 2014-05-19 19:07 - 00001899 _____ () C:\Users\Public\Desktop\IrfanView Thumbnails.lnk 2014-05-19 19:07 - 2014-05-19 19:07 - 00001007 _____ () C:\Users\Public\Desktop\IrfanView.lnk 2014-05-19 19:07 - 2014-05-19 19:07 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\IrfanView 2014-05-19 19:07 - 2014-05-19 19:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView 2014-05-19 19:07 - 2014-05-19 19:07 - 00000000 ____D () C:\Program Files (x86)\IrfanView 2014-05-19 18:32 - 2014-05-19 18:32 - 00001190 _____ () C:\Users\xxx\Desktop\Amazon.lnk 2014-05-19 18:32 - 2014-05-19 18:32 - 00001048 _____ () C:\Users\xxx\Desktop\Advanced Renamer.lnk 2014-05-19 18:32 - 2014-05-19 18:32 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Hulubulu 2014-05-19 18:32 - 2014-05-19 18:32 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\dlg 2014-05-19 18:32 - 2014-05-19 18:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Renamer 2014-05-19 18:32 - 2014-05-19 18:32 - 00000000 ____D () C:\Program Files (x86)\Advanced Renamer 2014-05-16 15:45 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-16 14:25 - 2014-05-16 14:25 - 00001844 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Q-Dir.lnk 2014-05-16 14:25 - 2014-05-16 14:25 - 00001838 _____ () C:\Users\Public\Desktop\Q-Dir.lnk 2014-05-16 14:25 - 2014-05-16 14:25 - 00000000 ____D () C:\Users\xxx\Documents\Favorites_Q_Dir 2014-05-16 14:25 - 2014-05-16 14:25 - 00000000 ____D () C:\Users\xxx\AppData\Roaming\Q-Dir 2014-05-16 14:25 - 2014-05-16 14:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Q-Dir 2014-05-16 14:25 - 2014-05-16 14:25 - 00000000 ____D () C:\Program Files (x86)\Q-Dir 2014-05-16 13:49 - 2012-06-02 13:24 - 02176888 _____ () C:\Users\xxx\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-16 13:43 - 2014-05-16 13:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SimilarImages 2014-05-16 13:43 - 2014-05-14 19:54 - 09337248 _____ () C:\Users\xxx\Downloads\setup-SimilarImages-2013.11.exe 2014-05-16 13:42 - 2013-10-28 20:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VisiPics 2014-05-16 13:42 - 2013-10-28 20:26 - 00000000 ____D () C:\Program Files (x86)\VisiPics 2014-05-16 12:37 - 2012-06-28 14:54 - 00000484 __RSH () C:\Users\xxx\ntuser.pol 2014-05-16 12:37 - 2012-06-02 12:31 - 00000000 ___RD () C:\Users\xxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-16 12:37 - 2012-06-02 12:31 - 00000000 ____D () C:\Users\xxx 2014-05-16 12:34 - 2012-06-06 18:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-05-16 03:24 - 2014-05-07 03:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-16 03:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-05-16 03:09 - 2012-06-08 18:47 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-05-16 03:06 - 2013-08-07 03:04 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-16 03:03 - 2012-06-02 12:58 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-15 14:07 - 2012-06-11 16:52 - 00000000 ____D () C:\Users\xxx\AppData\Local\FRITZ! 2014-05-15 11:57 - 2014-01-08 16:33 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-05-15 11:57 - 2012-06-02 13:04 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-05-15 11:57 - 2012-06-02 13:04 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-05-14 20:04 - 2014-05-14 17:55 - 00000000 ____D () C:\Users\xxx\Downloads\ordner inhalte vergleichen freeware freeFileSync 2014-05-14 10:56 - 2014-05-14 10:56 - 17938608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-05-14 10:56 - 2012-06-02 13:31 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-14 10:56 - 2012-06-02 13:31 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-14 10:56 - 2012-06-02 13:31 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-05-13 18:37 - 2014-05-13 18:37 - 00001107 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk 2014-05-13 18:37 - 2014-05-13 18:37 - 00001095 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk 2014-05-13 18:35 - 2012-07-06 16:38 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2014-05-12 13:46 - 2014-05-12 13:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-05-09 08:14 - 2014-05-15 05:02 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-15 05:02 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-06 16:00 - 2012-06-12 14:28 - 00000464 _____ () C:\Windows\Tasks\SyncBack Sage NAS an PC AP.job 2014-05-06 06:40 - 2014-05-16 03:08 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 06:17 - 2014-05-16 03:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 05:25 - 2014-05-16 03:08 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 05:07 - 2014-05-16 03:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-06 05:00 - 2014-05-16 03:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-06 04:10 - 2014-05-16 03:08 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll Some content of TEMP: ==================== C:\Users\xxx\AppData\Local\Temp\nsh1CB7.exe C:\Users\xxx\AppData\Local\Temp\nsj77DF.exe C:\Users\xxx\AppData\Local\Temp\nso48BE.exe C:\Users\xxx\AppData\Local\Temp\nso4D52.exe C:\Users\xxx\AppData\Local\Temp\nst4B00.exe C:\Users\xxx\AppData\Local\Temp\nst7A40.exe C:\Users\xxx\AppData\Local\Temp\nsz7C83.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-29 00:09 ==================== End Of Log ============================ weiterhin habe ich folgenden text im editor erhalten: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-06-2014 01 Ran by xxx at 2014-06-02 15:54:15 Running from C:\Users\xxx\Downloads\Trojaner remover\frst64 Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) 1-Klick Duplikate Löschen für Outlook 3.18 (HKLM-x32\...\{CD423CE9-404E-4B5B-86CF-34AE8E01402D}_is1) (Version: 3.18 - ITSTH) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.2 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated) Adobe Community Help (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden Adobe Creative Suite 5 Master Collection (HKLM-x32\...\{1BBD8D70-721A-41AD-AC8F-7308A0C8FA92}) (Version: 5.0 - Adobe Systems Incorporated) Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated) Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden Advanced Renamer (HKLM-x32\...\Advanced Renamer_is1) (Version: 3.64 - Hulubulu Software) AllDup 3.4.24 (HKLM-x32\...\AllDup_is1) (Version: 3.4.24 - Michael Thummerer Software Design) Amicron-Mailoffice 4.0 © Amicron Software (HKLM-x32\...\Amicron-Mailoffice 4.0) (Version: - ) Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2018 - Avast Software) AVM FRITZ! (HKLM-x32\...\FRITZ! 2.0) (Version: - AVM Berlin) Awesome Duplicate Photo Finder v. 1.1 (HKLM-x32\...\Awesome Duplicate Photo Finder_is1) (Version: - Duplicate-Finder.com) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CCleaner (HKLM\...\CCleaner) (Version: 4.14 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4291 - CDBurnerXP) ClearProg 1.6.0 Final (HKLM-x32\...\ClearProg) (Version: 1.6.0 Final - Sven Hoffman) CLR-Typen des SQL Server-Systems (HKLM-x32\...\{9BBE9CD0-670A-4F15-AE17-5B1494D12A9E}) (Version: 10.0.1600.22 - Microsoft Corporation) Copernic Desktop Search - Home (HKLM-x32\...\CopernicDesktopSearch2) (Version: - Copernic Inc.) Corel Shell Extension - 64Bit (Version: 14.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Capture (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Content (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Draw (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Extra Content (x32 Version: 14.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Filters (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - FontNav (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics SUite X4 - ICA (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - IPM (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Lang BR (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Lang CZ (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Lang DE (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Lang EN (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Lang ES (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Lang FR (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Lang IT (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Lang NL (x32 Version: 14.2 - Uw bedrijfsnaam) Hidden CorelDRAW Graphics Suite X4 - Lang PL (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - Lang SU (x32 Version: 14.2 - Yrityksen nimi) Hidden CorelDRAW Graphics Suite X4 - Lang SV (x32 Version: 14.2 - Ditt företagsnamn) Hidden CorelDRAW Graphics Suite X4 - PP (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 - VBA (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW Graphics Suite X4 (x32 Version: 14.2 - Corel Corporation) Hidden CorelDRAW(R) Graphics Suite X4 - Extra Content (HKLM-x32\...\_{80FDAE30-CDB6-4015-AFC7-86A762A5AD9B}) (Version: - Corel Corporation) CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension (HKLM-x32\...\_{CE2DA11A-917F-4CF5-AB55-755EC115DD10}) (Version: - Corel Corporation) CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension (x32 Version: 1.1 - Corel Corporation) Hidden CorelDRAW(R) Graphics Suite X4 (HKLM-x32\...\_{7F05E704-30A6-421A-97A7-8EEB1C7FF010}) (Version: - Corel Corporation) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden dakota.ag (HKLM-x32\...\dakota.ag) (Version: 6.0 - ITSG GmbH) dakota.ag (x32 Version: 6.0 - ITSG GmbH) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-001C-0000-0000-0000000FF1CE}_Office14.AccessRT_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version: - Microsoft) Dropbox (HKCU\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.) DupDetector (HKLM-x32\...\{9604876E-6DF3-11D9-9526-CC60569E6209}) (Version: 3.2.0.1 - Prismatic Software) Duplicate Cleaner Free 3.2.4 (HKLM-x32\...\Duplicate Cleaner Free) (Version: 3.2.4 - DigitalVolcano Software Ltd) DynDNS Updater 3.1 (HKLM-x32\...\DynDNS Updater_is1) (Version: 3.1 - Kana Solution) Emsisoft HiJackFree 4.5 (HKLM-x32\...\Emsisoft HiJackFree_is1) (Version: 4.5 - Emsisoft GmbH) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - ) EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version: - ) EpsonNet Config V3 (HKLM-x32\...\{2B0CDD4D-5C1A-47F7-89E2-9BF604670ABC}) (Version: 3.9.0 - SEIKO EPSON CORPORATION) EpsonNet SetupManager (HKLM-x32\...\InstallShield_{BB828C7B-44A6-4A83-A96E-EF80B8680B8D}) (Version: 1.7.2 - SEIKO EPSON CORPORATION) EpsonNet SetupManager (x32 Version: 1.7.2 - SEIKO EPSON CORPORATION) Hidden EuroCUT Design 7 (HKLM-x32\...\{7E879B15-B78A-48DE-B810-C4C00C7A6A98}) (Version: 7 - EUROSYSTEMS S.a.r.l.) EXPERTool 7.23 (HKLM-x32\...\MySSID_is1) (Version: - Gainward Co., Ltd) FileZilla Client 3.7.1.1 (HKLM-x32\...\FileZilla Client) (Version: 3.7.1.1 - Tim Kosse) Firebird 2.1.1.17910 (Win32) (HKLM-x32\...\FBDBServer_2_1_is1) (Version: 2.1.1.17910 - Firebird Project) FotoSortierer XL (HKLM-x32\...\FotoSortierer XL_is1) (Version: Actual Version - IN MEDIA KG) Free Easy Burner V 5.1 (HKLM-x32\...\Free Easy Burner_is1) (Version: 5.1.0.0 - Koyote soft) GetFoldersize 2.5.24 (HKLM-x32\...\GetFoldersize_is1) (Version: 2.5.24 - Michael Thummerer Software Design) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 27.0.1453.94 - Google Inc.) Google Update Helper (x32 Version: 1.3.21.145 - Google Inc.) Hidden Hardcopy (C:\Program Files (x86)\Hardcopy) (HKLM-x32\...\Hardcopy(C__Program Files (x86)_Hardcopy)) (Version: 2012.03.31 - www.hardcopy.de) Hardlock Gerätetreiber (HKLM-x32\...\Hardlock Gerätetreiber) (Version: - ) Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{8343C2D8-09DF-38B3-9D1A-A26148918E45}.KB947789) (Version: 1 - Microsoft Corporation) HTML Quick Edit Bar (HKLM-x32\...\HTML Quick Edit Bar) (Version: - ) iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.3.214 - Intel Corporation) iPhone-Konfigurationsprogramm (HKLM-x32\...\{B90FCEB7-2B0C-4D27-95B5-54238DF059ED}) (Version: 3.6.2.300 - Apple Inc.) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan) iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.) Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle) Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Light Image Resizer 4.3.1.0 (HKLM-x32\...\{EBE030DD-D404-4D92-85E9-8C3624820808}_is1) (Version: 4.3.1.0 - ObviousIdea) Lookeen Version 8.3.1.5156 (HKLM-x32\...\6D7E910F-716D-41E2-98A4-29691C352C1A_is1) (Version: 8.3.1.5156 - Axonic) Message-Bob 1.52 (HKLM-x32\...\Message-Bob 1.52) (Version: - ) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Access Runtime 2010 (HKLM-x32\...\Office14.AccessRT) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden Microsoft Interop Forms Redistributable Package 2.0a (HKLM-x32\...\{76D1AA2B-A434-4D63-BE2C-80286F23C223}) (Version: 2.0.0 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Access Runtime 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Access Runtime MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation) Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Outlook-Sicherung für Persönliche Ordner (HKLM-x32\...\{C63E7C60-25EB-11D3-8EDA-00A0C911E8E5}) (Version: 1.10.0.0 - Microsoft Corporation) Microsoft Report Viewer Redistributable 2008 (KB971119) (x32 Version: 9.0.30731 - Microsoft Corporation) Hidden Microsoft Report Viewer Redistributable 2008 SP1 (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 (KB971119)) (Version: - Microsoft Corporation) Microsoft Report Viewer Redistributable 2008 SP1 Language Pack - DEU (HKLM-x32\...\Microsoft Report Viewer Redistributable 2008 SP1 Language Pack - DEU) (Version: - Microsoft Corporation) Microsoft Report Viewer Redistributable 2008 SP1 Language Pack - DEU (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server 2008 Management Objects (HKLM-x32\...\{DA16D5F3-36C5-40E0-B2DE-E7EB294FCE8F}) (Version: 10.0.1600.22 - Microsoft Corporation) Microsoft SQL Server 2008 R2 (HKLM-x32\...\Microsoft SQL Server 2008 R2) (Version: - Microsoft Corporation) Microsoft SQL Server 2008 R2 (x32 Version: - Microsoft Corporation) Hidden Microsoft SQL Server 2008 R2 Native Client (HKLM\...\{36A207E4-8390-423F-9543-C964EECE34E3}) (Version: 10.52.4276.0 - Microsoft Corporation) Microsoft SQL Server 2008 R2 RsFx Driver (x32 Version: 10.51.2500.0 - Microsoft Corporation) Hidden Microsoft SQL Server 2008 R2-Richtlinien (HKLM-x32\...\{78033A38-50E2-4A65-823F-C1B34DF9FE41}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server 2008 R2-Setup (Deutsch) (HKLM-x32\...\{3C25B7EA-77A6-4872-8B99-E1383CE7C580}) (Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server Browser (HKLM-x32\...\{8DD113A8-811A-404E-A4D7-443D014946AC}) (Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 Query Tools DEU (HKLM-x32\...\{3888A22E-1A9E-4DBE-A93B-42385141F37D}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server VSS Writer (HKLM\...\{FBBA9369-3A6B-4EE3-9C53-DA0D29C2FC95}) (Version: 10.51.2500.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM-x32\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{4ECF4BDC-8387-329A-ABE9-CF5798F84BB2}) (Version: 9.0.35191 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (HKLM-x32\...\{8343C2D8-09DF-38B3-9D1A-A26148918E45}) (Version: 9.0.35191 - Microsoft Corporation) Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) Mozilla Thunderbird 24.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 24.0 (x86 en-US)) (Version: 24.0 - Mozilla) MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA 3D Vision Controller-Treiber 295.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 295.73 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.65 - NVIDIA Corporation) NVIDIA Grafiktreiber 331.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.65 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.12.0209 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.12.0209 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0209 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden NVIDIA Update 1.15.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.15.2 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden ObjectDock Free (HKLM-x32\...\ObjectDock Free) (Version: 2.0 - Stardock Corporation) ObjectDock Free (x32 Version: 2.0 - Stardock Corporation) Hidden Opera Stable 18.0.1284.68 (HKLM-x32\...\Opera 18.0.1284.68) (Version: 18.0.1284.68 - Opera Software ASA) Opera Stable 20.0.1387.91 (HKLM-x32\...\Opera 20.0.1387.91) (Version: 20.0.1387.91 - Opera Software ASA) Outlook Backup Assistant 3 (Vollversion) (HKLM-x32\...\Outlook Backup Assistant (Vollversion)_is1) (Version: - Priotecs Software) PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden Personalwirtschaft (x32 Version: 14.1.100 - Sage HR Solutions AG) Hidden Photo Transfer App (HKLM-x32\...\com.erclab.air.phototransferapp) (Version: 2.1.0 - UNKNOWN) Photo Transfer App (x32 Version: 2.1.0 - UNKNOWN) Hidden Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) Pimero 2013 R2 (HKLM-x32\...\Pimero 2013 R2_is1) (Version: 8.2 - soft-evolution) Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden Q-Dir (HKLM-x32\...\Q-Dir) (Version: - ) QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) RAIDar 4.00c1-p1 (HKLM-x32\...\RAIDar 4.00c1-p1) (Version: - Netgear Inc.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.50.1123.2011 - Realtek) Sage Classic Line 2010 Workstation (HKLM-x32\...\{D72C07D4-A2F6-466A-B65D-79E0EB2928DA}) (Version: - Sage Software GmbH\APP\CL.ICO) Sage New Classic Lohn 2014.1 (HKLM-x32\...\InstallShield_{1000628F-EF8C-41ED-B54B-018C9BAC7A54}) (Version: 14.1.100 - Sage HR Solutions AG) ScanSoft PaperPort 10.0 (HKLM-x32\...\{FEC56D56-5E4A-4AE0-94E6-823193E62E9A}) (Version: 10.04.0000 - ScanSoft, Inc.) Service Pack 1 für SQL Server 2008 R2 (KB2528583) (HKLM-x32\...\KB2528583) (Version: 10.51.2500.0 - Microsoft Corporation) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-001C-0000-0000-0000000FF1CE}_Office14.AccessRT_{54846D1D-E5D5-4A28-AA6D-7208259007EA}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden SimilarImages (HKLM-x32\...\SimilarImages) (Version: 2013.11 - Nils Maier) SimpleSYN 2.1 (HKLM-x32\...\{9F8233F4-80FA-4AF4-B828-9F5805989D92}) (Version: 2.1.4189 - creativbox.net) Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) SmartTools TeamOutlook (HKLM-x32\...\{5216732E-BEF1-445A-A93A-6CF8EAABD683}) (Version: 2.2.1 - GANGL Dienstleistungen (www.gangl.de)) SPAMfighter (HKLM-x32\...\SPAMfighter) (Version: 7.5.133 - Spamfighter ApS) SPAMfighter (x32 Version: 7.5.133 - Spamfighter ApS) Hidden Spyware Terminator 2012 (HKLM-x32\...\{56736259-613E-4A3B-B428-6235F2E76F44}_is1) (Version: 3.0.0.82 - Crawler.com) SQL Server 2008 R2 SP1 Common Files (x32 Version: 10.51.2500.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP1 Database Engine Services (x32 Version: 10.51.2500.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP1 Database Engine Shared (x32 Version: 10.51.2500.0 - Microsoft Corporation) Hidden SQL Server 2008 R2 SP1 Management Studio (x32 Version: 10.51.2500.0 - Microsoft Corporation) Hidden Sql Server Customer Experience Improvement Program (x32 Version: 10.50.1600.1 - Microsoft Corporation) Hidden SQLBackupAndFTP 5.5.0 (HKLM-x32\...\{0840A1C1-0A09-49AD-AF8D-8103B2A91789}_is1) (Version: - Pranas.NET) sv.net (HKLM-x32\...\sv.net) (Version: 12.1 - ITSG GmbH) SyncBack (HKLM-x32\...\SyncBack_is1) (Version: - 2BrightSparks) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer) Trojan Remover 6.8.8 (HKLM-x32\...\Trojan Remover_is1) (Version: 6.8.8 - Simply Super Software) TuneUp Utilities 2012 (HKLM-x32\...\TuneUp Utilities 2012) (Version: 12.0.3600.171 - TuneUp Software) TuneUp Utilities 2012 (x32 Version: 12.0.3600.171 - TuneUp Software) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.171 - TuneUp Software) Hidden Unterstützungsdateien für Microsoft SQL Server 2008-Setup (HKLM-x32\...\{9AA2D735-3375-42D4-9A61-3FFEF82599D6}) (Version: 10.1.2731.0 - Microsoft Corporation) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-001C-0000-0000-0000000FF1CE}_Office14.AccessRT_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.AccessRT_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-001C-0000-0000-0000000FF1CE}_Office14.AccessRT_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-001C-0000-0000-0000000FF1CE}_Office14.AccessRT_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.AccessRT_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-001C-0000-0000-0000000FF1CE}_Office14.AccessRT_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-001C-0000-0000-0000000FF1CE}_Office14.AccessRT_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.AccessRT_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-001C-0000-0000-0000000FF1CE}_Office14.AccessRT_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-001C-0000-0000-0000000FF1CE}_Office14.AccessRT_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft) Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-001C-0000-0000-0000000FF1CE}_Office14.AccessRT_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft) Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2880505) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{2720451F-5D04-43EC-AB1F-26D948FD971B}) (Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.AccessRT_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft) Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.AccessRT_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.) VisiPics V1.31 (HKLM-x32\...\VisiPics_is1) (Version: - Ozone) Visual Basic for Applications (R) Core - English (x32 Version: 6.4.99.69 - Microsoft Corporation) Hidden Visual Basic for Applications (R) Core - German (x32 Version: 6.4.99.69 - Microsoft Corporation) Hidden Visual Basic for Applications (R) Core (x32 Version: 6.4.99.69 - Microsoft Corporation) Hidden VLC media player 2.0.5 (HKLM\...\VLC media player) (Version: 2.0.5 - VideoLAN) VR-NetWorld (HKLM-x32\...\{8815F011-43AF-4F50-BBD8-D78ED3D6F5B9}) (Version: - ) VR-NetWorld Software Update (HKLM-x32\...\{60BAFA26-BEF7-11D5-BF49-0060946E68FA}) (Version: - ) Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Yontoo 1.10.02 (HKLM\...\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}) (Version: 1.10.02 - Yontoo LLC) <==== ATTENTION zebNet® Thunderbird Backup 2012 3.4.20 (HKLM\...\{5CBE4C66-B0F0-4853-8137-009B36D3792F}) (Version: 3.4.20 - zebNet® Ltd) ==================== Restore Points ========================= 20-05-2014 23:33:16 Windows Update 21-05-2014 13:34:12 Installed DupDetector 28-05-2014 22:00:04 Geplanter Prüfpunkt 30-05-2014 14:20:21 Spyware Terminator 2012 (30.05.2014 16:20:17) 30-05-2014 15:45:06 Spyware Terminator 2012 (30.05.2014 17:45:03) 02-06-2014 11:02:46 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2012-06-11 17:03 - 00002477 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 activate.adobe.com 127.0.0.1 activate.adobe.com 127.0.0.1 practivate.adobe.com 127.0.0.1 adobeereg.com 127.0.0.1 www.adobeereg.com 127.0.0.1 activate.adobe.com 127.0.0.1 activate-sea.adobe.com 127.0.0.1 activate-sjc0.adobe.com 127.0.0.1 wwis-dubc1-vip60.adobe.com 127.0.0.1 192.150.18.108 127.0.0.1 activate.adobe.com:443 127.0.0.1 3dns.adobe.com 127.0.0.1 3dns-1.adobe.com 127.0.0.1 3dns-2.adobe.com 127.0.0.1 3dns-3.adobe.com 127.0.0.1 3dns-4.adobe.com 127.0.0.1 adobeereg.com 127.0.0.1 www.adobeereg.com 127.0.0.1 activate.adobe.com 127.0.0.1 activate-sea.adobe.com 127.0.0.1 activate-sjc0.adobe.com 127.0.0.1 wwis-dubc1-vip60.adobe.com 127.0.0.1 192.150.18.108 127.0.0.1 adobe-dns.adobe.com 127.0.0.1 adobe-dns-1.adobe.com 127.0.0.1 adobe-dns-2.adobe.com 127.0.0.1 adobe-dns-3.adobe.com 127.0.0.1 adobe-dns-4.adobe.com 127.0.0.1 adobe-dns-5.adobe.com There are 22 more lines. ==================== Scheduled Tasks (whitelisted) ============= Task: {0384CE9C-B9FE-41AB-8948-6EA69B8746D5} - System32\Tasks\{C5F834CE-61AE-41A9-AF40-F753A79FEC59} => C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE [2014-01-29] (Microsoft Corporation) Task: {0E583F44-2913-45AA-B6D3-FF8E150150E5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-02] (Google Inc.) Task: {1209A8BC-8228-4ACF-AA14-D7E252B849A4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated) Task: {1A848BE4-8DCB-4C21-99EB-88933B34CF06} - System32\Tasks\AdobeAAMUpdater-1.0-xxx-PC-xxx => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-09-16] (Adobe Systems Incorporated) Task: {2650931B-81AA-47D0-8423-34DCB4B1C251} - System32\Tasks\hcdll2_ex_x64 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe [2012-01-19] () Task: {28DB462A-003B-4BC0-8064-B4C2B3CCFD9A} - System32\Tasks\hcdll2_ex_Win32 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe [2012-01-19] () Task: {318638C9-B336-43CF-9CB7-130C91FE3A07} - System32\Tasks\{DDAE03DD-1ECB-4384-8151-08B40386DAD7} => C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE [2014-01-29] (Microsoft Corporation) Task: {4019770A-1A92-4A8D-A71C-DA37BD0F76FF} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03] (Adobe Systems Incorporated) Task: {5BE0F4DF-BB88-460D-B56E-FD0514176CE9} - System32\Tasks\SyncBack Sage NAS an PC AP => C:\Program Files (x86)\2BrightSparks\SyncBack\SyncBack.exe [2010-11-08] (2BrightSparks) Task: {5F7A5E8E-D387-4FF0-8EE1-6CB962963CBD} - System32\Tasks\{F91A5C3D-9994-4601-8AF7-AEA543DB793E} => C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE [2013-08-14] (Microsoft Corporation) Task: {6980B7C4-1612-47A2-884F-E017C0C0ED77} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {6A8BFA6F-F02A-4B23-BD84-FE33B88B23D3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-02] (Google Inc.) Task: {73E44FDD-4A91-4134-AE5F-DE366A809C12} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\xxx\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION Task: {7C5B187B-472B-4C70-8CA2-B521ECAE8D59} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation) Task: {9AEA361F-A944-447F-A220-EB0EF18493F3} - System32\Tasks\{CE27D830-B782-41C5-9F16-D8384F9FEF56} => Y:\Drucker Epson 21\epson325088eu.exe Task: {B047C00E-286C-462F-A38C-9C3D37979DD0} - System32\Tasks\ScanSoft Background Update => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2003-10-14] (Scansoft, Inc.) Task: {B1A15A85-AEBF-40D1-BF4C-8BA7874D2DB9} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {B7BF1C0A-F0EE-4254-9F0E-A7AD81751904} - System32\Tasks\CCleanerSkipUAC => C:\PROGRAM FILES\CCLEANER\CCLEANER.EXE [2014-05-20] (Piriform Ltd) Task: {D060C1F0-8CDC-4B1E-876D-1CEB5904C4EA} - System32\Tasks\SQLBackupAndFtp_new => C:\Program Files (x86)\SQLBackupAndFTP\SQLBackupAndFTP.exe [2010-11-03] (Pranas.NET) Task: {DD5BD07F-DB78-4918-B4CF-35E747EFE68A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-04-22] (AVAST Software) Task: {DF2B2E24-B791-4968-975A-D59FE3C19D64} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files (x86)\TuneUp Utilities 2012\OneClick.exe [2013-12-11] (TuneUp Software) Task: {EA2DDFD7-1403-446D-83B4-F589A7098E3A} - System32\Tasks\{6BA00CBD-7801-4511-8059-0A8C985D00DE} => Y:\Drucker Epson 21\epson325088eu.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\SQLBackupAndFtp_new.job => C:\Program Files (x86)\SQLBackupAndFTP\SQLBackupAndFTP.exe Task: C:\Windows\Tasks\SyncBack Nas an PC Backup F direkt Intern X.job => C:\Program Files (x86)\2BrightSparks\SyncBackxxxZeitplan für SyncBack.exe Task: C:\Windows\Tasks\SyncBack NAS Computer allerlei an PC dto-.job => C:\Program Files (x86)\2BrightSparks\SyncBackxxxZeitplan für SyncBack.exe Task: C:\Windows\Tasks\SyncBack NAS Firma an PC dto-.job => C:\Program Files (x86)\2BrightSparks\SyncBackxxxZeitplan für SyncBack.exe Task: C:\Windows\Tasks\SyncBack NAS GmbH an PC GmbH.job => C:\Program Files (x86)\2BrightSparks\SyncBackxxxZeitplan für SyncBack.exe Task: C:\Windows\Tasks\SyncBack NAS Hilfe an PC dto.job => C:\Program Files (x86)\2BrightSparks\SyncBackxxxZeitplan für SyncBack.exe Task: C:\Windows\Tasks\SyncBack NAS Musikanlage Telefon an PC dto.job => C:\Program Files (x86)\2BrightSparks\SyncBackxxxZeitplan für SyncBack.exe Task: C:\Windows\Tasks\SyncBack Sage NAS an PC AP.job => C:\Program Files (x86)\2BrightSparks\SyncBackxxxZeitplan für SyncBack.exe ==================== Loaded Modules (whitelisted) ============= 2012-06-02 12:46 - 2013-10-23 10:20 - 00102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2012-06-11 16:31 - 2006-02-23 11:35 - 00020480 _____ () C:\Windows\System32\FritzColorPort64.dll 2012-06-11 16:31 - 2006-02-22 10:39 - 00020480 _____ () C:\Windows\System32\FritzPort64.dll 2012-06-06 19:03 - 2012-03-09 09:45 - 00118784 _____ () C:\Program Files (x86)\Hardcopy\HcDLL2_36_x64.dll 2010-10-04 19:54 - 2010-10-04 19:54 - 00776704 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.dll 2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2012-06-02 12:36 - 2011-12-06 03:58 - 00078448 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll 2012-06-02 12:36 - 2011-12-06 03:58 - 00386160 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll 2012-06-06 19:03 - 2012-01-19 11:06 - 00032256 _____ () C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe 2012-06-06 19:03 - 2012-01-19 11:07 - 00039424 _____ () C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe 2014-06-02 12:58 - 2014-06-02 12:58 - 02259456 _____ () C:\Program Files\AVAST Software\Avast\defs\14060200\algo.dll 2012-06-06 19:03 - 2012-03-09 09:46 - 00110080 _____ () C:\Program Files (x86)\Hardcopy\HcDLL2_36_Win32.dll 2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll 2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll 2010-10-04 19:54 - 2010-10-04 19:54 - 00675840 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\DockShellHook.dll 2012-06-06 19:03 - 2012-03-21 14:10 - 02941440 _____ () C:\Program Files (x86)\Hardcopy\HcDllS.dll 2012-06-06 19:03 - 2012-01-07 10:54 - 00047616 _____ () C:\Program Files (x86)\Hardcopy\hardcopy_04.dll 2012-04-24 12:53 - 2012-04-24 12:53 - 00549512 _____ () C:\Program Files (x86)\Fighters\SPAMfighter\sfsg.dll 2012-04-24 12:53 - 2012-12-12 18:35 - 00966248 ____T () C:\Program Files (x86)\Fighters\SPAMfighter\sfse.dll 2013-12-02 17:48 - 2013-12-02 17:48 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2010-10-04 19:54 - 2010-10-04 19:54 - 00807936 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\CrashRpt.dll 2010-10-04 19:54 - 2010-10-04 19:54 - 00053760 _____ () C:\Program Files (x86)\Stardock\ObjectDockFree\zlib.dll 2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-05-12 13:46 - 2014-05-12 13:46 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2012-06-02 12:41 - 2007-01-31 10:56 - 00032768 _____ () C:\Program Files (x86)\EXPERTool\TBPanelExt.dll 2013-06-27 22:12 - 2013-06-27 22:12 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\TEMP:9FF7C773 ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (06/02/2014 03:39:47 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (06/02/2014 03:39:38 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (06/02/2014 03:20:12 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/02/2014 03:06:25 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/02/2014 02:30:01 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/02/2014 00:56:35 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/30/2014 05:31:53 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/30/2014 04:47:57 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/30/2014 04:12:21 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (05/30/2014 03:37:57 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (06/02/2014 03:04:33 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 02.06.2014 um 15:02:40 unerwartet heruntergefahren. Error: (06/02/2014 02:28:00 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 02.06.2014 um 14:22:46 unerwartet heruntergefahren. Error: (06/02/2014 00:55:07 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 02.06.2014 um 12:52:45 unerwartet heruntergefahren. Error: (05/30/2014 05:30:34 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 30.05.2014 um 17:28:38 unerwartet heruntergefahren. Error: (05/30/2014 04:45:58 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 30.05.2014 um 16:44:20 unerwartet heruntergefahren. Error: (05/30/2014 04:10:43 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 30.05.2014 um 16:08:44 unerwartet heruntergefahren. Error: (05/30/2014 03:35:07 PM) (Source: volmgr) (EventID: 49) (User: ) Description: Die Konfiguration der Auslagerungsdatei für das Speicherabbild ist fehlgeschlagen. Stellen Sie sicher, dass eine Auslagerungsdatei auf der Startpartition vorhanden ist und dass diese groß genug ist, um den gesamten physikalischen Speicher abbilden zu können. Error: (05/30/2014 03:36:09 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 30.05.2014 um 14:07:21 unerwartet heruntergefahren. Error: (05/30/2014 02:07:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Sicherheitscenter" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert. Error: (05/30/2014 02:07:46 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "TCP/IP-NetBIOS-Hilfsdienst" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert. Microsoft Office Sessions: ========================= Error: (05/21/2014 04:39:14 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 446148 seconds with 3240 seconds of active time. This session ended with a crash. Error: (05/08/2014 11:43:56 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 53 seconds with 0 seconds of active time. This session ended with a crash. Error: (05/07/2014 03:16:56 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 53165 seconds with 300 seconds of active time. This session ended with a crash. Error: (04/15/2014 06:09:27 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 451119 seconds with 7140 seconds of active time. This session ended with a crash. Error: (04/11/2014 01:08:35 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 88028 seconds with 240 seconds of active time. This session ended with a crash. Error: (04/02/2014 03:10:17 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 416250 seconds with 5760 seconds of active time. This session ended with a crash. Error: (01/22/2014 09:12:13 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 3 seconds with 0 seconds of active time. This session ended with a crash. Error: (12/30/2013 09:44:25 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 285240 seconds with 7560 seconds of active time. This session ended with a crash. Error: (12/16/2013 05:34:59 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 346226 seconds with 5040 seconds of active time. This session ended with a crash. Error: (12/12/2013 04:51:49 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1724 seconds with 120 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-04-17 12:59:02.460 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\xxx\AppData\Local\Temp\trutil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-04-17 12:59:02.407 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\xxx\AppData\Local\Temp\trutil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-04-17 12:59:02.353 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\xxx\AppData\Local\Temp\trutil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-04-17 12:59:02.299 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\xxx\AppData\Local\Temp\trutil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-04-17 12:59:00.975 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\xxx\AppData\Local\Temp\trutil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-04-17 12:59:00.921 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\xxx\AppData\Local\Temp\trutil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-04-17 12:59:00.868 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\xxx\AppData\Local\Temp\trutil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-04-17 12:59:00.814 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\xxx\AppData\Local\Temp\trutil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-04-17 12:58:58.271 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\xxx\AppData\Local\Temp\trutil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-04-17 12:58:58.206 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\xxx\AppData\Local\Temp\trutil.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 32% Total physical RAM: 8131.45 MB Available physical RAM: 5495.96 MB Total Pagefile: 16261.08 MB Available Pagefile: 13307.45 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive b: (Buero) (Network) (Total:2765.29 GB) (Free:1356.97 GB) NTFS Drive c: (Win 7) (Fixed) (Total:931.51 GB) (Free:431.23 GB) NTFS Drive e: (Wechsel AP) (Fixed) (Total:931.51 GB) (Free:0.01 GB) NTFS Drive f: (Daten) (Fixed) (Total:931.41 GB) (Free:429.43 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 6F7415AD) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 932 GB) (Disk ID: 6F7415AF) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 310276A2) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Malwarebytes |
|
02.06.2014, 15:25
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | appdata\local\temp\ct3317892\plugins\tbverifier.dll modul nicht gefunden Hi und
__________________ Ist das ein gewerblich genutztes System? Abgesehen davon findet man im Log auch das hier: Code:
ATTFilter 127.0.0.1 activate.adobe.com
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 www.adobeereg.com
127.0.0.1 activate.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 192.150.18.108
127.0.0.1 activate.adobe.com:443
127.0.0.1 3dns.adobe.com
127.0.0.1 3dns-1.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-4.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 www.adobeereg.com
127.0.0.1 activate.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 192.150.18.108
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-1.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 adobe-dns-4.adobe.com
127.0.0.1 adobe-dns-5.adobe.com
Es geht weiter wenn du alles Illegale entfernt hast. Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.
__________________ |
|
02.06.2014, 15:38
| #3 |
| | appdata\local\temp\ct3317892\plugins\tbverifier.dll modul nicht gefunden vielen dank,
__________________ich habe den rechner gebraucht gekauft, ich weiss davon leider nichts. wie kann ich das entfernen |
|
02.06.2014, 20:35
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | appdata\local\temp\ct3317892\plugins\tbverifier.dll modul nicht gefunden Gebraucht gekauft von wem, von einem Händler?  Erstmal deinstallierst du Adobe Acrobat X Pro - English, Français, Deutsch Das Office Enterprise und den SQL Server find ich sehr grenzwertig! Hast denn wenigstens nen Lizenzkey für Windows und ne passende DVD dazu bekommen?
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
| Themen zu appdata\local\temp\ct3317892\plugins\tbverifier.dll modul nicht gefunden |
| adobe, antivirus, association, defender, desktop, email, error, excel, fehler, firefox, flash player, gerätetreiber, helper, home, homepage, koyote, mozilla, netgear, quick_start, rundll, security, software, spyware, super, svchost.exe, system, trojaner, usb, windows, windows xp |
Linear-Darstellung
