| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Player.exe mit Windows Vista HeruntergeladenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
01.07.2014, 07:53
| #1 |
 |  Player.exe mit Windows Vista Heruntergeladen Hallo, ich hab eine Datei Runtergeladen  die Player.exe heist und versucht hat einen Player zu installieren und noch weitere Programme. Hab die Installation abgebrochen (hat glaub ich nichts genutzt) hab jetzt New Player und fst_de_69 installiert und meine strart Seite im Browser ist omiga-plus.com.  Kann mir vielleicht jemand helfen Das Problem in den griff zu bekommen? Wär echt nett. Grüße Pain 85 |
|
01.07.2014, 08:31
| #2 |
| /// the machine /// TB-Ausbilder    | Player.exe mit Windows Vista Heruntergeladen hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
01.07.2014, 09:18
| #3 |
| | Player.exe mit Windows Vista Heruntergeladen Hallo Schrauber und Danke für deine Antwort,
__________________Hab jetzt die Datei runtergeladen (Setup.exe) und ausgeführt. Dann hat sich System Speedup geöfnet und einen Scan gemacht bin da nicht ganz mitgekommen. Hab aber keine Logdateien auf dem Desktop. Hab ich die Falsche Datei Runtergeladen? Sorry Jetzt hatts geklappt: FRST.text: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:29-06-2014
Ran by Technoplan (administrator) on TECHNOPLAN-PC on 01-07-2014 10:13:03
Running from C:\Users\Technoplan\Desktop
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(CyberLink) C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
() C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Just Develop It) C:\Program Files\MyPC Backup\BackupStack.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
() C:\MySql\bin\mysqld-nt.exe
() C:\Program Files\NewPlayer\NewPlayerUpdaterService.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
() C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
(Safer Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
() C:\Users\Technoplan\AppData\Local\fst_de_69\upfst_de_69.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
() C:\Acer\Empowering Technology\SysMonitor.exe
(Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
(NVIDIA Corporation) C:\Windows\System32\nvraidservice.exe
(PixelPlanet GmbH) C:\Program Files\PixelPlanet\PdfPrinter 6\PdfPrinterMonitor.exe
(Geek Software GmbH) C:\Program Files\pdf24\pdf24.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Autodesk, Inc.) C:\Program Files\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
() C:\Program Files\fst_de_69\fst_de_69.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
(Akamai Technologies, Inc.) C:\Users\Technoplan\AppData\Local\Akamai\netsession_win.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe
(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Akamai Technologies, Inc.) C:\Users\Technoplan\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Client Connect LTD) C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe
(Client Connect LTD) C:\Program Files\SearchProtect\SearchProtect\bin\cltmng.exe
(Client Connect LTD) C:\Program Files\SearchProtect\UI\bin\cltmngui.exe
(Smartbar) C:\Users\Technoplan\AppData\Local\Smartbar\Application\SafeFinder.exe
(System Speedup) C:\Program Files\System Speedup\SystemSpeedup.exe
(Systweak) C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe
() C:\Program Files\003\vxlsnyaiet32.exe
() C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3\SupraSavingsService.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvSvc] => C:\Windows\system32\nvsvc.dll [86016 2007-12-21] (NVIDIA Corporation)
HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [8497696 2007-12-21] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] => C:\Windows\system32\NvMcTray.dll [81920 2007-12-21] (NVIDIA Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [5369856 2008-03-26] (Realtek Semiconductor)
HKLM\...\Run: [Acer Empowering Technology Monitor] => C:\Acer\Empowering Technology\SysMonitor.exe [326176 2008-01-09] ()
HKLM\...\Run: [eDataSecurity Loader] => C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [526896 2008-03-05] (Egis Incorporated)
HKLM\...\Run: [PCMMediaSharing] => C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [204908 2008-01-25] ()
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [WarReg_PopUp] => C:\Acer\WR_PopUp\WarReg_PopUp.exe [57344 2006-11-05] (Acer Inc.)
HKLM\...\Run: [NVRaidService] => C:\Windows\system32\nvraidservice.exe [203296 2008-06-06] (NVIDIA Corporation)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [39792 2008-10-15] (Adobe Systems Incorporated)
HKLM\...\Run: [PixelPlanet PdfPrinter-Monitor] => C:\Program Files\PixelPlanet\PdfPrinter 6\PdfPrinterMonitor.exe [1404808 2009-11-17] (PixelPlanet GmbH)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [PDFPrint] => C:\Program Files\pdf24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [248552 2010-05-14] (Sun Microsystems, Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1956760 2014-06-23] (APN)
HKLM\...\Run: [ADSK DLMSession] => C:\Program Files\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe [1641368 2013-02-01] (Autodesk, Inc.)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM\...\Run: [fst_de_69] => C:\Program Files\fst_de_69\fst_de_69.exe [3980280 2014-06-27] ()
HKLM\...\RunOnce: [upfst_de_69.exe] - C:\Users\Technoplan\AppData\Local\fst_de_69\upfst_de_69.exe -runonce [3353080 2014-06-27] ()
HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [SpybotSD TeaTimer] => C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Technoplan\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [Browser Infrastructure Helper] => C:\Users\Technoplan\AppData\Local\Smartbar\Application\SafeFinder.exe [28952 2014-06-15] (Smartbar)
HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [ChicaPasswordManager] => C:\Program Files\ChicaLogic\Chica Password Manager\stpass.exe [4299624 2012-07-09] (ChicaLogic, Inc.)
AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [182080 2014-06-26] (Client Connect LTD)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ASETRES.EXE ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Empowering Technology Launcher.lnk
ShortcutTarget: Empowering Technology Launcher.lnk -> C:\Acer\Empowering Technology\eAPLauncher.exe (Acer Inc.)
ShellIconOverlayIdentifiers: Symbol-Overlay-Steuerprogramm für AutoCAD Digitale Signaturen -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=55&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&SSPV=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://isearch.omiga-plus.com/?type=hp&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://isearch.omiga-plus.com/?type=hp&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://isearch.omiga-plus.com/?type=hp&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3&q={searchTerms}
SearchScopes: HKLM - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL =
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3&q={searchTerms}
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=58&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=58&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&q={searchTerms}&SSPV=
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3&q={searchTerms}
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: SafeFinder SmartbarEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
BHO: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - No Name - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - No File
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - SafeFinder Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 31 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [507984] (Avira Operations GmbH & Co. KG)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{2FC76DB2-719C-4570-9177-8E5A30E0FE49}: [NameServer]192.168.0.254
FireFox:
========
FF ProfilePath: C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default
FF NewTab: hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD
FF DefaultSearchEngine: Trovi search
FF SelectedSearchEngine: Trovi search
FF Homepage: hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=55&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&SSPV=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin: @eleco.com/o2cplayer - C:\Program Files\Eleco\o2c Player\npO2CPlayer.DLL (ELECO Software GmbH)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.5.1 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @staging.google.com/globalUpdate Update;version=10 - C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin: @staging.google.com/globalUpdate Update;version=4 - C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\user.js
FF SearchPlugin: C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\omiga-plus.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Fraven 1.1 - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\6c78cab3-0311-420c-8cc8-d70d7c2e12d0@61a12377-7214-44f1-a183-c0827fed20fa.com [2014-06-30]
FF Extension: DoNotTrackMe: Online Privacy Protection - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\donottrackplus@abine.com [2014-07-01]
FF Extension: Fast Start - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\faststartff@gmail.com [2014-06-30]
FF Extension: video MediaPlayer - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\ff806580-6db3-4c09-ba06-d6caf0e99172@8453cb25-7fef-4ed5-8934-b08be5605617.com [2014-06-30]
FF Extension: PriceGong - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829} [2014-07-01]
FF Extension: SafeFinder Smartbar - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\{fcd9923a-9c24-d7ca-af1d-94ac42151b2b} [2014-07-01]
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi [2013-07-26]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-17]
FF HKLM\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\extensions\faststartff@gmail.com
FF Extension: Fast Start - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\extensions\faststartff@gmail.com [2014-06-30]
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla Firefox\firefox.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3
Chrome:
=======
CHR HomePage: hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=55&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&SSPV=
CHR StartupUrls: "hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=55&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&SSPV="
CHR NewTab: "chrome-extension://pelmeidfhdlhlbjimpabfcbnnojbboma/index.html"
CHR DefaultSearchKeyword: trovi.search
CHR DefaultSearchProvider: Trovi search
CHR DefaultSearchURL: hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=58&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&q={searchTerms}&SSPV=
CHR Extension: (Google Wallet) - C:\Users\Technoplan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-30]
CHR Extension: (Quick start) - C:\Users\Technoplan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-06-30]
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2014-06-26]
CHR StartMenuInternet: Google Chrome - C:\Program Files\Google\Chrome\Application\chrome.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3
========================== Services (Whitelisted) =================
R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 Acer HomeMedia Connect Service; C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [269448 2008-01-25] (CyberLink) [File not signed]
R2 AcerMemUsageCheckService; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [28672 2007-10-17] () [File not signed]
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [165784 2014-06-23] (APN LLC.)
R2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [36424 2014-06-18] (Just Develop It)
S3 bepldr6PixelPlanetService; C:\Program Files\Common Files\BCL Technologies\PixelPlanet6\bepldr.exe [172032 2009-10-05] () [File not signed]
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
R2 ca82e1a5; c:\Program Files\Optimizer Pro\OptProCrash.dll [3156968 2014-06-30] ()
R2 CltMngSvc; C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe [2832704 2014-06-26] (Client Connect LTD)
R2 eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [500784 2008-03-05] (Egis Incorporated)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE [102400 2006-04-18] (SEIKO EPSON CORPORATION) [File not signed]
R2 eRecoveryService; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [57344 2007-09-10] (Acer Inc.) [File not signed]
R2 eSettingsService; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576 2007-12-19] () [File not signed]
S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-30] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-06-30] (globalUpdate) [File not signed]
S2 gupdate1c9a6d0297c578d; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-03-17] (Google Inc.)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440 2007-01-17] (Hewlett-Packard Company) [File not signed]
S2 LPTSystemUpdater; C:\Program Files\LPT\srpts.exe [34072 2014-06-15] ()
R2 MSSQL$GW; C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 MySQL; C:\MySql\bin\mysqld-nt.exe [2179072 2004-05-29] () [File not signed]
R2 NewPlayerUpdaterService; C:\Program Files\NewPlayer\NewPlayerUpdaterService.exe [11776 2014-05-05] () [File not signed]
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [262247 2006-07-19] () [File not signed]
R2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 SupraSavingsService; C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3\SupraSavingsService.exe [151040 2014-06-25] () [File not signed]
R2 vxlsnyaiet32; C:\Program Files\003\vxlsnyaiet32.exe [541696 2014-07-01] () [File not signed]
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [535936 2014-06-30] (Fuyu LIMITED)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 int15; C:\Acer\Empowering Technology\eRecovery\int15.sys [15392 2007-07-03] (Acer, Inc.)
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [47488 2014-06-12] (NetFilterSDK.com) [File not signed]
R3 NTIDrvr; C:\Windows\System32\DRIVERS\NTIDrvr.sys [6144 2008-03-21] (NewTech Infosystems, Inc.) [File not signed]
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-07-09] (Avira GmbH)
R2 tvicport; C:\Windows\system32\drivers\tvicport.sys [14544 2007-11-06] (EnTech Taiwan) [File not signed]
R2 zntport; C:\Windows\system32\drivers\zntport.sys [6080 2007-11-06] (Zeal SoftStudio) [File not signed]
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\Users\TECHNO~1\AppData\Local\Temp\catchme.sys [X]
S1 netfilter2; system32\drivers\netfilter2.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-01 10:13 - 2014-07-01 10:13 - 00028570 _____ () C:\Users\Technoplan\Desktop\FRST.txt
2014-07-01 10:12 - 2014-07-01 10:13 - 00000000 ____D () C:\FRST
2014-07-01 10:12 - 2014-07-01 10:12 - 01073664 _____ (Farbar) C:\Users\Technoplan\Desktop\FRST.exe
2014-07-01 09:52 - 2014-07-01 09:52 - 00001089 _____ () C:\Users\Public\Desktop\Chica Password Manager 2.0.lnk
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ___SD () C:\Users\Technoplan\Documents\Chica Passwords
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ChicaLogic
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\ChicaLogic
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3
2014-07-01 09:51 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\suprasavings
2014-07-01 09:50 - 2014-07-01 09:51 - 00000000 ____D () C:\Program Files\003
2014-07-01 09:49 - 2014-07-01 09:39 - 00399152 _____ (Fusion Install ) C:\Users\Technoplan\Desktop\Setup.exe
2014-07-01 09:46 - 2014-07-01 09:46 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\webinternetsecurity
2014-07-01 09:46 - 2014-07-01 09:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
2014-07-01 09:46 - 2014-07-01 09:46 - 00000000 ____D () C:\Program Files\PriceGong
2014-07-01 09:45 - 2014-07-01 09:45 - 00001002 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-07-01 09:45 - 2014-07-01 09:45 - 00000000 ____D () C:\ProgramData\Systweak
2014-07-01 09:45 - 2014-07-01 09:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
2014-07-01 09:45 - 2014-07-01 09:45 - 00000000 ____D () C:\Program Files\Advanced System Protector
2014-07-01 09:45 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-07-01 09:44 - 2014-07-01 10:13 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\System Speedup
2014-07-01 09:44 - 2014-07-01 09:45 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\systweak
2014-07-01 09:44 - 2014-07-01 09:45 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\Advanced System Protector
2014-07-01 09:44 - 2014-07-01 09:44 - 00000875 _____ () C:\Users\Public\Desktop\System Speedup.lnk
2014-07-01 09:44 - 2014-07-01 09:44 - 00000290 _____ () C:\Windows\Tasks\System Speedup_UPDATES.job
2014-07-01 09:44 - 2014-07-01 09:44 - 00000282 _____ () C:\Windows\Tasks\System Speedup_DEFAULT.job
2014-07-01 09:44 - 2014-07-01 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Speedup
2014-07-01 09:44 - 2014-07-01 09:44 - 00000000 ____D () C:\Program Files\System Speedup
2014-07-01 09:44 - 2013-12-13 17:53 - 00017496 _____ (System Speedup) C:\Windows\system32\roboot.exe
2014-07-01 09:43 - 2014-07-01 09:43 - 00002218 _____ () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-07-01 09:43 - 2014-07-01 09:43 - 00002188 _____ () C:\Users\Technoplan\Desktop\Search.lnk
2014-07-01 09:43 - 2014-07-01 09:43 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\Smartbar
2014-07-01 09:43 - 2014-07-01 09:43 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\LPT
2014-07-01 09:43 - 2014-07-01 09:43 - 00000000 ____D () C:\Program Files\LPT
2014-07-01 09:40 - 2014-07-01 09:40 - 00399152 _____ (Fusion Install ) C:\Users\Technoplan\Downloads\Setup(1).exe
2014-07-01 09:39 - 2014-07-01 09:39 - 00399152 _____ (Fusion Install ) C:\Users\Technoplan\Downloads\Setup.exe
2014-07-01 08:24 - 2014-07-01 08:24 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\SearchProtect
2014-07-01 08:23 - 2014-07-01 08:24 - 00000000 ____D () C:\Program Files\SearchProtect
2014-06-30 13:15 - 2014-06-30 13:15 - 00000000 ____D () C:\Users\Technoplan\Documents\Optimizer Pro
2014-06-30 13:15 - 2014-06-30 13:15 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\Optimizer Pro
2014-06-30 13:15 - 2014-06-30 13:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-30 13:10 - 2014-06-30 13:11 - 00000000 ____D () C:\Program Files\SupTab
2014-06-30 13:10 - 2014-06-30 13:10 - 00000902 _____ () C:\Users\Public\Desktop\NewPlayer.lnk
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\newplayer
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\com
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewPlayer
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\Program Files\NewPlayer
2014-06-30 13:09 - 2014-06-30 13:09 - 00000863 _____ () C:\Users\Technoplan\Desktop\Optimizer Pro.lnk
2014-06-30 13:09 - 2014-06-30 13:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
2014-06-30 13:09 - 2014-06-30 13:09 - 00000000 ____D () C:\Program Files\Optimizer Pro
2014-06-30 13:08 - 2014-07-01 10:09 - 00001492 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-7.job
2014-06-30 13:08 - 2014-07-01 08:18 - 00002158 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-4.job
2014-06-30 13:08 - 2014-07-01 08:18 - 00001656 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-1.job
2014-06-30 13:08 - 2014-07-01 08:18 - 00001562 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-1.job
2014-06-30 13:08 - 2014-07-01 08:18 - 00001560 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-6.job
2014-06-30 13:08 - 2014-07-01 08:18 - 00001532 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-5_user.job
2014-06-30 13:08 - 2014-07-01 08:18 - 00001510 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-5.job
2014-06-30 13:08 - 2014-07-01 08:18 - 00001466 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5_user.job
2014-06-30 13:08 - 2014-07-01 08:18 - 00001444 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5.job
2014-06-30 13:08 - 2014-07-01 08:18 - 00001414 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-2.job
2014-06-30 13:08 - 2014-07-01 08:18 - 00001348 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-2.job
2014-06-30 13:08 - 2014-06-30 13:09 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\omiga-plus
2014-06-30 13:07 - 2014-07-01 10:09 - 00001586 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-7.job
2014-06-30 13:07 - 2014-07-01 08:59 - 00000000 ____D () C:\Program Files\Fraven 1.1
2014-06-30 13:07 - 2014-07-01 08:57 - 00000000 ____D () C:\Program Files\video MediaPlayer
2014-06-30 13:07 - 2014-07-01 08:23 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\fst_de_69
2014-06-30 13:07 - 2014-07-01 08:21 - 00000000 ____D () C:\Program Files\MyPC Backup
2014-06-30 13:07 - 2014-07-01 08:18 - 00003806 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-11.job
2014-06-30 13:07 - 2014-07-01 08:18 - 00003792 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-11.job
2014-06-30 13:07 - 2014-07-01 08:18 - 00002436 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-3.job
2014-06-30 13:07 - 2014-07-01 08:18 - 00002422 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-3.job
2014-06-30 13:07 - 2014-07-01 08:18 - 00002260 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-4.job
2014-06-30 13:07 - 2014-07-01 08:18 - 00001654 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-6.job
2014-06-30 13:07 - 2014-07-01 08:18 - 00000896 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-06-30 13:07 - 2014-06-30 13:14 - 00000900 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-06-30 13:07 - 2014-06-30 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FREE_SOFTTODAY
2014-06-30 13:07 - 2014-06-30 13:08 - 00000000 ____D () C:\Program Files\fst_de_69
2014-06-30 13:07 - 2014-06-30 13:07 - 00001758 _____ () C:\Users\Technoplan\Desktop\Sync Folder.lnk
2014-06-30 13:07 - 2014-06-30 13:07 - 00000888 _____ () C:\Users\Technoplan\Desktop\MyPC Backup.lnk
2014-06-30 13:07 - 2014-06-30 13:07 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-06-30 13:07 - 2014-06-30 13:07 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\globalUpdate
2014-06-30 13:07 - 2014-06-30 13:07 - 00000000 ____D () C:\Program Files\globalUpdate
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4B18tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AF7tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AC8tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A98tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A58tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A29tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49F9tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49D9tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\VOPackage
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3CC6tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C96tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C76tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C55tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C26tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C05tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3BB6tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3B87tmp
2014-06-30 13:02 - 2014-06-30 13:02 - 01257224 _____ () C:\Users\Technoplan\Downloads\Player.exe
2014-06-25 09:48 - 2014-06-25 11:39 - 00000000 ____D () C:\Users\Technoplan\Desktop\petry
2014-06-25 09:11 - 2014-06-25 09:12 - 09044888 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt fertig inkl. Durchbruchplan.zip
2014-06-24 09:28 - 2014-06-25 10:29 - 00000000 ____D () C:\Users\Technoplan\Desktop\Ball
2014-06-24 09:20 - 2014-06-24 09:20 - 00469723 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt elektro Sebastian Ball.zip
2014-06-18 09:18 - 2014-06-18 09:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-12 21:05 - 2014-06-12 21:05 - 00047488 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys
2014-06-11 14:53 - 2014-06-11 14:54 - 00338708 _____ () C:\Users\Technoplan\Downloads\Wohnhaus
2014-06-11 08:20 - 2014-05-28 18:39 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 08:20 - 2014-05-28 18:38 - 09711104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 08:20 - 2014-05-28 18:33 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 08:20 - 2014-05-28 18:32 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 08:20 - 2014-05-28 18:32 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 08:20 - 2014-05-28 18:31 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-06-11 08:20 - 2014-05-28 18:31 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 08:20 - 2014-05-28 18:30 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-06-11 08:20 - 2014-05-28 18:29 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-11 08:20 - 2014-05-28 18:29 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 08:20 - 2014-05-28 18:29 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-06-11 08:20 - 2014-05-28 18:29 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-06-11 08:20 - 2014-05-28 18:28 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-11 08:20 - 2014-04-26 18:01 - 00502784 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-11 08:20 - 2014-04-05 04:42 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 08:20 - 2014-03-10 03:22 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-11 08:20 - 2014-03-10 03:22 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 08:19 - 2014-05-28 18:48 - 12356608 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 08:19 - 2014-05-28 18:29 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-02 14:39 - 2014-06-02 14:39 - 00001956 _____ () C:\Users\Public\Desktop\SCC-CAD Studio.lnk
2014-06-02 14:39 - 2014-06-02 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SCC
2014-06-02 14:24 - 2014-06-02 14:24 - 00002520 _____ () C:\My.cnf
2014-06-02 14:24 - 2014-06-02 14:24 - 00000168 _____ () C:\Windows\My.ini
2014-06-02 14:24 - 2014-06-02 14:24 - 00000000 ____D () C:\MySql
==================== One Month Modified Files and Folders =======
2014-07-01 10:13 - 2014-07-01 10:13 - 00028570 _____ () C:\Users\Technoplan\Desktop\FRST.txt
2014-07-01 10:13 - 2014-07-01 10:12 - 00000000 ____D () C:\FRST
2014-07-01 10:13 - 2014-07-01 09:44 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\System Speedup
2014-07-01 10:12 - 2014-07-01 10:12 - 01073664 _____ (Farbar) C:\Users\Technoplan\Desktop\FRST.exe
2014-07-01 10:09 - 2014-06-30 13:08 - 00001492 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-7.job
2014-07-01 10:09 - 2014-06-30 13:07 - 00001586 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-7.job
2014-07-01 09:52 - 2014-07-01 09:52 - 00001089 _____ () C:\Users\Public\Desktop\Chica Password Manager 2.0.lnk
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ___SD () C:\Users\Technoplan\Documents\Chica Passwords
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ChicaLogic
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\ChicaLogic
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3
2014-07-01 09:52 - 2014-07-01 09:51 - 00000000 ____D () C:\Program Files\suprasavings
2014-07-01 09:51 - 2014-07-01 09:50 - 00000000 ____D () C:\Program Files\003
2014-07-01 09:46 - 2014-07-01 09:46 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\webinternetsecurity
2014-07-01 09:46 - 2014-07-01 09:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
2014-07-01 09:46 - 2014-07-01 09:46 - 00000000 ____D () C:\Program Files\PriceGong
2014-07-01 09:45 - 2014-07-01 09:45 - 00001002 _____ () C:\Users\Public\Desktop\Advanced System Protector.lnk
2014-07-01 09:45 - 2014-07-01 09:45 - 00000000 ____D () C:\ProgramData\Systweak
2014-07-01 09:45 - 2014-07-01 09:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
2014-07-01 09:45 - 2014-07-01 09:45 - 00000000 ____D () C:\Program Files\Advanced System Protector
2014-07-01 09:45 - 2014-07-01 09:44 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\systweak
2014-07-01 09:45 - 2014-07-01 09:44 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\Advanced System Protector
2014-07-01 09:44 - 2014-07-01 09:44 - 00000875 _____ () C:\Users\Public\Desktop\System Speedup.lnk
2014-07-01 09:44 - 2014-07-01 09:44 - 00000290 _____ () C:\Windows\Tasks\System Speedup_UPDATES.job
2014-07-01 09:44 - 2014-07-01 09:44 - 00000282 _____ () C:\Windows\Tasks\System Speedup_DEFAULT.job
2014-07-01 09:44 - 2014-07-01 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Speedup
2014-07-01 09:44 - 2014-07-01 09:44 - 00000000 ____D () C:\Program Files\System Speedup
2014-07-01 09:43 - 2014-07-01 09:43 - 00002218 _____ () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-07-01 09:43 - 2014-07-01 09:43 - 00002188 _____ () C:\Users\Technoplan\Desktop\Search.lnk
2014-07-01 09:43 - 2014-07-01 09:43 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\Smartbar
2014-07-01 09:43 - 2014-07-01 09:43 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\LPT
2014-07-01 09:43 - 2014-07-01 09:43 - 00000000 ____D () C:\Program Files\LPT
2014-07-01 09:42 - 2012-04-05 08:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-01 09:40 - 2014-07-01 09:40 - 00399152 _____ (Fusion Install ) C:\Users\Technoplan\Downloads\Setup(1).exe
2014-07-01 09:39 - 2014-07-01 09:49 - 00399152 _____ (Fusion Install ) C:\Users\Technoplan\Desktop\Setup.exe
2014-07-01 09:39 - 2014-07-01 09:39 - 00399152 _____ (Fusion Install ) C:\Users\Technoplan\Downloads\Setup.exe
2014-07-01 09:39 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-01 09:39 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-01 09:38 - 2008-09-29 18:47 - 01888157 _____ () C:\Windows\WindowsUpdate.log
2014-07-01 09:28 - 2009-07-01 08:14 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-01 08:59 - 2014-06-30 13:07 - 00000000 ____D () C:\Program Files\Fraven 1.1
2014-07-01 08:57 - 2014-06-30 13:07 - 00000000 ____D () C:\Program Files\video MediaPlayer
2014-07-01 08:28 - 2009-07-01 08:14 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-01 08:24 - 2014-07-01 08:24 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\SearchProtect
2014-07-01 08:24 - 2014-07-01 08:23 - 00000000 ____D () C:\Program Files\SearchProtect
2014-07-01 08:24 - 2008-01-21 09:16 - 00007028 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-01 08:23 - 2014-06-30 13:07 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\fst_de_69
2014-07-01 08:21 - 2014-06-30 13:07 - 00000000 ____D () C:\Program Files\MyPC Backup
2014-07-01 08:18 - 2014-06-30 13:08 - 00002158 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-4.job
2014-07-01 08:18 - 2014-06-30 13:08 - 00001656 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-1.job
2014-07-01 08:18 - 2014-06-30 13:08 - 00001562 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-1.job
2014-07-01 08:18 - 2014-06-30 13:08 - 00001560 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-6.job
2014-07-01 08:18 - 2014-06-30 13:08 - 00001532 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-5_user.job
2014-07-01 08:18 - 2014-06-30 13:08 - 00001510 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-5.job
2014-07-01 08:18 - 2014-06-30 13:08 - 00001466 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5_user.job
2014-07-01 08:18 - 2014-06-30 13:08 - 00001444 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5.job
2014-07-01 08:18 - 2014-06-30 13:08 - 00001414 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-2.job
2014-07-01 08:18 - 2014-06-30 13:08 - 00001348 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-2.job
2014-07-01 08:18 - 2014-06-30 13:07 - 00003806 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-11.job
2014-07-01 08:18 - 2014-06-30 13:07 - 00003792 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-11.job
2014-07-01 08:18 - 2014-06-30 13:07 - 00002436 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-3.job
2014-07-01 08:18 - 2014-06-30 13:07 - 00002422 _____ () C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-3.job
2014-07-01 08:18 - 2014-06-30 13:07 - 00002260 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-4.job
2014-07-01 08:18 - 2014-06-30 13:07 - 00001654 _____ () C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-6.job
2014-07-01 08:18 - 2014-06-30 13:07 - 00000896 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-07-01 08:16 - 2008-01-21 04:47 - 21356412 _____ () C:\Windows\PFRO.log
2014-07-01 08:16 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-30 16:00 - 2006-11-02 15:01 - 00032554 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-30 13:32 - 2009-03-17 09:15 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\Google
2014-06-30 13:15 - 2014-06-30 13:15 - 00000000 ____D () C:\Users\Technoplan\Documents\Optimizer Pro
2014-06-30 13:15 - 2014-06-30 13:15 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\Optimizer Pro
2014-06-30 13:15 - 2014-06-30 13:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-30 13:14 - 2014-06-30 13:07 - 00000900 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-06-30 13:11 - 2014-06-30 13:10 - 00000000 ____D () C:\Program Files\SupTab
2014-06-30 13:10 - 2014-06-30 13:10 - 00000902 _____ () C:\Users\Public\Desktop\NewPlayer.lnk
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\newplayer
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\com
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewPlayer
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\Program Files\NewPlayer
2014-06-30 13:09 - 2014-06-30 13:09 - 00000863 _____ () C:\Users\Technoplan\Desktop\Optimizer Pro.lnk
2014-06-30 13:09 - 2014-06-30 13:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
2014-06-30 13:09 - 2014-06-30 13:09 - 00000000 ____D () C:\Program Files\Optimizer Pro
2014-06-30 13:09 - 2014-06-30 13:08 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\omiga-plus
2014-06-30 13:08 - 2014-06-30 13:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FREE_SOFTTODAY
2014-06-30 13:08 - 2014-06-30 13:07 - 00000000 ____D () C:\Program Files\fst_de_69
2014-06-30 13:08 - 2013-07-08 13:41 - 00001048 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-30 13:08 - 2013-07-08 13:41 - 00001036 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-30 13:08 - 2012-08-28 08:31 - 00002153 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-30 13:08 - 2009-02-17 11:57 - 00001139 _____ () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-06-30 13:07 - 2014-06-30 13:07 - 00001758 _____ () C:\Users\Technoplan\Desktop\Sync Folder.lnk
2014-06-30 13:07 - 2014-06-30 13:07 - 00000888 _____ () C:\Users\Technoplan\Desktop\MyPC Backup.lnk
2014-06-30 13:07 - 2014-06-30 13:07 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
2014-06-30 13:07 - 2014-06-30 13:07 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\globalUpdate
2014-06-30 13:07 - 2014-06-30 13:07 - 00000000 ____D () C:\Program Files\globalUpdate
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4B18tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AF7tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AC8tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A98tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A58tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A29tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49F9tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49D9tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\VOPackage
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3CC6tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C96tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C76tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C55tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C26tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C05tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3BB6tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3B87tmp
2014-06-30 13:02 - 2014-06-30 13:02 - 01257224 _____ () C:\Users\Technoplan\Downloads\Player.exe
2014-06-27 08:17 - 2013-07-09 09:22 - 00000000 ____D () C:\Program Files\AskPartnerNetwork
2014-06-25 11:39 - 2014-06-25 09:48 - 00000000 ____D () C:\Users\Technoplan\Desktop\petry
2014-06-25 10:29 - 2014-06-24 09:28 - 00000000 ____D () C:\Users\Technoplan\Desktop\Ball
2014-06-25 09:12 - 2014-06-25 09:11 - 09044888 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt fertig inkl. Durchbruchplan.zip
2014-06-24 14:16 - 2013-07-09 09:21 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-24 09:29 - 2014-05-05 09:54 - 00000000 ____D () C:\Users\Public\Documents\Dendrit
2014-06-24 09:20 - 2014-06-24 09:20 - 00469723 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt elektro Sebastian Ball.zip
2014-06-24 08:09 - 2013-07-08 13:41 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-18 09:18 - 2014-06-18 09:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-17 16:39 - 2004-03-25 12:38 - 00002198 _____ () C:\Windows\RBuilder.ini
2014-06-12 21:05 - 2014-06-12 21:05 - 00047488 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys
2014-06-11 16:02 - 2013-08-15 17:06 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-11 16:00 - 2006-11-02 12:24 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-06-11 14:54 - 2014-06-11 14:53 - 00338708 _____ () C:\Users\Technoplan\Downloads\Wohnhaus
2014-06-06 11:05 - 2014-04-28 09:59 - 00000000 ____D () C:\Users\Technoplan\Desktop\Klan-Talstr-Dahn
2014-06-06 11:05 - 2014-04-08 09:39 - 00000000 ____D () C:\Users\Technoplan\Desktop\Projekt-Alt
2014-06-06 10:29 - 2013-06-20 11:34 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\PokerStars.EU
2014-06-06 10:27 - 2013-06-20 11:34 - 00000000 ____D () C:\Program Files\PokerStars.EU
2014-06-02 14:46 - 2009-02-17 11:56 - 00000000 ____D () C:\Users\Technoplan
2014-06-02 14:39 - 2014-06-02 14:39 - 00001956 _____ () C:\Users\Public\Desktop\SCC-CAD Studio.lnk
2014-06-02 14:39 - 2014-06-02 14:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SCC
2014-06-02 14:24 - 2014-06-02 14:24 - 00002520 _____ () C:\My.cnf
2014-06-02 14:24 - 2014-06-02 14:24 - 00000168 _____ () C:\Windows\My.ini
2014-06-02 14:24 - 2014-06-02 14:24 - 00000000 ____D () C:\MySql
Files to move or delete:
====================
C:\Users\Technoplan\ElsterFormular-12.3.2.6814p.exe
Some content of TEMP:
====================
C:\Users\Technoplan\AppData\Local\temp\avgnt.exe
C:\Users\Technoplan\AppData\Local\temp\System.Data.SQLite.dll
C:\Users\Technoplan\AppData\Local\temp\_is1318.exe
C:\Users\Technoplan\AppData\Local\temp\_is5A45.exe
C:\Users\Technoplan\AppData\Local\temp\_isE074.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-01 08:21
==================== End Of Log ============================
--- --- --- Addition.txt:FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version:29-06-2014
Ran by Technoplan at 2014-07-01 10:13:43
Running from C:\Users\Technoplan\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
AAVUpdateManager (HKLM\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)
Acer Arcade Live Main Page (HKLM\...\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}) (Version: 1.1.1331 - Acer Inc.)
Acer DV Magician (HKLM\...\{F6EFFB76-4A07-11DA-9D78-000129760D75}) (Version: 1.5.0920 - Acer Inc.)
Acer DVDivine (HKLM\...\{B145EC69-66F5-11D8-9D75-000129760D75}) (Version: 3.2.1109 - Acer Inc.)
Acer eDataSecurity Management (HKLM\...\{A5633652-3795-4829-BB0B-644F0279E279}) (Version: 2.8.4360 - Egis Inc.)
Acer Empowering Technology (HKLM\...\{AB6097D9-D722-4987-BD9E-A076E2848EE2}) (Version: 2.5.4301 - Acer Inc.)
Acer ePerformance Management (HKLM\...\{D462BF9E-0C35-4705-BF9B-3DF9F3816643}) (Version: 2.5.4002 - Acer Inc.)
Acer eSettings Management (HKLM\...\{CE65A9A0-9686-45C6-9098-3C9543A412F0}) (Version: 2.5.4302 - Acer Inc.)
Acer HomeMedia (HKLM\...\{AA4BF92B-2AAF-11DA-9D78-000129760D75}) (Version: 1.4.1331 - Acer Inc.)
Acer HomeMedia Connect (HKLM\...\{132888AE-EF67-41C5-BCA2-7D5D2488AB63}) (Version: 1.4.4931 - Acer Inc.)
Acer HomeMedia Trial Creator (HKLM\...\{B580C409-E16F-44FF-904D-3AE94E113BE0}) (Version: 1.4.1331 - Acer Inc.)
Acer ScreenSaver (HKLM\...\{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}) (Version: 4.01.0422 - Acer Incorporated)
Acer SlideShow DVD (HKLM\...\{41581EF5-45A7-11DA-9D78-000129760D75}) (Version: 1.5.1109 - Acer Inc.)
Acer VideoMagician (HKLM\...\{F79A208D-D929-11D9-9D77-000129760D75}) (Version: 1.4.1017 - Acer Inc.)
Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader 8.1.3 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A81300000003}) (Version: 8.1.3 - Adobe Systems Incorporated)
Advanced System Protector (HKLM\...\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1) (Version: 2.1.1000.12580 - Systweak Software) <==== ATTENTION
Age of Empires III (HKLM\...\InstallShield_{A8CF5C37-8EC5-4C33-BB4A-87F468B77D45}) (Version: 1.00.0000 - Microsoft Game Studios)
Age of Empires III (Version: 1.00.0000 - Microsoft Game Studios) Hidden
Akamai NetSession Interface (HKCU\...\Akamai) (Version: - Akamai Technologies, Inc)
Apple Application Support (HKLM\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI Catalyst Install Manager (HKLM\...\{C3452F04-DA8E-2119-1925-D0E050A64186}) (Version: 3.0.664.0 - ATI Technologies, Inc.)
AutoCAD LT 2009 - Deutsch (HKLM\...\AutoCAD LT 2009 - Deutsch) (Version: 17.2.56.0 - Autodesk)
AutoCAD LT 2009 - Deutsch (Version: 17.2.56.0 - Autodesk) Hidden
Autodesk Design Review 2010 (HKLM\...\Autodesk Design Review 2010) (Version: 10.0.0.108 - Autodesk, Inc.)
Autodesk Design Review 2010 (Version: 10.0.0.108 - Autodesk, Inc.) Hidden
Autodesk Download Manager (HKLM\...\{2F48C80C-3A76-495A-A4B5-C0CC946FEEBD}) (Version: 2.0.6.0 - Autodesk, Inc.)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.5.444 - Avira)
Avira SearchFree Toolbar (HKLM\...\{41564952-412D-5637-00A7-A758B70C0F01}) (Version: 12.15.1.464 - APN, LLC)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite DCP-J4110DW (HKLM\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
CALIFORNIA 3000 Arbeitsplatz Runtime (Version: 1.0.0 - G&W Software Entwicklung GmbH) Hidden
Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Core Implementation (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Graphics Full New (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Graphics Light (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Chinese Standard (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Chinese Traditional (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Czech (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Danish (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Dutch (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Finnish (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization French (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization German (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Greek (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Hungarian (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Italian (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Japanese (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Korean (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Norwegian (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Polish (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Portuguese (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Russian (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Spanish (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Swedish (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Thai (Version: 2008.0219.2144.38819 - ATI) Hidden
Catalyst Control Center Localization Turkish (Version: 2008.0219.2144.38819 - ATI) Hidden
CCC Help Chinese Standard (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Chinese Traditional (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Czech (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Danish (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Dutch (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help English (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Finnish (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help French (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help German (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Greek (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Hungarian (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Italian (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Japanese (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Korean (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Norwegian (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Polish (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Portuguese (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Russian (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Spanish (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Swedish (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Thai (Version: 2008.0219.2143.38819 - ATI) Hidden
CCC Help Turkish (Version: 2008.0219.2143.38819 - ATI) Hidden
ccc-core-static (Version: 2008.0219.2144.38819 - Ihr Firmenname) Hidden
ccc-utility (Version: 2008.0219.2144.38819 - ATI) Hidden
Chica Password Manager 2.0 2.0.0.8 (HKLM\...\Chica Password Manager 2.0_is1) (Version: 2.0 - ChicaLogic, Inc.)
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
DivX-Setup (HKLM\...\DivX Setup.divx.com) (Version: 2.0.0.86 - DivX, Inc. )
EPSON Scan Assistant (HKLM\...\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}) (Version: 1.10.00 - )
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
ESP1400_1410 Ben.handbuch (HKLM\...\ESP1400_1410 Ben.handbuch) (Version: - )
Fraven 1.1 (HKLM\...\Fraven 1.1) (Version: 1.34.6.10 - setup)
fst_de_69 (HKLM\...\fst_de_69_is1) (Version: - FREE_SOFTTODAY) <==== ATTENTION
Google Chrome (HKLM\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Installer (HKLM\...\VOPackage) (Version: 1.0.0.0 - ) <==== ATTENTION
IrfanView (remove only) (HKLM\...\IrfanView) (Version: 4.30 - Irfan Skiljan)
iTunes (HKLM\...\{2F21564D-DE05-4C6D-B21E-08B9D313FAB3}) (Version: 11.1.5.5 - Apple Inc.)
Java Auto Updater (Version: 2.0.2.4 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 22 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216022FF}) (Version: 6.0.220 - Oracle)
JNLP (HKCU\...\JNLP) (Version: - JNLP)
Kemper Dendrit STUDIO 2013 (HKLM\...\{9EF0B455-5527-4888-A2FF-B5374CCE0652}) (Version: 1.2.98.18399 - Dendrit Haustechnik-Software GmbH)
LightScribe 1.4.142.1 (Version: 1.4.142.1 - hxxp://www.lightscribe.com) Hidden
LPT System Updater Service (HKLM\...\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}) (Version: 1.0.0.0 - LPT) <==== ATTENTION
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Age of Empires II (HKLM\...\Age of Empires 2.0) (Version: - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM\...\Age of Empires II: The Conquerors Expansion 1.0) (Version: - )
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM\...\Microsoft SQL Server 2005) (Version: - Microsoft Corporation)
Microsoft SQL Server 2005 Express Edition (GW) (Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server Native Client (HKLM\...\{F46E21DF-5BE1-48E2-8390-5EEA8B25E36A}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{FDE96E86-7780-431C-92F7-679C6A7CEC51}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Move Networks Media Player for Internet Explorer (HKCU\...\Move Networks Player - IE) (Version: - )
Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyPC Backup (HKLM\...\MyPC Backup) (Version: - JDi Backup Ltd) <==== ATTENTION
Network ScanGear Ver.2.2 (HKLM\...\InstallShield_{5F68D4DF-0A31-4D57-AABD-0F2E6CF10C12}) (Version: 2.20.0000 - Canon Inc)
Network ScanGear Ver.2.2 (Version: 2.20.0000 - Canon Inc) Hidden
NewPlayer (HKLM\...\NewPlayer) (Version: v2.1.1.9 - ) <==== ATTENTION
NTI Backup NOW! 4.7 (HKLM\...\InstallShield_{1598034D-7147-432C-8CA8-888E0632D124}) (Version: 1.00.0000 - NewTech Infosystems)
NTI Backup NOW! 4.7 (Version: 1.00.0000 - NewTech Infosystems) Hidden
NTI CD & DVD-Maker (HKLM\...\InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}) (Version: 7 - NewTech Infosystems)
NTI CD & DVD-Maker (Version: 7 - NewTech Infosystems) Hidden
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: - )
o2c Player (HKLM\...\o2c Player) (Version: 2.0.0.63 - ELECO Software GmbH)
omiga-plus uninstall (HKLM\...\omiga-plus uninstall) (Version: - omiga-plus)
OpenOffice.org 3.3 (HKLM\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Optimizer Pro v3.2 (HKLM\...\Optimizer Pro_is1) (Version: - ) <==== ATTENTION
PDF24 Creator 5.2.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
PdfGrabber 6.0 (HKLM\...\{A3A61264-B075-46BE-9C97-376EA4CEEEF5}) (Version: 6.0.0.0 - PixelPlanet)
PokerStars.eu (HKLM\...\PokerStars.eu) (Version: - PokerStars.eu)
PriceGong 2.6.11 (HKLM\...\PriceGong) (Version: 2.6.11 - PriceGong) <==== ATTENTION
Print2CAD 2012 OCR Demo (HKLM\...\{6CFAF45A-F44B-4FCC-B7D8-727BF54685D6}) (Version: 9.7.6 - Kazmierczak Software)
Print2CAD 2012 OCR Standard (HKLM\...\{082F3B93-6515-4230-8303-658FCB12CB62}) (Version: 9.8.5 - Kazmierczak Software)
QuickTime (HKLM\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5591 - Realtek Semiconductor Corp.)
SafeFinder Smartbar (HKLM\...\{E2DEFBFA-A805-4258-8431-A760836A23E9}) (Version: 11.72.72.17773 - Linkury Ltd.) <==== ATTENTION
SCC-CAD Studio (HKLM\...\{2FA99DAE-EE3D-465B-AFAB-D479D2E30CFC}) (Version: 13.37.01 - ZIEMER GmbH Elektrotechnik & Softwareentwicklung)
Search Protect (HKLM\...\SearchProtect) (Version: 2.15.11.3 - Client Connect LTD) <==== ATTENTION
Skins (Version: 2008.0219.2144.38819 - ATI) Hidden
Spelling Dictionaries Support For Adobe Reader 8 (HKLM\...\{AC76BA86-7AD7-5464-3428-800000000003}) (Version: 8.0.0 - Adobe Systems)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
STEUEReasy 2014 (HKLM\...\{77D53A25-9700-42C7-8305-8E469FEBEE30}) (Version: 19.08.82 - Akademische Arbeitsgemeinschaft)
suprasavings (HKLM\...\suprasavings) (Version: 2.0.1 - suprasavings) <==== ATTENTION
Symbolbibliothek Haustechnik für AutoCAD (HKLM\...\{5533667F-DDBB-4264-A0AA-E546C2DF844C}) (Version: 2004.5.503 - Mensch und Maschine)
System Speedup (HKLM\...\System Speedup_is1) (Version: 2.1 - systemspeedup.com)
TeamViewer 4 (HKLM\...\TeamViewer 4) (Version: - TeamViewer GmbH)
Tools für Microsoft SQL Server 2005 Express Edition (Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.5000.00 - Microsoft Corporation)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0 - DivX, Inc) Hidden
video MediaPlayer (HKLM\...\video MediaPlayer) (Version: 1.34.6.10 - enter) <==== ATTENTION
WebInternetSecurity (HKCU\...\webinternetsecurity) (Version: - WebInternetSecurity) <==== ATTENTION
WindowsMangerProtect20.0.0.502 (HKLM\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED)
==================== Restore Points =========================
15-05-2014 10:47:20 Geplanter Prüfpunkt
15-05-2014 15:02:09 Windows Update
21-05-2014 06:12:04 Windows Update
22-05-2014 10:28:34 Geplanter Prüfpunkt
27-05-2014 10:29:09 Geplanter Prüfpunkt
28-05-2014 07:46:00 Geplanter Prüfpunkt
30-05-2014 09:38:06 Windows Update
02-06-2014 12:38:23 SCC-CAD Studio wurde installiert.
03-06-2014 06:16:29 Windows Update
04-06-2014 10:30:11 Geplanter Prüfpunkt
05-06-2014 10:28:52 Geplanter Prüfpunkt
10-06-2014 06:14:17 Windows Update
11-06-2014 13:59:22 Windows Update
12-06-2014 09:42:42 Geplanter Prüfpunkt
16-06-2014 06:21:13 Windows Update
18-06-2014 11:59:59 Geplanter Prüfpunkt
23-06-2014 06:32:58 Windows Update
26-06-2014 10:32:52 Geplanter Prüfpunkt
27-06-2014 05:46:10 Windows Update
30-06-2014 10:41:47 Geplanter Prüfpunkt
01-07-2014 06:26:22 Windows Update
==================== Hosts content: ==========================
2006-11-02 12:23 - 2014-07-01 09:46 - 00003625 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
127.0.0.1 capitalimonline.com
127.0.0.1 www.verifi-infonet.com
127.0.0.1 www.forsil-srl.com
127.0.0.1 trustedppiclaims.co.uk
127.0.0.1 ftp.signara.org
127.0.0.1 buy-fifa-ultimateteam-coins.com
127.0.0.1 pay.pal-schutz.com
127.0.0.1 swqk3xftx38.h149.pp39dk.com
127.0.0.1 robertoleal.es
127.0.0.1 verifi-infonet.com
127.0.0.1 ssl.paypal.secure.your.billing.information.mytrickworld.com
127.0.0.1 lastminute-ibiza.net
127.0.0.1 myaccount.aol.com.onlineaccounts.upgrade.online.billing.account.update.alcaldiadearaure.gob.ve
127.0.0.1 www.rhnp.org
127.0.0.1 173.214.178.24
127.0.0.1 bit.ly
127.0.0.1 www.axisengneering.com
127.0.0.1 www.positive-eft.com
127.0.0.1 hw0vrcfmu0fpd.com
127.0.0.1 www.art3c.com.tw
127.0.0.1 www.kielkoppfest.harzwinter.net
127.0.0.1 www.battle.net-account.asxp.cn.com
127.0.0.1 mgstrategiesstudio.com
127.0.0.1 www.paypal.com.p2jdb5zb17llxg1i.0243cn71m8gjun1.com
127.0.0.1 paypal.com.update.account.toughbook.cl
127.0.0.1 www.lappen-123.no
127.0.0.1 www.paypal-update.visitasgratis.info
127.0.0.1 stromarket.ru
There are 64 more lines.
==================== Scheduled Tasks (whitelisted) =============
Task: {00B8A338-4320-43D2-8899-666860B987C1} - System32\Tasks\cd745590-0f0f-4692-9293-319957ad6080-4 => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-4.exe
Task: {05CE0A7B-25EA-4235-81B0-B060DF53C82A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {0853C038-4C7E-485F-B902-C38D78839E84} - System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5_user => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-5.exe [2014-06-30] (setup)
Task: {0FD3488F-8864-4882-8C57-FBEBB4DCEB67} - System32\Tasks\System Speedup_DEFAULT => C:\Program Files\System Speedup\SystemSpeedup.exe [2013-12-13] (System Speedup)
Task: {1013B224-A28E-4F78-B48D-B7CC944D5FB6} - System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-2 => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-2.exe [2014-06-30] (setup)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {271BEA73-88AB-4846-BDAE-B9AB7E47530C} - System32\Tasks\System Speedup => C:\Program Files\System Speedup\SystemSpeedup.exe [2013-12-13] (System Speedup)
Task: {28AB7213-CCE5-4A4D-8AA8-D49285A2B506} - System32\Tasks\cd745590-0f0f-4692-9293-319957ad6080-11 => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-11.exe
Task: {307390AF-A67A-43C3-BD90-EAF0081D40A9} - System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-7 => C:\Program Files\Fraven 1.1\Fraven 1.1-nova.exe
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3E317A63-E02C-491F-926D-2EF412D61C13} - System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5 => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-5.exe [2014-06-30] (setup)
Task: {424682CF-E95A-4551-9548-1EF33AC8842A} - System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-4 => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-4.exe
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {480F0A5D-D5C8-4AB1-A9FA-761BD4F2F2CB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-17] (Google Inc.)
Task: {4A09C9AF-13D7-4384-98FE-81068916F1B2} - System32\Tasks\Advanced System Protector_startup => C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe [2014-01-15] (Systweak) <==== ATTENTION
Task: {4D68A14B-7235-4D40-9575-590D1252EE2A} - System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-1 => C:\Program Files\Fraven 1.1\Fraven 1.1-codedownloader.exe
Task: {6F605CC4-E1E4-41C4-B40E-1DAF18D6E99A} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe <==== ATTENTION
Task: {72C3F088-88FB-434C-BB73-E51238E6B246} - System32\Tasks\Advanced System Protector => C:\Program Files\RegClean Pro\SystweakASP.exe <==== ATTENTION
Task: {757D13C7-558E-45A1-A7EE-724CE7E21298} - System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-11 => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-11.exe
Task: {780DD53A-8608-4129-A771-89210594CE76} - System32\Tasks\cd745590-0f0f-4692-9293-319957ad6080-3 => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-3.exe
Task: {7A381A8D-7556-4E02-8ABC-F911870C839E} - System32\Tasks\cd745590-0f0f-4692-9293-319957ad6080-5_user => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-5.exe [2014-06-30] (enter) <==== ATTENTION
Task: {8429E94A-3397-4AD4-8808-4EE9E0FFCFE6} - System32\Tasks\cd745590-0f0f-4692-9293-319957ad6080-7 => C:\Program Files\video MediaPlayer\video MediaPlayer-nova.exe
Task: {870F2227-FAF6-4F67-9243-153D7212B500} - System32\Tasks\cd745590-0f0f-4692-9293-319957ad6080-2 => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-2.exe [2014-06-30] (enter) <==== ATTENTION
Task: {8DEE243A-A4FE-4E1E-92E9-6667791BE275} - System32\Tasks\cd745590-0f0f-4692-9293-319957ad6080-1 => C:\Program Files\video MediaPlayer\video MediaPlayer-codedownloader.exe
Task: {99CE514B-212F-4BD3-A8D9-A094E50610AB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-17] (Google Inc.)
Task: {9CB8B287-21EB-4183-99C8-0634A72D2239} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-06-30] (globalUpdate) <==== ATTENTION
Task: {A9742390-2FED-4774-AB47-5801B2D0BEC5} - System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-6 => C:\Program Files\Fraven 1.1\Fraven 1.1-novainstaller.exe
Task: {C13422A5-3A66-492C-9D84-F98F999FE6D0} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-06-30] (globalUpdate) <==== ATTENTION
Task: {C763E5D5-7077-4AD7-9E62-8F518F3C6C56} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {DCAB2C83-61C8-40D9-B046-E1D255EAB5E5} - System32\Tasks\cd745590-0f0f-4692-9293-319957ad6080-5 => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-5.exe [2014-06-30] (enter) <==== ATTENTION
Task: {DDBB4155-89A5-4903-88AC-24689F31E5ED} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {E4B67F8B-A6BD-474F-BD70-148B359DB9E6} - System32\Tasks\System Speedup_UPDATES => C:\Program Files\System Speedup\SystemSpeedup.exe [2013-12-13] (System Speedup)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {EBBCE588-0433-41B7-A82E-94A47197DC7E} - System32\Tasks\cd745590-0f0f-4692-9293-319957ad6080-6 => C:\Program Files\video MediaPlayer\video MediaPlayer-novainstaller.exe
Task: {F31CDFC5-2F43-4C42-BFA4-6F64F802DD1A} - System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-3 => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-3.exe
Task: {F51382E2-8870-4970-84F0-C638F4DFB42E} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {FBA5B1D2-0F19-41B3-8745-8EF18C23836E} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Technoplan => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)
Task: C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-1.job => C:\Program Files\Fraven 1.1\Fraven 1.1-codedownloader.exe
Task: C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-11.job => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-11.exe
Task: C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-2.job => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-2.exe
Task: C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-3.job => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-3.exe
Task: C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-4.job => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-4.exe
Task: C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5.job => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-5.exe
Task: C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5_user.job => C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-5.exe
Task: C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-6.job => C:\Program Files\Fraven 1.1\Fraven 1.1-novainstaller.exe
Task: C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-7.job => C:\Program Files\Fraven 1.1\Fraven 1.1-nova.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-1.job => C:\Program Files\video MediaPlayer\video MediaPlayer-codedownloader.exe
Task: C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-11.job => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-11.exe
Task: C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-2.job => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-2.exe
Task: C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-3.job => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-3.exe
Task: C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-4.job => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-4.exe
Task: C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-5.job => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-5.exe
Task: C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-5_user.job => C:\Program Files\video MediaPlayer\cd745590-0f0f-4692-9293-319957ad6080-5.exe
Task: C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-6.job => C:\Program Files\video MediaPlayer\video MediaPlayer-novainstaller.exe
Task: C:\Windows\Tasks\cd745590-0f0f-4692-9293-319957ad6080-7.job => C:\Program Files\video MediaPlayer\video MediaPlayer-nova.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\System Speedup_DEFAULT.job => C:\Program Files\System Speedup\SystemSpeedup.exe
Task: C:\Windows\Tasks\System Speedup_UPDATES.job => C:\Program Files\System Speedup\SystemSpeedup.exe
==================== Loaded Modules (whitelisted) =============
2008-10-24 17:35 - 2008-10-24 17:35 - 00128296 _____ () C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
2008-03-21 15:56 - 2008-01-25 19:49 - 00098304 _____ () C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLSchRecordMonitor.dll
2008-03-21 15:56 - 2008-01-25 19:49 - 00260096 _____ () C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\sqlite3.dll
2008-03-21 15:53 - 2007-10-17 11:38 - 00028672 _____ () C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
2008-03-21 15:53 - 2007-10-17 10:55 - 00016384 _____ () C:\Acer\Empowering Technology\ePerformance\MemCheck.Interface.dll
2008-03-21 15:53 - 2007-10-17 11:37 - 00040960 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Library.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-06-18 12:12 - 2014-06-18 12:12 - 00904704 _____ () C:\Program Files\MyPC Backup\x86\System.Data.SQLite.dll
2014-06-18 12:17 - 2014-06-18 12:17 - 00012288 _____ () C:\Program Files\MyPC Backup\GetText.dll
2014-06-30 13:09 - 2014-06-30 13:09 - 03156968 _____ () c:\Program Files\Optimizer Pro\OptProCrash.dll
2014-06-02 14:24 - 2004-05-29 09:05 - 02179072 _____ () C:\MySql\bin\mysqld-nt.exe
2014-05-05 14:07 - 2014-05-05 14:07 - 00011776 _____ () C:\Program Files\NewPlayer\NewPlayerUpdaterService.exe
2008-03-21 15:57 - 2006-07-19 20:36 - 00262247 _____ () C:\Program Files\CyberLink\Shared Files\RichVideo.exe
2008-09-29 18:53 - 2007-02-13 06:26 - 00016384 _____ () C:\Acer\Empowering Technology\eRecovery\ServiceInterface.dll
2008-09-29 18:53 - 2007-02-13 06:26 - 00016384 _____ () C:\Acer\Empowering Technology\eRecovery\IERYETF.dll
2008-09-29 18:53 - 2007-06-28 18:15 - 00081920 _____ () C:\Acer\Empowering Technology\eRecovery\INT15.dll
2008-03-21 16:18 - 2007-12-19 19:09 - 00024576 _____ () C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
2008-03-21 16:18 - 2007-12-19 19:09 - 00118784 _____ () C:\Acer\Empowering Technology\eSettings\Service\eSettings.Model.Computer.dll
2008-03-21 16:18 - 2007-12-19 19:08 - 00032768 _____ () C:\Acer\Empowering Technology\eSettings\Service\eSettings.Model.ComputerInterfaces.dll
2008-03-21 16:18 - 2007-12-19 19:08 - 00118784 _____ () C:\Acer\Empowering Technology\eSettings\Service\eSettings.Model.Library.dll
2008-03-21 16:18 - 2007-11-06 10:30 - 00024576 _____ () C:\Acer\Empowering Technology\eSettings\Service\iteio.dll
2008-03-21 16:18 - 2007-12-19 19:09 - 00006656 _____ () C:\Acer\Empowering Technology\eSettings\Service\CPUID.dll
2007-03-02 11:44 - 2007-03-02 11:44 - 00073728 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
2008-09-16 22:51 - 2008-02-20 00:08 - 00159744 _____ () C:\Windows\system32\atitmmxx.dll
2014-06-30 13:07 - 2014-06-27 15:13 - 03353080 _____ () C:\Users\Technoplan\AppData\Local\fst_de_69\upfst_de_69.exe
2008-03-21 15:51 - 2008-01-09 19:43 - 00326176 _____ () C:\Acer\Empowering Technology\SysMonitor.exe
2008-03-05 00:38 - 2008-03-05 00:38 - 00227888 _____ () C:\Acer\Empowering Technology\eDataSecurity\x86\ShowErrMsg.dll
2009-10-05 18:01 - 2009-10-05 18:01 - 00512000 _____ () C:\Program Files\Common Files\BCL Technologies\PixelPlanet6\bepprint.dll
2013-11-11 14:34 - 2009-02-27 17:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2014-06-30 13:07 - 2014-06-27 15:13 - 03980280 _____ () C:\Program Files\fst_de_69\fst_de_69.exe
2008-03-21 15:51 - 2008-01-09 19:43 - 00057344 _____ () C:\Acer\Empowering Technology\Acer.Empowering.Framework.DialogManager.dll
2008-03-21 15:51 - 2008-01-09 19:42 - 00024576 _____ () C:\Acer\Empowering Technology\Acer.Empowering.Framework.PasswordSetting.dll
2008-03-21 16:18 - 2007-12-19 19:09 - 00028672 _____ () C:\Acer\Empowering Technology\eSettings\eSettings.Plugin.dll
2008-03-21 16:18 - 2007-12-19 19:08 - 00032768 _____ () C:\Acer\Empowering Technology\eSettings.Model.ComputerInterfaces.dll
2008-03-21 16:18 - 2007-12-19 19:08 - 03420160 _____ () C:\Acer\Empowering Technology\eSettings\eSettings.View.dll
2008-03-21 16:18 - 2007-12-19 19:08 - 00155648 _____ () C:\Acer\Empowering Technology\eSettings\eSettings.Presenter.dll
2008-03-21 15:53 - 2007-10-17 11:38 - 00045056 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Plugin.dll
2008-03-21 15:53 - 2007-10-17 11:38 - 00024576 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Presenter.dll
2008-03-21 15:53 - 2007-10-17 10:55 - 00020480 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Model.Interface.dll
2008-03-21 15:53 - 2007-10-17 11:38 - 00028672 _____ () C:\Acer\Empowering Technology\ePerformance\ePerformance.Model.dll
2008-03-21 15:53 - 2007-10-17 10:55 - 00016384 _____ () C:\Acer\Empowering Technology\MemCheck.Interface.dll
2008-03-21 16:18 - 2007-12-19 19:09 - 00003584 _____ () C:\Acer\Empowering Technology\eSettings\de\eSettings.Plugin.resources.dll
2008-03-21 16:18 - 2007-12-19 19:08 - 00010752 _____ () C:\Acer\Empowering Technology\eSettings\de\eSettings.Presenter.resources.dll
2008-03-21 15:53 - 2007-10-17 11:38 - 00003584 _____ () C:\Acer\Empowering Technology\ePerformance\de\ePerformance.Plugin.resources.dll
2008-02-20 17:30 - 2008-02-20 17:30 - 00016384 ____R () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00045848 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00071448 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\srau.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00166680 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 02337048 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00067864 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\spbl.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00156952 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00015128 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\siem.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00067352 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\sppsm.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00698136 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00015640 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00078104 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00027928 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00060184 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\srut.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00030488 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\srsbs.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00066328 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00150296 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\smti.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00032024 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\srom.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00031512 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\smtu.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00040216 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\smta.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00046872 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\srbu.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00025368 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\sgml.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00062744 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00025880 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\srpdm.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00044312 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
2014-06-15 18:12 - 2014-06-15 18:12 - 00025880 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\de\Smartbar.Resources.LanguageSettings.resources.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00036632 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
2014-06-15 18:13 - 2014-06-15 18:13 - 00194328 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\sgmu.dll
2014-05-11 18:46 - 2014-05-11 18:46 - 00061440 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll
2014-06-15 18:14 - 2014-06-15 18:14 - 00256280 _____ () C:\Users\Technoplan\AppData\Local\Smartbar\Application\srns.dll
2014-07-01 09:45 - 2012-07-25 12:03 - 00886272 _____ () C:\Program Files\Advanced System Protector\System.Data.SQLite.dll
2014-07-01 09:45 - 2014-01-15 18:53 - 01731312 _____ () C:\Program Files\Advanced System Protector\aspsys.dll
2014-07-01 09:45 - 2012-07-25 12:03 - 00168448 _____ () C:\Program Files\Advanced System Protector\UNRAR.DLL
2014-07-01 09:51 - 2014-07-01 09:51 - 00541696 _____ () C:\Program Files\003\vxlsnyaiet32.exe
2014-06-25 19:58 - 2014-06-25 19:58 - 00151040 _____ () C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3\SupraSavingsService.exe
2014-06-12 21:05 - 2014-06-12 21:05 - 00102400 _____ () C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3\nfapi.dll
2014-06-12 21:05 - 2014-06-12 21:05 - 00323584 _____ () C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3\ProtocolFilters.dll
2014-06-18 09:18 - 2014-06-18 09:18 - 03852912 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2014-07-01 09:43 - 2014-05-28 10:45 - 00099096 _____ () C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\extensions\{fcd9923a-9c24-d7ca-af1d-94ac42151b2b}\components\SmartbarFireFoxRemotePlugin_30.dll
2014-05-14 10:43 - 2014-05-14 10:43 - 16361136 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\Technoplan:zylomtest
AlternateDataStreams: C:\Users\Technoplan:zylomtr{000HQ7FF-AD7A-3FG1-1VH8-28I0EFCC2VVP}
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\Users\Technoplan\AppData\Roaming\Kommagetrennte Werte (Windows).EML:OECustomProperty
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/01/2014 09:45:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung plugin-container.exe, Version 30.0.0.5269, Zeitstempel 0x53914233, fehlerhaftes Modul mozalloc.dll, Version 30.0.0.5269, Zeitstempel 0x53911393, Ausnahmecode 0x80000003, Fehleroffset 0x0000141b,
Prozess-ID 0x81c, Anwendungsstartzeit plugin-container.exe0.
Error: (07/01/2014 09:42:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung plugin-container.exe, Version 30.0.0.5269, Zeitstempel 0x53914233, fehlerhaftes Modul mozalloc.dll, Version 30.0.0.5269, Zeitstempel 0x53911393, Ausnahmecode 0x80000003, Fehleroffset 0x0000141b,
Prozess-ID 0x1b34, Anwendungsstartzeit plugin-container.exe0.
Error: (07/01/2014 08:24:11 AM) (Source: LoadPerf) (EventID: 3011) (User: )
Description: WmiApRplWmiApRpl8
Error: (07/01/2014 08:24:11 AM) (Source: LoadPerf) (EventID: 3012) (User: )
Description: Performance16
Error: (07/01/2014 08:24:10 AM) (Source: LoadPerf) (EventID: 3012) (User: )
Description: Performance16
Error: (07/01/2014 08:18:05 AM) (Source: Perflib) (EventID: 1017) (User: )
Description: PolicyAgent
Error: (07/01/2014 08:18:05 AM) (Source: Perflib) (EventID: 1005) (User: )
Description: OpenIPSecPerformanceDataC:\Windows\System32\ipsecsvc.dllPolicyAgent4
Error: (07/01/2014 08:18:05 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4
Error: (07/01/2014 08:18:04 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSSQL$GWC:\Windows\system32\sqlctr90.dll4
Error: (07/01/2014 08:18:01 AM) (Source: Perflib) (EventID: 1010) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4
System errors:
=============
Error: (07/01/2014 09:52:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: netfilter2%%2
Error: (07/01/2014 09:44:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: LPT System Updater Service%%1053
Error: (07/01/2014 09:44:13 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000LPT System Updater Service
Error: (07/01/2014 08:25:33 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT-AUTORITÄT)
Description: Windows-Wartung konnte das Paket KB2492386 (Update) nicht in den Status Aufgelöst(Resolved) setzen.
Error: (07/01/2014 08:25:33 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT-AUTORITÄT)
Description: Windows-Wartung konnte das Paket KB2492386 (Update) nicht in den Status Aufgelöst(Resolved) setzen.
Error: (07/01/2014 08:25:33 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT-AUTORITÄT)
Description: Windows-Wartung konnte das Paket KB2492386 (Update) nicht in den Status Aufgelöst(Resolved) setzen.
Error: (07/01/2014 08:25:33 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT-AUTORITÄT)
Description: Windows-Wartung konnte das Paket KB2492386 (Update) nicht in den Status Aufgelöst(Resolved) setzen.
Error: (07/01/2014 08:25:33 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT-AUTORITÄT)
Description: Windows-Wartung konnte das Paket KB2492386 (Update) nicht in den Status Aufgelöst(Resolved) setzen.
Error: (07/01/2014 08:25:33 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT-AUTORITÄT)
Description: Windows-Wartung konnte das Paket KB2492386 (Update) nicht in den Status Aufgelöst(Resolved) setzen.
Error: (07/01/2014 08:25:33 AM) (Source: Microsoft-Windows-Servicing) (EventID: 4375) (User: NT-AUTORITÄT)
Description: Windows-Wartung konnte das Paket KB2492386 (Update) nicht in den Status Aufgelöst(Resolved) setzen.
Microsoft Office Sessions:
=========================
Error: (07/01/2014 09:45:09 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe30.0.0.526953914233mozalloc.dll30.0.0.526953911393800000030000141b81c01cf9500356d9390
Error: (07/01/2014 09:42:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe30.0.0.526953914233mozalloc.dll30.0.0.526953911393800000030000141b1b3401cf94f8cbc519b0
Error: (07/01/2014 08:24:11 AM) (Source: LoadPerf) (EventID: 3011) (User: )
Description: WmiApRplWmiApRpl8
Error: (07/01/2014 08:24:11 AM) (Source: LoadPerf) (EventID: 3012) (User: )
Description: Performance16
Error: (07/01/2014 08:24:10 AM) (Source: LoadPerf) (EventID: 3012) (User: )
Description: Performance16
Error: (07/01/2014 08:18:05 AM) (Source: Perflib) (EventID: 1017) (User: )
Description: PolicyAgent
Error: (07/01/2014 08:18:05 AM) (Source: Perflib) (EventID: 1005) (User: )
Description: OpenIPSecPerformanceDataC:\Windows\System32\ipsecsvc.dllPolicyAgent4
Error: (07/01/2014 08:18:05 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4
Error: (07/01/2014 08:18:04 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSSQL$GWC:\Windows\system32\sqlctr90.dll4
Error: (07/01/2014 08:18:01 AM) (Source: Perflib) (EventID: 1010) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4
CodeIntegrity Errors:
===================================
Date: 2013-05-27 14:54:54.088
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-05-27 14:54:53.828
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-05-27 14:54:38.107
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-05-27 14:54:37.773
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-05-27 14:54:34.327
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-05-27 14:54:34.034
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\atiumdag.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 49%
Total physical RAM: 3070.32 MB
Available physical RAM: 1563.1 MB
Total Pagefile: 6370.79 MB
Available Pagefile: 4036.79 MB
Total Virtual: 2047.88 MB
Available Virtual: 1920.91 MB
==================== Drives ================================
Drive c: (ACER) (Fixed) (Total:293.33 GB) (Free:181.47 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:293.08 GB) (Free:292.59 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 596 GB) (Disk ID: 4CD01D16)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=293 GB) - (Type=06)
Partition 3: (Not Active) - (Size=293 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
01.07.2014, 14:28
| #4 |
| |  Player.exe mit Windows Vista Heruntergeladen Hallo Schrauber, konntest du schon nach meiner Antwort schauen, weis nicht genau ob sie ankamm da bei mir die ganze Zeit angezeigt wird das ich offline wäre. Grüße Pain 85 |
|
02.07.2014, 11:48
| #5 |
| /// the machine /// TB-Ausbilder | Player.exe mit Windows Vista Heruntergeladen Adware & Co. deinstallieren
Solltest Du ein Programm nicht finden oder nicht deinstallieren können, mache bitte mit dem nächsten Schritt weiter: Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
02.07.2014, 13:12
| #6 |
| | Player.exe mit Windows Vista Heruntergeladen Juhu die ersten Krämpfe sind weg  Combofix Logfile: Code:
ATTFilter ComboFix 14-06-30.01 - Technoplan 02.07.2014 13:49:42.1.4 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.49.1031.18.3070.1499 [GMT 2:00]
ausgeführt von:: c:\users\Technoplan\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\SearchProtect
c:\program files\SearchProtect\EULA.txt
c:\program files\SearchProtect\Main\bin\CltMngSvc.exe
c:\program files\SearchProtect\Main\rep\SystemRepository.dat
c:\program files\SearchProtect\SearchProtect\bin\cltmng.exe
c:\program files\SearchProtect\SearchProtect\bin\SPTool64.exe
c:\program files\SearchProtect\SearchProtect\bin\SPVC32.dll
c:\program files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
c:\program files\SearchProtect\SearchProtect\bin\SPVC64.dll
c:\program files\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
c:\program files\SearchProtect\UI\bin\cltmngui.exe
c:\program files\SearchProtect\UI\dialogs\bubble\bubble.css
c:\program files\SearchProtect\UI\dialogs\bubble\bubble.html
c:\program files\SearchProtect\UI\dialogs\bubble\bubble.js
c:\program files\SearchProtect\UI\dialogs\bubble\defaults.js
c:\program files\SearchProtect\UI\dialogs\Images\Apply-default.png
c:\program files\SearchProtect\UI\dialogs\Images\Apply-onclick.png
c:\program files\SearchProtect\UI\dialogs\Images\Apply-Rollover.png
c:\program files\SearchProtect\UI\dialogs\Images\bg-uninstall.png
c:\program files\SearchProtect\UI\dialogs\Images\bg-with-logo.png
c:\program files\SearchProtect\UI\dialogs\Images\bg.png
c:\program files\SearchProtect\UI\dialogs\Images\bgNotif.png
c:\program files\SearchProtect\UI\dialogs\Images\bgSettings.png
c:\program files\SearchProtect\UI\dialogs\Images\bgSettingsDS.png
c:\program files\SearchProtect\UI\dialogs\Images\bgUninstall.png
c:\program files\SearchProtect\UI\dialogs\Images\btnBlue.png
c:\program files\SearchProtect\UI\dialogs\Images\btnClose.png
c:\program files\SearchProtect\UI\dialogs\Images\btnSilver.png
c:\program files\SearchProtect\UI\dialogs\Images\button-bg.png
c:\program files\SearchProtect\UI\dialogs\Images\checkbox.png
c:\program files\SearchProtect\UI\dialogs\Images\checkbox_checked.png
c:\program files\SearchProtect\UI\dialogs\Images\checkbox_def.png
c:\program files\SearchProtect\UI\dialogs\Images\close-win-def.png
c:\program files\SearchProtect\UI\dialogs\Images\close-win-over-click.png
c:\program files\SearchProtect\UI\dialogs\Images\gray-bg.png
c:\program files\SearchProtect\UI\dialogs\Images\hez-def.png
c:\program files\SearchProtect\UI\dialogs\Images\hez-selected.png
c:\program files\SearchProtect\UI\dialogs\Images\hez.png
c:\program files\SearchProtect\UI\dialogs\Images\icon-win.png
c:\program files\SearchProtect\UI\dialogs\Images\info-icon.png
c:\program files\SearchProtect\UI\dialogs\Images\menu-rollover.png
c:\program files\SearchProtect\UI\dialogs\Images\menu-selected.png
c:\program files\SearchProtect\UI\dialogs\Images\radio-button-def.png
c:\program files\SearchProtect\UI\dialogs\Images\radio-button-selected.png
c:\program files\SearchProtect\UI\dialogs\Images\radio-button.png
c:\program files\SearchProtect\UI\dialogs\Images\radio-button2.png
c:\program files\SearchProtect\UI\dialogs\Images\Settings-icon.png
c:\program files\SearchProtect\UI\dialogs\Images\text-field.png
c:\program files\SearchProtect\UI\dialogs\Images\v.png
c:\program files\SearchProtect\UI\dialogs\Images\x.png
c:\program files\SearchProtect\UI\dialogs\libs\defaults.js
c:\program files\SearchProtect\UI\dialogs\libs\dialogUtils.js
c:\program files\SearchProtect\UI\dialogs\libs\jquery.1.7.1.min.js
c:\program files\SearchProtect\UI\dialogs\libs\json2.min.js
c:\program files\SearchProtect\UI\dialogs\libs\main.js
c:\program files\SearchProtect\UI\dialogs\libs\SPDialogAPI.js
c:\program files\SearchProtect\UI\dialogs\protection\defaults.js
c:\program files\SearchProtect\UI\dialogs\protection\protection.css
c:\program files\SearchProtect\UI\dialogs\protection\protection.html
c:\program files\SearchProtect\UI\dialogs\protection\protection.js
c:\program files\SearchProtect\UI\dialogs\protectionDS\defaults.js
c:\program files\SearchProtect\UI\dialogs\protectionDS\protectionDS.css
c:\program files\SearchProtect\UI\dialogs\protectionDS\protectionDS.html
c:\program files\SearchProtect\UI\dialogs\protectionDS\protectionDS.js
c:\program files\SearchProtect\UI\dialogs\settings.html
c:\program files\SearchProtect\UI\dialogs\settings\defaults.js
c:\program files\SearchProtect\UI\dialogs\settings\settings.css
c:\program files\SearchProtect\UI\dialogs\settings\settings.html
c:\program files\SearchProtect\UI\dialogs\settings\settings.js
c:\program files\SearchProtect\UI\dialogs\style.css
c:\program files\SearchProtect\UI\dialogs\uninstall\defaults.js
c:\program files\SearchProtect\UI\dialogs\uninstall\uninstall.css
c:\program files\SearchProtect\UI\dialogs\uninstall\uninstall.html
c:\program files\SearchProtect\UI\dialogs\uninstall\uninstall.js
c:\programdata\2308189059
c:\programdata\2308189059\BIT237E.tmp
.
.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_globalUpdate
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-06-02 bis 2014-07-02 ))))))))))))))))))))))))))))))
.
.
2014-07-02 11:26 . 2014-07-02 11:26 -------- d-----w- c:\program files\predm
2014-07-02 11:17 . 2014-07-02 11:17 -------- d-----w- c:\program files\VS Revo Group
2014-07-01 08:12 . 2014-07-01 08:15 -------- d-----w- C:\FRST
2014-07-01 07:52 . 2014-07-01 07:52 -------- d-----w- c:\program files\ChicaLogic
2014-07-01 07:52 . 2014-07-01 07:52 -------- d-----w- c:\program files\CB78F643-3729-434F-8C25-F28D15F025F3
2014-07-01 07:50 . 2014-07-01 12:36 -------- d-----w- c:\program files\003
2014-07-01 07:45 . 2014-07-01 07:45 -------- d-----w- c:\programdata\Systweak
2014-07-01 07:45 . 2012-07-25 10:03 17136 ----a-w- c:\windows\system32\sasnative32.exe
2014-07-01 07:44 . 2014-07-01 07:45 -------- d-----w- c:\users\Technoplan\AppData\Roaming\Advanced System Protector
2014-07-01 07:44 . 2014-07-02 07:44 -------- d-----w- c:\users\Technoplan\AppData\Roaming\System Speedup
2014-07-01 07:44 . 2013-12-13 15:53 17496 ----a-w- c:\windows\system32\roboot.exe
2014-07-01 07:44 . 2014-07-02 11:24 -------- d-----w- c:\users\Technoplan\AppData\Roaming\systweak
2014-07-01 07:44 . 2014-07-01 07:44 -------- d-----w- c:\program files\System Speedup
2014-07-01 07:43 . 2014-07-01 07:43 -------- d-----w- c:\program files\LPT
2014-07-01 07:43 . 2014-07-01 07:43 -------- d-----w- c:\users\Technoplan\AppData\Local\LPT
2014-07-01 07:43 . 2014-07-01 07:43 -------- d-----w- c:\users\Technoplan\AppData\Local\Smartbar
2014-07-01 06:33 . 2014-06-05 10:54 8140904 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BC550A7C-D074-4DF5-A814-4AF766CBA96E}\mpengine.dll
2014-07-01 06:24 . 2014-07-02 11:44 -------- d-----w- c:\users\Technoplan\AppData\Local\SearchProtect
2014-06-30 11:10 . 2014-06-30 11:10 -------- d-----w- c:\users\Technoplan\AppData\Local\com
2014-06-30 11:10 . 2014-06-30 11:11 -------- d-----w- c:\program files\SupTab
2014-06-30 11:10 . 2014-06-30 11:10 -------- d-----w- c:\programdata\WindowsMangerProtect
2014-06-30 11:08 . 2014-06-30 11:09 -------- d-----w- c:\users\Technoplan\AppData\Roaming\omiga-plus
2014-06-30 11:07 . 2014-07-01 06:59 -------- d-----w- c:\program files\Fraven 1.1
2014-06-30 11:07 . 2014-06-30 11:07 -------- d-----w- c:\program files\globalUpdate
2014-06-30 11:07 . 2014-06-30 11:07 -------- d-----w- c:\users\Technoplan\AppData\Local\globalUpdate
2014-06-12 19:05 . 2014-06-12 19:05 47488 ----a-w- c:\windows\system32\drivers\netfilter.sys
2014-06-11 06:19 . 2014-05-28 16:31 768512 ----a-w- c:\program files\Common Files\Microsoft Shared\vgx\VGX.dll
2014-06-02 12:24 . 2014-06-02 12:24 -------- d-----w- C:\MySql
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-06-24 12:16 . 2013-07-09 07:21 97648 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2014-05-22 12:27 . 2013-07-09 07:21 136216 ----a-w- c:\windows\system32\drivers\avipbb.sys
2014-05-14 08:43 . 2012-04-05 06:15 692400 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-05-14 08:43 . 2011-05-20 06:06 70832 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}]
2014-06-23 18:37 12184 ----a-w- c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{41564952-412D-5637-00A7-7A786E7484D7}"= "c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" [2014-06-23 12184]
.
[HKEY_CLASSES_ROOT\clsid\{41564952-412d-5637-00a7-7a786e7484d7}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{41564952-412D-5637-00A7-7A786E7484D7}"= "c:\program files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" [2014-06-23 12184]
.
[HKEY_CLASSES_ROOT\clsid\{41564952-412d-5637-00a7-7a786e7484d7}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"Akamai NetSession Interface"="c:\users\Technoplan\AppData\Local\Akamai\netsession_win.exe" [2014-04-17 4672920]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"Browser Infrastructure Helper"="c:\users\Technoplan\AppData\Local\Smartbar\Application\SafeFinder.exe" [2014-06-15 28952]
"ChicaPasswordManager"="c:\program files\ChicaLogic\Chica Password Manager\stpass.exe" [2012-07-09 4299624]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-12-21 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-21 8497696]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-21 81920]
"RtHDVCpl"="RtHDVCpl.exe" [2008-03-26 5369856]
"Acer Empowering Technology Monitor"="c:\acer\Empowering Technology\SysMonitor.exe" [2008-01-09 326176]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-03-04 526896]
"PCMMediaSharing"="c:\program files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-01-25 204908]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344]
"NVRaidService"="c:\windows\system32\nvraidservice.exe" [2008-06-06 203296]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"PixelPlanet PdfPrinter-Monitor"="c:\program files\PixelPlanet\PdfPrinter 6\PdfPrinterMonitor.exe" [2009-11-17 1404808]
"Skytel"="Skytel.exe" [2007-11-20 1826816]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]
"PDFPrint"="c:\program files\pdf24\pdf24.exe" [2012-12-12 163000]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2014-06-24 750160]
"ApnTBMon"="c:\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2014-06-23 1956760]
"ADSK DLMSession"="c:\program files\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe" [2013-02-01 1641368]
"ControlCenter4"="c:\program files\ControlCenter4\BrCcBoot.exe" [2012-08-28 143360]
"BrStsMon00"="c:\program files\Browny02\Brother\BrStMonW.exe" [2012-06-06 3076096]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2014-02-21 152392]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
ASETRES.EXE [2008-4-14 20480]
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe 9999 [2008-3-21 535336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableSecureUIAPath"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
.
S2 AAV UpdateService;AAV UpdateService;c:\program files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [2008-10-24 128296]
S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-01-25 269448]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-06-12 06:22 1091912 ----a-w- c:\program files\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-07-02 c:\windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-2.job
- c:\program files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-2.exe [2014-06-30 11:09]
.
2014-07-02 c:\windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5.job
- c:\program files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-5.exe [2014-06-30 11:09]
.
2014-07-02 c:\windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5_user.job
- c:\program files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b-5.exe [2014-06-30 11:09]
.
2014-07-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 08:43]
.
2014-07-02 c:\windows\Tasks\globalUpdateUpdateTaskMachineCore.job
- c:\program files\globalUpdate\Update\GoogleUpdate.exe [2014-06-30 11:09]
.
2014-07-02 c:\windows\Tasks\globalUpdateUpdateTaskMachineUA.job
- c:\program files\globalUpdate\Update\GoogleUpdate.exe [2014-06-30 11:09]
.
2014-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-17 07:15]
.
2014-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-17 07:15]
.
2014-07-01 c:\windows\Tasks\System Speedup_DEFAULT.job
- c:\program files\System Speedup\SystemSpeedup.exe [2014-07-01 15:53]
.
2014-07-02 c:\windows\Tasks\System Speedup_UPDATES.job
- c:\program files\System Speedup\SystemSpeedup.exe [2014-07-01 15:53]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=55&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&SSPV=
mStart Page = hxxp://isearch.omiga-plus.com/?type=hp&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3
uInternet Settings,ProxyOverride = <local>;*.local
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.0.254
TCP: Interfaces\{2FC76DB2-719C-4570-9177-8E5A30E0FE49}: NameServer = 192.168.0.254
FF - ProfilePath - c:\users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\
FF - prefs.js: browser.search.selectedEngine - Trovi search
FF - prefs.js: browser.startup.homepage - hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=55&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&SSPV=
user_pref(extensions.dntme.tag,'YT14');
.
.
------- Dateityp-Verknüpfung -------
.
.scr=AutoCADLTScriptFile
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-fst_de_69 - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
.
.
.
**************************************************************************
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien:
.
**************************************************************************
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\programdata\WindowsMangerProtect\ProtectWindowsManager.exe
c:\program files\Avira\AntiVir Desktop\sched.exe
c:\acer\Empowering Technology\ePerformance\MemCheck.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\AskPartnerNetwork\Toolbar\apnmcp.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
c:\programdata\EPSON\EPW!3 SSRP\E_S30RP1.EXE
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\mysql\bin\mysqld-nt.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\CB78F643-3729-434F-8C25-F28D15F025F3\SupraSavingsService.exe
c:\program files\TeamViewer\Version4\TeamViewer_Service.exe
c:\windows\System32\WUDFHost.exe
c:\program files\Avira\AntiVir Desktop\AVWEBGRD.EXE
c:\acer\Empowering Technology\eRecovery\eRecoveryService.exe
c:\acer\Empowering Technology\eSettings\Service\capuserv.exe
c:\program files\Spybot - Search & Destroy\SDWinSec.exe
c:\windows\system32\conime.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-07-02 14:07:08 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2014-07-02 12:06
.
Vor Suchlauf: 18 Verzeichnis(se), 196.650.348.544 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 196.297.240.576 Bytes frei
.
- - End Of File - - 0D30648451EE095A35ABD52298DEE09A
A863475757CC50891AA8458C415E4B25 |
|
03.07.2014, 11:35
| #7 |
| /// the machine /// TB-Ausbilder | Player.exe mit Windows Vista Heruntergeladen Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
03.07.2014, 14:58
| #8 |
| | Player.exe mit Windows Vista Heruntergeladen Hi, wenn ich bei Malewarebytes unter Anwendungsprotokolle auf Ansicht gehe ist da nichts drin, wenn ich versuche eine txt datei zu erstellen stürtzt es ab. Ich poste dir mal die anderen hoffe du kannst mir damit weiterhelfen Gruß PainAdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.214 - Bericht erstellt am 03/07/2014 um 15:07:41
# Aktualisiert 29/06/2014 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzername : Technoplan - TECHNOPLAN-PC
# Gestartet von : C:\Users\Technoplan\Desktop\adwcleaner_3.214.exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : globalUpdatem
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Systweak
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Speedup
Ordner Gelöscht : C:\Program Files\003
Ordner Gelöscht : C:\Program Files\globalUpdate
Ordner Gelöscht : C:\Program Files\LPT
Ordner Gelöscht : C:\Program Files\predm
Ordner Gelöscht : C:\Program Files\SupraSavings
Ordner Gelöscht : C:\Program Files\SupTab
Ordner Gelöscht : C:\Program Files\System Speedup
Ordner Gelöscht : C:\Users\TECHNO~1\AppData\Local\Temp\Smartbar
Ordner Gelöscht : C:\Users\Technoplan\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Users\Technoplan\AppData\Local\LPT
Ordner Gelöscht : C:\Users\Technoplan\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Technoplan\AppData\Local\Smartbar
Ordner Gelöscht : C:\Users\Technoplan\AppData\LocalLow\Smartbar
Ordner Gelöscht : C:\Users\Technoplan\AppData\Roaming\Advanced System Protector
Ordner Gelöscht : C:\Users\Technoplan\AppData\Roaming\omiga-plus
Ordner Gelöscht : C:\Users\Technoplan\AppData\Roaming\System Speedup
Ordner Gelöscht : C:\Users\Technoplan\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Technoplan\Documents\Optimizer Pro
Ordner Gelöscht : C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\6c78cab3-0311-420c-8cc8-d70d7c2e12d0@61a12377-7214-44f1-a183-c0827fed20fa.com
Ordner Gelöscht : C:\Users\Technoplan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Datei Gelöscht : C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\searchplugins\trovi-search.xml
Datei Gelöscht : C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\Advanced System Protector
Datei Gelöscht : C:\Windows\System32\Tasks\Advanced System Protector_startup
Datei Gelöscht : C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
Datei Gelöscht : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
Datei Gelöscht : C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
Datei Gelöscht : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
Datei Gelöscht : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
Datei Gelöscht : C:\Windows\Tasks\System Speedup_DEFAULT.job
Datei Gelöscht : C:\Windows\System32\Tasks\System Speedup_DEFAULT
Datei Gelöscht : C:\Windows\Tasks\System Speedup_UPDATES.job
Datei Gelöscht : C:\Windows\System32\Tasks\System Speedup_UPDATES
Datei Gelöscht : C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-2.job
Datei Gelöscht : C:\Windows\System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-2
Datei Gelöscht : C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5.job
Datei Gelöscht : C:\Windows\System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5
Datei Gelöscht : C:\Windows\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5_user.job
Datei Gelöscht : C:\Windows\System32\Tasks\2fed8189-e898-400a-bb56-01610f96d56b-5_user
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Public\Desktop\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\Users\Technoplan\Desktop\Search.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
Verknüpfung Desinfiziert : C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Verknüpfung Desinfiziert : C:\Users\Technoplan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Verknüpfung Desinfiziert : C:\Users\Technoplan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
Verknüpfung Desinfiziert : C:\Users\Technoplan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Search.lnk
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{72C3F088-88FB-434C-BB73-E51238E6B246}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{22ED7BC3-B244-4695-B7AA-04649677F5DE}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{72C3F088-88FB-434C-BB73-E51238E6B246}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{22ED7BC3-B244-4695-B7AA-04649677F5DE}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C13422A5-3A66-492C-9D84-F98F999FE6D0}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C13422A5-3A66-492C-9D84-F98F999FE6D0}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9CB8B287-21EB-4183-99C8-0634A72D2239}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9CB8B287-21EB-4183-99C8-0634A72D2239}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6F605CC4-E1E4-41C4-B40E-1DAF18D6E99A}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6F605CC4-E1E4-41C4-B40E-1DAF18D6E99A}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0FD3488F-8864-4882-8C57-FBEBB4DCEB67}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FD3488F-8864-4882-8C57-FBEBB4DCEB67}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E4B67F8B-A6BD-474F-BD70-148B359DB9E6}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E4B67F8B-A6BD-474F-BD70-148B359DB9E6}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1013B224-A28E-4F78-B48D-B7CC944D5FB6}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1013B224-A28E-4F78-B48D-B7CC944D5FB6}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3E317A63-E02C-491F-926D-2EF412D61C13}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0853C038-4C7E-485F-B902-C38D78839E84}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3E317A63-E02C-491F-926D-2EF412D61C13}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0853C038-4C7E-485F-B902-C38D78839E84}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522962203}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555965503}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566966603}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544964403}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Schlüssel Gelöscht : HKCU\Software\FreeSoftToday
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\powerpack
Schlüssel Gelöscht : HKCU\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\System Speedup
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\TutoTag
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\suprasavings
Schlüssel Gelöscht : HKLM\Software\installedbrowserextensions
Schlüssel Gelöscht : HKLM\Software\SupDp
Schlüssel Gelöscht : HKLM\Software\Supra Savings
Schlüssel Gelöscht : HKLM\Software\SupTab
Schlüssel Gelöscht : HKLM\Software\System Speedup
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Tutorials
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\System Speedup_is1
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\NewPlayer
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Optimizer Pro_is1
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchProtect
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\VOPackage
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
***** [ Browser ] *****
-\\ Internet Explorer v9.0.8112.16555
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v30.0 (de)
[ Datei : C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\prefs.js ]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Trovi search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=55&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED[...]
Zeile gelöscht : user_pref("extensions.a6c78cab30311420c8cc8d70d7c2e12d061a12377721444f1a183c0827fed20facom59603.59603.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Zeile gelöscht : user_pref("extensions.aff8065806db34c09ba06d6caf0e991728453cb257fef4ed58934b08be5605617com59599.59599.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Zeile gelöscht : user_pref("extensions.crossrider.bic", "146ec783dd259f70e7dcf6149a3f32a2");
Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Zeile gelöscht : user_pref("extensions.helperbar.Visibility", false);
Zeile gelöscht : user_pref("extensions.helperbar.backPageCapacity", 3);
Zeile gelöscht : user_pref("extensions.helperbar.backPageCounter", 0);
Zeile gelöscht : user_pref("extensions.helperbar.backPageDay", 1);
Zeile gelöscht : user_pref("extensions.helperbar.backPageLastEvent", "1404027826263");
Zeile gelöscht : user_pref("extensions.helperbar.backPageMinInterval", 15);
Zeile gelöscht : user_pref("extensions.helperbar.barcodeid", "140729");
Zeile gelöscht : user_pref("extensions.helperbar.countryiso", "de");
Zeile gelöscht : user_pref("extensions.helperbar.downloadprovider", "adknowledgesf");
Zeile gelöscht : user_pref("extensions.helperbar.fromautoupdate", "false");
Zeile gelöscht : user_pref("extensions.helperbar.installationid", "fcd9923a-9c24-d7ca-af1d-94ac42151b2b");
Zeile gelöscht : user_pref("extensions.helperbar.installdate", "01/07/2014");
Zeile gelöscht : user_pref("extensions.helperbar.keepAliveLastevent", "1404200624");
Zeile gelöscht : user_pref("extensions.helperbar.lastExternalJsUpdate", "1404392857229");
Zeile gelöscht : user_pref("extensions.helperbar.publisher", "adknowledgesf");
-\\ Google Chrome v35.0.1916.153
[ Datei : C:\Users\Technoplan\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Gelöscht [Search Provider] : hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1404126489&from=tugs&uid=3219913727_67191_2CEC11F3&q={searchTerms}
Gelöscht [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=58&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&q={searchTerms}&SSPV=
Gelöscht [Startup_urls] : hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=55&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&SSPV=
Gelöscht [Homepage] : hxxp://www.trovi.com/?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=55&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&SSPV=
Gelöscht [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma
*************************
AdwCleaner[R0].txt - [17817 octets] - [03/07/2014 15:05:53]
AdwCleaner[S0].txt - [16046 octets] - [03/07/2014 15:07:41]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [16107 octets] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.3 (03.23.2014:1) OS: Windows Vista (TM) Home Premium x86 Ran by Technoplan on 03.07.2014 at 15:40:22,81 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\apn" ~~~ FireFox Successfully deleted: [File] C:\Users\Technoplan\AppData\Roaming\mozilla\firefox\profiles\x1kwq4gw.default\extensions\toolbar_avira-v7@apn.ask.com.xpi Successfully deleted the following from C:\Users\Technoplan\AppData\Roaming\mozilla\firefox\profiles\x1kwq4gw.default\prefs.js user_pref("extensions.helperbar.SmartbarDisabled", false); user_pref("extensions.helperbar.SmartbarStateMinimaized", false); Emptied folder: C:\Users\Technoplan\AppData\Roaming\mozilla\firefox\profiles\x1kwq4gw.default\minidumps [166 files] ~~~ Chrome Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 03.07.2014 at 15:45:04,31 Computer was rebooted End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:29-06-2014 Ran by Technoplan (administrator) on TECHNOPLAN-PC on 03-07-2014 15:50:26 Running from C:\Users\Technoplan\Desktop Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 9 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe (ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe () C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe (CyberLink) C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe () C:\Acer\Empowering Technology\ePerformance\MemCheck.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe (APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe () C:\MySql\bin\mysqld-nt.exe () C:\Program Files\CyberLink\Shared Files\RichVideo.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe () C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3\SupraSavingsService.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe (Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe () C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe (Safer Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe (Realtek Semiconductor) C:\Windows\RtHDVCpl.exe () C:\Acer\Empowering Technology\SysMonitor.exe (Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (NVIDIA Corporation) C:\Windows\System32\nvraidservice.exe (PixelPlanet GmbH) C:\Program Files\PixelPlanet\PdfPrinter 6\PdfPrinterMonitor.exe (Geek Software GmbH) C:\Program Files\pdf24\pdf24.exe (Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Autodesk, Inc.) C:\Program Files\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe (Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Akamai Technologies, Inc.) C:\Users\Technoplan\AppData\Local\Akamai\netsession_win.exe (Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe (Microsoft Corporation) C:\Windows\System32\conime.exe (Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe (Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe (Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRAgent.exe (Akamai Technologies, Inc.) C:\Users\Technoplan\AppData\Local\Akamai\netsession_win.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe (ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvSvc] => C:\Windows\system32\nvsvc.dll [86016 2007-12-21] (NVIDIA Corporation) HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [8497696 2007-12-21] (NVIDIA Corporation) HKLM\...\Run: [NvMediaCenter] => C:\Windows\system32\NvMcTray.dll [81920 2007-12-21] (NVIDIA Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [5369856 2008-03-26] (Realtek Semiconductor) HKLM\...\Run: [Acer Empowering Technology Monitor] => C:\Acer\Empowering Technology\SysMonitor.exe [326176 2008-01-09] () HKLM\...\Run: [eDataSecurity Loader] => C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [526896 2008-03-05] (Egis Incorporated) HKLM\...\Run: [PCMMediaSharing] => C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [204908 2008-01-25] () HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.) HKLM\...\Run: [WarReg_PopUp] => C:\Acer\WR_PopUp\WarReg_PopUp.exe [57344 2006-11-05] (Acer Inc.) HKLM\...\Run: [NVRaidService] => C:\Windows\system32\nvraidservice.exe [203296 2008-06-06] (NVIDIA Corporation) HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [39792 2008-10-15] (Adobe Systems Incorporated) HKLM\...\Run: [PixelPlanet PdfPrinter-Monitor] => C:\Program Files\PixelPlanet\PdfPrinter 6\PdfPrinterMonitor.exe [1404808 2009-11-17] (PixelPlanet GmbH) HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.) HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.) HKLM\...\Run: [PDFPrint] => C:\Program Files\pdf24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [248552 2010-05-14] (Sun Microsystems, Inc.) HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG) HKLM\...\Run: [ADSK DLMSession] => C:\Program Files\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe [1641368 2013-02-01] (Autodesk, Inc.) HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.) HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.) HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.) HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [SpybotSD TeaTimer] => C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.) HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Technoplan\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.) HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation) HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [ChicaPasswordManager] => C:\Program Files\ChicaLogic\Chica Password Manager\stpass.exe [4299624 2012-07-09] (ChicaLogic, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ASETRES.EXE () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Empowering Technology Launcher.lnk ShortcutTarget: Empowering Technology Launcher.lnk -> C:\Acer\Empowering Technology\eAPLauncher.exe (Acer Inc.) ShellIconOverlayIdentifiers: Symbol-Overlay-Steuerprogramm für AutoCAD Digitale Signaturen -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com SearchScopes: HKLM - DefaultScope value is missing. BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) Toolbar: HKLM - No Name - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - No File Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.254 Tcpip\..\Interfaces\{2FC76DB2-719C-4570-9177-8E5A30E0FE49}: [NameServer]192.168.0.254 FireFox: ======== FF ProfilePath: C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default FF NewTab: chrome://quick_start/content/index.html FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.) FF Plugin: @eleco.com/o2cplayer - C:\Program Files\Eleco\o2c Player\npO2CPlayer.DLL (ELECO Software GmbH) FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin: @java.com/DTPlugin,version=10.5.1 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DoNotTrackMe: Online Privacy Protection - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\donottrackplus@abine.com [2014-07-01] FF Extension: SafeFinder Smartbar - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\{fcd9923a-9c24-d7ca-af1d-94ac42151b2b} [2014-07-01] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-17] FF StartMenuInternet: FIREFOX.EXE - firefox.exe Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR NewTab: "chrome-extension://pelmeidfhdlhlbjimpabfcbnnojbboma/index.html" CHR DefaultSearchKeyword: trovi.search CHR DefaultSearchProvider: Trovi search CHR DefaultSearchURL: hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=58&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&q={searchTerms}&SSPV= CHR Extension: (Google Wallet) - C:\Users\Technoplan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-30] CHR Extension: (No Name) - C:\Users\Technoplan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-06-30] CHR StartMenuInternet: Google Chrome - chrome.exe ========================== Services (Whitelisted) ================= R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] () R2 Acer HomeMedia Connect Service; C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [269448 2008-01-25] (CyberLink) [File not signed] R2 AcerMemUsageCheckService; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [28672 2007-10-17] () [File not signed] R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-06-24] (Avira Operations GmbH & Co. KG) R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [165784 2014-06-23] (APN LLC.) S3 bepldr6PixelPlanetService; C:\Program Files\Common Files\BCL Technologies\PixelPlanet6\bepldr.exe [172032 2009-10-05] () [File not signed] R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed] R2 eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [500784 2008-03-05] (Egis Incorporated) R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE [102400 2006-04-18] (SEIKO EPSON CORPORATION) [File not signed] R2 eRecoveryService; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [57344 2007-09-10] (Acer Inc.) [File not signed] R2 eSettingsService; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576 2007-12-19] () [File not signed] S2 gupdate1c9a6d0297c578d; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-03-17] (Google Inc.) S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed] R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440 2007-01-17] (Hewlett-Packard Company) [File not signed] R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation) R2 MSSQL$GW; C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation) S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation) R2 MySQL; C:\MySql\bin\mysqld-nt.exe [2179072 2004-05-29] () [File not signed] R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [262247 2006-07-19] () [File not signed] R2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.) R2 SupraSavingsService; C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3\SupraSavingsService.exe [151040 2014-06-25] () [File not signed] R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [535936 2014-06-30] (Fuyu LIMITED) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-06-24] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-22] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG) R2 int15; C:\Acer\Empowering Technology\eRecovery\int15.sys [15392 2007-07-03] (Acer, Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-07-03] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation) R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [47488 2014-06-12] (NetFilterSDK.com) [File not signed] R3 NTIDrvr; C:\Windows\System32\DRIVERS\NTIDrvr.sys [6144 2008-03-21] (NewTech Infosystems, Inc.) [File not signed] R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-07-09] (Avira GmbH) R2 tvicport; C:\Windows\system32\drivers\tvicport.sys [14544 2007-11-06] (EnTech Taiwan) [File not signed] R2 zntport; C:\Windows\system32\drivers\zntport.sys [6080 2007-11-06] (Zeal SoftStudio) [File not signed] U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S1 netfilter2; system32\drivers\netfilter2.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-03 15:45 - 2014-07-03 15:45 - 00001513 _____ () C:\Users\Technoplan\Desktop\JRT.txt 2014-07-03 15:32 - 2014-07-03 15:32 - 01016261 _____ (Thisisu) C:\Users\Technoplan\Desktop\JRT.exe 2014-07-03 15:11 - 2014-07-03 15:11 - 00000000 ____D () C:\Program Files\SupraSavings 2014-07-03 15:06 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll 2014-07-03 15:05 - 2014-07-03 15:10 - 00000000 ____D () C:\AdwCleaner 2014-07-03 15:04 - 2014-07-03 15:04 - 01346519 _____ () C:\Users\Technoplan\Desktop\adwcleaner_3.214.exe 2014-07-03 13:19 - 2014-07-03 15:39 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-03 13:19 - 2014-07-03 13:19 - 00000903 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-03 13:19 - 2014-07-03 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-03 13:19 - 2014-07-03 13:19 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-03 13:19 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-07-03 13:19 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-07-03 13:19 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-07-03 13:08 - 2014-07-03 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Technoplan\Downloads\mbam-setup-2.0.2.1012.exe 2014-07-02 14:07 - 2014-07-02 14:07 - 00018873 _____ () C:\ComboFix.txt 2014-07-02 13:47 - 2014-07-02 14:07 - 00000000 ____D () C:\Qoobox 2014-07-02 13:47 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-07-02 13:47 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-07-02 13:47 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-07-02 13:47 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-07-02 13:47 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-07-02 13:47 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-07-02 13:47 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-07-02 13:47 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-07-02 13:45 - 2014-07-02 13:45 - 05212874 ____R (Swearware) C:\Users\Technoplan\Desktop\ComboFix.exe 2014-07-02 13:17 - 2014-07-02 13:17 - 00001061 _____ () C:\Users\Technoplan\Desktop\Revo Uninstaller.lnk 2014-07-02 13:17 - 2014-07-02 13:17 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-07-02 13:16 - 2014-07-02 13:16 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Technoplan\Desktop\revosetup95.exe 2014-07-01 10:13 - 2014-07-03 15:50 - 00019017 _____ () C:\Users\Technoplan\Desktop\FRST.txt 2014-07-01 10:13 - 2014-07-01 10:15 - 00049736 _____ () C:\Users\Technoplan\Desktop\Addition.txt 2014-07-01 10:12 - 2014-07-03 15:50 - 00000000 ____D () C:\FRST 2014-07-01 10:12 - 2014-07-01 10:12 - 01073664 _____ (Farbar) C:\Users\Technoplan\Desktop\FRST.exe 2014-07-01 09:52 - 2014-07-01 09:52 - 00001089 _____ () C:\Users\Public\Desktop\Chica Password Manager 2.0.lnk 2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ___SD () C:\Users\Technoplan\Documents\Chica Passwords 2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ChicaLogic 2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\ChicaLogic 2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3 2014-07-01 09:45 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe 2014-07-01 09:44 - 2014-07-01 09:44 - 00000875 _____ () C:\Users\Public\Desktop\System Speedup.lnk 2014-07-01 09:43 - 2014-07-03 15:10 - 00000880 _____ () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2014-07-01 09:43 - 2014-07-03 15:10 - 00000850 _____ () C:\Users\Technoplan\Desktop\Search.lnk 2014-06-30 13:15 - 2014-06-30 13:15 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\com 2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect 2014-06-30 13:07 - 2014-07-03 08:24 - 00000000 ____D () C:\Program Files\Fraven 1.1 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4B18tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AF7tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AC8tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A98tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A58tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A29tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49F9tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49D9tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3CC6tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C96tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C76tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C55tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C26tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C05tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3BB6tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3B87tmp 2014-06-25 09:48 - 2014-06-25 11:39 - 00000000 ____D () C:\Users\Technoplan\Desktop\petry 2014-06-25 09:11 - 2014-06-25 09:12 - 09044888 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt fertig inkl. Durchbruchplan.zip 2014-06-24 09:28 - 2014-06-25 10:29 - 00000000 ____D () C:\Users\Technoplan\Desktop\Ball 2014-06-24 09:20 - 2014-06-24 09:20 - 00469723 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt elektro Sebastian Ball.zip 2014-06-18 09:18 - 2014-06-18 09:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-12 21:05 - 2014-06-12 21:05 - 00047488 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys 2014-06-11 14:53 - 2014-06-11 14:54 - 00338708 _____ () C:\Users\Technoplan\Downloads\Wohnhaus 2014-06-11 08:20 - 2014-05-28 18:39 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-11 08:20 - 2014-05-28 18:38 - 09711104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-11 08:20 - 2014-05-28 18:33 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-11 08:20 - 2014-05-28 18:32 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-11 08:20 - 2014-05-28 18:32 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-11 08:20 - 2014-05-28 18:31 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-06-11 08:20 - 2014-05-28 18:31 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-11 08:20 - 2014-05-28 18:30 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-11 08:20 - 2014-05-28 18:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-06-11 08:20 - 2014-05-28 18:30 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-11 08:20 - 2014-05-28 18:30 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-06-11 08:20 - 2014-05-28 18:30 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-11 08:20 - 2014-05-28 18:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-06-11 08:20 - 2014-05-28 18:30 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-06-11 08:20 - 2014-05-28 18:29 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-11 08:20 - 2014-05-28 18:29 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-11 08:20 - 2014-05-28 18:29 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-06-11 08:20 - 2014-05-28 18:29 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-06-11 08:20 - 2014-05-28 18:28 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-06-11 08:20 - 2014-04-26 18:01 - 00502784 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-06-11 08:20 - 2014-04-05 04:42 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-06-11 08:20 - 2014-03-10 03:22 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-06-11 08:20 - 2014-03-10 03:22 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-06-11 08:19 - 2014-05-28 18:48 - 12356608 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-11 08:19 - 2014-05-28 18:29 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll ==================== One Month Modified Files and Folders ======= 2014-07-03 15:50 - 2014-07-01 10:13 - 00019017 _____ () C:\Users\Technoplan\Desktop\FRST.txt 2014-07-03 15:50 - 2014-07-01 10:12 - 00000000 ____D () C:\FRST 2014-07-03 15:45 - 2014-07-03 15:45 - 00001513 _____ () C:\Users\Technoplan\Desktop\JRT.txt 2014-07-03 15:44 - 2008-01-21 09:16 - 00007028 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-03 15:42 - 2012-04-05 08:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-03 15:42 - 2008-09-29 18:47 - 01963695 _____ () C:\Windows\WindowsUpdate.log 2014-07-03 15:39 - 2014-07-03 13:19 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-07-03 15:39 - 2009-07-01 08:14 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-03 15:37 - 2008-01-21 04:47 - 21483736 _____ () C:\Windows\PFRO.log 2014-07-03 15:37 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-03 15:37 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2014-07-03 15:37 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2014-07-03 15:36 - 2006-11-02 15:01 - 00032554 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-07-03 15:32 - 2014-07-03 15:32 - 01016261 _____ (Thisisu) C:\Users\Technoplan\Desktop\JRT.exe 2014-07-03 15:28 - 2009-07-01 08:14 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-03 15:11 - 2014-07-03 15:11 - 00000000 ____D () C:\Program Files\SupraSavings 2014-07-03 15:10 - 2014-07-03 15:05 - 00000000 ____D () C:\AdwCleaner 2014-07-03 15:10 - 2014-07-01 09:43 - 00000880 _____ () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk 2014-07-03 15:10 - 2014-07-01 09:43 - 00000850 _____ () C:\Users\Technoplan\Desktop\Search.lnk 2014-07-03 15:10 - 2013-07-08 13:41 - 00000862 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-07-03 15:10 - 2013-07-08 13:41 - 00000850 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-07-03 15:10 - 2012-08-28 08:31 - 00001071 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2014-07-03 15:10 - 2012-08-28 08:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-07-03 15:10 - 2009-02-17 11:57 - 00000989 _____ () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-07-03 15:04 - 2014-07-03 15:04 - 01346519 _____ () C:\Users\Technoplan\Desktop\adwcleaner_3.214.exe 2014-07-03 13:19 - 2014-07-03 13:19 - 00000903 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-07-03 13:19 - 2014-07-03 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-07-03 13:19 - 2014-07-03 13:19 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 2014-07-03 13:19 - 2012-08-30 11:07 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-07-03 13:16 - 2014-07-03 13:08 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Technoplan\Downloads\mbam-setup-2.0.2.1012.exe 2014-07-03 08:24 - 2014-06-30 13:07 - 00000000 ____D () C:\Program Files\Fraven 1.1 2014-07-02 14:07 - 2014-07-02 14:07 - 00018873 _____ () C:\ComboFix.txt 2014-07-02 14:07 - 2014-07-02 13:47 - 00000000 ____D () C:\Qoobox 2014-07-02 14:02 - 2006-11-02 12:23 - 00000245 _____ () C:\Windows\system.ini 2014-07-02 13:59 - 2013-06-27 13:48 - 00000000 ____D () C:\Windows\erdnt 2014-07-02 13:59 - 2006-11-02 12:22 - 58982400 _____ () C:\Windows\system32\config\SOFTWARE.bak 2014-07-02 13:59 - 2006-11-02 12:22 - 46137344 _____ () C:\Windows\system32\config\COMPON~1.bak 2014-07-02 13:59 - 2006-11-02 12:22 - 25952256 _____ () C:\Windows\system32\config\SYSTEM.bak 2014-07-02 13:59 - 2006-11-02 12:22 - 00524288 _____ () C:\Windows\system32\config\DEFAULT.bak 2014-07-02 13:59 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak 2014-07-02 13:59 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\SAM.bak 2014-07-02 13:45 - 2014-07-02 13:45 - 05212874 ____R (Swearware) C:\Users\Technoplan\Desktop\ComboFix.exe 2014-07-02 13:17 - 2014-07-02 13:17 - 00001061 _____ () C:\Users\Technoplan\Desktop\Revo Uninstaller.lnk 2014-07-02 13:17 - 2014-07-02 13:17 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-07-02 13:16 - 2014-07-02 13:16 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Technoplan\Desktop\revosetup95.exe 2014-07-01 15:32 - 2013-06-20 11:34 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\PokerStars.EU 2014-07-01 10:15 - 2014-07-01 10:13 - 00049736 _____ () C:\Users\Technoplan\Desktop\Addition.txt 2014-07-01 10:12 - 2014-07-01 10:12 - 01073664 _____ (Farbar) C:\Users\Technoplan\Desktop\FRST.exe 2014-07-01 09:52 - 2014-07-01 09:52 - 00001089 _____ () C:\Users\Public\Desktop\Chica Password Manager 2.0.lnk 2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ___SD () C:\Users\Technoplan\Documents\Chica Passwords 2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ChicaLogic 2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\ChicaLogic 2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3 2014-07-01 09:44 - 2014-07-01 09:44 - 00000875 _____ () C:\Users\Public\Desktop\System Speedup.lnk 2014-06-30 13:32 - 2009-03-17 09:15 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\Google 2014-06-30 13:15 - 2014-06-30 13:15 - 00000000 ____D () C:\ProgramData\TEMP 2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\com 2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4B18tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AF7tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AC8tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A98tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A58tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A29tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49F9tmp 2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49D9tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3CC6tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C96tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C76tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C55tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C26tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C05tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3BB6tmp 2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3B87tmp 2014-06-27 08:17 - 2013-07-09 09:22 - 00000000 ____D () C:\Program Files\AskPartnerNetwork 2014-06-25 11:39 - 2014-06-25 09:48 - 00000000 ____D () C:\Users\Technoplan\Desktop\petry 2014-06-25 10:29 - 2014-06-24 09:28 - 00000000 ____D () C:\Users\Technoplan\Desktop\Ball 2014-06-25 09:12 - 2014-06-25 09:11 - 09044888 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt fertig inkl. Durchbruchplan.zip 2014-06-24 14:16 - 2013-07-09 09:21 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-06-24 09:29 - 2014-05-05 09:54 - 00000000 ____D () C:\Users\Public\Documents\Dendrit 2014-06-24 09:20 - 2014-06-24 09:20 - 00469723 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt elektro Sebastian Ball.zip 2014-06-24 08:09 - 2013-07-08 13:41 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service 2014-06-18 09:18 - 2014-06-18 09:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox 2014-06-17 16:39 - 2004-03-25 12:38 - 00002198 _____ () C:\Windows\RBuilder.ini 2014-06-12 21:05 - 2014-06-12 21:05 - 00047488 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys 2014-06-11 16:02 - 2013-08-15 17:06 - 00000000 ____D () C:\Windows\system32\MRT 2014-06-11 16:00 - 2006-11-02 12:24 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2014-06-11 14:54 - 2014-06-11 14:53 - 00338708 _____ () C:\Users\Technoplan\Downloads\Wohnhaus 2014-06-06 11:05 - 2014-04-28 09:59 - 00000000 ____D () C:\Users\Technoplan\Desktop\Klan-Talstr-Dahn 2014-06-06 11:05 - 2014-04-08 09:39 - 00000000 ____D () C:\Users\Technoplan\Desktop\Projekt-Alt 2014-06-06 10:27 - 2013-06-20 11:34 - 00000000 ____D () C:\Program Files\PokerStars.EU Files to move or delete: ==================== C:\Users\Technoplan\ElsterFormular-12.3.2.6814p.exe Some content of TEMP: ==================== C:\Users\Technoplan\AppData\Local\temp\avgnt.exe C:\Users\Technoplan\AppData\Local\temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-07-03 15:43 ==================== End Of Log ============================ |
|
04.07.2014, 13:03
| #9 |
| /// the machine /// TB-Ausbilder | Player.exe mit Windows Vista HeruntergeladenESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.07.2014, 13:40
| #10 |
| | Player.exe mit Windows Vista Heruntergeladen Ok anbei die restlichen logfiles, Danke schon mal für die Hilfe  ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=7ea1fd4e091f1b4b821cee769087405a # engine=14170 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-06-27 02:26:28 # local_time=2013-06-27 04:26:28 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=1799 16775165 100 99 29486 237766478 22267 0 # compatibility_mode=5892 16776574 100 100 35281002 209875916 0 0 # scanned=178765 # found=2 # cleaned=0 # scan_time=3957 sh=6542A2B022BAF5B1357957BCE37BC8C91A662D6D ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.OSI trojan" ac=I fn="C:\Users\Technoplan\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\724db3c7-422949d9" sh=6542A2B022BAF5B1357957BCE37BC8C91A662D6D ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.OSI trojan" ac=I fn="C:\Users\Technoplan\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\724db3c7-4fc18de9" ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7587 # api_version=3.0.2 # EOSSerial=7ea1fd4e091f1b4b821cee769087405a # engine=19070 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-07-08 08:49:18 # local_time=2014-07-08 10:49:18 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode_1='Avira Desktop' # compatibility_mode=1810 16777213 100 100 8920 31455117 0 0 # compatibility_mode_1='' # compatibility_mode=5892 16776574 100 100 7242 242342086 0 0 # scanned=287482 # found=27 # cleaned=0 # scan_time=5130 sh=75F4A06A0290B613622C7E10E3B05EE0525C1481 ft=1 fh=e7b99738d4ab1513 vn="MSIL/AdvancedSystemProtector.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\System Speedup\systweakasp.exe.vir" sh=3191611ECBDEF87FB6079264FF07AD2087620554 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\6c78cab3-0311-420c-8cc8-d70d7c2e12d0@61a12377-7214-44f1-a183-c0827fed20fa.com\extensionData\plugins\91.js.vir" sh=592AB851A47C3693876D64FFCBFF1A062BA803E7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\Fraven 1.1\2fed8189-e898-400a-bb56-01610f96d56b.crx" sh=1BF6C0017BEC46887FC2E263A6723BE7884AF10D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\Fraven 1.1\360-59603.crx" sh=592AB851A47C3693876D64FFCBFF1A062BA803E7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\Fraven 1.1\59603.crx" sh=826779D58E0F829A11915EFE0573600445168779 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\Fraven 1.1\59603.xpi" sh=E14543DB62ABE09F2B563E304BB5844A2591B6C4 ft=1 fh=2bf6e4a32001ff06 vn="Variante von Win32/Toolbar.CrossRider.AI evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\Fraven 1.1\Fraven 1.1-nova.dll" sh=9CA8EBFF024F34D076C7BFFF92B978D99251DC66 ft=1 fh=03cf8fdbea9a76d3 vn="Variante von Win32/ELEX.AM evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe" sh=4A69CB64B60214C1A66F1FEF587F332CED27C073 ft=1 fh=43574454a5128a07 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files\SearchProtect\Main\bin\CltMngSvc.exe.vir" sh=180E91D83FA14ECDE328A46A3E2E0B6F8C94DBCD ft=1 fh=be1d8e30183e65f6 vn="Variante von Win32/Conduit.SearchProtect.I evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\cltmng.exe.vir" sh=E698C2A7E66483968C0F7C702209FDD810CD443E ft=1 fh=796c794d5bd44ef7 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files\SearchProtect\SearchProtect\bin\SPVC32.dll.vir" sh=9CA8EBFF024F34D076C7BFFF92B978D99251DC66 ft=1 fh=03cf8fdbea9a76d3 vn="Variante von Win32/ELEX.AM evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\WindowsMangerProtect\ProtectWindowsManager.exe" sh=C88DAF3FB5D3FEC090233FF251F7F0CFC73EF4CD ft=1 fh=b74c7f4df627386b vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\extensions\{fcd9923a-9c24-d7ca-af1d-94ac42151b2b}\components\SmartbarFireFoxRemotePlugin_25.dll" sh=4B9D59EFA89F628628CE74083961743D56E460C7 ft=1 fh=8e9074b2b2075a48 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\extensions\{fcd9923a-9c24-d7ca-af1d-94ac42151b2b}\components\SmartbarFireFoxRemotePlugin_26.dll" sh=7290509DD9B7F8DCFA781334EBEFF3E5D4C58C5C ft=1 fh=0aae782d31fb93bd vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\extensions\{fcd9923a-9c24-d7ca-af1d-94ac42151b2b}\components\SmartbarFireFoxRemotePlugin_27.dll" sh=32602D4077332EE0F75304C87434755510F768FD ft=1 fh=4d22cbd3b33f2e9e vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\extensions\{fcd9923a-9c24-d7ca-af1d-94ac42151b2b}\components\SmartbarFireFoxRemotePlugin_28.dll" sh=A5517659524BFD05ABEF457FE26F1D0E80D3EF85 ft=1 fh=af4585d56f4a69b5 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\extensions\{fcd9923a-9c24-d7ca-af1d-94ac42151b2b}\components\SmartbarFireFoxRemotePlugin_29.dll" sh=36E31354BDEA960B9E966413460C3CB81036C629 ft=1 fh=107c58d6ba93a4af vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\extensions\{fcd9923a-9c24-d7ca-af1d-94ac42151b2b}\components\SmartbarFireFoxRemotePlugin_30.dll" sh=052C0EB59109F3B2FD782E4B0A6AC614F09F77D4 ft=0 fh=0000000000000000 vn="Win32/JoyDownloader.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\Downloads\Programm vom 13.11.zip" sh=1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2 ft=1 fh=d348c3328e970e39 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\Downloads\3BB6tmp\cloud_backup_setup.exe" sh=F65EAECC41208781EEBEB27546273293C29C9957 ft=1 fh=a430c7f8a70141ed vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Technoplan\Downloads\3C55tmp\freesofttoday.exe" sh=8B553FC78AB4575C972AC27B91F755C9800E067D ft=1 fh=f11d65cf0ffebec1 vn="Win32/VOPackage.J evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\Downloads\3C76tmp\vopackage.exe" sh=C2A9E3C1153C1E248164A257CBD2DACB9211A0CC ft=1 fh=9cfea4062905bd6b vn="Variante von Win32/ELEX.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\Downloads\3CC6tmp\lly_omiga-plus.exe" sh=1A9C2CE8C1F539AC8546D67C9F924AEA8D2A84C2 ft=1 fh=d348c3328e970e39 vn="Win32/MyPCBackup.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\Downloads\49F9tmp\cloud_backup_setup.exe" sh=F65EAECC41208781EEBEB27546273293C29C9957 ft=1 fh=a430c7f8a70141ed vn="Mehrere Bedrohungen" ac=I fn="C:\Users\Technoplan\Downloads\4A98tmp\freesofttoday.exe" sh=8B553FC78AB4575C972AC27B91F755C9800E067D ft=1 fh=f11d65cf0ffebec1 vn="Win32/VOPackage.J evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\Downloads\4AC8tmp\vopackage.exe" sh=C2A9E3C1153C1E248164A257CBD2DACB9211A0CC ft=1 fh=9cfea4062905bd6b vn="Variante von Win32/ELEX.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Technoplan\Downloads\4B18tmp\lly_omiga-plus.exe" Results of screen317's Security Check version 0.99.85 Windows Vista Service Pack 2 x86 (UAC is enabled) Internet Explorer 9 Internet Explorer 8 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Spybot - Search & Destroy Java(TM) 6 Update 22 Java version out of Date! Adobe Flash Player 13.0.0.214 Flash Player out of Date! Adobe Reader 8 Adobe Reader out of Date! Mozilla Firefox (30.0) Google Chrome 35.0.1916.114 Google Chrome 35.0.1916.153 ````````Process Check: objlist.exe by Laurent```````` Spybot Teatimer.exe is disabled! Avira Antivir avgnt.exe Avira Antivir avguard.exe Empowering Technology eSettings Service capuserv.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-07-2014 01
Ran by Technoplan (administrator) on TECHNOPLAN-PC on 08-07-2014 14:34:41
Running from C:\Users\Technoplan\Desktop
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
() C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe
(CyberLink) C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
() C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
() C:\MySql\bin\mysqld-nt.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3\SupraSavingsService.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
() C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
(Safer Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
() C:\Acer\Empowering Technology\SysMonitor.exe
(Egis Incorporated) C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
(NVIDIA Corporation) C:\Windows\System32\nvraidservice.exe
(PixelPlanet GmbH) C:\Program Files\PixelPlanet\PdfPrinter 6\PdfPrinterMonitor.exe
(Geek Software GmbH) C:\Program Files\pdf24\pdf24.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Autodesk, Inc.) C:\Program Files\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Akamai Technologies, Inc.) C:\Users\Technoplan\AppData\Local\Akamai\netsession_win.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Acer Inc.) C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Acer Inc.) C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Akamai Technologies, Inc.) C:\Users\Technoplan\AppData\Local\Akamai\netsession_win.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [NvSvc] => C:\Windows\system32\nvsvc.dll [86016 2007-12-21] (NVIDIA Corporation)
HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [8497696 2007-12-21] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] => C:\Windows\system32\NvMcTray.dll [81920 2007-12-21] (NVIDIA Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [5369856 2008-03-26] (Realtek Semiconductor)
HKLM\...\Run: [Acer Empowering Technology Monitor] => C:\Acer\Empowering Technology\SysMonitor.exe [326176 2008-01-09] ()
HKLM\...\Run: [eDataSecurity Loader] => C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [526896 2008-03-05] (Egis Incorporated)
HKLM\...\Run: [PCMMediaSharing] => C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe [204908 2008-01-25] ()
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [WarReg_PopUp] => C:\Acer\WR_PopUp\WarReg_PopUp.exe [57344 2006-11-05] (Acer Inc.)
HKLM\...\Run: [NVRaidService] => C:\Windows\system32\nvraidservice.exe [203296 2008-06-06] (NVIDIA Corporation)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [39792 2008-10-15] (Adobe Systems Incorporated)
HKLM\...\Run: [PixelPlanet PdfPrinter-Monitor] => C:\Program Files\PixelPlanet\PdfPrinter 6\PdfPrinterMonitor.exe [1404808 2009-11-17] (PixelPlanet GmbH)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.)
HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [PDFPrint] => C:\Program Files\pdf24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [248552 2010-05-14] (Sun Microsystems, Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ADSK DLMSession] => C:\Program Files\Common Files\Autodesk Shared\Autodesk Download Manager\DLMSession.exe [1641368 2013-02-01] (Autodesk, Inc.)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [SpybotSD TeaTimer] => C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Technoplan\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-923770033-2654947890-2156885174-1000\...\Run: [ChicaPasswordManager] => C:\Program Files\ChicaLogic\Chica Password Manager\stpass.exe [4299624 2012-07-09] (ChicaLogic, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ASETRES.EXE ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Empowering Technology Launcher.lnk
ShortcutTarget: Empowering Technology Launcher.lnk -> C:\Acer\Empowering Technology\eAPLauncher.exe (Acer Inc.)
ShellIconOverlayIdentifiers: Symbol-Overlay-Steuerprogramm für AutoCAD Digitale Signaturen -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - No Name - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - No File
Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
Toolbar: HKCU - No Name - {41564952-412D-5637-00A7-7A786E7484D7} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{2FC76DB2-719C-4570-9177-8E5A30E0FE49}: [NameServer]192.168.0.254
FireFox:
========
FF ProfilePath: C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default
FF NewTab: chrome://quick_start/content/index.html
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin: @eleco.com/o2cplayer - C:\Program Files\Eleco\o2c Player\npO2CPlayer.DLL (ELECO Software GmbH)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.5.1 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DoNotTrackMe: Online Privacy Protection - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\donottrackplus@abine.com [2014-07-01]
FF Extension: SafeFinder Smartbar - C:\Users\Technoplan\AppData\Roaming\Mozilla\Firefox\Profiles\x1kwq4gw.default\Extensions\{fcd9923a-9c24-d7ca-af1d-94ac42151b2b} [2014-07-01]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-17]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR NewTab: "chrome-extension://pelmeidfhdlhlbjimpabfcbnnojbboma/index.html"
CHR DefaultSearchKeyword: trovi.search
CHR DefaultSearchProvider: Trovi search
CHR DefaultSearchURL: hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325582&octid=EB_ORIGINAL_CTID&ISID=M3308A735-F0B4-4C54-814C-869FC68BAEF2&SearchSource=58&CUI=&UM=2&UP=SP6C183687-747D-462E-B5ED-991192CDFEDD&q={searchTerms}&SSPV=
CHR Extension: (Google Wallet) - C:\Users\Technoplan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-30]
CHR Extension: (No Name) - C:\Users\Technoplan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-06-30]
CHR StartMenuInternet: Google Chrome - chrome.exe
========================== Services (Whitelisted) =================
R2 AAV UpdateService; C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] ()
R2 Acer HomeMedia Connect Service; C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [269448 2008-01-25] (CyberLink) [File not signed]
R2 AcerMemUsageCheckService; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [28672 2007-10-17] () [File not signed]
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [165784 2014-06-23] (APN LLC.)
S3 bepldr6PixelPlanetService; C:\Program Files\Common Files\BCL Technologies\PixelPlanet6\bepldr.exe [172032 2009-10-05] () [File not signed]
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
R2 eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [500784 2008-03-05] (Egis Incorporated)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S30RP1.EXE [102400 2006-04-18] (SEIKO EPSON CORPORATION) [File not signed]
R2 eRecoveryService; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [57344 2007-09-10] (Acer Inc.) [File not signed]
R2 eSettingsService; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [24576 2007-12-19] () [File not signed]
S2 gupdate1c9a6d0297c578d; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-03-17] (Google Inc.)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440 2007-01-17] (Hewlett-Packard Company) [File not signed]
S2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 MSSQL$GW; C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 MySQL; C:\MySql\bin\mysqld-nt.exe [2179072 2004-05-29] () [File not signed]
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [262247 2006-07-19] () [File not signed]
R2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 SupraSavingsService; C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3\SupraSavingsService.exe [151040 2014-06-25] () [File not signed]
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [535936 2014-06-30] (Fuyu LIMITED)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 int15; C:\Acer\Empowering Technology\eRecovery\int15.sys [15392 2007-07-03] (Acer, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [47488 2014-06-12] (NetFilterSDK.com) [File not signed]
R3 NTIDrvr; C:\Windows\System32\DRIVERS\NTIDrvr.sys [6144 2008-03-21] (NewTech Infosystems, Inc.) [File not signed]
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-07-09] (Avira GmbH)
R2 tvicport; C:\Windows\system32\drivers\tvicport.sys [14544 2007-11-06] (EnTech Taiwan) [File not signed]
R2 zntport; C:\Windows\system32\drivers\zntport.sys [6080 2007-11-06] (Zeal SoftStudio) [File not signed]
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S1 netfilter2; system32\drivers\netfilter2.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-08 14:34 - 2014-07-08 14:34 - 00001161 _____ () C:\Users\Technoplan\Desktop\checkup.txt
2014-07-08 14:34 - 2014-07-08 14:34 - 00000000 ____D () C:\Users\Technoplan\Desktop\FRST-OlderVersion
2014-07-08 09:12 - 2014-07-08 09:12 - 00854390 _____ () C:\Users\Technoplan\Desktop\SecurityCheck.exe
2014-07-08 09:08 - 2014-07-08 09:09 - 02347384 _____ (ESET) C:\Users\Technoplan\Desktop\esetsmartinstaller_deu.exe
2014-07-03 15:45 - 2014-07-03 15:45 - 00001513 _____ () C:\Users\Technoplan\Desktop\JRT.txt
2014-07-03 15:32 - 2014-07-03 15:32 - 01016261 _____ (Thisisu) C:\Users\Technoplan\Desktop\JRT.exe
2014-07-03 15:11 - 2014-07-08 08:37 - 00000000 ____D () C:\Program Files\SupraSavings
2014-07-03 15:06 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-07-03 15:05 - 2014-07-03 15:10 - 00000000 ____D () C:\AdwCleaner
2014-07-03 15:04 - 2014-07-03 15:04 - 01346519 _____ () C:\Users\Technoplan\Desktop\adwcleaner_3.214.exe
2014-07-03 13:19 - 2014-07-08 09:00 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-03 13:19 - 2014-07-03 13:19 - 00000903 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 13:19 - 2014-07-03 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-03 13:19 - 2014-07-03 13:19 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2014-07-03 13:19 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-03 13:19 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-03 13:19 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-03 13:08 - 2014-07-03 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Technoplan\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-02 14:07 - 2014-07-02 14:07 - 00018873 _____ () C:\ComboFix.txt
2014-07-02 13:47 - 2014-07-02 14:07 - 00000000 ____D () C:\Qoobox
2014-07-02 13:47 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-02 13:47 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-02 13:47 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-02 13:47 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-02 13:47 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-02 13:47 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-02 13:47 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-02 13:47 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-02 13:45 - 2014-07-02 13:45 - 05212874 ____R (Swearware) C:\Users\Technoplan\Desktop\ComboFix.exe
2014-07-02 13:17 - 2014-07-02 13:17 - 00001061 _____ () C:\Users\Technoplan\Desktop\Revo Uninstaller.lnk
2014-07-02 13:17 - 2014-07-02 13:17 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-07-02 13:16 - 2014-07-02 13:16 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Technoplan\Desktop\revosetup95.exe
2014-07-01 10:13 - 2014-07-08 14:34 - 00018758 _____ () C:\Users\Technoplan\Desktop\FRST.txt
2014-07-01 10:12 - 2014-07-08 14:34 - 01074688 _____ (Farbar) C:\Users\Technoplan\Desktop\FRST.exe
2014-07-01 10:12 - 2014-07-08 14:34 - 00000000 ____D () C:\FRST
2014-07-01 09:52 - 2014-07-01 09:52 - 00001089 _____ () C:\Users\Public\Desktop\Chica Password Manager 2.0.lnk
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ___SD () C:\Users\Technoplan\Documents\Chica Passwords
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ChicaLogic
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\ChicaLogic
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3
2014-07-01 09:45 - 2012-07-25 12:03 - 00017136 _____ () C:\Windows\system32\sasnative32.exe
2014-07-01 09:43 - 2014-07-03 15:10 - 00000880 _____ () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-07-01 09:43 - 2014-07-03 15:10 - 00000850 _____ () C:\Users\Technoplan\Desktop\Search.lnk
2014-06-30 13:15 - 2014-06-30 13:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\com
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-06-30 13:07 - 2014-07-03 08:24 - 00000000 ____D () C:\Program Files\Fraven 1.1
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4B18tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AF7tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AC8tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A98tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A58tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A29tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49F9tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49D9tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3CC6tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C96tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C76tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C55tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C26tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C05tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3BB6tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3B87tmp
2014-06-25 09:48 - 2014-06-25 11:39 - 00000000 ____D () C:\Users\Technoplan\Desktop\petry
2014-06-25 09:11 - 2014-06-25 09:12 - 09044888 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt fertig inkl. Durchbruchplan.zip
2014-06-24 09:28 - 2014-06-25 10:29 - 00000000 ____D () C:\Users\Technoplan\Desktop\Ball
2014-06-24 09:20 - 2014-06-24 09:20 - 00469723 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt elektro Sebastian Ball.zip
2014-06-18 09:18 - 2014-06-18 09:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-12 21:05 - 2014-06-12 21:05 - 00047488 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys
2014-06-11 14:53 - 2014-06-11 14:54 - 00338708 _____ () C:\Users\Technoplan\Downloads\Wohnhaus
2014-06-11 08:20 - 2014-05-28 18:39 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 08:20 - 2014-05-28 18:38 - 09711104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 08:20 - 2014-05-28 18:33 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 08:20 - 2014-05-28 18:32 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 08:20 - 2014-05-28 18:32 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 08:20 - 2014-05-28 18:31 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-06-11 08:20 - 2014-05-28 18:31 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 08:20 - 2014-05-28 18:30 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 08:20 - 2014-05-28 18:30 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-06-11 08:20 - 2014-05-28 18:29 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-11 08:20 - 2014-05-28 18:29 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 08:20 - 2014-05-28 18:29 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-06-11 08:20 - 2014-05-28 18:29 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-06-11 08:20 - 2014-05-28 18:28 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-11 08:20 - 2014-04-26 18:01 - 00502784 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-11 08:20 - 2014-04-05 04:42 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 08:20 - 2014-03-10 03:22 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-11 08:20 - 2014-03-10 03:22 - 01248768 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 08:19 - 2014-05-28 18:48 - 12356608 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 08:19 - 2014-05-28 18:29 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
==================== One Month Modified Files and Folders =======
2014-07-08 14:34 - 2014-07-08 14:34 - 00001161 _____ () C:\Users\Technoplan\Desktop\checkup.txt
2014-07-08 14:34 - 2014-07-08 14:34 - 00000000 ____D () C:\Users\Technoplan\Desktop\FRST-OlderVersion
2014-07-08 14:34 - 2014-07-01 10:13 - 00018758 _____ () C:\Users\Technoplan\Desktop\FRST.txt
2014-07-08 14:34 - 2014-07-01 10:12 - 01074688 _____ (Farbar) C:\Users\Technoplan\Desktop\FRST.exe
2014-07-08 14:34 - 2014-07-01 10:12 - 00000000 ____D () C:\FRST
2014-07-08 14:29 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-08 14:29 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-08 14:28 - 2009-07-01 08:14 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-08 14:26 - 2009-02-25 15:50 - 00011146 _____ () C:\Users\Technoplan\Documents\plot.log
2014-07-08 13:42 - 2012-04-05 08:15 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-08 09:12 - 2014-07-08 09:12 - 00854390 _____ () C:\Users\Technoplan\Desktop\SecurityCheck.exe
2014-07-08 09:09 - 2014-07-08 09:08 - 02347384 _____ (ESET) C:\Users\Technoplan\Desktop\esetsmartinstaller_deu.exe
2014-07-08 09:05 - 2008-01-21 09:16 - 00007028 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-08 09:04 - 2008-09-29 18:47 - 02097037 _____ () C:\Windows\WindowsUpdate.log
2014-07-08 09:00 - 2014-07-03 13:19 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-08 08:59 - 2009-07-01 08:14 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-08 08:59 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-08 08:58 - 2008-01-21 04:47 - 21486392 _____ () C:\Windows\PFRO.log
2014-07-08 08:57 - 2006-11-02 15:01 - 00032554 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-08 08:37 - 2014-07-03 15:11 - 00000000 ____D () C:\Program Files\SupraSavings
2014-07-03 15:45 - 2014-07-03 15:45 - 00001513 _____ () C:\Users\Technoplan\Desktop\JRT.txt
2014-07-03 15:32 - 2014-07-03 15:32 - 01016261 _____ (Thisisu) C:\Users\Technoplan\Desktop\JRT.exe
2014-07-03 15:10 - 2014-07-03 15:05 - 00000000 ____D () C:\AdwCleaner
2014-07-03 15:10 - 2014-07-01 09:43 - 00000880 _____ () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-07-03 15:10 - 2014-07-01 09:43 - 00000850 _____ () C:\Users\Technoplan\Desktop\Search.lnk
2014-07-03 15:10 - 2013-07-08 13:41 - 00000862 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-03 15:10 - 2013-07-08 13:41 - 00000850 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-07-03 15:10 - 2012-08-28 08:31 - 00001071 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-03 15:10 - 2012-08-28 08:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-03 15:10 - 2009-02-17 11:57 - 00000989 _____ () C:\Users\Technoplan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-03 15:04 - 2014-07-03 15:04 - 01346519 _____ () C:\Users\Technoplan\Desktop\adwcleaner_3.214.exe
2014-07-03 13:19 - 2014-07-03 13:19 - 00000903 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 13:19 - 2014-07-03 13:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-03 13:19 - 2014-07-03 13:19 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2014-07-03 13:19 - 2012-08-30 11:07 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-03 13:16 - 2014-07-03 13:08 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Technoplan\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-03 08:24 - 2014-06-30 13:07 - 00000000 ____D () C:\Program Files\Fraven 1.1
2014-07-02 14:07 - 2014-07-02 14:07 - 00018873 _____ () C:\ComboFix.txt
2014-07-02 14:07 - 2014-07-02 13:47 - 00000000 ____D () C:\Qoobox
2014-07-02 14:02 - 2006-11-02 12:23 - 00000245 _____ () C:\Windows\system.ini
2014-07-02 13:59 - 2013-06-27 13:48 - 00000000 ____D () C:\Windows\erdnt
2014-07-02 13:59 - 2006-11-02 12:22 - 58982400 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-07-02 13:59 - 2006-11-02 12:22 - 46137344 _____ () C:\Windows\system32\config\COMPON~1.bak
2014-07-02 13:59 - 2006-11-02 12:22 - 25952256 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-07-02 13:59 - 2006-11-02 12:22 - 00524288 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-07-02 13:59 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-07-02 13:59 - 2006-11-02 12:22 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-07-02 13:45 - 2014-07-02 13:45 - 05212874 ____R (Swearware) C:\Users\Technoplan\Desktop\ComboFix.exe
2014-07-02 13:17 - 2014-07-02 13:17 - 00001061 _____ () C:\Users\Technoplan\Desktop\Revo Uninstaller.lnk
2014-07-02 13:17 - 2014-07-02 13:17 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-07-02 13:16 - 2014-07-02 13:16 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Technoplan\Desktop\revosetup95.exe
2014-07-01 15:32 - 2013-06-20 11:34 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\PokerStars.EU
2014-07-01 09:52 - 2014-07-01 09:52 - 00001089 _____ () C:\Users\Public\Desktop\Chica Password Manager 2.0.lnk
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ___SD () C:\Users\Technoplan\Documents\Chica Passwords
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ChicaLogic
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\ChicaLogic
2014-07-01 09:52 - 2014-07-01 09:52 - 00000000 ____D () C:\Program Files\CB78F643-3729-434F-8C25-F28D15F025F3
2014-06-30 13:32 - 2009-03-17 09:15 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\Google
2014-06-30 13:15 - 2014-06-30 13:15 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\Users\Technoplan\AppData\Local\com
2014-06-30 13:10 - 2014-06-30 13:10 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4B18tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AF7tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4AC8tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A98tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A58tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\4A29tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49F9tmp
2014-06-30 13:04 - 2014-06-30 13:04 - 00000000 ____D () C:\Users\Technoplan\Downloads\49D9tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3CC6tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C96tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C76tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C55tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C26tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3C05tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3BB6tmp
2014-06-30 13:03 - 2014-06-30 13:03 - 00000000 ____D () C:\Users\Technoplan\Downloads\3B87tmp
2014-06-27 08:17 - 2013-07-09 09:22 - 00000000 ____D () C:\Program Files\AskPartnerNetwork
2014-06-25 11:39 - 2014-06-25 09:48 - 00000000 ____D () C:\Users\Technoplan\Desktop\petry
2014-06-25 10:29 - 2014-06-24 09:28 - 00000000 ____D () C:\Users\Technoplan\Desktop\Ball
2014-06-25 09:12 - 2014-06-25 09:11 - 09044888 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt fertig inkl. Durchbruchplan.zip
2014-06-24 14:16 - 2013-07-09 09:21 - 00097648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-24 09:29 - 2014-05-05 09:54 - 00000000 ____D () C:\Users\Public\Documents\Dendrit
2014-06-24 09:20 - 2014-06-24 09:20 - 00469723 _____ () C:\Users\Technoplan\Desktop\Abschlussprojekt elektro Sebastian Ball.zip
2014-06-24 08:09 - 2013-07-08 13:41 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-18 09:18 - 2014-06-18 09:18 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-17 16:39 - 2004-03-25 12:38 - 00002198 _____ () C:\Windows\RBuilder.ini
2014-06-12 21:05 - 2014-06-12 21:05 - 00047488 _____ (NetFilterSDK.com) C:\Windows\system32\Drivers\netfilter.sys
2014-06-11 16:02 - 2013-08-15 17:06 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-11 16:00 - 2006-11-02 12:24 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-06-11 14:54 - 2014-06-11 14:53 - 00338708 _____ () C:\Users\Technoplan\Downloads\Wohnhaus
Files to move or delete:
====================
C:\Users\Technoplan\ElsterFormular-12.3.2.6814p.exe
Some content of TEMP:
====================
C:\Users\Technoplan\AppData\Local\temp\avgnt.exe
C:\Users\Technoplan\AppData\Local\temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-08 09:04
==================== End Of Log ============================
|
|
09.07.2014, 11:21
| #11 |
| /// the machine /// TB-Ausbilder | Player.exe mit Windows Vista Heruntergeladen Java, Flash und Adobe updaten. Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Revo Uninstaller - Download - Filepony damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren. Dann: https://support.mozilla.org/de/kb/fi...einfach-loesen Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Program Files\Fraven 1.1
C:\ProgramData\WindowsMangerProtect
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [535936 2014-06-30] (Fuyu LIMITED)
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.07.2014, 08:25
| #12 |
| | Player.exe mit Windows Vista Heruntergeladen Hi, hier die Fixlist  Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:11-07-2014 Ran by Technoplan at 2014-07-11 08:35:43 Run:1 Running from C:\Users\Technoplan\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\Program Files\Fraven 1.1 C:\ProgramData\WindowsMangerProtect R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [535936 2014-06-30] (Fuyu LIMITED) ***************** C:\Program Files\Fraven 1.1 => Moved successfully. C:\ProgramData\WindowsMangerProtect => Moved successfully. WindowsMangerProtect => Service stopped successfully. WindowsMangerProtect => Service deleted successfully. ==== End of Fixlog ==== Hallo soweit alles durch. Kannst du mir noch erklären wie ich das am besten Installiere komm da nicht klar  Mozilla Firefox. Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons NoScript Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst. AdblockPlus Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen. Es spart ausserdem Downloadkapazität. Und das Program Akamai NetSession Interface(oder brauch ich das?) und Revo Uninstaller kann ich unter Systemsteuerung deinstallieren? Würd euch gern was spenden als Schüler is da aber im Moment nicht so viel drin, sind 20E OK? Grüße und Danke |
|
11.07.2014, 13:55
| #13 |
| /// the machine /// TB-Ausbilder | Player.exe mit Windows Vista Heruntergeladen was willst du installieren? Zum Thema Spenden: Das was Du kannst und willst ist immer völlig ausreichend, da gibt es kein Minimum
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
17.07.2014, 10:48
| #14 |
| | Player.exe mit Windows Vista Heruntergeladen Hallo, sorry hat etwas gedauert bin im Moment selten am PC. Spende kommt der Rest ist alles Gut vielen Dank |
|
17.07.2014, 16:43
| #15 |
| /// the machine /// TB-Ausbilder | Player.exe mit Windows Vista Heruntergeladen Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Player.exe mit Windows Vista Heruntergeladen |
| abgebrochen, browser, datei, genutzt, griff, installation, installiere, installieren, installiert, nichts, problem, runtergeladen, seite, versuch, versucht, vista, windows, windows vista |
Revo Uninstaller herunter.
dann auf 
und dann auf 
.
WARNUNG an die MITLESER: 
Linear-Darstellung
