| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.GenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
02.07.2014, 21:11
| #1 |
 |  Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Guten Abend, mein Problem ist folgendes: Über AVIRA erhalte ich ständig eine nervige Sicherheitsmeldung "C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen", die dann über "entfernen" quittiere. Bekomme ich diesen Fehler und das Programm wieder raus? Ich habe hier im Forum schon mal mich umgeschaut und unter "http://www.trojaner-board.de/155832-...pper-gen.html" wohl die gleich Problematik gefunden. Daraufhin habe ich mir das Programm "FRST 64-Bit" auf den Desktop geladen und gestartet. So wie dort beschrieben, habe ich die beiden Logdateien "FRST.txt" und "Addition.txt", die ich gleich mit im Anhang anhänge. Ich hoffe, dass es für das Problem bei mir eine Lösung gibt. Hier die Logdateien: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-07-2014
Ran by mitzekatzen (administrator) on ASTRONOMIE on 02-07-2014 20:43:48
Running from C:\Users\mitzekatzen\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe
() C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\System32\atieclxx.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(sw4you) C:\Program Files (x86)\Hardcopy\hardcopy.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
(Lernout & Hauspie Speech Products) C:\Program Files (x86)\LHSP\L&H Power Translator Pro\ptpro.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [vspdfprsrv.exe] => C:\Program Files (x86)\Avanquest\PDF Experte 8 Professional\vspdfprsrv.exe [6078464 2012-04-23] (Visagesoft)
HKLM-x32\...\Run: [Ulead AutoDetector v2] => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2004-08-27] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [DInfoSetup] => C:\Program Files (x86)\D-Info99\SDinfo.exe [134656 1999-08-19] ()
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [296520 2014-05-01] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [224128 2014-03-18] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [737872 2014-05-09] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [18247424 2014-02-13] (Acer Incorporated)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-04-10] (Google Inc.)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [phonostar-PlayerTimer] => C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [42496 2014-01-11] ()
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Policies\Explorer: [NoControlPanel] 0
IFEO\acpanel_win.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\alohatripeaks-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\backitup.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ccc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cli.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cradleofegyptcollectorsedition-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe
IFEO\epowerui.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\governorofpoker2_pe_wildtangent_v1.5-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\luxor_ev_x86-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\magic academy-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ncc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\nerorescueagent.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\pegglenights-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\photoproduct.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\plantsvszombies-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ravcpl64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\solitaire-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\trinklitsupreme-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\uninst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK
ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk
ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, Inc. and H.C. Top Systems B.V.)
Startup: C:\Users\mitzekatzen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk -> C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:9987
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.arcor.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}
URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_14_ie&cd=2XzuyEtN2Y1L1QzuyEtD0FtDtB0F0CtCyE0E0E0AtC0B0FyDtN0D0Tzu0SzztByEtN1L2XzutBtFtCzztFzztFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDyEzy0BtC0DyCzztGzztB0E0AtG0A0F0FzytGtCzztA0AtGyDyC0E0EyCtDyC0DtByB0Azy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0D0FyDyBtD0C0CtGtD0C0CtBtGyDtAyD0FtGyC0ByE0BtGtA0Dzy0BtD0AtDtAtBtBzyzy2Q&cr=2054318036&ir=
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}
SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3320133&octid=EB_ORIGINAL_CTID&ISID=MF043607D-F3C2-4868-9310-354E01E055F6&SearchSource=58&CUI=&UM=5&UP=SP12E015E4-E6EC-4C67-BC41-A789077195AB&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3320133&octid=EB_ORIGINAL_CTID&ISID=MF043607D-F3C2-4868-9310-354E01E055F6&SearchSource=58&CUI=&UM=5&UP=SP12E015E4-E6EC-4C67-BC41-A789077195AB&q={searchTerms}&SSPV=
SearchScopes: HKCU - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_14_ie&cd=2XzuyEtN2Y1L1QzuyEtD0FtDtB0F0CtCyE0E0E0AtC0B0FyDtN0D0Tzu0SzztByEtN1L2XzutBtFtCzztFzztFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDyEzy0BtC0DyCzztGzztB0E0AtG0A0F0FzytGtCzztA0AtGyDyC0E0EyCtDyC0DtByB0Azy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0D0FyDyBtD0C0CtGtD0C0CtBtGyDtAyD0FtGyC0ByE0BtGtA0Dzy0BtD0AtDtAtBtBzyzy2Q&cr=2054318036&ir=
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}
SearchScopes: HKCU - {6520DFD0-7405-458C-A90E-3CCC498D5E2E} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL =
SearchScopes: HKCU - {792DF315-579A-41B7-AF43-A62729C82BC9} URL = hxxp://wetter.rtl.de/cp/shared/php/search_plz_ort.php?in={searchTerms}
SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKCU - {DF10788C-F973-481E-BBB5-FE532E8628C8} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Mega Browse - {4e6cd411-ce62-4584-97ff-6afbcf6900af} - C:\Program Files (x86)\Mega Browse\MegaBrowsebho.dll (Mega Browse)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - No Name - {3004627E-F8E9-4E8B-909D-316753CBA923} - No File
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default
FF NewTab: chrome://quick_start/content/index.html
FF SearchEngineOrder.1: Sichere Suche
FF Homepage: hxxp://www.arcor.de/
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A111DE662&p=
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @real.com/nppl3260;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar-Player - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
FF user.js: detected! => C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\user.js
FF SearchPlugin: C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\abs@avira.com [2014-07-02]
FF Extension: Amazon-Icon - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\amazon-icon@giga.de [2014-04-22]
FF Extension: Fast Start - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\faststartff@gmail.com [2014-07-02]
FF Extension: WOT - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-05-24]
FF Extension: DownloadHelper - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-24]
FF Extension: Ghostery - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\firefox@ghostery.com.xpi [2014-05-24]
FF Extension: Pirrit Suggestor - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\suggestor@suggestor.pirrit.com.xpi [2014-04-27]
FF Extension: NoScript - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-06-07]
FF Extension: Adblock Plus - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-06]
FF Extension: Adblock Edge - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-05-27]
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\quick_start@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-01]
FF HKLM-x32\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-01]
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-04-06]
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\mitzekatzen\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-04-06]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-05-09] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-05-09] (Avira Operations GmbH & Co. KG)
S4 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
S4 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2798336 2014-02-13] (Acer Incorporated)
S4 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
S4 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-04-03] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-04-03] (McAfee, Inc.)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] ()
R2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-05-01] (RealNetworks, Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] () [File not signed]
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
R2 Update Mega Browse; C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe [350496 2014-04-16] ()
R2 Util Mega Browse; C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe [350496 2014-04-16] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-03-18] () [File not signed]
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [112080 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-04-03] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [177544 2014-04-03] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311856 2014-04-03] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-04-03] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-04-03] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [784760 2014-04-03] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [346760 2014-04-03] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 RegFltrX64; C:\Users\mitzekatzen\AppData\Local\47076b4cc5bfaf77bbe68bb8381cfd6d\RegFltrX64.sys [18064 2014-06-03] ()
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-04-23] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2014-02-10] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-02 20:43 - 2014-07-02 20:44 - 00031963 _____ () C:\Users\mitzekatzen\Desktop\FRST.txt
2014-07-02 20:43 - 2014-07-02 20:43 - 00000000 ____D () C:\FRST
2014-07-02 20:41 - 2014-07-02 20:41 - 02083840 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-19 20:42 - 2014-06-19 20:40 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-16 16:51 - 2014-06-16 16:51 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-06-16 16:45 - 2014-05-09 11:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-16 16:45 - 2014-05-09 11:16 - 00112080 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-16 16:45 - 2014-05-09 11:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-16 16:41 - 2014-06-19 18:19 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-16 16:41 - 2014-06-16 16:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-16 16:41 - 2014-06-16 16:45 - 00000000 ____D () C:\ProgramData\Avira
2014-06-16 16:41 - 2014-06-16 16:45 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-11 19:58 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 19:58 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 19:58 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 19:58 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 19:58 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-11 19:58 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 19:58 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 19:58 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 19:58 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 19:58 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 19:58 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-11 19:58 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 19:58 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 19:58 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-11 19:58 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 19:58 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-11 19:58 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-11 19:58 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-11 19:58 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-11 19:58 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 19:58 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-11 19:58 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-11 19:58 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 19:58 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-11 19:58 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 19:58 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-11 19:58 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-11 19:58 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-11 19:58 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-11 19:57 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 19:57 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 19:57 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-06-11 19:57 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 19:57 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-06-11 19:57 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 19:57 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 19:57 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-06-11 19:57 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-06-11 19:57 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-11 19:57 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-11 19:57 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-06-11 19:57 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-06-11 19:57 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-06-11 19:57 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll
2014-06-11 19:57 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-06-11 19:57 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-06-11 19:57 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-06-11 19:57 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-06-11 19:57 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-06-11 19:57 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-06-11 19:57 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-06-11 19:57 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-06-11 19:57 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-06-11 19:57 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-11 19:57 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-06-11 19:57 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-06-11 19:57 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-06-11 19:57 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-11 19:57 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-06-11 19:57 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-06-11 19:57 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-06-11 19:57 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-06-11 19:57 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-06-11 19:57 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2014-06-11 19:57 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-06-11 19:57 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-06-11 19:57 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2014-06-11 19:57 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 19:57 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 19:57 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-06-11 19:57 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2014-06-11 19:57 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-06-11 19:57 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-06-11 19:57 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-06-11 19:57 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-11 19:57 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2014-06-11 19:57 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2014-06-11 19:57 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-06-11 19:57 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-11 19:57 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2014-06-11 19:57 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-06-11 19:57 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-06-11 19:57 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-06-11 19:57 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-06-11 19:57 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-06-11 19:57 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2014-06-11 19:57 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-06-11 19:57 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-06-11 19:57 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-06-11 19:57 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-06-11 19:57 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-06-11 19:57 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-06-11 19:57 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-11 19:57 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-06-11 19:57 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-11 19:57 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-11 19:57 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-06-11 19:57 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-11 19:57 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-06-11 19:57 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-06-11 19:57 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-06-11 19:57 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-06-11 19:57 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-06-11 19:57 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-06-11 19:57 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-11 19:57 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-06-11 19:57 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-06-11 19:55 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-06-11 19:55 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-06-11 19:55 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-06-11 19:55 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-11 19:55 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-06-11 19:55 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-11 19:55 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-06-11 19:55 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-11 19:55 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-11 19:55 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-04 19:58 - 2014-06-04 19:58 - 00000000 ____D () C:\Users\mitzekatzen\dwhelper
2014-06-04 16:39 - 2014-06-20 12:41 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\47076b4cc5bfaf77bbe68bb8381cfd6d
2014-06-03 23:18 - 2014-06-17 22:46 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\Adobe
2014-06-03 23:18 - 2014-06-03 23:18 - 00000735 _____ () C:\Users\mitzekatzen\Downloads\3923422121.txt
2014-06-02 15:39 - 2014-06-02 15:39 - 00140866 _____ () C:\Users\mitzekatzen\Downloads\install_flashplayer13x32_ltr5x64d_awc_aih(1).exe
2014-06-02 15:09 - 2014-06-02 15:09 - 01058200 _____ (Adobe) C:\Users\mitzekatzen\Downloads\install_flashplayer13x32_ltr5x64d_awc_aih.exe
==================== One Month Modified Files and Folders =======
2021-10-21 15:36 - 2014-01-19 14:29 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat
2021-10-04 09:34 - 2014-01-19 14:29 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat
2014-07-02 20:44 - 2014-07-02 20:43 - 00031963 _____ () C:\Users\mitzekatzen\Desktop\FRST.txt
2014-07-02 20:43 - 2014-07-02 20:43 - 00000000 ____D () C:\FRST
2014-07-02 20:41 - 2014-07-02 20:41 - 02083840 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-07-02 20:39 - 2014-04-16 20:48 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{26E28335-1916-4357-9E6B-52CB3526D0BF}
2014-07-02 20:39 - 2014-04-06 23:03 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\CrashDumps
2014-07-02 20:19 - 2014-04-07 14:04 - 00001142 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-02 20:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-07-02 19:52 - 2014-04-03 18:51 - 00000332 _____ () C:\Windows\Tasks\MySearchDial.job
2014-07-02 18:05 - 2014-01-19 14:00 - 01686490 _____ () C:\Windows\WindowsUpdate.log
2014-07-02 17:35 - 2014-04-07 14:04 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-02 17:35 - 2014-04-05 14:37 - 00000000 __RDO () C:\Users\mitzekatzen\SkyDrive
2014-07-01 21:30 - 2014-04-10 15:22 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\HpUpdate
2014-07-01 18:25 - 2014-04-03 17:52 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-01 18:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-06-29 14:54 - 2014-01-19 22:44 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-06-29 14:54 - 2014-01-19 22:44 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-06-29 14:54 - 2013-10-31 08:27 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-29 14:52 - 2014-01-19 14:41 - 00000000 ____D () C:\ProgramData\Atheros
2014-06-29 14:52 - 2013-08-22 16:46 - 00026119 _____ () C:\Windows\setupact.log
2014-06-26 17:29 - 2014-05-24 16:01 - 00042496 ___SH () C:\Users\mitzekatzen\Desktop\Thumbs.db
2014-06-25 22:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-06-25 20:57 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-25 20:56 - 2013-10-31 08:20 - 00670908 _____ () C:\Windows\PFRO.log
2014-06-25 20:56 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-22 22:14 - 2014-04-07 14:04 - 00004114 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-22 22:14 - 2014-04-07 14:04 - 00003878 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-20 12:41 - 2014-06-04 16:39 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\47076b4cc5bfaf77bbe68bb8381cfd6d
2014-06-20 12:41 - 2014-04-05 12:29 - 00000000 ____D () C:\Program Files\003
2014-06-19 20:40 - 2014-06-19 20:42 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-19 18:19 - 2014-06-16 16:41 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-18 18:14 - 2014-04-10 00:07 - 00000000 ____D () C:\Eigene Dateien
2014-06-17 22:46 - 2014-06-03 23:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\Adobe
2014-06-17 18:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-16 17:11 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-06-16 16:51 - 2014-06-16 16:51 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-06-16 16:45 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-16 16:45 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Avira
2014-06-16 16:45 - 2014-06-16 16:41 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-16 16:41 - 2014-01-19 14:23 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-06-16 15:11 - 2014-04-06 12:07 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-06-16 15:09 - 2014-04-28 21:47 - 00000000 ____D () C:\Users\Peter
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-14 14:39 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-06-14 13:03 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-06-13 13:51 - 2014-04-06 11:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-13 13:51 - 2013-08-22 16:44 - 00563464 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-06-12 23:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-12 18:21 - 2014-04-05 12:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 18:19 - 2014-04-05 12:58 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-08 17:48 - 2014-05-03 08:58 - 00003326 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-06-08 17:48 - 2014-05-01 20:59 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-06-04 19:58 - 2014-06-04 19:58 - 00000000 ____D () C:\Users\mitzekatzen\dwhelper
2014-06-04 19:58 - 2014-04-03 17:46 - 00000000 ____D () C:\Users\mitzekatzen
2014-06-04 16:35 - 2014-05-31 17:19 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-06-04 16:35 - 2014-05-31 17:19 - 00003304 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-06-04 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-06-03 23:18 - 2014-06-03 23:18 - 00000735 _____ () C:\Users\mitzekatzen\Downloads\3923422121.txt
2014-06-02 15:39 - 2014-06-02 15:39 - 00140866 _____ () C:\Users\mitzekatzen\Downloads\install_flashplayer13x32_ltr5x64d_awc_aih(1).exe
2014-06-02 15:10 - 2014-05-24 17:21 - 00000000 ____D () C:\Program Files (x86)\Flash Player Pro
2014-06-02 15:09 - 2014-06-02 15:09 - 01058200 _____ (Adobe) C:\Users\mitzekatzen\Downloads\install_flashplayer13x32_ltr5x64d_awc_aih.exe
Some content of TEMP:
====================
C:\Users\mitzekatzen\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-02 17:48
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-07-2014
Ran by mitzekatzen at 2014-07-02 20:44:39
Running from C:\Users\mitzekatzen\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
ACDSee (HKLM-x32\...\ACDSee) (Version: - )
Acer Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.03.3000 - Acer Incorporated)
Acer Docs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 2.04.2005 - Acer)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.04.3002.6 - Acer Incorporated)
Acer Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.04.3003.1 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.04.3004 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8100 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.02.3001 - Acer Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Ahnenforschung mit RS-AHNEN (HKLM-x32\...\Ahnenforschung mit RS-AHNEN) (Version: - )
AMD Accelerated Video Transcoding (Version: 13.20.100.31002 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.1002.1735.29729 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (HKLM\...\{8FAAC5E4-3361-726A-9F42-F0414FD1D3BC}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
ArcSoft PhotoImpression (HKLM-x32\...\ArcSoft PhotoImpression) (Version: - )
Avira (HKLM-x32\...\{68e29fba-92b1-4f6f-a604-1d8679da3a9f}) (Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.13.24161 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.4.672 - Avira)
BDE (x32 Version: 1.0 - ) Hidden
Broadcom Card Reader Driver Installer (HKLM\...\{67AA948F-8D83-4566-B84A-7CAABCF64E3F}) (Version: 16.0.2.8 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{D1D7ED66-5C08-40A0-AEC0-B6DF977697BB}) (Version: 16.2.1.2 - Broadcom Corporation)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.1002.1735.29729 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.1002.1735.29729 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Profiles Mobile (x32 Version: 2013.1002.1735.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.1002.1734.29729 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.1002.1735.29729 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
Cuttermaran 1.70 (HKLM-x32\...\{5F499D33-546A-442B-B0F9-4C58F3B5B6E3}) (Version: 1.7.0 - toarnold)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3126.57 - CyberLink Corp.)
CyberLink PowerDVD 12 (x32 Version: 12.0.3126.57 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
D-Info '99 Ausgabe Herbst (HKLM-x32\...\D-Info '99 Ausgabe Herbst) (Version: - )
DVR Converter 3.0 (HKLM-x32\...\{B0897D06-68ED-4EB2-0001-2F36270D8621}) (Version: 3.0.12.1129 - Engelmann Media GmbH)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
ETDWare PS/2-X64 11.6.27.201_WHQL (HKLM\...\Elantech) (Version: 11.6.27.201 - ELAN Microelectronic Corp.)
Flash Player Pro V5.88 (HKLM-x32\...\Flash Player Pro_is1) (Version: 5.88 - FlashPlayerPro.com)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Hardcopy (HKLM-x32\...\Hardcopy) (Version: 2014.01.27 - www.hardcopy.de)
Hemera Photo-Objects 1000 (HKCU\...\InstallShield_{A6C11493-C2E4-4240-A59F-5DC804071DA6}) (Version: 3.20.0000 - MediaVerlag)
Hemera Photo-Objects 1000 (x32 Version: 3.20.0000 - MediaVerlag) Hidden
HP Fotodruckprogramm (HKLM-x32\...\HP Fotodruckprogramm) (Version: - )
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12992 - HP)
HP Photosmart 5520 series - Grundlegende Software für das Gerät (HKLM\...\{4F396B08-301D-4E53-A372-95A7E93ABD04}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5520 series Hilfe (HKLM-x32\...\{640A03B3-4E6B-4440-A350-E6A8D6348F12}) (Version: 27.0.0 - Hewlett Packard)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Precisionscan Pro 3.1 (HKLM-x32\...\{6B36DEBF-27D0-4B1E-858D-D397091C6C7D}) (Version: 3.1.0.0000 - Hewlett-Packard)
HP Share-to-Web (HKLM-x32\...\{748F4870-8350-11D3-B0BF-080009FB4A19}) (Version: - )
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3355 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.28.487.1 - Intel Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java 8 Update 5 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418005FF}) (Version: 8.0.50 - Oracle Corporation)
Java 8 Update 5 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218005FF}) (Version: 8.0.50 - Oracle Corporation)
Java Auto Updater (x32 Version: 2.8.05.13 - Oracle, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
L&H Power Translator Pro 7.0 (HKLM-x32\...\L&H Power Translator Pro 7.0) (Version: - )
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
Mediaport (HKLM-x32\...\Mediaport) (Version: - )
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office 2000 SR-1 Disc 2 (HKLM-x32\...\{00040407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.3821 - Microsoft Corporation)
Microsoft Office 2000 SR-1 Small Business (HKLM-x32\...\{00030407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.3821 - Microsoft Corporation)
Microsoft PowerPoint Viewer 97 (HKLM-x32\...\PPTView97) (Version: - )
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Mobipocket Reader 6.1 (HKLM-x32\...\{7078C6C2-F5A5-4A5F-86A8-CD1301CA07DF}) (Version: 6.1.592 - Mobipocket.com)
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
mp3-2-wav converter 1.14 (HKLM-x32\...\mp3-2-wav) (Version: - )
MPC-HC 1.7.4.13 (d4d872c) Nightly (HKLM-x32\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.4.13 - MPC-HC Team)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Nero BackItUp (x32 Version: 12.5.11000 - Nero AG) Hidden
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
Nero BackItUp Help (CHM) (x32 Version: 12.0.13000 - Nero AG) Hidden
Nero ControlCenter (x32 Version: 11.0.15900 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (x32 Version: 12.0.12000 - Nero AG) Hidden
Nero Core Components (x32 Version: 11.0.20900 - Nero AG) Hidden
Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden
Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden
Norton Online Backup (HKLM-x32\...\{E625FCA0-E43E-4D3B-92FF-4851308A0366}) (Version: 2.8.0.44 - Symantec Corporation)
Norton Online Backup (x32 Version: 4.5.0.9 - Symantec Corporation) Hidden
OEM Application Profile (HKLM-x32\...\{E3AE2D4D-5274-CE6B-5434-64DA3131A301}) (Version: 1.00.0000 - Ihr Firmenname)
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Orbitron - Satellite Tracking System (HKLM-x32\...\Orbitron_is1) (Version: 3.71 - Sebastian Stoff)
PDF Experte 8 Professional (HKLM-x32\...\{FC279721-37A6-4777-AFD8-7A56681EBA14}) (Version: 8.0.0140.0 - Avanquest software)
phonostar-Player Version 3.03.2 (HKLM-x32\...\phonostar3RadioPlayer_is1) (Version: - )
Photomizer Scan (HKLM-x32\...\{CCFF1CFE-0327-424C-0001-6796B1D17F13}) (Version: 1.0.11.223 - Engelmann Media GmbH)
PowerArchiver (HKLM-x32\...\PowerArchiver) (Version: - )
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.07 - Qualcomm Atheros)
Radio.fx (HKLM-x32\...\Tobit Radio.fx Server) (Version: - Tobit.Software)
RealDownloader (x32 Version: 17.0.9 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7027 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Reisekostenabrechnung 3 Version 3.5.5 (HKLM-x32\...\Reisekostenabrechnung 3_is1) (Version: 3.5.5 - Rüdiger Werner)
Reisekostensoftware Version 1.10.4 (HKLM-x32\...\{9FBA2B6B-65EB-40B8-AE4E-F0F1529C4F7C}_is1) (Version: 1.10.4 - www.jgm-software.com)
Routenplaner Europa (HKLM-x32\...\{C2410F39-4DF4-4526-BD44-B871585ADFBB}) (Version: - )
Serif PhotoPlus 11 (HKLM-x32\...\{FAFC9FF9-56BE-414D-B637-537E7D06E7B9}) (Version: 11.1.1.019 - Serif (Europe) Ltd)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.1.57.ge7405149 - Spotify AB)
Stellarium 0.12.4 (HKLM\...\Stellarium_is1) (Version: 0.12.4 - Stellarium team)
Studie zur Verbesserung von HP Photosmart 5520 series Produkten (HKLM\...\{B99F865A-3ECB-4E65-B6CF-9C60EE0273A3}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
Sun-Moon-Calendar 9 (HKLM-x32\...\Sun-Moon-Calendar 9) (Version: Version 9.8 - Dr. Regener)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.296 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.1000.55 - TuneUp Software) Hidden
Ulead COOL 360 1.0 (HKLM-x32\...\{3CEA4CA8-CDD4-451C-B673-E8F17BE01B15}) (Version: - )
Ulead Photo Explorer 8.5 (HKLM-x32\...\{025C3792-E9C6-432A-92C1-661F99D021CA}) (Version: 8.5 - Ulead Systems, Inc.)
Ulead PhotoImpact 10 (HKLM-x32\...\{FE58B892-3825-4610-A6A2-E6EFCA83BD97}) (Version: 10.0 - Ulead System)
Ulead VideoStudio 7 SE Basic (HKLM-x32\...\{757AD3D4-036B-42FA-B0A4-96BD6F4605A0}) (Version: 7.0 - Ulead Systems, Inc.)
Unikal 20061218 (HKLM-x32\...\Unikal_is1) (Version: - Herbert Metz)
UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden
USB Video Device Driver (HKLM-x32\...\{2758691A-2CDE-4942-A4AC-0E8F61FE2067}) (Version: - )
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Volo View Express (HKLM-x32\...\{1ECD6EC8-7BB2-4CD5-A384-BAA371BC4D21}) (Version: 2002.20.0.627 - Autodesk, Inc.)
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.71 - NCH Software)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
WinRAR 3.3 deutsch (HKLM-x32\...\WinRAR 3.3 deutsch) (Version: - )
WinZip (HKLM-x32\...\WinZip) (Version: 8.1 SR-1 (5266g) - WinZip Computing, Inc.)
XnView 1.95.4 (HKLM-x32\...\XnView_is1) (Version: 1.95.4 - Gougelet Pierre-e)
==================== Restore Points =========================
12-06-2014 16:16:56 Windows Update
20-06-2014 10:59:04 Geplanter Prüfpunkt
29-06-2014 09:50:44 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {01BF829D-7808-421E-A63C-F522EDD1AE91} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2013-07-10] (Acer Incorporated)
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0A647CF7-BB8E-4F81-9E56-00BD0F1915FB} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [2014-02-13] (Acer Incorporated)
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {0F12677F-AF05-4EAA-9107-8D195B3E48F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-07] (Google Inc.)
Task: {1965A659-3BA7-40B5-A524-6462062C71FA} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2014-04-07] (RealNetworks, Inc.)
Task: {1C61419F-10AB-4D06-924F-01BAB69858EC} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-04-07] (RealNetworks, Inc.)
Task: {20133B11-EA7F-4FDF-BE29-226B66325652} - System32\Tasks\SuperEasyDriverUpdaterRunAtStartup => C:\Program Files (x86)\SuperEasy Software\Driver Updater\supereasydu.exe
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C326FB0-1261-4837-9777-085763D310DE} - System32\Tasks\MySearchDial => C:\Users\mitzekatzen\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {32E26545-C7F6-418B-9BC4-49461F1F6C2D} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files (x86)\TuneUp Utilities 2012\OneClick.exe
Task: {3441AEE8-F5D1-4335-A0DA-0DDDB9116F51} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {380D999D-3812-4FA3-9385-1A07BA2F67DF} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3E011108-19A1-4385-8E3C-CC2C12B9690A} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28] (Hewlett-Packard)
Task: {45130E4E-AEE1-4A9D-B6BD-8A2E08882E6F} - System32\Tasks\Norton Online Backup ARA => C:\Program Files (x86)\Norton Online Backup ARA\Engine\4.5.0.9\\Ara.exe [2013-08-07] (Symantec Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {502D9871-9ED6-4E1D-99A8-290BD40D5AA2} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {571E6460-AC35-4E6E-BA5A-512F6CA8CFAD} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-12-21] (Adobe Systems Incorporated)
Task: {62264BDE-CAA0-4B5D-9AFA-C93ED39DDF55} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2011-02-21] ()
Task: {64923A1E-5A41-4616-9C7C-8CB5E11A8347} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-04-07] (Google Inc.)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {721D85EB-9FF8-4222-8B66-86D1E245AE82} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {7752CD98-B90F-4D2D-BBF5-CF4E9216244B} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-07-05] (Acer Incorporated)
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {8102A2DB-C0ED-49E3-AADE-D86A4FE86100} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {81412800-7177-485C-AE7F-1D6D04D6780E} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2014-04-07] (RealNetworks, Inc.)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A4D60B60-E63C-4523-9483-583CE28F337F} - System32\Tasks\hcdll2_ex_x64 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe [2012-11-08] ()
Task: {ACA0E423-EA49-4432-A1FC-D219640BB0D0} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {B0F31A97-CF1E-4F4B-BE5D-07D1E80BE29D} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {B0FF9A92-6D20-44E7-A04B-3D16DBA2C0A0} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-04-07] (RealNetworks, Inc.)
Task: {BE841F3A-EECD-498B-AD6C-559CFF0804C5} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-08] ()
Task: {C00FB3A2-A278-4548-84F5-690DC27269FB} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2014-04-15] (TuneUp Software)
Task: {CB17DCF9-4382-4FFA-9C9B-42784F93B466} - System32\Tasks\HPCustParticipation HP Photosmart 5520 series => C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {DBFE5966-B25D-46F9-B73A-962EC5183E27} - System32\Tasks\hcdll2_ex_Win32 => C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe [2013-07-17] ()
Task: {E317938D-9B96-4B03-AE2F-0CC67B8339B3} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-06-12] (Microsoft Corporation)
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {F452D033-419E-4160-A87C-19DAF9476EED} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {F69EE6BD-5147-4D4C-B41C-13A5727C6554} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [2014-05-01] (RealNetworks, Inc.)
Task: {F6C0E2F6-EB30-4253-B360-864A6DAD3366} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-03-18] (Oracle Corporation)
Task: {F86CA5D6-1C55-4801-A3EA-ECB12CFD1C2A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe
Task: C:\Windows\Tasks\MySearchDial.job => C:\Users\MITZEK~1\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
==================== Loaded Modules (whitelisted) =============
2014-05-11 19:06 - 2013-06-03 13:06 - 03999512 _____ () C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
2014-04-06 23:00 - 2014-04-06 23:00 - 00039568 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2014-04-07 03:06 - 2014-04-07 03:06 - 00023552 _____ () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
2014-04-15 15:59 - 2014-04-15 15:59 - 00675640 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2014-04-04 22:16 - 2014-04-16 11:17 - 00350496 _____ () C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe
2014-04-07 13:48 - 2014-04-16 11:20 - 00350496 _____ () C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe
2014-04-27 12:34 - 2014-03-18 13:58 - 00059904 _____ () C:\Program Files (x86)\WinRST\WinRST.exe
2014-05-08 15:27 - 2013-10-30 11:49 - 00126968 _____ () C:\Program Files (x86)\Hardcopy\HcDLL2_43_x64.dll
2014-05-08 15:27 - 2012-11-08 08:38 - 00044608 _____ () C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
2014-05-08 15:27 - 2013-07-17 17:03 - 00037880 _____ () C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
2013-09-07 02:48 - 2013-09-07 02:48 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-09-07 02:45 - 2013-09-07 02:45 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-09-07 02:52 - 2013-09-07 02:52 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2014-05-11 19:25 - 2014-01-11 15:01 - 00042496 _____ () C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
2014-01-19 14:53 - 2013-07-30 19:11 - 00110152 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll
2014-05-01 20:57 - 2014-05-01 20:57 - 00859224 _____ () c:\program files (x86)\real\realplayer\RPDS\Plugins\cldplin.dll
2014-05-14 14:27 - 2014-05-14 14:27 - 00137296 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-05-14 14:27 - 2014-05-14 14:27 - 00065616 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-01-19 14:19 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-05-08 15:27 - 2012-07-05 15:56 - 00052800 _____ () C:\Program Files (x86)\Hardcopy\hardcopy_05.dll
2014-05-08 15:27 - 2013-10-30 11:49 - 00117752 _____ () C:\Program Files (x86)\Hardcopy\HcDLL2_43_Win32.dll
2014-05-08 15:27 - 2014-01-10 18:57 - 03647456 _____ () C:\Program Files (x86)\Hardcopy\HcDllS.dll
2014-06-25 21:24 - 2014-05-14 14:27 - 00049744 _____ () C:\Users\mitzekatzen\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-01-19 14:53 - 2013-07-30 19:11 - 00088648 _____ () C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext.dll
2014-05-01 20:57 - 2014-05-01 20:57 - 00572504 _____ () c:\program files (x86)\real\realplayer\RPDS\Lib\r1api.dll
2013-09-20 13:50 - 2013-09-20 13:50 - 00988160 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxml2.dll
2013-09-17 04:54 - 2013-09-17 04:54 - 00170496 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxslt.dll
2013-09-17 04:54 - 2013-09-17 04:54 - 00136192 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxmlsec-mscrypto.dll
2013-09-17 04:54 - 2013-09-17 04:54 - 00303616 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxmlsec.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Users\Willkommen.eml:OECustomProperty
AlternateDataStreams: C:\Users\mitzekatzen\SkyDrive:ms-properties
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAWFP => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SecureAssist => ""="service"
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
HKLM\...\StartupApproved\StartupFolder: => "WinZip Quick Pick.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Microsoft Office.lnk"
HKLM\...\StartupApproved\Run: => "ETDCtrl"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "Adobe ARM"
HKLM\...\StartupApproved\Run32: => "StartCCC"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "mobilegeni daemon"
HKLM\...\StartupApproved\Run32: => "vspdfprsrv.exe"
HKLM\...\StartupApproved\Run32: => "TkBellExe"
HKLM\...\StartupApproved\Run32: => "Ulead AutoDetector v2"
HKLM\...\StartupApproved\Run32: => "DInfoSetup"
HKLM\...\StartupApproved\Run32: => "hpqSRMon"
HKLM\...\StartupApproved\Run32: => "ETDCtrl"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKCU\...\StartupApproved\StartupFolder: => "Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk"
HKCU\...\StartupApproved\Run: => "AcerCloud"
HKCU\...\StartupApproved\Run: => "swg"
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/02/2014 08:33:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 30.0.0.5269, Zeitstempel: 0x5391420b
Name des fehlerhaften Moduls: rarext.dll, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002b001
ID des fehlerhaften Prozesses: 0x1bc4
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3
Vollständiger Name des fehlerhaften Pakets: firefox.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: firefox.exe5
Error: (07/01/2014 09:52:33 PM) (Source: ESENT) (EventID: 455) (User: )
Description: LiveComm (2724) C:\Users\mitzekatzen\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\90106792052107c4\120712-0049\: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\Users\mitzekatzen\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\90106792052107c4\120712-0049\DBStore\LogFiles\edb00001.log.
Error: (07/01/2014 06:26:04 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (06/30/2014 05:56:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: avguard.exe, Version: 14.0.4.620, Zeitstempel: 0x536111d6
Name des fehlerhaften Moduls: aegen.dll, Version: 8.1.7.28, Zeitstempel: 0x538f81d7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00049662
ID des fehlerhaften Prozesses: 0x61c
Startzeit der fehlerhaften Anwendung: 0xavguard.exe0
Pfad der fehlerhaften Anwendung: avguard.exe1
Pfad des fehlerhaften Moduls: avguard.exe2
Berichtskennung: avguard.exe3
Vollständiger Name des fehlerhaften Pakets: avguard.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: avguard.exe5
Error: (06/29/2014 10:28:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: soffice.bin, Version: 4.0.9714.500, Zeitstempel: 0x5237a093
Name des fehlerhaften Moduls: rarext.dll, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002b001
ID des fehlerhaften Prozesses: 0x3bc
Startzeit der fehlerhaften Anwendung: 0xsoffice.bin0
Pfad der fehlerhaften Anwendung: soffice.bin1
Pfad des fehlerhaften Moduls: soffice.bin2
Berichtskennung: soffice.bin3
Vollständiger Name des fehlerhaften Pakets: soffice.bin4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: soffice.bin5
Error: (06/29/2014 11:41:41 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (06/29/2014 11:39:10 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (06/26/2014 11:41:04 PM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start
Error: (06/26/2014 06:16:49 PM) (Source: ESENT) (EventID: 455) (User: )
Description: LiveComm (4684) C:\Users\mitzekatzen\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\90106792052107c4\120712-0049\: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\Users\mitzekatzen\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\90106792052107c4\120712-0049\DBStore\LogFiles\edb00001.log.
Error: (06/25/2014 08:57:05 PM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start
System errors:
=============
Error: (07/02/2014 06:47:25 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
Error: (07/01/2014 09:36:19 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
Error: (06/30/2014 05:56:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/29/2014 02:54:36 PM) (Source: BTHUSB) (EventID: 16) (User: )
Description: Die beiderseitige Authentifizierung zwischen dem lokalen Bluetooth-Adapter und einem Gerät mit Bluetooth-Adapteradresse (00:1d:25:20:c5:16) ist fehlgeschlagen.
Error: (06/29/2014 02:54:24 PM) (Source: BTHUSB) (EventID: 16) (User: )
Description: Die beiderseitige Authentifizierung zwischen dem lokalen Bluetooth-Adapter und einem Gerät mit Bluetooth-Adapteradresse (00:1d:25:20:c5:16) ist fehlgeschlagen.
Error: (06/29/2014 02:01:57 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
Error: (06/26/2014 09:46:01 AM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.
Error: (06/25/2014 08:58:11 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "WinRST" wurde nicht richtig gestartet.
Error: (06/25/2014 08:53:13 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR16 gefunden.
Error: (06/25/2014 08:51:59 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR16 gefunden.
Microsoft Office Sessions:
=========================
Error: (07/02/2014 08:33:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: firefox.exe30.0.0.52695391420brarext.dll0.0.0.000000000c00000050002b0011bc401cf960bb03a27d5C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\WinRAR\rarext.dll56b9fc89-0217-11e4-8281-40f02fc1abe2
Error: (07/01/2014 09:52:33 PM) (Source: ESENT) (EventID: 455) (User: )
Description: LiveComm2724C:\Users\mitzekatzen\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\90106792052107c4\120712-0049\: C:\Users\mitzekatzen\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\90106792052107c4\120712-0049\DBStore\LogFiles\edb00001.log-1811 (0xfffff8ed)
Error: (07/01/2014 06:26:04 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{2259DBC1-EFFB-42B5-BA35-DFC0AAB2B3FB}\recordingmanager.exe
Error: (06/30/2014 05:56:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: avguard.exe14.0.4.620536111d6aegen.dll8.1.7.28538f81d7c00000050004966261c01cf90a742799d12C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exeC:\Program Files (x86)\Avira\AntiVir Desktop\aegen.dll1514abbf-006f-11e4-8281-40f02fc1abe2
Error: (06/29/2014 10:28:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: soffice.bin4.0.9714.5005237a093rarext.dll0.0.0.000000000c00000050002b0013bc01cf9399d517653aC:\Program Files (x86)\OpenOffice 4\program\soffice.binC:\Program Files (x86)\WinRAR\rarext.dlled85138d-ffcb-11e3-8281-40f02fc1abe2
Error: (06/29/2014 11:41:41 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{2259DBC1-EFFB-42B5-BA35-DFC0AAB2B3FB}\recordingmanager.exe
Error: (06/29/2014 11:39:10 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{2259DBC1-EFFB-42B5-BA35-DFC0AAB2B3FB}\recordingmanager.exe
Error: (06/26/2014 11:41:04 PM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description:
Error: (06/26/2014 06:16:49 PM) (Source: ESENT) (EventID: 455) (User: )
Description: LiveComm4684C:\Users\mitzekatzen\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\90106792052107c4\120712-0049\: C:\Users\mitzekatzen\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\LiveComm\90106792052107c4\120712-0049\DBStore\LogFiles\edb00001.log-1811 (0xfffff8ed)
Error: (06/25/2014 08:57:05 PM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description:
==================== Memory info ===========================
Percentage of memory in use: 34%
Total physical RAM: 8072.27 MB
Available physical RAM: 5291.72 MB
Total Pagefile: 9352.27 MB
Available Pagefile: 6144.66 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:913.69 GB) (Free:770.2 GB) NTFS
Drive e: (WD Elements) (Fixed) (Total:465.76 GB) (Free:99.49 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 153A5499)
Partition: GPT Partition Type.
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: 0002E78D)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Gruß Peter |
|
02.07.2014, 21:33
| #2 |
| /// the machine /// TB-Ausbilder    | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen hi,
__________________Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
03.07.2014, 19:39
| #3 |
| | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Hallo Schrauber,
__________________zuerst vielen Dank für die umfangreichen Empfehlungen zu dem Thema. Ich konnte auch erst heute antworten, da es gestern doch schon fortgeschrittene Zeit war und ich merke auch jetzt, dass es doch einige Zeit in Anspruch nimmt, um alle Aktivitäten ordnungsgemäß durchzuführen. Ich hatte heute festgestellt, wenn ich im OFFline-Betrieb war, hat AVIRA nicht rumgemeckert und die Datei "RSTUpdater.exe" war auch nicht im o.g. Ordner. Sowie ich ONLINE war, konnte ich drauf warten, bis die Sicherheitsmeldung von AVIRA kam und dann am laufenden Band. Ich habe die Programme in der Reihenfolge der Empfehlungen abgearbeitet, wobei danach keine Sicherheitsmeldung von AVIRA aufgetreten ist. Hier nun die LOG-Dateien: 1. Malwarebytes Anti-Malware - mbam.txt Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 03.07.2014 Suchlauf-Zeit: 18:33:16 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.07.03.03 Rootkit Datenbank: v2014.07.01.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: mitzekatzen Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 285126 Verstrichene Zeit: 17 Min, 42 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 3 PUP.Optional.MegaBrowse.A, C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe, 2608, Löschen bei Neustart, [051a6f2c59223006e7e01653dc252dd3] PUP.Optional.MegaBrowse.A, C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe, 3208, Löschen bei Neustart, [d14e207b0f6c989ebc0bff6a0cf5629e] PUP.Optional.WinRST.A, C:\Program Files (x86)\WinRST\WinRST.exe, 3724, Löschen bei Neustart, [f9269dfe24572f07e63026a05da539c7] Module: 4 PUP.Optional.WinRST.A, C:\Program Files (x86)\WinRST\msvcp100.dll, Löschen bei Neustart, [f9269dfe24572f07e63026a05da539c7], PUP.Optional.WinRST.A, C:\Program Files (x86)\WinRST\msvcr100.dll, Löschen bei Neustart, [f9269dfe24572f07e63026a05da539c7], PUP.Optional.WinRST.A, C:\Program Files (x86)\WinRST\QtCore4.dll, Löschen bei Neustart, [f9269dfe24572f07e63026a05da539c7], PUP.Optional.WinRST.A, C:\Program Files (x86)\WinRST\QtNetwork4.dll, Löschen bei Neustart, [f9269dfe24572f07e63026a05da539c7], Registrierungsschlüssel: 40 PUP.Optional.MegaBrowse.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update Mega Browse, In Quarantäne, [051a6f2c59223006e7e01653dc252dd3], PUP.Optional.MegaBrowse.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util Mega Browse, In Quarantäne, [d14e207b0f6c989ebc0bff6a0cf5629e], PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [c45bff9c780362d45d18483cfa08cb35], PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, In Quarantäne, [c45bff9c780362d45d18483cfa08cb35], PUP.Optional.MegaBrowse.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4e6cd411-ce62-4584-97ff-6afbcf6900af}, In Quarantäne, [001f08939dde72c46a3aaba32ed4bd43], PUP.Optional.MegaBrowse.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{15F672EC-1269-428F-BDB7-DB781E772B77}, In Quarantäne, [001f08939dde72c46a3aaba32ed4bd43], PUP.Optional.MegaBrowse.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{158C1B4D-859D-4886-BCA4-4C671693EAA0}, In Quarantäne, [001f08939dde72c46a3aaba32ed4bd43], PUP.Optional.MegaBrowse.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{158C1B4D-859D-4886-BCA4-4C671693EAA0}, In Quarantäne, [001f08939dde72c46a3aaba32ed4bd43], PUP.Optional.MegaBrowse.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{15F672EC-1269-428F-BDB7-DB781E772B77}, In Quarantäne, [001f08939dde72c46a3aaba32ed4bd43], PUP.Optional.MegaBrowse.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{4E6CD411-CE62-4584-97FF-6AFBCF6900AF}, In Quarantäne, [001f08939dde72c46a3aaba32ed4bd43], PUP.Optional.MegaBrowse.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{4E6CD411-CE62-4584-97FF-6AFBCF6900AF}, Löschen bei Neustart, [001f08939dde72c46a3aaba32ed4bd43], PUP.Optional.MegaBrowse.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{4E6CD411-CE62-4584-97FF-6AFBCF6900AF}, Löschen bei Neustart, [001f08939dde72c46a3aaba32ed4bd43], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}, In Quarantäne, [54cbfe9daecd1b1b0a57691b669c36ca], PUP.Optional.SearchProtect.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}, Löschen bei Neustart, [f02f8615b2c9be78f31c59f28f73b947], PUP.Optional.MySearchDial.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, Löschen bei Neustart, [b06fd4c76813d26460b0ad9e758d9769], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}, In Quarantäne, [ca557a21e89380b61502c2c2768ca759], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, In Quarantäne, [859a693293e8a096e2b9255f21e12ad6], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, In Quarantäne, [9887bedd8af145f15f3d0282e22023dd], PUP.Optional.WinRST.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinRST, In Quarantäne, [f9269dfe24572f07e63026a05da539c7], PUP.Optional.AdPeak.A, HKLM\SOFTWARE\LevelQualityWatcher, In Quarantäne, [32edeab132498fa70165ded43dc502fe], PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\suprasavings, In Quarantäne, [fc233a6193e8bd7953144f796f9352ae], PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [c6599803304b84b2ec67f800937003fd], PUP.Optional.Iminent.A, HKLM\SOFTWARE\WOW6432NODE\Iminent, In Quarantäne, [c05fa5f6afcc25113d433b9c30d2a55b], PUP.Optional.MegaBrowse.A, HKLM\SOFTWARE\WOW6432NODE\Mega Browse, In Quarantäne, [908f4a51b6c5a591f398f9d430d2946c], PUP.Optional.SupraSavings.A, HKLM\SOFTWARE\WOW6432NODE\SupraSavings, In Quarantäne, [57c8019aa9d288aee1868a3e54aef60a], PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\webssearchesSoftware, In Quarantäne, [9986cecd235861d523cd83467c86ec14], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLCORE\mysearchdial, In Quarantäne, [1d020a91a9d2d3638870975446bd02fe], PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In Quarantäne, [9c83821979022214ce8503f5000343bd], PUP.Optional.SystemSpeedup, HKLM\SOFTWARE\WOW6432NODE\SYSTWEAK\ssd, In Quarantäne, [22fd326983f8b581563f733d3ec41fe1], PUP.Optional.MegaBrowse.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Mega Browse, Löschen bei Neustart, [e43b2378b6c50432a9e1af1e21e1cc34], PUP.Optional.MySearchDial.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\mysearchdial, Löschen bei Neustart, [4ed18417d5a6a1953668b93463a06d93], PUP.Optional.RRSavings.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Rr Savings, Löschen bei Neustart, [7ea13368b7c465d17bf3e1e2c53d57a9], PUP.Optional.SupraSavings.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Supra Savings, Löschen bei Neustart, [63bc2d6e700bd363f768dfe86b97a858], PUP.Optional.InstallCore.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Löschen bei Neustart, [5cc31d7e6714fa3c6c1e894d3cc68779], PUP.Optional.MySearchDial.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\mysearchdial, Löschen bei Neustart, [9788bae180fb61d52b2a797824df42be], PUP.Optional.InstallCore.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Löschen bei Neustart, [140b2675dd9ee254c0dc707c010253ad], PUP.Optional.SuperFish.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com, Löschen bei Neustart, [eb341d7ea2d9e056df6ffdb5dc2608f8], PUP.Optional.Qone8, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, Löschen bei Neustart, [e23dd6c5ccafc3730f431cdc887b27d9], PUP.Optional.Softonic.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, Löschen bei Neustart, [78a72d6ef586fc3a510060658a781ae6], PUP.Optional.SystemSpeedup, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SYSTWEAK\ssd, Löschen bei Neustart, [9a85b3e8c2b954e26034eec220e2f907], Registrierungswerte: 8 PUP.Optional.Iminent.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, In Quarantäne, [7aa559428af1300646ea7b092cd6c53b], PUP.Optional.Iminent.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{84FF7BD6-B47F-46F8-9130-01B2696B36CB}, Löschen bei Neustart, [7aa559428af1300646ea7b092cd6c53b], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{3004627E-F8E9-4E8B-909D-316753CBA923}, In Quarantäne, [0a15debd1863fc3aac6a681c6a98867a], PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{3004627E-F8E9-4E8B-909D-316753CBA923}, mysearchdial Toolbar, In Quarantäne, [0a15debd1863fc3aac6a681c6a98867a] PUP.Optional.QuickStart.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|quick_start@gmail.com, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\quick_start@gmail.com, In Quarantäne, [7da205967a016cca07a55773dc2622de] PUP.Optional.WinRST.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WINRST|ImagePath, C:\Program Files (x86)\WinRST\WinRST.exe, In Quarantäne, [a679fd9e710ab97d15004f779d658d73] PUP.Optional.InstallCore.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0N2X1N, Löschen bei Neustart, [140b2675dd9ee254c0dc707c010253ad] PUP.Optional.QuickStart.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MOZILLA\EXTENDS|appid, quick_start@gmail.com, Löschen bei Neustart, [67b8d9c24239af873c3808ac52b09b65] Registrierungsdaten: 9 PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38),Ersetzt,[96895f3c0576a096becb8403ff0527d9] PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}),Ersetzt,[d44b66357a0153e3fd836225a75d758b] PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38),Ersetzt,[45da46556714092d6b13e2a549bb6c94] PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[0d128714c1ba91a54d648908a95b1ae6] PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\IEXPLORE.EXE\SHELL\OPEN\COMMAND, C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38, Gut: (iexplore.exe), Schlecht: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38),Ersetzt,[021d9a01dba039fd8cfd295efd07768a] PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38&q={searchTerms}),Ersetzt,[77a877241a61aa8c9ce47b0cc93b847c] PUP.Optional.WebsSearches.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38),Ersetzt,[56c98615750651e5592595f2d430cc34] PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[b66965364239c274ac05a7eafd07ae52] PUP.Optional.WebsSearches.A, HKU\S-1-5-21-1462259780-1042906043-1045736432-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1398940740&from=tugs&uid=WDCXWD10JPVX-22JC3T0_WD-WX71EA3MSE38MSE38),Löschen bei Neustart,[27f8c2d9651664d2f48be6a1a460ea16] Ordner: 44 PUP.Optional.WinRST.A, C:\Program Files (x86)\WinRST, Löschen bei Neustart, [f9269dfe24572f07e63026a05da539c7], PUP.Optional.Iminent.A, C:\Users\mitzekatzen\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl, In Quarantäne, [20ff7427760593a3c38e7522d13107f9], PUP.Optional.MySearchDial.A, C:\Users\mitzekatzen\AppData\Roaming\mysearchdial, In Quarantäne, [bb64b9e24c2fe0561a4fa0f7c73b22de], PUP.Optional.MySearchDial.A, C:\Users\mitzekatzen\AppData\Roaming\mysearchdial\icons_2.18.8.0, In Quarantäne, [bb64b9e24c2fe0561a4fa0f7c73b22de], PUP.Optional.MySearchDial.A, C:\Users\mitzekatzen\AppData\Roaming\mysearchdial\UpdateProc, In Quarantäne, [bb64b9e24c2fe0561a4fa0f7c73b22de], PUP.Optional.Iminent.A, C:\Users\mitzekatzen\AppData\Local\Temp\Iminent, In Quarantäne, [1b04188369121e188f018b0c5ba73bc5], PUP.Optional.Conduit.A, C:\Users\mitzekatzen\AppData\Local\Temp\CT3297969, In Quarantäne, [99864754304b033339b5128506fc9c64], PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial, In Quarantäne, [a37c46551a612a0cdcf28414a65c24dc], PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial\1.8.29.0, In Quarantäne, [a37c46551a612a0cdcf28414a65c24dc], PUP.Optional.MySearchDial.A, C:\Program Files (x86)\Mysearchdial\1.8.29.0\bh, In Quarantäne, [a37c46551a612a0cdcf28414a65c24dc], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\include, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\include\tools, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\lib, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\module, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\pack, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\en, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\en-US, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\es, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\es-419, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\fr, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\it, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\it-CH, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\pl, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\ru, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\tr, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\vi, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\defaults, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\defaults\preferences, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\modules, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.SystemSpeedup, C:\Users\mitzekatzen\AppData\Roaming\systweak\ssd, In Quarantäne, [021d8813e398c5712e4ba60a986a9a66], Dateien: 90 PUP.Optional.MegaBrowse.A, C:\Program Files (x86)\Mega Browse\updateMegaBrowse.exe, Löschen bei Neustart, [051a6f2c59223006e7e01653dc252dd3], PUP.Optional.MegaBrowse.A, C:\Program Files (x86)\Mega Browse\bin\utilMegaBrowse.exe, Löschen bei Neustart, [d14e207b0f6c989ebc0bff6a0cf5629e], PUP.Optional.MegaBrowse.A, C:\Program Files (x86)\Mega Browse\MegaBrowseBHO.dll, In Quarantäne, [001f08939dde72c46a3aaba32ed4bd43], PUP.Optional.GenericExt.A, C:\Users\mitzekatzen\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl\minibarchrome.exe, In Quarantäne, [b06f99021d5e05311337a29bbf410cf4], PUP.Optional.AdPeak.A, C:\temp\InstallFilter64.msi, In Quarantäne, [26f9e9b27efd9e9899ef2419768aa858], PUP.Optional.SupraSavings.A, C:\temp\t.msi, In Quarantäne, [6bb4801b54272b0b1a7468110bf9be42], PUP.Optional.AppsInstaller, C:\Users\mitzekatzen\Downloads\Outlook Express-2.exe, In Quarantäne, [c9564259344738fe0b5613696d97817f], PUP.Optional.AppsInstaller, C:\Users\mitzekatzen\Downloads\Outlook Express-3.exe, In Quarantäne, [46d98d0e6219bb7b90d1a8d47a8a966a], PUP.Optional.AppsInstaller, C:\Users\mitzekatzen\Downloads\Outlook Express.exe, In Quarantäne, [ed32188385f6a49267fa8def7e86659b], PUP.Optional.MySearchDial.A, C:\Windows\System32\Tasks\MySearchDial, In Quarantäne, [a6798e0d2952082ea26dd6dd867c12ee], PUP.Optional.MySearchDial.A, C:\Windows\Tasks\MySearchDial.job, In Quarantäne, [35eaadee7605152115c8862e0ef4ee12], PUP.Optional.Trovi.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\searchplugins\trovi-search.xml, In Quarantäne, [849b3764285339fdb26dc0feff030ff1], PUP.Optional.WinRST.A, C:\Program Files (x86)\WinRST\msvcp100.dll, Löschen bei Neustart, [f9269dfe24572f07e63026a05da539c7], PUP.Optional.WinRST.A, C:\Program Files (x86)\WinRST\msvcr100.dll, Löschen bei Neustart, [f9269dfe24572f07e63026a05da539c7], PUP.Optional.WinRST.A, C:\Program Files (x86)\WinRST\QtCore4.dll, Löschen bei Neustart, [f9269dfe24572f07e63026a05da539c7], PUP.Optional.WinRST.A, C:\Program Files (x86)\WinRST\QtNetwork4.dll, Löschen bei Neustart, [f9269dfe24572f07e63026a05da539c7], PUP.Optional.WinRST.A, C:\Program Files (x86)\WinRST\WinRST.exe, Löschen bei Neustart, [f9269dfe24572f07e63026a05da539c7], PUP.Optional.PirritSuggestor.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\suggestor@suggestor.pirrit.com.xpi, In Quarantäne, [1708cccff883a195290de7df837fb947], PUP.Optional.Conduit.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\searchplugins\conduit-search.xml, In Quarantäne, [46d9b0ebe5967eb8f39df715f60e0000], PUP.Optional.MySearchDial.A, C:\Users\mitzekatzen\AppData\Roaming\mysearchdial\UpdateProc\config.dat, In Quarantäne, [bb64b9e24c2fe0561a4fa0f7c73b22de], PUP.Optional.MySearchDial.A, C:\Users\mitzekatzen\AppData\Roaming\mysearchdial\UpdateProc\info.dat, In Quarantäne, [bb64b9e24c2fe0561a4fa0f7c73b22de], PUP.Optional.MySearchDial.A, C:\Users\mitzekatzen\AppData\Roaming\mysearchdial\UpdateProc\STTL.DAT, In Quarantäne, [bb64b9e24c2fe0561a4fa0f7c73b22de], PUP.Optional.MySearchDial.A, C:\Users\mitzekatzen\AppData\Roaming\mysearchdial\UpdateProc\TTL.DAT, In Quarantäne, [bb64b9e24c2fe0561a4fa0f7c73b22de], PUP.Optional.MySearchDial.A, C:\Users\mitzekatzen\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe, In Quarantäne, [bb64b9e24c2fe0561a4fa0f7c73b22de], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome.manifest, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\install.rdf, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\index.html, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\quick_start.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\quick_start.xul, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\include\speed_dial.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\include\tools\about_blank_hook.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\include\tools\misc.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\include\tools\popup_image_helper.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\include\tools\urlrequestor.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\js.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\lib\doT.min.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery-2.1.0.min.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\lib\jquery.autocomplete.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\module\hotSearch.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\module\mostgrid.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\module\other.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\module\search.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\module\stat.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\pack\common.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\pack\ga.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\content\js\pack\xagainit.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\en\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\en-US\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\es\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\es-419\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\fr\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\fr-BE\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\fr-CA\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\fr-CH\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\fr-LU\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\it\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\it-CH\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\pl\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\pt-BR\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\ru\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\ru-MO\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\tr\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\vi\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\zh-CN\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\locale\zh-TW\locale.properties, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\default_add_logo.png, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\default_add_logo_hover.png, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\default_logo.png, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\googlelogo.png, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\google_trends.png, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\icon.png, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\loading.gif, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\logo.ico, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\logo.png, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\logo32.ico, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\simple.css, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\chrome\skin\style.css, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\defaults\preferences\fvd.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\defaults\preferences\preferences.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\modules\addonmanager.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\modules\aes.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\modules\config.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\modules\dialogs.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\modules\last_tab.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\modules\misc.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\modules\properties.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\modules\remoterequest.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\modules\restoreprefs.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.FastStart.A, C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\extensions\faststartff@gmail.com\modules\settings.js, In Quarantäne, [c55a73281d5e92a40f858925c43ec838], PUP.Optional.SystemSpeedup, C:\Users\mitzekatzen\AppData\Roaming\systweak\ssd\SSDPTstub.exe, In Quarantäne, [021d8813e398c5712e4ba60a986a9a66], Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter # AdwCleaner v3.214 - Bericht erstellt am 03/07/2014 um 19:15:17
# Aktualisiert 29/06/2014 von Xplode
# Betriebssystem : Windows 8.1 (64 bits)
# Benutzername : mitzekatzen - ASTRONOMIE
# Gestartet von : C:\Users\mitzekatzen\Desktop\adwcleaner_3.214.exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : RegFltrX64
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\NCH Software
Ordner Gelöscht : C:\ProgramData\ParetoLogic
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flash Player Pro
Ordner Gelöscht : C:\Program Files (x86)\Flash Player Pro
Ordner Gelöscht : C:\Program Files (x86)\Mega Browse
Ordner Gelöscht : C:\Program Files (x86)\NCH Software
Ordner Gelöscht : C:\Program Files (x86)\Optimizer Pro
Ordner Gelöscht : C:\Program Files (x86)\predm
Ordner Gelöscht : C:\Program Files (x86)\Common Files\Tobit
Ordner Gelöscht : C:\Program Files\003
Ordner Gelöscht : C:\Users\mitzekatzen\AppData\Local\Genesis
Ordner Gelöscht : C:\Users\mitzekatzen\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\MITZEK~1\AppData\Local\Temp\Mega Browse
Ordner Gelöscht : C:\Users\MITZEK~1\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\mitzekatzen\AppData\LocalLow\IminentToolbar
Ordner Gelöscht : C:\Users\mitzekatzen\AppData\Roaming\DriverCure
Ordner Gelöscht : C:\Users\mitzekatzen\AppData\Roaming\NCH Software
Ordner Gelöscht : C:\Users\mitzekatzen\AppData\Roaming\ParetoLogic
Ordner Gelöscht : C:\Users\mitzekatzen\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\mitzekatzen\AppData\Roaming\Tobit
Ordner Gelöscht : C:\Users\mitzekatzen\Documents\Flash Player Pro
Ordner Gelöscht : C:\Users\mitzekatzen\Documents\Optimizer Pro
Ordner Gelöscht : C:\Users\mitzekatzen\Documents\PC Speed Maximizer
Ordner Gelöscht : C:\Users\Public\Pokki
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\Windows\System32\drivers\wStLibG64.sys
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\mitzekatzen\daemonprocess.txt
Datei Gelöscht : C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\user.js
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\mkcedibhemacmilmkpndpkoidlnmgngg
Schlüssel Gelöscht : HKCU\Software\Classes\pokki
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\conduit.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\NewPlayer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\utilMegaBrowse_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\utilMegaBrowse_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0400EBCA-042C-4000-AA89-9713FBEDB671}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0BD19251-4B4B-4B94-AB16-617106245BB7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3281114F-BCAB-45E3-80D9-A6CD64D4E636}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{44533FCB-F9FB-436A-8B6B-CF637B2D465A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{44B29DDD-CF7A-454A-A275-A322A398D93F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AA0F50A8-2618-4AE4-A779-9F7378555A8F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B2DB115C-8278-4947-9A07-57B53D1C4215}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B97FC455-DB33-431D-84DB-6F1514110BD5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E72E9312-0367-4216-BFC7-21485FA8390B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F6CCB6C9-127E-44AE-8552-B94356F39FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FFD25630-2734-4AE9-88E6-21BF6525F3FE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0400EBCA-042C-4000-AA89-9713FBEDB671}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0BD19251-4B4B-4B94-AB16-617106245BB7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3281114F-BCAB-45E3-80D9-A6CD64D4E636}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{44533FCB-F9FB-436A-8B6B-CF637B2D465A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{44B29DDD-CF7A-454A-A275-A322A398D93F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A4DE94DB-DF03-45A3-8A5D-D1B7464B242D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AA0F50A8-2618-4AE4-A779-9F7378555A8F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B2DB115C-8278-4947-9A07-57B53D1C4215}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B97FC455-DB33-431D-84DB-6F1514110BD5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C67281E0-78F5-4E49-9FAE-4B1B2ADAF17B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E72E9312-0367-4216-BFC7-21485FA8390B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F6CCB6C9-127E-44AE-8552-B94356F39FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FFD25630-2734-4AE9-88E6-21BF6525F3FE}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\genesis
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\ParetoLogic
Schlüssel Gelöscht : HKCU\Software\SecuredDownload
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\TutoTag
Schlüssel Gelöscht : HKCU\Software\WEDLMNGR
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\InstallCore
Schlüssel Gelöscht : HKLM\Software\ParetoLogic
Schlüssel Gelöscht : HKLM\Software\Pirrit
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DatamngrCoordinator.exe
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17126
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Mozilla Firefox v30.0 (de)
[ Datei : C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\prefs.js ]
-\\ Google Chrome v
*************************
AdwCleaner[R0].txt - [9942 octets] - [03/07/2014 19:12:46]
AdwCleaner[S0].txt - [8844 octets] - [03/07/2014 19:15:17]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8904 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 x64
Ran by mitzekatzen on 03.07.2014 at 19:25:53,88
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{096C9508-0CA2-410C-BD99-AF6765352394}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{DF10788C-F973-481E-BBB5-FE532E8628C8}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
~~~ FireFox
Emptied folder: C:\Users\mitzekatzen\AppData\Roaming\mozilla\firefox\profiles\o27ths0t.default\minidumps [1 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03.07.2014 at 19:29:35,07
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-07-2014
Ran by mitzekatzen (administrator) on ASTRONOMIE on 03-07-2014 19:58:32
Running from C:\Users\mitzekatzen\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
() C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(sw4you) C:\Program Files (x86)\Hardcopy\hardcopy.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [vspdfprsrv.exe] => C:\Program Files (x86)\Avanquest\PDF Experte 8 Professional\vspdfprsrv.exe [6078464 2012-04-23] (Visagesoft)
HKLM-x32\...\Run: [Ulead AutoDetector v2] => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2004-08-27] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [DInfoSetup] => C:\Program Files (x86)\D-Info99\SDinfo.exe [134656 1999-08-19] ()
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [296520 2014-05-01] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [224128 2014-03-18] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-07-03] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [18247424 2014-02-13] (Acer Incorporated)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-04-10] (Google Inc.)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [phonostar-PlayerTimer] => C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [42496 2014-01-11] ()
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Policies\Explorer: [NoControlPanel] 0
IFEO\acpanel_win.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\alohatripeaks-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\backitup.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ccc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cli.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cradleofegyptcollectorsedition-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\epowerui.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\governorofpoker2_pe_wildtangent_v1.5-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\luxor_ev_x86-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\magic academy-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ncc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\nerorescueagent.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\pegglenights-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\photoproduct.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\plantsvszombies-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ravcpl64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\solitaire-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\trinklitsupreme-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\uninst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK
ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk
ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, Inc. and H.C. Top Systems B.V.)
Startup: C:\Users\mitzekatzen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk -> C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:9987
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.arcor.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_14_ie&cd=2XzuyEtN2Y1L1QzuyEtD0FtDtB0F0CtCyE0E0E0AtC0B0FyDtN0D0Tzu0SzztByEtN1L2XzutBtFtCzztFzztFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDyEzy0BtC0DyCzztGzztB0E0AtG0A0F0FzytGtCzztA0AtGyDyC0E0EyCtDyC0DtByB0Azy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0D0FyDyBtD0C0CtGtD0C0CtBtGyDtAyD0FtGyC0ByE0BtGtA0Dzy0BtD0AtDtAtBtBzyzy2Q&cr=2054318036&ir=
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {6520DFD0-7405-458C-A90E-3CCC498D5E2E} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout
SearchScopes: HKCU - {792DF315-579A-41B7-AF43-A62729C82BC9} URL = hxxp://wetter.rtl.de/cp/shared/php/search_plz_ort.php?in={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default
FF NewTab: chrome://quick_start/content/index.html
FF SearchEngineOrder.1: Sichere Suche
FF Homepage: hxxp://www.arcor.de/
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A111DE662&p=
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @real.com/nppl3260;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar-Player - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\abs@avira.com [2014-07-02]
FF Extension: Amazon-Icon - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\amazon-icon@giga.de [2014-04-22]
FF Extension: WOT - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-05-24]
FF Extension: DownloadHelper - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-24]
FF Extension: Ghostery - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\firefox@ghostery.com.xpi [2014-05-24]
FF Extension: NoScript - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-06-07]
FF Extension: Adblock Plus - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-06]
FF Extension: Adblock Edge - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-05-27]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-01]
FF HKLM-x32\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-01]
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-04-06]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-07-03] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-03] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-05-09] (Avira Operations GmbH & Co. KG)
S4 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
S4 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2798336 2014-02-13] (Acer Incorporated)
S4 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
S4 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-04-03] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-04-03] (McAfee, Inc.)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] ()
R2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-05-01] (RealNetworks, Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] () [File not signed]
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-05-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-04-03] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [177544 2014-04-03] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311856 2014-04-03] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-04-03] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-04-03] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [784760 2014-04-03] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [346760 2014-04-03] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-04-23] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2014-02-10] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-03 19:58 - 2014-07-03 19:58 - 00024987 _____ () C:\Users\mitzekatzen\Desktop\FRST.txt
2014-07-03 19:29 - 2014-07-03 19:29 - 00001119 _____ () C:\Users\mitzekatzen\Desktop\JRT.txt
2014-07-03 19:25 - 2014-07-03 19:25 - 00000000 ____D () C:\Windows\ERUNT
2014-07-03 19:23 - 2014-07-02 22:48 - 01016261 _____ (Thisisu) C:\Users\mitzekatzen\Desktop\JRT.exe
2014-07-03 19:19 - 2014-07-03 19:19 - 00009056 _____ () C:\Users\mitzekatzen\Desktop\AdwCleaner[S0].txt
2014-07-03 19:12 - 2014-07-03 19:15 - 00000000 ____D () C:\AdwCleaner
2014-07-03 19:11 - 2014-07-02 22:47 - 01346519 _____ () C:\Users\mitzekatzen\Desktop\adwcleaner_3.214.exe
2014-07-03 19:05 - 2014-07-03 19:05 - 00041128 _____ () C:\Users\mitzekatzen\Desktop\mbam.txt
2014-07-03 18:30 - 2014-07-03 19:01 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-03 18:30 - 2014-07-03 18:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-03 18:30 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-03 18:30 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-03 18:30 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-02 20:43 - 2014-07-03 19:58 - 00000000 ____D () C:\FRST
2014-07-02 20:41 - 2014-07-02 20:41 - 02083840 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-19 20:42 - 2014-06-19 20:40 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-16 16:51 - 2014-06-16 16:51 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-06-16 16:45 - 2014-07-03 18:42 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-16 16:45 - 2014-05-09 11:16 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-16 16:45 - 2014-05-09 11:16 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-16 16:41 - 2014-06-19 18:19 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-16 16:41 - 2014-06-16 16:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-16 16:41 - 2014-06-16 16:45 - 00000000 ____D () C:\ProgramData\Avira
2014-06-16 16:41 - 2014-06-16 16:45 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-11 19:58 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 19:58 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 19:58 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 19:58 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 19:58 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-11 19:58 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 19:58 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 19:58 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 19:58 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 19:58 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 19:58 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-11 19:58 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 19:58 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 19:58 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-11 19:58 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 19:58 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-11 19:58 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-11 19:58 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-11 19:58 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-11 19:58 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 19:58 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-11 19:58 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-11 19:58 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 19:58 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-11 19:58 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 19:58 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-11 19:58 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-11 19:58 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-11 19:58 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-11 19:57 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 19:57 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 19:57 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-06-11 19:57 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 19:57 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-06-11 19:57 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 19:57 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 19:57 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-06-11 19:57 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-06-11 19:57 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-11 19:57 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-11 19:57 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-06-11 19:57 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-06-11 19:57 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-06-11 19:57 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll
2014-06-11 19:57 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-06-11 19:57 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-06-11 19:57 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-06-11 19:57 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-06-11 19:57 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-06-11 19:57 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-06-11 19:57 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-06-11 19:57 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-06-11 19:57 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-06-11 19:57 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-11 19:57 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-06-11 19:57 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-06-11 19:57 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-06-11 19:57 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-11 19:57 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-06-11 19:57 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-06-11 19:57 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-06-11 19:57 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-06-11 19:57 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-06-11 19:57 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2014-06-11 19:57 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-06-11 19:57 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-06-11 19:57 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2014-06-11 19:57 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 19:57 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 19:57 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-06-11 19:57 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2014-06-11 19:57 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-06-11 19:57 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-06-11 19:57 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-06-11 19:57 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-11 19:57 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2014-06-11 19:57 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2014-06-11 19:57 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-06-11 19:57 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-11 19:57 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2014-06-11 19:57 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-06-11 19:57 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-06-11 19:57 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-06-11 19:57 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-06-11 19:57 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-06-11 19:57 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2014-06-11 19:57 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-06-11 19:57 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-06-11 19:57 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-06-11 19:57 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-06-11 19:57 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-06-11 19:57 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-06-11 19:57 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-11 19:57 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-06-11 19:57 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-11 19:57 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-11 19:57 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-06-11 19:57 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-11 19:57 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-06-11 19:57 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-06-11 19:57 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-06-11 19:57 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-06-11 19:57 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-06-11 19:57 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-06-11 19:57 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-11 19:57 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-06-11 19:57 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-06-11 19:55 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-06-11 19:55 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-06-11 19:55 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-06-11 19:55 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-11 19:55 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-06-11 19:55 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-11 19:55 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-06-11 19:55 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-11 19:55 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-11 19:55 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-04 19:58 - 2014-06-04 19:58 - 00000000 ____D () C:\Users\mitzekatzen\dwhelper
2014-06-04 16:39 - 2014-06-20 12:41 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\47076b4cc5bfaf77bbe68bb8381cfd6d
2014-06-03 23:18 - 2014-06-17 22:46 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\Adobe
2014-06-03 23:18 - 2014-06-03 23:18 - 00000735 _____ () C:\Users\mitzekatzen\Downloads\3923422121.txt
==================== One Month Modified Files and Folders =======
2021-10-21 15:36 - 2014-01-19 14:29 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat
2021-10-04 09:34 - 2014-01-19 14:29 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat
2014-07-03 19:59 - 2014-07-03 19:58 - 00024987 _____ () C:\Users\mitzekatzen\Desktop\FRST.txt
2014-07-03 19:58 - 2014-07-02 20:43 - 00000000 ____D () C:\FRST
2014-07-03 19:51 - 2014-04-16 20:48 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{26E28335-1916-4357-9E6B-52CB3526D0BF}
2014-07-03 19:33 - 2014-04-03 17:52 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-03 19:29 - 2014-07-03 19:29 - 00001119 _____ () C:\Users\mitzekatzen\Desktop\JRT.txt
2014-07-03 19:25 - 2014-07-03 19:25 - 00000000 ____D () C:\Windows\ERUNT
2014-07-03 19:19 - 2014-07-03 19:19 - 00009056 _____ () C:\Users\mitzekatzen\Desktop\AdwCleaner[S0].txt
2014-07-03 19:19 - 2014-04-07 14:04 - 00001142 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-03 19:19 - 2014-04-05 14:37 - 00000000 __RDO () C:\Users\mitzekatzen\SkyDrive
2014-07-03 19:18 - 2014-04-07 14:04 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-03 19:17 - 2013-10-31 08:20 - 02660904 _____ () C:\Windows\PFRO.log
2014-07-03 19:17 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-03 19:15 - 2014-07-03 19:12 - 00000000 ____D () C:\AdwCleaner
2014-07-03 19:15 - 2014-04-03 17:46 - 00000000 ____D () C:\Users\mitzekatzen
2014-07-03 19:10 - 2014-01-19 22:44 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-07-03 19:10 - 2014-01-19 22:44 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-07-03 19:10 - 2013-10-31 08:27 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-03 19:05 - 2014-07-03 19:05 - 00041128 _____ () C:\Users\mitzekatzen\Desktop\mbam.txt
2014-07-03 19:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-07-03 19:01 - 2014-07-03 18:30 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-03 18:57 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Vss
2014-07-03 18:56 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-07-03 18:55 - 2014-04-05 12:30 - 00000000 ____D () C:\temp
2014-07-03 18:42 - 2014-06-16 16:45 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-03 18:30 - 2014-07-03 18:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-03 18:29 - 2014-01-19 14:00 - 01751542 _____ () C:\Windows\WindowsUpdate.log
2014-07-02 22:48 - 2014-07-03 19:23 - 01016261 _____ (Thisisu) C:\Users\mitzekatzen\Desktop\JRT.exe
2014-07-02 22:47 - 2014-07-03 19:11 - 01346519 _____ () C:\Users\mitzekatzen\Desktop\adwcleaner_3.214.exe
2014-07-02 20:41 - 2014-07-02 20:41 - 02083840 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-07-02 20:39 - 2014-04-06 23:03 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\CrashDumps
2014-07-01 21:30 - 2014-04-10 15:22 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\HpUpdate
2014-07-01 18:12 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-29 14:52 - 2014-01-19 14:41 - 00000000 ____D () C:\ProgramData\Atheros
2014-06-29 14:52 - 2013-08-22 16:46 - 00026119 _____ () C:\Windows\setupact.log
2014-06-25 22:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-22 22:14 - 2014-04-07 14:04 - 00004114 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-22 22:14 - 2014-04-07 14:04 - 00003878 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-20 12:41 - 2014-06-04 16:39 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\47076b4cc5bfaf77bbe68bb8381cfd6d
2014-06-19 20:40 - 2014-06-19 20:42 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-06-19 18:19 - 2014-06-16 16:41 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-18 18:14 - 2014-04-10 00:07 - 00000000 ____D () C:\Eigene Dateien
2014-06-17 22:46 - 2014-06-03 23:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\Adobe
2014-06-17 18:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-16 17:11 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-06-16 16:51 - 2014-06-16 16:51 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-06-16 16:45 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-16 16:45 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Avira
2014-06-16 16:45 - 2014-06-16 16:41 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-16 16:41 - 2014-01-19 14:23 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-06-16 15:11 - 2014-04-06 12:07 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-06-16 15:09 - 2014-04-28 21:47 - 00000000 ____D () C:\Users\Peter
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-14 14:39 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-06-14 13:03 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-06-13 13:51 - 2014-04-06 11:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-13 13:51 - 2013-08-22 16:44 - 00563464 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-06-12 23:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-12 18:21 - 2014-04-05 12:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 18:19 - 2014-04-05 12:58 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-08 17:48 - 2014-05-03 08:58 - 00003326 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-06-08 17:48 - 2014-05-01 20:59 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-06-04 19:58 - 2014-06-04 19:58 - 00000000 ____D () C:\Users\mitzekatzen\dwhelper
2014-06-04 16:35 - 2014-05-31 17:19 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-06-04 16:35 - 2014-05-31 17:19 - 00003304 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-06-04 16:28 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-06-03 23:18 - 2014-06-03 23:18 - 00000735 _____ () C:\Users\mitzekatzen\Downloads\3923422121.txt
Some content of TEMP:
====================
C:\Users\mitzekatzen\AppData\Local\Temp\avgnt.exe
C:\Users\mitzekatzen\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-02 17:48
==================== End Of Log ============================
Ich hoffe, dass wir mit der Aktion weiter gekommen sind. Gruß Peter |
|
04.07.2014, 13:14
| #4 |
| /// the machine /// TB-Ausbilder | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.GenESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.07.2014, 15:03
| #5 |
| | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Hi Schrauber, bekomme jetzt ein Problem mit dem herunterladen von "ESET Online Scanner". Habe den Viren-Scanner und die Firewall deaktiviert und das Programm auf den Desktop geladen. Starten war o.k., häkchen rein bei Nutzungsbedingungen und "Starten". Beim herunterladen der Komponenten kommt die Meldung "Updates funktionieren nicht. Ist ein Proxy eingerichtet? Bei der Proxy-Einstellung bei Einstellungen Mozilla ist eingestellt "Proxy-Einstellung für dieses Netzwerk automatisch erkennen", habe es auch versucht mit "keine". funktioniert aber nicht. Habe ich da irgendwo einen Fehler gemacht? Vielleicht kannst Du da weiterhelfen. Habe auch das Programm vom Desktop gelöscht und neu installiert, startet aber auch nicht. Gruß Peter |
|
06.07.2014, 11:03
| #6 |
| /// the machine /// TB-Ausbilder | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Lass ESET weg und mach dafür nen Vollscan mit deinem AV Programm.
__________________ --> Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen |
|
07.07.2014, 11:18
| #7 |
| | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Hallo Schrauber, endlich bin ich durchgekommen, angeschlossen waren 2 externe Festplatten und ein USB-Stick. Das Programm ESET ist nach nochmals mehreren Versuchen nicht gestartet (mit den schon geschriebenen Meldungen), die Fragmente/Ordner von ESET in C:\Programme\Eset habe ich gelöscht, die LOG-Datei von ESET schicke ich mit. den Vollscan habe ich mit AVIRA gemacht (2 Warnungen, 2 Funde), hierzu auch die LOG-Datei und die Ereignis-Datei mit dem Fund. Dann noch der SecurityCheck mit der LOG-Datei und zum Schluß das neuste FRST log. Zuerst das unvollständige ESET log: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internet
Avira Free Antivirus Erstellungsdatum der Reportdatei: Sonntag, 6. Juli 2014 20:30 Das Programm läuft als uneingeschränkte Vollversion. Online-Dienste stehen zur Verfügung. Lizenznehmer : Avira Antivirus Free Seriennummer : 0000149996-AVHOE-0000001 Plattform : Windows 8.1 Windowsversion : (plain) [6.2.9200] Boot Modus : Normal gebootet Benutzername : mitzekatzen Computername : ASTRONOMIE Versionsinformationen: BUILD.DAT : 14.0.5.450 91868 Bytes 24.06.2014 20:39:00 AVSCAN.EXE : 14.0.5.396 1042512 Bytes 24.06.2014 18:39:06 AVSCANRC.DLL : 14.0.5.364 62544 Bytes 24.06.2014 18:39:06 LUKE.DLL : 14.0.5.336 57936 Bytes 24.06.2014 18:39:35 AVSCPLR.DLL : 14.0.5.376 89680 Bytes 24.06.2014 18:39:07 AVREG.DLL : 14.0.5.356 261200 Bytes 24.06.2014 18:39:06 avlode.dll : 14.0.5.396 588368 Bytes 24.06.2014 18:39:06 avlode.rdf : 14.0.4.30 65097 Bytes 06.07.2014 18:25:11 XBV00008.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00009.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00010.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00011.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00012.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00013.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00014.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00015.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00016.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00017.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00018.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00019.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00020.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00021.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00022.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00023.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00024.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00025.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00026.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00027.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00028.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00029.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00030.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00031.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00032.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00033.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00034.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00035.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00036.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00037.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00038.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00039.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00040.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00041.VDF : 8.11.153.142 2048 Bytes 06.06.2014 18:39:37 XBV00234.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00235.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00236.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00237.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00238.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00239.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00240.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00241.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00242.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00243.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00244.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00245.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00246.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00247.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00248.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00249.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00250.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00251.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00252.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00253.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00254.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00255.VDF : 8.11.155.44 2048 Bytes 16.06.2014 18:39:37 XBV00000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 18:39:37 XBV00001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 18:39:37 XBV00002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 18:39:37 XBV00003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 18:39:37 XBV00004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 18:39:37 XBV00005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 18:39:37 XBV00006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 18:39:37 XBV00007.VDF : 7.11.152.100 4193792 Bytes 02.06.2014 18:39:37 XBV00042.VDF : 8.11.153.142 710656 Bytes 06.06.2014 18:39:37 XBV00043.VDF : 8.11.155.44 1013760 Bytes 16.06.2014 18:39:37 XBV00044.VDF : 8.11.155.46 3072 Bytes 16.06.2014 18:39:37 XBV00045.VDF : 8.11.155.52 38912 Bytes 16.06.2014 18:39:37 XBV00046.VDF : 8.11.155.54 29696 Bytes 16.06.2014 18:39:37 XBV00047.VDF : 8.11.155.58 13824 Bytes 16.06.2014 18:39:37 XBV00048.VDF : 8.11.155.62 20480 Bytes 17.06.2014 18:39:37 XBV00049.VDF : 8.11.155.64 5632 Bytes 17.06.2014 18:39:37 XBV00050.VDF : 8.11.155.66 139264 Bytes 17.06.2014 18:39:37 XBV00051.VDF : 8.11.155.68 2048 Bytes 17.06.2014 18:39:37 XBV00052.VDF : 8.11.155.70 6144 Bytes 17.06.2014 18:39:37 XBV00053.VDF : 8.11.155.74 180224 Bytes 17.06.2014 18:39:37 XBV00054.VDF : 8.11.155.78 18432 Bytes 17.06.2014 18:39:37 XBV00055.VDF : 8.11.155.80 6144 Bytes 17.06.2014 18:39:37 XBV00056.VDF : 8.11.155.82 4608 Bytes 18.06.2014 18:39:37 XBV00057.VDF : 8.11.155.86 17408 Bytes 18.06.2014 18:39:37 XBV00058.VDF : 8.11.155.100 144896 Bytes 18.06.2014 18:39:37 XBV00059.VDF : 8.11.155.114 25088 Bytes 18.06.2014 18:39:37 XBV00060.VDF : 8.11.155.128 2048 Bytes 18.06.2014 18:39:37 XBV00061.VDF : 8.11.155.146 27648 Bytes 18.06.2014 18:39:37 XBV00062.VDF : 8.11.155.148 2048 Bytes 18.06.2014 18:39:37 XBV00063.VDF : 8.11.155.150 148992 Bytes 18.06.2014 18:39:37 XBV00064.VDF : 8.11.155.152 5120 Bytes 18.06.2014 18:39:37 XBV00065.VDF : 8.11.155.156 12800 Bytes 18.06.2014 18:39:37 XBV00066.VDF : 8.11.155.158 2048 Bytes 18.06.2014 18:39:37 XBV00067.VDF : 8.11.155.160 2048 Bytes 18.06.2014 18:39:37 XBV00068.VDF : 8.11.155.164 7680 Bytes 18.06.2014 18:39:37 XBV00069.VDF : 8.11.155.168 18432 Bytes 19.06.2014 18:39:37 XBV00070.VDF : 8.11.155.172 2048 Bytes 19.06.2014 18:39:37 XBV00071.VDF : 8.11.155.174 7680 Bytes 19.06.2014 18:39:37 XBV00072.VDF : 8.11.155.176 2048 Bytes 19.06.2014 18:39:37 XBV00073.VDF : 8.11.155.178 7680 Bytes 19.06.2014 18:39:37 XBV00074.VDF : 8.11.155.180 5120 Bytes 19.06.2014 18:39:37 XBV00075.VDF : 8.11.155.182 4608 Bytes 19.06.2014 18:39:37 XBV00076.VDF : 8.11.155.184 6144 Bytes 19.06.2014 18:39:37 XBV00077.VDF : 8.11.155.186 4608 Bytes 19.06.2014 18:39:37 XBV00078.VDF : 8.11.155.188 5632 Bytes 19.06.2014 18:39:37 XBV00079.VDF : 8.11.155.190 5120 Bytes 19.06.2014 18:39:37 XBV00080.VDF : 8.11.155.192 2048 Bytes 19.06.2014 18:39:37 XBV00081.VDF : 8.11.155.196 17408 Bytes 19.06.2014 18:39:37 XBV00082.VDF : 8.11.155.200 2048 Bytes 19.06.2014 18:39:37 XBV00083.VDF : 8.11.155.202 5632 Bytes 20.06.2014 18:39:37 XBV00084.VDF : 8.11.155.204 14848 Bytes 20.06.2014 18:39:37 XBV00085.VDF : 8.11.155.206 3072 Bytes 20.06.2014 18:39:37 XBV00086.VDF : 8.11.155.208 2048 Bytes 20.06.2014 18:39:37 XBV00087.VDF : 8.11.155.210 11264 Bytes 20.06.2014 18:39:37 XBV00088.VDF : 8.11.155.214 4608 Bytes 20.06.2014 18:39:37 XBV00089.VDF : 8.11.155.218 8704 Bytes 20.06.2014 18:39:37 XBV00090.VDF : 8.11.155.222 2048 Bytes 20.06.2014 18:39:37 XBV00091.VDF : 8.11.155.224 2048 Bytes 20.06.2014 18:39:37 XBV00092.VDF : 8.11.155.228 151552 Bytes 20.06.2014 18:39:37 XBV00093.VDF : 8.11.155.242 13312 Bytes 21.06.2014 18:39:37 XBV00094.VDF : 8.11.156.2 12800 Bytes 21.06.2014 18:39:37 XBV00095.VDF : 8.11.156.4 58368 Bytes 21.06.2014 18:39:37 XBV00096.VDF : 8.11.156.18 146944 Bytes 21.06.2014 18:39:37 XBV00097.VDF : 8.11.156.20 2048 Bytes 21.06.2014 18:39:37 XBV00098.VDF : 8.11.156.22 49152 Bytes 22.06.2014 18:39:37 XBV00099.VDF : 8.11.156.24 2048 Bytes 22.06.2014 18:39:37 XBV00100.VDF : 8.11.156.26 9216 Bytes 22.06.2014 18:39:37 XBV00101.VDF : 8.11.156.30 2048 Bytes 22.06.2014 18:39:37 XBV00102.VDF : 8.11.156.32 12800 Bytes 22.06.2014 18:39:37 XBV00103.VDF : 8.11.156.34 36352 Bytes 23.06.2014 18:39:37 XBV00104.VDF : 8.11.156.36 2560 Bytes 23.06.2014 18:39:37 XBV00105.VDF : 8.11.156.38 2048 Bytes 23.06.2014 18:39:37 XBV00106.VDF : 8.11.156.40 7168 Bytes 23.06.2014 18:39:37 XBV00107.VDF : 8.11.156.52 8704 Bytes 23.06.2014 18:39:37 XBV00108.VDF : 8.11.156.72 204288 Bytes 23.06.2014 18:39:37 XBV00109.VDF : 8.11.156.76 2048 Bytes 23.06.2014 18:39:37 XBV00110.VDF : 8.11.156.88 2048 Bytes 23.06.2014 18:39:37 XBV00111.VDF : 8.11.156.100 2048 Bytes 23.06.2014 18:39:37 XBV00112.VDF : 8.11.156.114 37376 Bytes 24.06.2014 18:39:37 XBV00113.VDF : 8.11.156.126 2048 Bytes 24.06.2014 18:39:37 XBV00114.VDF : 8.11.156.144 28160 Bytes 24.06.2014 18:25:11 XBV00115.VDF : 8.11.156.146 2048 Bytes 24.06.2014 18:25:11 XBV00116.VDF : 8.11.156.150 145408 Bytes 24.06.2014 18:25:11 XBV00117.VDF : 8.11.156.152 13824 Bytes 24.06.2014 18:25:11 XBV00118.VDF : 8.11.156.154 2048 Bytes 24.06.2014 18:25:11 XBV00119.VDF : 8.11.156.158 35328 Bytes 24.06.2014 18:25:11 XBV00120.VDF : 8.11.156.160 18432 Bytes 24.06.2014 18:25:11 XBV00121.VDF : 8.11.156.162 5632 Bytes 24.06.2014 18:25:11 XBV00122.VDF : 8.11.156.166 10240 Bytes 24.06.2014 18:25:12 XBV00123.VDF : 8.11.156.180 21504 Bytes 25.06.2014 18:25:12 XBV00124.VDF : 8.11.156.190 3072 Bytes 25.06.2014 18:25:12 XBV00125.VDF : 8.11.156.206 147968 Bytes 25.06.2014 18:25:12 XBV00126.VDF : 8.11.156.208 2048 Bytes 25.06.2014 18:25:12 XBV00127.VDF : 8.11.156.220 2048 Bytes 25.06.2014 18:25:12 XBV00128.VDF : 8.11.156.232 29696 Bytes 25.06.2014 18:25:12 XBV00129.VDF : 8.11.156.242 2048 Bytes 25.06.2014 18:25:12 XBV00130.VDF : 8.11.157.0 181248 Bytes 26.06.2014 18:25:12 XBV00131.VDF : 8.11.157.4 15872 Bytes 26.06.2014 18:25:12 XBV00132.VDF : 8.11.157.6 2560 Bytes 26.06.2014 18:25:12 XBV00133.VDF : 8.11.157.24 151552 Bytes 26.06.2014 18:25:13 XBV00134.VDF : 8.11.157.26 9728 Bytes 26.06.2014 18:25:13 XBV00135.VDF : 8.11.157.28 5632 Bytes 26.06.2014 18:25:13 XBV00136.VDF : 8.11.157.30 2048 Bytes 26.06.2014 18:25:13 XBV00137.VDF : 8.11.157.32 25600 Bytes 26.06.2014 18:25:13 XBV00138.VDF : 8.11.157.38 42496 Bytes 26.06.2014 18:25:13 XBV00139.VDF : 8.11.157.46 2048 Bytes 27.06.2014 18:25:13 XBV00140.VDF : 8.11.157.50 15360 Bytes 27.06.2014 18:25:13 XBV00141.VDF : 8.11.157.76 2048 Bytes 27.06.2014 18:25:13 XBV00142.VDF : 8.11.157.78 166400 Bytes 27.06.2014 18:25:13 XBV00143.VDF : 8.11.157.88 2048 Bytes 27.06.2014 18:25:13 XBV00144.VDF : 8.11.157.98 17408 Bytes 27.06.2014 18:25:14 XBV00145.VDF : 8.11.157.100 2048 Bytes 27.06.2014 18:25:14 XBV00146.VDF : 8.11.157.110 158208 Bytes 27.06.2014 18:25:14 XBV00147.VDF : 8.11.157.112 166912 Bytes 27.06.2014 18:25:14 XBV00148.VDF : 8.11.157.114 2048 Bytes 27.06.2014 18:25:14 XBV00149.VDF : 8.11.157.118 11264 Bytes 27.06.2014 18:25:14 XBV00150.VDF : 8.11.157.120 2048 Bytes 27.06.2014 18:25:14 XBV00151.VDF : 8.11.157.126 156160 Bytes 28.06.2014 18:25:14 XBV00152.VDF : 8.11.157.128 2048 Bytes 28.06.2014 18:25:15 XBV00153.VDF : 8.11.157.130 6144 Bytes 28.06.2014 18:25:15 XBV00154.VDF : 8.11.157.132 14336 Bytes 28.06.2014 18:25:15 XBV00155.VDF : 8.11.157.134 2048 Bytes 28.06.2014 18:25:15 XBV00156.VDF : 8.11.157.138 3584 Bytes 29.06.2014 18:25:15 XBV00157.VDF : 8.11.157.140 2048 Bytes 29.06.2014 18:25:15 XBV00158.VDF : 8.11.157.142 26624 Bytes 29.06.2014 18:25:15 XBV00159.VDF : 8.11.157.144 2048 Bytes 29.06.2014 18:25:15 XBV00160.VDF : 8.11.157.146 2048 Bytes 29.06.2014 18:25:15 XBV00161.VDF : 8.11.157.148 12800 Bytes 29.06.2014 18:25:15 XBV00162.VDF : 8.11.157.150 55808 Bytes 30.06.2014 18:25:15 XBV00163.VDF : 8.11.157.152 2048 Bytes 30.06.2014 18:25:15 XBV00164.VDF : 8.11.157.162 10240 Bytes 30.06.2014 18:25:15 XBV00165.VDF : 8.11.157.170 2048 Bytes 30.06.2014 18:25:15 XBV00166.VDF : 8.11.157.178 5632 Bytes 30.06.2014 18:25:15 XBV00167.VDF : 8.11.157.186 2048 Bytes 30.06.2014 18:25:15 XBV00168.VDF : 8.11.157.196 37888 Bytes 30.06.2014 18:25:15 XBV00169.VDF : 8.11.157.202 8192 Bytes 30.06.2014 18:25:15 XBV00170.VDF : 8.11.157.204 2048 Bytes 30.06.2014 18:25:15 XBV00171.VDF : 8.11.157.208 7168 Bytes 30.06.2014 18:25:16 XBV00172.VDF : 8.11.157.210 16384 Bytes 30.06.2014 18:25:16 XBV00173.VDF : 8.11.157.214 2048 Bytes 30.06.2014 18:25:16 XBV00174.VDF : 8.11.157.218 162304 Bytes 01.07.2014 18:25:16 XBV00175.VDF : 8.11.157.220 2048 Bytes 01.07.2014 18:25:16 XBV00176.VDF : 8.11.157.222 18432 Bytes 01.07.2014 18:25:16 XBV00177.VDF : 8.11.157.224 2048 Bytes 01.07.2014 18:25:16 XBV00178.VDF : 8.11.157.226 2048 Bytes 01.07.2014 18:25:16 XBV00179.VDF : 8.11.157.228 23040 Bytes 01.07.2014 18:25:16 XBV00180.VDF : 8.11.157.234 152064 Bytes 01.07.2014 18:25:16 XBV00181.VDF : 8.11.157.236 6656 Bytes 01.07.2014 18:25:16 XBV00182.VDF : 8.11.157.238 2048 Bytes 01.07.2014 18:25:16 XBV00183.VDF : 8.11.157.240 6144 Bytes 01.07.2014 18:25:17 XBV00184.VDF : 8.11.157.242 2048 Bytes 01.07.2014 18:25:17 XBV00185.VDF : 8.11.157.246 5632 Bytes 01.07.2014 18:25:17 XBV00186.VDF : 8.11.157.248 2048 Bytes 01.07.2014 18:25:17 XBV00187.VDF : 8.11.157.250 2560 Bytes 02.07.2014 18:25:17 XBV00188.VDF : 8.11.157.254 3072 Bytes 02.07.2014 18:25:17 XBV00189.VDF : 8.11.158.2 153600 Bytes 02.07.2014 18:25:17 XBV00190.VDF : 8.11.158.4 178176 Bytes 02.07.2014 18:25:17 XBV00191.VDF : 8.11.158.6 17920 Bytes 02.07.2014 18:25:17 XBV00192.VDF : 8.11.158.14 2048 Bytes 02.07.2014 18:25:17 XBV00193.VDF : 8.11.158.22 7680 Bytes 02.07.2014 18:25:17 XBV00194.VDF : 8.11.158.30 2048 Bytes 02.07.2014 18:25:17 XBV00195.VDF : 8.11.158.38 2560 Bytes 02.07.2014 18:25:18 XBV00196.VDF : 8.11.158.50 166912 Bytes 02.07.2014 18:25:18 XBV00197.VDF : 8.11.158.56 2560 Bytes 02.07.2014 18:25:18 XBV00198.VDF : 8.11.158.62 38912 Bytes 03.07.2014 18:25:18 XBV00199.VDF : 8.11.158.64 2048 Bytes 03.07.2014 18:25:18 XBV00200.VDF : 8.11.158.68 174592 Bytes 03.07.2014 18:25:18 XBV00201.VDF : 8.11.158.72 2048 Bytes 03.07.2014 18:25:18 XBV00202.VDF : 8.11.158.74 12288 Bytes 03.07.2014 18:25:18 XBV00203.VDF : 8.11.158.76 2048 Bytes 03.07.2014 18:25:18 XBV00204.VDF : 8.11.158.78 14848 Bytes 03.07.2014 18:25:18 XBV00205.VDF : 8.11.158.80 11264 Bytes 03.07.2014 18:25:18 XBV00206.VDF : 8.11.158.84 185856 Bytes 03.07.2014 18:25:19 XBV00207.VDF : 8.11.158.86 2048 Bytes 03.07.2014 18:25:19 XBV00208.VDF : 8.11.158.88 3584 Bytes 03.07.2014 18:25:19 XBV00209.VDF : 8.11.158.90 2048 Bytes 03.07.2014 18:25:19 XBV00210.VDF : 8.11.158.92 9216 Bytes 03.07.2014 18:25:19 XBV00211.VDF : 8.11.158.96 12800 Bytes 03.07.2014 18:25:19 XBV00212.VDF : 8.11.158.98 6656 Bytes 03.07.2014 18:25:19 XBV00213.VDF : 8.11.158.102 20992 Bytes 04.07.2014 18:25:19 XBV00214.VDF : 8.11.158.108 161280 Bytes 04.07.2014 18:25:19 XBV00215.VDF : 8.11.158.114 13312 Bytes 04.07.2014 18:25:19 XBV00216.VDF : 8.11.158.116 2048 Bytes 04.07.2014 18:25:19 XBV00217.VDF : 8.11.158.124 2048 Bytes 04.07.2014 18:25:19 XBV00218.VDF : 8.11.158.134 42496 Bytes 04.07.2014 18:25:20 XBV00219.VDF : 8.11.158.136 163328 Bytes 04.07.2014 18:25:20 XBV00220.VDF : 8.11.158.138 2048 Bytes 04.07.2014 18:25:20 XBV00221.VDF : 8.11.158.144 12288 Bytes 04.07.2014 18:25:20 XBV00222.VDF : 8.11.158.146 2048 Bytes 04.07.2014 18:25:20 XBV00223.VDF : 8.11.158.148 7680 Bytes 04.07.2014 18:25:20 XBV00224.VDF : 8.11.158.154 22016 Bytes 05.07.2014 18:25:20 XBV00225.VDF : 8.11.158.156 6656 Bytes 05.07.2014 18:25:20 XBV00226.VDF : 8.11.158.158 10240 Bytes 05.07.2014 18:25:20 XBV00227.VDF : 8.11.158.160 2048 Bytes 05.07.2014 18:25:20 XBV00228.VDF : 8.11.158.162 9216 Bytes 05.07.2014 18:25:20 XBV00229.VDF : 8.11.158.164 2048 Bytes 05.07.2014 18:25:20 XBV00230.VDF : 8.11.158.166 36864 Bytes 06.07.2014 18:25:20 XBV00231.VDF : 8.11.158.168 12288 Bytes 06.07.2014 18:25:20 XBV00232.VDF : 8.11.158.174 8704 Bytes 06.07.2014 18:25:21 XBV00233.VDF : 8.11.158.178 9216 Bytes 06.07.2014 18:25:21 LOCAL001.VDF : 8.11.158.178 108173824 Bytes 06.07.2014 18:26:11 Engineversion : 8.3.20.30 AEVDF.DLL : 8.3.0.4 118976 Bytes 24.06.2014 18:39:06 AESCRIPT.DLL : 8.1.4.218 532680 Bytes 06.07.2014 18:25:10 AESCN.DLL : 8.3.1.2 135360 Bytes 24.06.2014 18:39:06 AESBX.DLL : 8.2.20.24 1409224 Bytes 24.06.2014 18:39:05 AERDL.DLL : 8.2.0.138 704888 Bytes 24.06.2014 18:39:05 AEPACK.DLL : 8.4.0.42 786632 Bytes 06.07.2014 18:25:10 AEOFFICE.DLL : 8.3.0.8 205000 Bytes 06.07.2014 18:25:09 AEHEUR.DLL : 8.1.4.1132 6820040 Bytes 06.07.2014 18:25:09 AEHELP.DLL : 8.3.1.0 278728 Bytes 24.06.2014 18:39:05 AEGEN.DLL : 8.1.7.28 450752 Bytes 24.06.2014 18:39:05 AEEXP.DLL : 8.4.2.6 237760 Bytes 06.07.2014 18:25:10 AEEMU.DLL : 8.1.3.2 393587 Bytes 24.06.2014 18:39:05 AEDROID.DLL : 8.4.2.24 442568 Bytes 24.06.2014 18:39:05 AECORE.DLL : 8.3.1.4 241864 Bytes 24.06.2014 18:39:05 AEBB.DLL : 8.1.1.4 53619 Bytes 24.06.2014 18:39:05 AVWINLL.DLL : 14.0.5.320 24144 Bytes 24.06.2014 18:39:17 AVPREF.DLL : 14.0.5.320 50256 Bytes 24.06.2014 18:39:06 AVREP.DLL : 14.0.5.320 219216 Bytes 24.06.2014 18:39:06 AVARKT.DLL : 14.0.5.368 226384 Bytes 24.06.2014 18:39:06 AVEVTLOG.DLL : 14.0.5.320 182352 Bytes 24.06.2014 18:39:06 SQLITE3.DLL : 14.0.5.320 452176 Bytes 24.06.2014 18:39:36 AVSMTP.DLL : 14.0.5.320 76368 Bytes 24.06.2014 18:39:09 NETNT.DLL : 14.0.5.320 13392 Bytes 24.06.2014 18:39:36 RCIMAGE.DLL : 14.0.5.320 4998224 Bytes 24.06.2014 18:39:36 RCTEXT.DLL : 14.0.5.322 73808 Bytes 24.06.2014 18:39:36 Konfiguration für den aktuellen Suchlauf: Job Name..............................: Manuelle Auswahl Konfigurationsdatei...................: C:\ProgramData\Avira\AntiVir Desktop\PROFILES\folder.avp Protokollierung.......................: standard Primäre Aktion........................: Interaktiv Sekundäre Aktion......................: Ignorieren Durchsuche Masterbootsektoren.........: ein Durchsuche Bootsektoren...............: ein Bootsektoren..........................: C:, E:, G:, Durchsuche aktive Programme...........: ein Durchsuche Registrierung..............: ein Suche nach Rootkits...................: aus Integritätsprüfung von Systemdateien..: aus Prüfe alle Dateien....................: Intelligente Dateiauswahl Durchsuche Archive....................: ein Rekursionstiefe einschränken..........: 20 Archiv Smart Extensions...............: ein Makrovirenheuristik...................: ein Dateiheuristik........................: erweitert Beginn des Suchlaufs: Sonntag, 6. Juli 2014 20:30 Der Suchlauf über die Bootsektoren wird begonnen: Bootsektor 'HDD0(C '[INFO] Es wurde kein Virus gefunden! Bootsektor 'HDD1(E '[INFO] Es wurde kein Virus gefunden! Bootsektor 'HDD2(G '[INFO] Es wurde kein Virus gefunden! Der Suchlauf über gestartete Prozesse wird begonnen: Durchsuche Prozess 'svchost.exe' - '46' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '36' Modul(e) wurden durchsucht Durchsuche Prozess 'atiesrxx.exe' - '16' Modul(e) wurden durchsucht Durchsuche Prozess 'dwm.exe' - '43' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '99' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '178' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '74' Modul(e) wurden durchsucht Durchsuche Prozess 'atieclxx.exe' - '46' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '122' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '71' Modul(e) wurden durchsucht Durchsuche Prozess 'spoolsv.exe' - '81' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '95' Modul(e) wurden durchsucht Durchsuche Prozess 'armsvc.exe' - '27' Modul(e) wurden durchsucht Durchsuche Prozess 'ETDService.exe' - '33' Modul(e) wurden durchsucht Durchsuche Prozess 'HeciServer.exe' - '26' Modul(e) wurden durchsucht Durchsuche Prozess 'mfevtps.exe' - '15' Modul(e) wurden durchsucht Durchsuche Prozess 'rfx-server.exe' - '68' Modul(e) wurden durchsucht Durchsuche Prozess 'rndlresolversvc.exe' - '25' Modul(e) wurden durchsucht Durchsuche Prozess 'rpdsvc.exe' - '65' Modul(e) wurden durchsucht Durchsuche Prozess 'RealPlayerUpdateSvc.exe' - '51' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '39' Modul(e) wurden durchsucht Durchsuche Prozess 'TuneUpUtilitiesService64.exe' - '67' Modul(e) wurden durchsucht Durchsuche Prozess 'mfefire.exe' - '34' Modul(e) wurden durchsucht Durchsuche Prozess 'hcdll2_ex_Win32.exe' - '23' Modul(e) wurden durchsucht Durchsuche Prozess 'taskhostex.exe' - '44' Modul(e) wurden durchsucht Durchsuche Prozess 'hcdll2_ex_x64.exe' - '14' Modul(e) wurden durchsucht Durchsuche Prozess 'ETDCtrl.exe' - '62' Modul(e) wurden durchsucht Durchsuche Prozess 'wmiprvse.exe' - '29' Modul(e) wurden durchsucht Durchsuche Prozess 'GoogleCrashHandler.exe' - '32' Modul(e) wurden durchsucht Durchsuche Prozess 'GoogleCrashHandler64.exe' - '27' Modul(e) wurden durchsucht Durchsuche Prozess 'unsecapp.exe' - '23' Modul(e) wurden durchsucht Durchsuche Prozess 'TuneUpUtilitiesApp64.exe' - '32' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '57' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '26' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '51' Modul(e) wurden durchsucht Durchsuche Prozess 'WUDFHost.exe' - '32' Modul(e) wurden durchsucht Durchsuche Prozess 'dashost.exe' - '56' Modul(e) wurden durchsucht Durchsuche Prozess 'SearchIndexer.exe' - '61' Modul(e) wurden durchsucht Durchsuche Prozess 'ETDTouch.exe' - '33' Modul(e) wurden durchsucht Durchsuche Prozess 'ETDCtrlHelper.exe' - '34' Modul(e) wurden durchsucht Durchsuche Prozess 'SettingSyncHost.exe' - '96' Modul(e) wurden durchsucht Durchsuche Prozess 'skydrive.exe' - '92' Modul(e) wurden durchsucht Durchsuche Prozess 'BtvStack.exe' - '108' Modul(e) wurden durchsucht Durchsuche Prozess 'igfxtray.exe' - '33' Modul(e) wurden durchsucht Durchsuche Prozess 'hkcmd.exe' - '31' Modul(e) wurden durchsucht Durchsuche Prozess 'DllHost.exe' - '28' Modul(e) wurden durchsucht Durchsuche Prozess 'igfxpers.exe' - '34' Modul(e) wurden durchsucht Durchsuche Prozess 'igfxsrvc.exe' - '34' Modul(e) wurden durchsucht Durchsuche Prozess 'ActivateDesktop.exe' - '38' Modul(e) wurden durchsucht Durchsuche Prozess 'phonostarTimer.exe' - '47' Modul(e) wurden durchsucht Durchsuche Prozess 'hardcopy.exe' - '44' Modul(e) wurden durchsucht Durchsuche Prozess 'rpsystray.exe' - '26' Modul(e) wurden durchsucht Durchsuche Prozess 'jhi_service.exe' - '28' Modul(e) wurden durchsucht Durchsuche Prozess 'LMS.exe' - '59' Modul(e) wurden durchsucht Durchsuche Prozess 'wmpnetwk.exe' - '78' Modul(e) wurden durchsucht Durchsuche Prozess 'explorer.exe' - '241' Modul(e) wurden durchsucht Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '111' Modul(e) wurden durchsucht Durchsuche Prozess 'Avira.OE.Systray.exe' - '146' Modul(e) wurden durchsucht Durchsuche Prozess 'wmiprvse.exe' - '49' Modul(e) wurden durchsucht Durchsuche Prozess 'avgnt.exe' - '98' Modul(e) wurden durchsucht Durchsuche Prozess 'avguard.exe' - '99' Modul(e) wurden durchsucht Durchsuche Prozess 'avshadow.exe' - '22' Modul(e) wurden durchsucht Durchsuche Prozess 'sched.exe' - '59' Modul(e) wurden durchsucht Durchsuche Prozess 'avcenter.exe' - '155' Modul(e) wurden durchsucht Durchsuche Prozess 'wlmail.exe' - '206' Modul(e) wurden durchsucht Durchsuche Prozess 'wlcomm.exe' - '42' Modul(e) wurden durchsucht Durchsuche Prozess 'swriter.exe' - '24' Modul(e) wurden durchsucht Durchsuche Prozess 'soffice.exe' - '44' Modul(e) wurden durchsucht Durchsuche Prozess 'soffice.bin' - '198' Modul(e) wurden durchsucht Durchsuche Prozess 'avscan.exe' - '105' Modul(e) wurden durchsucht Durchsuche Prozess 'wininit.exe' - '15' Modul(e) wurden durchsucht Durchsuche Prozess 'winlogon.exe' - '29' Modul(e) wurden durchsucht Durchsuche Prozess 'lsass.exe' - '64' Modul(e) wurden durchsucht Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen: Die Registry wurde durchsucht ( '1960' Dateien ). Der Suchlauf über die ausgewählten Dateien wird begonnen: Beginne mit der Suche in 'C:\' <Acer> C:\swapfile.sys [WARNUNG] Die Datei konnte nicht geöffnet werden! [0] Archivtyp: OVL --> C:\Eigene Dateien\Downloads\chromeinstall-7u17 (1).exe [1] Archivtyp: Runtime Packed --> C:\Eigene Dateien\Downloads\chromeinstall-7u17.exe [2] Archivtyp: Runtime Packed --> C:\Kopierte Dateien LW E_Dell_Tino\Computer\PowerCinema\PCM4_Trial.exe [3] Archivtyp: CAB SFX (self extracting) --> \GoogleToolbar\win2kxp\GoogleToolbarInstaller_Chs.exe [4] Archivtyp: RSRC --> \GoogleToolbar\win2kxp\GoogleToolbarInstaller_Cht.exe [5] Archivtyp: RSRC --> \GoogleToolbar\win2kxp\GoogleToolbarInstaller_Deu.exe [6] Archivtyp: RSRC --> \GoogleToolbar\win2kxp\GoogleToolbarInstaller_Enu.exe [7] Archivtyp: RSRC --> \GoogleToolbar\win2kxp\GoogleToolbarInstaller_Esp.exe [8] Archivtyp: RSRC --> \GoogleToolbar\win2kxp\GoogleToolbarInstaller_Fra.exe [9] Archivtyp: RSRC --> \GoogleToolbar\win2kxp\GoogleToolbarInstaller_Ita.exe [10] Archivtyp: RSRC --> \GoogleToolbar\win2kxp\GoogleToolbarInstaller_Jpn.exe [11] Archivtyp: RSRC --> C:\Programm-Software\Acrobat Readers709\AdbeRdr709_DLM_de_DE.exe [12] Archivtyp: OVL --> C:\Programm-Software\Dropbox\Dropbox 2.0.26.exe [13] Archivtyp: NSIS --> C:\Programm-Software\Videodatei bearbeiten_vpsetup\vpsetup.exe [14] Archivtyp: Portable Executable Resource --> C:\Users\mitzekatzen\AppData\Local\Microsoft\Windows Live Mail\Storage Folders\Importierte a9a\Lokale Ordner\gelesene Ob 9c9\Archiv 02\695E7EEE-00000066.eml [15] Archivtyp: MIME --> WinACE_Archiver_v2[1].20_by_Core.zip [16] Archivtyp: ZIP --> CR-WA22K.EXE [FUND] Ist das Trojanische Pferd TR/Genome.jojy [WARNUNG] Infizierte Dateien in Archiven können nicht repariert werden C:\Users\mitzekatzen\AppData\Local\Microsoft\Windows Live Mail\Storage Folders\Importierte a9a\Lokale Ordner\gelesene Ob 9c9\Archiv 02\695E7EEE-00000066.eml [FUND] Ist das Trojanische Pferd TR/Genome.jojy Beginne mit der Suche in 'E:\' <WD Elements> Beginne mit der Suche in 'G:\' <TOSHIBA EXT> Beginne mit der Desinfektion: C:\Users\mitzekatzen\AppData\Local\Microsoft\Windows Live Mail\Storage Folders\Importierte a9a\Lokale Ordner\gelesene Ob 9c9\Archiv 02\695E7EEE-00000066.eml [FUND] Ist das Trojanische Pferd TR/Genome.jojy [HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '558a66e3.qua' verschoben! Ende des Suchlaufs: Sonntag, 6. Juli 2014 23:51 Benötigte Zeit: 3:08:36 Stunde(n) Der Suchlauf wurde vollständig durchgeführt. 57790 Verzeichnisse wurden überprüft 2689753 Dateien wurden geprüft 2 Viren bzw. unerwünschte Programme wurden gefunden 0 Dateien wurden als verdächtig eingestuft 0 Dateien wurden gelöscht 0 Viren bzw. unerwünschte Programme wurden repariert 1 Dateien wurden in die Quarantäne verschoben 0 Dateien wurden umbenannt 1 Dateien konnten nicht durchsucht werden 2689750 Dateien ohne Befall 48492 Archive wurden durchsucht 2 Warnungen 1 Hinweise Die Ereignist log von AVIRA: Code:
ATTFilter Exportierte Ereignisse:
06.07.2014 23:51 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\mitzekatzen\AppData\Local\Microsoft\Windows Live
Mail\Storage Folders\Importierte a9a\Lokale Ordner\gelesene Ob 9c9\Archiv
02\695E7EEE-00000066.eml'
enthielt einen Virus oder unerwünschtes Programm 'TR/Genome.jojy' [trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '558a66e3.qua'
verschoben!
Code:
ATTFilter Results of screen317's Security Check version 0.99.85
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop
Windows Defender
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
TuneUp Utilities 2014
TuneUp Utilities Language Pack (de-DE)
TuneUp Utilities 2014 (de-DE)
TuneUp Utilities 2014
Java 7 Update 55
Java 8 Update 5
Java version out of Date!
Adobe Flash Player 13.0.0.214 Flash Player out of Date!
Adobe Reader XI
Mozilla Firefox (30.0)
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-07-2014
Ran by mitzekatzen (administrator) on ASTRONOMIE on 07-07-2014 12:14:12
Running from C:\Users\mitzekatzen\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(AMD) C:\Windows\System32\atieclxx.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(sw4you) C:\Program Files (x86)\Hardcopy\hardcopy.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft) C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_2.3.1406.1149_x86__8wekyb3d8bbwe\Solitaire.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [vspdfprsrv.exe] => C:\Program Files (x86)\Avanquest\PDF Experte 8 Professional\vspdfprsrv.exe [6078464 2012-04-23] (Visagesoft)
HKLM-x32\...\Run: [Ulead AutoDetector v2] => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2004-08-27] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [DInfoSetup] => C:\Program Files (x86)\D-Info99\SDinfo.exe [134656 1999-08-19] ()
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [296520 2014-05-01] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [224128 2014-03-18] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [bdruninstaller] => C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setupdownloader.exe [747096 2013-05-15] (Bitdefender)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [18247424 2014-02-13] (Acer Incorporated)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-04-10] (Google Inc.)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [phonostar-PlayerTimer] => C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [42496 2014-01-11] ()
IFEO\acpanel_win.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\alohatripeaks-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\backitup.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ccc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cli.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cradleofegyptcollectorsedition-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\epowerui.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\governorofpoker2_pe_wildtangent_v1.5-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\luxor_ev_x86-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\magic academy-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ncc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\nerorescueagent.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\pegglenights-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\photoproduct.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\plantsvszombies-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ravcpl64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\solitaire-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\trinklitsupreme-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\uninst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK
ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk
ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, Inc. and H.C. Top Systems B.V.)
Startup: C:\Users\mitzekatzen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk -> C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:9987
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.arcor.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_14_ie&cd=2XzuyEtN2Y1L1QzuyEtD0FtDtB0F0CtCyE0E0E0AtC0B0FyDtN0D0Tzu0SzztByEtN1L2XzutBtFtCzztFzztFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDyEzy0BtC0DyCzztGzztB0E0AtG0A0F0FzytGtCzztA0AtGyDyC0E0EyCtDyC0DtByB0Azy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0D0FyDyBtD0C0CtGtD0C0CtBtGyDtAyD0FtGyC0ByE0BtGtA0Dzy0BtD0AtDtAtBtBzyzy2Q&cr=2054318036&ir=
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {6520DFD0-7405-458C-A90E-3CCC498D5E2E} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout
SearchScopes: HKCU - {792DF315-579A-41B7-AF43-A62729C82BC9} URL = hxxp://wetter.rtl.de/cp/shared/php/search_plz_ort.php?in={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default
FF NewTab: chrome://quick_start/content/index.html
FF SearchEngineOrder.1: Sichere Suche
FF Homepage: hxxp://www.arcor.de/
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A111DE662&p=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @real.com/nppl3260;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar-Player - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\abs@avira.com [2014-07-02]
FF Extension: Amazon-Icon - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\amazon-icon@giga.de [2014-04-22]
FF Extension: WOT - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-05-24]
FF Extension: DownloadHelper - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-24]
FF Extension: Bitdefender QuickScan - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2014-07-06]
FF Extension: Ghostery - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\firefox@ghostery.com.xpi [2014-05-24]
FF Extension: NoScript - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-06-07]
FF Extension: Adblock Plus - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-06]
FF Extension: Adblock Edge - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-05-27]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-01]
FF HKLM-x32\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-01]
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-04-06]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-06-24] (Avira Operations GmbH & Co. KG)
S4 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
S4 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2798336 2014-02-13] (Acer Incorporated)
S4 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
S4 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-04-03] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-04-03] (McAfee, Inc.)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] ()
R2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-05-01] (RealNetworks, Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] () [File not signed]
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-06-24] (Avira Operations GmbH & Co. KG)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-04-03] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [177544 2014-04-03] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311856 2014-04-03] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-04-03] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-04-03] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [784760 2014-04-03] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [346760 2014-04-03] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-04-23] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2014-02-10] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-07 12:14 - 2014-07-07 12:14 - 00025574 _____ () C:\Users\mitzekatzen\Desktop\FRST.txt
2014-07-07 12:03 - 2014-07-07 12:03 - 00000983 _____ () C:\Users\mitzekatzen\Desktop\checkup.txt
2014-07-07 11:49 - 2014-07-07 11:49 - 00000980 _____ () C:\Users\mitzekatzen\Desktop\Ereignisse.txt
2014-07-06 23:52 - 2014-07-06 23:52 - 00060610 _____ () C:\Users\mitzekatzen\Desktop\AVSCAN-20140706-203011-DAC3B7C9.LOG
2014-07-06 20:26 - 2014-07-06 20:25 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-06 20:16 - 2014-07-06 20:16 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-07-06 20:13 - 2014-06-24 20:39 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-06 20:13 - 2014-06-24 20:39 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-06 20:13 - 2014-06-24 20:39 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-06 20:06 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-07-06 20:01 - 2014-07-06 20:01 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-07-06 19:18 - 2014-07-06 19:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\QuickScan
2014-07-05 17:12 - 2014-07-05 17:12 - 02347384 _____ (ESET) C:\Users\mitzekatzen\Desktop\esetsmartinstaller_deu-1.exe
2014-07-05 13:03 - 2014-07-05 13:02 - 00854390 _____ () C:\Users\mitzekatzen\Desktop\SecurityCheck.exe
2014-07-03 19:29 - 2014-07-03 19:29 - 00001119 _____ () C:\Users\mitzekatzen\Desktop\JRT.txt
2014-07-03 19:25 - 2014-07-03 19:25 - 00000000 ____D () C:\Windows\ERUNT
2014-07-03 19:23 - 2014-07-02 22:48 - 01016261 _____ (Thisisu) C:\Users\mitzekatzen\Desktop\JRT.exe
2014-07-03 19:19 - 2014-07-03 19:19 - 00009056 _____ () C:\Users\mitzekatzen\Desktop\AdwCleaner[S0].txt
2014-07-03 19:12 - 2014-07-03 19:15 - 00000000 ____D () C:\AdwCleaner
2014-07-03 19:11 - 2014-07-02 22:47 - 01346519 _____ () C:\Users\mitzekatzen\Desktop\adwcleaner_3.214.exe
2014-07-03 19:05 - 2014-07-03 19:05 - 00041128 _____ () C:\Users\mitzekatzen\Desktop\mbam.txt
2014-07-03 18:30 - 2014-07-03 19:01 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-03 18:30 - 2014-07-03 18:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-03 18:30 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-03 18:30 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-03 18:30 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-02 20:43 - 2014-07-07 12:14 - 00000000 ____D () C:\FRST
2014-07-02 20:41 - 2014-07-02 20:41 - 02083840 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-16 16:41 - 2014-07-06 20:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-16 16:41 - 2014-07-06 20:12 - 00000000 ____D () C:\ProgramData\Avira
2014-06-16 16:41 - 2014-07-06 20:12 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-16 16:41 - 2014-07-06 20:08 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-11 19:58 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 19:58 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 19:58 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 19:58 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 19:58 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-11 19:58 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 19:58 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 19:58 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 19:58 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 19:58 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 19:58 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-11 19:58 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 19:58 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 19:58 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-11 19:58 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 19:58 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-11 19:58 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-11 19:58 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-11 19:58 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-11 19:58 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 19:58 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-11 19:58 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-11 19:58 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 19:58 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-11 19:58 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 19:58 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-11 19:58 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-11 19:58 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-11 19:58 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-11 19:57 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 19:57 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 19:57 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-06-11 19:57 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 19:57 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-06-11 19:57 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 19:57 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 19:57 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-06-11 19:57 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-06-11 19:57 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-11 19:57 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-11 19:57 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-06-11 19:57 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-06-11 19:57 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-06-11 19:57 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll
2014-06-11 19:57 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-06-11 19:57 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-06-11 19:57 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-06-11 19:57 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-06-11 19:57 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-06-11 19:57 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-06-11 19:57 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-06-11 19:57 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-06-11 19:57 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-06-11 19:57 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-11 19:57 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-06-11 19:57 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-06-11 19:57 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-06-11 19:57 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-11 19:57 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-06-11 19:57 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-06-11 19:57 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-06-11 19:57 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-06-11 19:57 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-06-11 19:57 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2014-06-11 19:57 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-06-11 19:57 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-06-11 19:57 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2014-06-11 19:57 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 19:57 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 19:57 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-06-11 19:57 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2014-06-11 19:57 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-06-11 19:57 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-06-11 19:57 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-06-11 19:57 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-11 19:57 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2014-06-11 19:57 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2014-06-11 19:57 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-06-11 19:57 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-11 19:57 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2014-06-11 19:57 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-06-11 19:57 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-06-11 19:57 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-06-11 19:57 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-06-11 19:57 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-06-11 19:57 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2014-06-11 19:57 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-06-11 19:57 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-06-11 19:57 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-06-11 19:57 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-06-11 19:57 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-06-11 19:57 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-06-11 19:57 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-11 19:57 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-06-11 19:57 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-11 19:57 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-11 19:57 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-06-11 19:57 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-11 19:57 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-06-11 19:57 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-06-11 19:57 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-06-11 19:57 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-06-11 19:57 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-06-11 19:57 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-06-11 19:57 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-11 19:57 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-06-11 19:57 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-06-11 19:55 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-06-11 19:55 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-06-11 19:55 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-06-11 19:55 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-11 19:55 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-06-11 19:55 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-11 19:55 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-06-11 19:55 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-11 19:55 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-11 19:55 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2021-10-21 15:36 - 2014-01-19 14:29 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat
2021-10-04 09:34 - 2014-01-19 14:29 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat
2014-07-07 12:14 - 2014-07-07 12:14 - 00025574 _____ () C:\Users\mitzekatzen\Desktop\FRST.txt
2014-07-07 12:14 - 2014-07-02 20:43 - 00000000 ____D () C:\FRST
2014-07-07 12:04 - 2014-04-16 20:48 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{26E28335-1916-4357-9E6B-52CB3526D0BF}
2014-07-07 12:03 - 2014-07-07 12:03 - 00000983 _____ () C:\Users\mitzekatzen\Desktop\checkup.txt
2014-07-07 12:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-07-07 11:49 - 2014-07-07 11:49 - 00000980 _____ () C:\Users\mitzekatzen\Desktop\Ereignisse.txt
2014-07-07 11:36 - 2014-01-19 14:00 - 01308953 _____ () C:\Windows\WindowsUpdate.log
2014-07-07 11:19 - 2014-04-07 14:04 - 00001142 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-07 11:16 - 2014-04-07 14:04 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-07 11:16 - 2014-04-05 14:37 - 00000000 __RDO () C:\Users\mitzekatzen\SkyDrive
2014-07-07 11:16 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-07-06 23:52 - 2014-07-06 23:52 - 00060610 _____ () C:\Users\mitzekatzen\Desktop\AVSCAN-20140706-203011-DAC3B7C9.LOG
2014-07-06 23:40 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-07-06 23:39 - 2014-04-03 17:52 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-06 20:36 - 2014-04-23 19:56 - 00000000 ____D () C:\Users\mitzekatzen\Desktop\AVIRA free
2014-07-06 20:25 - 2014-07-06 20:26 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-06 20:16 - 2014-07-06 20:16 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-07-06 20:13 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-06 20:12 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Avira
2014-07-06 20:12 - 2014-06-16 16:41 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-06 20:08 - 2014-06-16 16:41 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-06 20:06 - 2014-04-06 23:03 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\CrashDumps
2014-07-06 20:03 - 2013-10-31 08:20 - 02661230 _____ () C:\Windows\PFRO.log
2014-07-06 20:03 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-06 20:02 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-07-06 20:01 - 2014-07-06 20:01 - 00000000 ____D () C:\Program Files\Common Files\Bitdefender
2014-07-06 19:18 - 2014-07-06 19:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\QuickScan
2014-07-05 17:13 - 2014-04-03 17:57 - 00000000 ____D () C:\Users\mitzekatzen\Downloads\Programmsoftware
2014-07-05 17:12 - 2014-07-05 17:12 - 02347384 _____ (ESET) C:\Users\mitzekatzen\Desktop\esetsmartinstaller_deu-1.exe
2014-07-05 13:05 - 2014-01-19 22:44 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-07-05 13:05 - 2014-01-19 22:44 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-07-05 13:05 - 2013-10-31 08:27 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-05 13:04 - 2013-08-22 16:46 - 00026914 _____ () C:\Windows\setupact.log
2014-07-05 13:02 - 2014-07-05 13:03 - 00854390 _____ () C:\Users\mitzekatzen\Desktop\SecurityCheck.exe
2014-07-03 19:29 - 2014-07-03 19:29 - 00001119 _____ () C:\Users\mitzekatzen\Desktop\JRT.txt
2014-07-03 19:25 - 2014-07-03 19:25 - 00000000 ____D () C:\Windows\ERUNT
2014-07-03 19:19 - 2014-07-03 19:19 - 00009056 _____ () C:\Users\mitzekatzen\Desktop\AdwCleaner[S0].txt
2014-07-03 19:15 - 2014-07-03 19:12 - 00000000 ____D () C:\AdwCleaner
2014-07-03 19:15 - 2014-04-03 17:46 - 00000000 ____D () C:\Users\mitzekatzen
2014-07-03 19:05 - 2014-07-03 19:05 - 00041128 _____ () C:\Users\mitzekatzen\Desktop\mbam.txt
2014-07-03 19:01 - 2014-07-03 18:30 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-03 18:57 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Vss
2014-07-03 18:55 - 2014-04-05 12:30 - 00000000 ____D () C:\temp
2014-07-03 18:30 - 2014-07-03 18:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-02 22:48 - 2014-07-03 19:23 - 01016261 _____ (Thisisu) C:\Users\mitzekatzen\Desktop\JRT.exe
2014-07-02 22:47 - 2014-07-03 19:11 - 01346519 _____ () C:\Users\mitzekatzen\Desktop\adwcleaner_3.214.exe
2014-07-02 20:41 - 2014-07-02 20:41 - 02083840 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-07-01 21:30 - 2014-04-10 15:22 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\HpUpdate
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-29 14:52 - 2014-01-19 14:41 - 00000000 ____D () C:\ProgramData\Atheros
2014-06-25 22:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-06-24 20:39 - 2014-07-06 20:13 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-24 20:39 - 2014-07-06 20:13 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-24 20:39 - 2014-07-06 20:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-22 22:14 - 2014-04-07 14:04 - 00004114 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-22 22:14 - 2014-04-07 14:04 - 00003878 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-20 12:41 - 2014-06-04 16:39 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\47076b4cc5bfaf77bbe68bb8381cfd6d
2014-06-18 18:14 - 2014-04-10 00:07 - 00000000 ____D () C:\Eigene Dateien
2014-06-17 22:46 - 2014-06-03 23:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\Adobe
2014-06-17 18:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-16 16:41 - 2014-01-19 14:23 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-06-16 15:11 - 2014-04-06 12:07 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-06-16 15:09 - 2014-04-28 21:47 - 00000000 ____D () C:\Users\Peter
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-14 14:39 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-06-14 13:03 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-06-13 13:51 - 2014-04-06 11:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-13 13:51 - 2013-08-22 16:44 - 00563464 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-06-12 23:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-12 18:21 - 2014-04-05 12:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 18:19 - 2014-04-05 12:58 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-08 17:48 - 2014-05-03 08:58 - 00003326 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-06-08 17:48 - 2014-05-01 20:59 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001
Some content of TEMP:
====================
C:\Users\mitzekatzen\AppData\Local\Temp\avgnt.exe
C:\Users\mitzekatzen\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-02 17:48
==================== End Of Log ============================
Ich hoffe, dass das alles so geklappt hat. Gruß Peter |
|
08.07.2014, 06:20
| #8 |
| /// the machine /// TB-Ausbilder | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Java udn Flash updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:9987
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.07.2014, 20:37
| #9 |
| | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Hi Schrauber, das Java und Flash updaten, war das Aktion gemeint oder sind das die nachfolgende genannten Aktivitäten. Diese habe ich ausgeführt. Wäre für Java und Flash ein extra Updat zu machen, bitte ich um Hilfestellung zur Durchführung. Anbei erst mal das Fixlog.txt: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-07-2014
Ran by mitzekatzen at 2014-07-08 21:18:33 Run:1
Running from C:\Users\mitzekatzen\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:9987
*****************
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
==== End of Fixlog ====
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-07-2014
Ran by mitzekatzen (administrator) on ASTRONOMIE on 08-07-2014 21:23:14
Running from C:\Users\mitzekatzen\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
() C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(sw4you) C:\Program Files (x86)\Hardcopy\hardcopy.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\livecomm.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [vspdfprsrv.exe] => C:\Program Files (x86)\Avanquest\PDF Experte 8 Professional\vspdfprsrv.exe [6078464 2012-04-23] (Visagesoft)
HKLM-x32\...\Run: [Ulead AutoDetector v2] => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2004-08-27] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [DInfoSetup] => C:\Program Files (x86)\D-Info99\SDinfo.exe [134656 1999-08-19] ()
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [296520 2014-05-01] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [224128 2014-03-18] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [bdruninstaller] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setupdownloader.exe" /args:"/after_restart"
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [18247424 2014-02-13] (Acer Incorporated)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-04-10] (Google Inc.)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [phonostar-PlayerTimer] => C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [42496 2014-01-11] ()
IFEO\acpanel_win.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\alohatripeaks-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\backitup.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ccc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cli.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cradleofegyptcollectorsedition-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\epowerui.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\governorofpoker2_pe_wildtangent_v1.5-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\luxor_ev_x86-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\magic academy-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ncc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\nerorescueagent.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\pegglenights-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\photoproduct.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\plantsvszombies-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ravcpl64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\solitaire-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\trinklitsupreme-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\uninst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK
ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk
ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, Inc. and H.C. Top Systems B.V.)
Startup: C:\Users\mitzekatzen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk -> C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.arcor.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_14_ie&cd=2XzuyEtN2Y1L1QzuyEtD0FtDtB0F0CtCyE0E0E0AtC0B0FyDtN0D0Tzu0SzztByEtN1L2XzutBtFtCzztFzztFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDyEzy0BtC0DyCzztGzztB0E0AtG0A0F0FzytGtCzztA0AtGyDyC0E0EyCtDyC0DtByB0Azy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0D0FyDyBtD0C0CtGtD0C0CtBtGyDtAyD0FtGyC0ByE0BtGtA0Dzy0BtD0AtDtAtBtBzyzy2Q&cr=2054318036&ir=
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {6520DFD0-7405-458C-A90E-3CCC498D5E2E} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout
SearchScopes: HKCU - {792DF315-579A-41B7-AF43-A62729C82BC9} URL = hxxp://wetter.rtl.de/cp/shared/php/search_plz_ort.php?in={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default
FF NewTab: chrome://quick_start/content/index.html
FF SearchEngineOrder.1: Sichere Suche
FF Homepage: hxxp://www.arcor.de/
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A111DE662&p=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @real.com/nppl3260;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar-Player - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\abs@avira.com [2014-07-02]
FF Extension: Amazon-Icon - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\amazon-icon@giga.de [2014-04-22]
FF Extension: WOT - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-05-24]
FF Extension: DownloadHelper - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-24]
FF Extension: Bitdefender QuickScan - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2014-07-06]
FF Extension: Ghostery - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\firefox@ghostery.com.xpi [2014-05-24]
FF Extension: NoScript - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-06-07]
FF Extension: Adblock Plus - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-06]
FF Extension: Adblock Edge - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-05-27]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-01]
FF HKLM-x32\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-01]
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-04-06]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-06-24] (Avira Operations GmbH & Co. KG)
S4 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
S4 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2798336 2014-02-13] (Acer Incorporated)
S4 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
S4 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-04-03] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-04-03] (McAfee, Inc.)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] ()
R2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-05-01] (RealNetworks, Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] () [File not signed]
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-06-24] (Avira Operations GmbH & Co. KG)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-04-03] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [177544 2014-04-03] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311856 2014-04-03] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-04-03] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-04-03] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [784760 2014-04-03] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [346760 2014-04-03] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-04-23] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2014-02-10] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-08 21:23 - 2014-07-08 21:23 - 00025498 _____ () C:\Users\mitzekatzen\Desktop\FRST.txt
2014-07-07 12:03 - 2014-07-07 12:03 - 00000983 _____ () C:\Users\mitzekatzen\Desktop\checkup.txt
2014-07-07 11:49 - 2014-07-07 11:49 - 00000980 _____ () C:\Users\mitzekatzen\Desktop\Ereignisse.txt
2014-07-06 23:52 - 2014-07-06 23:52 - 00060610 _____ () C:\Users\mitzekatzen\Desktop\AVSCAN-20140706-203011-DAC3B7C9.LOG
2014-07-06 20:26 - 2014-07-06 20:25 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-06 20:16 - 2014-07-06 20:16 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-07-06 20:13 - 2014-06-24 20:39 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-06 20:13 - 2014-06-24 20:39 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-06 20:13 - 2014-06-24 20:39 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-06 20:06 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-07-06 19:18 - 2014-07-06 19:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\QuickScan
2014-07-05 17:12 - 2014-07-05 17:12 - 02347384 _____ (ESET) C:\Users\mitzekatzen\Desktop\esetsmartinstaller_deu-1.exe
2014-07-05 13:03 - 2014-07-05 13:02 - 00854390 _____ () C:\Users\mitzekatzen\Desktop\SecurityCheck.exe
2014-07-03 19:29 - 2014-07-03 19:29 - 00001119 _____ () C:\Users\mitzekatzen\Desktop\JRT.txt
2014-07-03 19:25 - 2014-07-03 19:25 - 00000000 ____D () C:\Windows\ERUNT
2014-07-03 19:23 - 2014-07-02 22:48 - 01016261 _____ (Thisisu) C:\Users\mitzekatzen\Desktop\JRT.exe
2014-07-03 19:19 - 2014-07-03 19:19 - 00009056 _____ () C:\Users\mitzekatzen\Desktop\AdwCleaner[S0].txt
2014-07-03 19:12 - 2014-07-03 19:15 - 00000000 ____D () C:\AdwCleaner
2014-07-03 19:11 - 2014-07-02 22:47 - 01346519 _____ () C:\Users\mitzekatzen\Desktop\adwcleaner_3.214.exe
2014-07-03 19:05 - 2014-07-03 19:05 - 00041128 _____ () C:\Users\mitzekatzen\Desktop\mbam.txt
2014-07-03 18:30 - 2014-07-03 19:01 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-03 18:30 - 2014-07-03 18:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-03 18:30 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-03 18:30 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-03 18:30 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-02 20:43 - 2014-07-08 21:23 - 00000000 ____D () C:\FRST
2014-07-02 20:41 - 2014-07-02 20:41 - 02083840 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-16 16:41 - 2014-07-06 20:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-16 16:41 - 2014-07-06 20:12 - 00000000 ____D () C:\ProgramData\Avira
2014-06-16 16:41 - 2014-07-06 20:12 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-16 16:41 - 2014-07-06 20:08 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-11 19:58 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 19:58 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 19:58 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 19:58 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 19:58 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-11 19:58 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 19:58 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 19:58 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 19:58 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 19:58 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 19:58 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-11 19:58 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 19:58 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 19:58 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-11 19:58 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 19:58 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-11 19:58 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-11 19:58 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-11 19:58 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-11 19:58 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 19:58 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-11 19:58 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-11 19:58 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 19:58 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-11 19:58 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 19:58 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-11 19:58 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-11 19:58 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-11 19:58 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-11 19:57 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 19:57 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 19:57 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-06-11 19:57 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 19:57 - 2014-05-03 09:14 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-06-11 19:57 - 2014-05-03 06:21 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 19:57 - 2014-05-03 06:07 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-06-11 19:57 - 2014-05-03 05:41 - 00921088 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-06-11 19:57 - 2014-05-03 05:38 - 00754688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-06-11 19:57 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-11 19:57 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-11 19:57 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-06-11 19:57 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-06-11 19:57 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-06-11 19:57 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll
2014-06-11 19:57 - 2014-04-18 11:32 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-06-11 19:57 - 2014-04-18 10:58 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-06-11 19:57 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-06-11 19:57 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-06-11 19:57 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-06-11 19:57 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-06-11 19:57 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 06:35 - 01411584 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-06-11 19:57 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-06-11 19:57 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-06-11 19:57 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-11 19:57 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-06-11 19:57 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-06-11 19:57 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-06-11 19:57 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 16:10 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-06-11 19:57 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-06-11 19:57 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-06-11 19:57 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-06-11 19:57 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-06-11 19:57 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-06-11 19:57 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2014-06-11 19:57 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-06-11 19:57 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-06-11 19:57 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2014-06-11 19:57 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 19:57 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 19:57 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-06-11 19:57 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2014-06-11 19:57 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-06-11 19:57 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-06-11 19:57 - 2014-04-03 04:23 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-06-11 19:57 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-11 19:57 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2014-06-11 19:57 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2014-06-11 19:57 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-06-11 19:57 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-11 19:57 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2014-06-11 19:57 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-06-11 19:57 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-06-11 19:57 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-06-11 19:57 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-06-11 19:57 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-06-11 19:57 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2014-06-11 19:57 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-06-11 19:57 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-06-11 19:57 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-06-11 19:57 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-06-11 19:57 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-06-11 19:57 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-06-11 19:57 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-11 19:57 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-06-11 19:57 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-11 19:57 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-11 19:57 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-06-11 19:57 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-11 19:57 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-06-11 19:57 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-06-11 19:57 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-06-11 19:57 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-06-11 19:57 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-06-11 19:57 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-06-11 19:57 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-11 19:57 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-06-11 19:57 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-06-11 19:55 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-06-11 19:55 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-06-11 19:55 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-06-11 19:55 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-11 19:55 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-06-11 19:55 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-11 19:55 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-06-11 19:55 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-11 19:55 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-11 19:55 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2021-10-21 15:36 - 2014-01-19 14:29 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat
2021-10-04 09:34 - 2014-01-19 14:29 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat
2014-07-08 21:23 - 2014-07-08 21:23 - 00025498 _____ () C:\Users\mitzekatzen\Desktop\FRST.txt
2014-07-08 21:23 - 2014-07-02 20:43 - 00000000 ____D () C:\FRST
2014-07-08 21:19 - 2014-04-07 14:04 - 00001142 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-08 21:13 - 2014-04-16 20:48 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{26E28335-1916-4357-9E6B-52CB3526D0BF}
2014-07-08 21:02 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-07-08 20:39 - 2014-01-19 14:00 - 01908101 _____ () C:\Windows\WindowsUpdate.log
2014-07-08 20:31 - 2014-04-03 17:52 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-08 20:19 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-07-08 20:09 - 2014-04-05 14:37 - 00000000 __RDO () C:\Users\mitzekatzen\SkyDrive
2014-07-08 20:07 - 2014-04-07 14:04 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-08 20:07 - 2013-10-31 08:20 - 02791134 _____ () C:\Windows\PFRO.log
2014-07-08 20:07 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-08 20:06 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-07-07 12:33 - 2014-04-22 15:46 - 00000000 ____D () C:\Users\mitzekatzen\Desktop\MEDIA-CONVERTER WANDLER
2014-07-07 12:03 - 2014-07-07 12:03 - 00000983 _____ () C:\Users\mitzekatzen\Desktop\checkup.txt
2014-07-07 11:49 - 2014-07-07 11:49 - 00000980 _____ () C:\Users\mitzekatzen\Desktop\Ereignisse.txt
2014-07-06 23:52 - 2014-07-06 23:52 - 00060610 _____ () C:\Users\mitzekatzen\Desktop\AVSCAN-20140706-203011-DAC3B7C9.LOG
2014-07-06 23:40 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-07-06 20:36 - 2014-04-23 19:56 - 00000000 ____D () C:\Users\mitzekatzen\Desktop\AVIRA free
2014-07-06 20:25 - 2014-07-06 20:26 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-06 20:16 - 2014-07-06 20:16 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-07-06 20:13 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-06 20:12 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Avira
2014-07-06 20:12 - 2014-06-16 16:41 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-06 20:08 - 2014-06-16 16:41 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-06 20:06 - 2014-04-06 23:03 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\CrashDumps
2014-07-06 19:18 - 2014-07-06 19:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\QuickScan
2014-07-05 17:13 - 2014-04-03 17:57 - 00000000 ____D () C:\Users\mitzekatzen\Downloads\Programmsoftware
2014-07-05 17:12 - 2014-07-05 17:12 - 02347384 _____ (ESET) C:\Users\mitzekatzen\Desktop\esetsmartinstaller_deu-1.exe
2014-07-05 13:05 - 2014-01-19 22:44 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-07-05 13:05 - 2014-01-19 22:44 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-07-05 13:05 - 2013-10-31 08:27 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-05 13:04 - 2013-08-22 16:46 - 00026914 _____ () C:\Windows\setupact.log
2014-07-05 13:02 - 2014-07-05 13:03 - 00854390 _____ () C:\Users\mitzekatzen\Desktop\SecurityCheck.exe
2014-07-03 19:29 - 2014-07-03 19:29 - 00001119 _____ () C:\Users\mitzekatzen\Desktop\JRT.txt
2014-07-03 19:25 - 2014-07-03 19:25 - 00000000 ____D () C:\Windows\ERUNT
2014-07-03 19:19 - 2014-07-03 19:19 - 00009056 _____ () C:\Users\mitzekatzen\Desktop\AdwCleaner[S0].txt
2014-07-03 19:15 - 2014-07-03 19:12 - 00000000 ____D () C:\AdwCleaner
2014-07-03 19:15 - 2014-04-03 17:46 - 00000000 ____D () C:\Users\mitzekatzen
2014-07-03 19:05 - 2014-07-03 19:05 - 00041128 _____ () C:\Users\mitzekatzen\Desktop\mbam.txt
2014-07-03 19:01 - 2014-07-03 18:30 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-03 18:57 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Vss
2014-07-03 18:55 - 2014-04-05 12:30 - 00000000 ____D () C:\temp
2014-07-03 18:30 - 2014-07-03 18:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-02 22:48 - 2014-07-03 19:23 - 01016261 _____ (Thisisu) C:\Users\mitzekatzen\Desktop\JRT.exe
2014-07-02 22:47 - 2014-07-03 19:11 - 01346519 _____ () C:\Users\mitzekatzen\Desktop\adwcleaner_3.214.exe
2014-07-02 20:41 - 2014-07-02 20:41 - 02083840 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-07-01 21:30 - 2014-04-10 15:22 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\HpUpdate
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-29 14:52 - 2014-01-19 14:41 - 00000000 ____D () C:\ProgramData\Atheros
2014-06-25 22:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-06-24 20:39 - 2014-07-06 20:13 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-24 20:39 - 2014-07-06 20:13 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-24 20:39 - 2014-07-06 20:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-22 22:14 - 2014-04-07 14:04 - 00004114 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-22 22:14 - 2014-04-07 14:04 - 00003878 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-20 12:41 - 2014-06-04 16:39 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\47076b4cc5bfaf77bbe68bb8381cfd6d
2014-06-18 18:14 - 2014-04-10 00:07 - 00000000 ____D () C:\Eigene Dateien
2014-06-17 22:46 - 2014-06-03 23:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\Adobe
2014-06-17 18:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-16 16:41 - 2014-01-19 14:23 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-06-16 15:11 - 2014-04-06 12:07 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-06-16 15:09 - 2014-04-28 21:47 - 00000000 ____D () C:\Users\Peter
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-14 14:39 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-06-14 13:03 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-06-13 13:51 - 2014-04-06 11:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-13 13:51 - 2013-08-22 16:44 - 00563464 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-06-12 23:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-12 18:21 - 2014-04-05 12:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 18:19 - 2014-04-05 12:58 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-08 17:48 - 2014-05-03 08:58 - 00003326 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-06-08 17:48 - 2014-05-01 20:59 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001
Some content of TEMP:
====================
C:\Users\mitzekatzen\AppData\Local\Temp\avgnt.exe
C:\Users\mitzekatzen\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-02 17:48
==================== End Of Log ============================
Übrigens, die berüchtigte Sicherheitsmeldung von AVIRA ist nicht mehr aufgetaucht. Bei dem AVIRA Scan war ja ein Trojaner "TR/Genome.jojy" aufgetaucht, der von AVIRA in Quarantäne verschoben wurde und dort noch ist. Sollte der dort gelöscht werden? Ich hoffe, dass das so richtig war, da ich bei solchen Aktionen immer etwas unsicher bin, bloß nichts falsch machen.  Gruß Peter |
|
09.07.2014, 16:28
| #10 |
| /// the machine /// TB-Ausbilder | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Kannste in Quarantäne lassen oder löschen, egal Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.07.2014, 19:06
| #11 |
| | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Hi Schrauber, erst mal vielen Dank für die bisher durchgeführten Aktionen. Ich bin froh, dass der Urheber der lästigen Meldung verschwunden ist. Kann man denn aus den verschiedenen LOG-Dateien ersehen, wo die Ursache war bzw. wer da was eingeschleußt hat? Da ich ja nicht so versiert bin, habe ich erst einmal mein Brot, deine Empfehlungen abzuarbeiten. Ich gebe dir dann Bescheid. Seit gestern habe ich noch eine lästige Musik auf einmal im Hintergrung, wie didum dingdongding (am laufenden Band). Ich könnte sicher den Ton abstellen, aber wo kommt das nun wieder her. Ich dachte erst, dass dies ein Hinweis für ein Update im Hintergrund wäre, aber falsch. Ich schicke dir deshalb noch mal ein FRST log (2x) mit: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2014
Ran by mitzekatzen (administrator) on ASTRONOMIE on 09-07-2014 20:00:36
Running from C:\Users\mitzekatzen\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(AMD) C:\Windows\System32\atieclxx.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(sw4you) C:\Program Files (x86)\Hardcopy\hardcopy.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [vspdfprsrv.exe] => C:\Program Files (x86)\Avanquest\PDF Experte 8 Professional\vspdfprsrv.exe [6078464 2012-04-23] (Visagesoft)
HKLM-x32\...\Run: [Ulead AutoDetector v2] => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2004-08-27] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [DInfoSetup] => C:\Program Files (x86)\D-Info99\SDinfo.exe [134656 1999-08-19] ()
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [296520 2014-05-01] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [224128 2014-03-18] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [bdruninstaller] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setupdownloader.exe" /args:"/after_restart"
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [18247424 2014-02-13] (Acer Incorporated)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-04-10] (Google Inc.)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [phonostar-PlayerTimer] => C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [42496 2014-01-11] ()
IFEO\acpanel_win.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\alohatripeaks-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\backitup.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ccc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cli.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cradleofegyptcollectorsedition-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\epowerui.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\governorofpoker2_pe_wildtangent_v1.5-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\luxor_ev_x86-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\magic academy-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ncc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\nerorescueagent.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\pegglenights-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\photoproduct.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\plantsvszombies-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ravcpl64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\solitaire-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\trinklitsupreme-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\uninst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK
ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk
ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, Inc. and H.C. Top Systems B.V.)
Startup: C:\Users\mitzekatzen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk -> C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.arcor.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_14_ie&cd=2XzuyEtN2Y1L1QzuyEtD0FtDtB0F0CtCyE0E0E0AtC0B0FyDtN0D0Tzu0SzztByEtN1L2XzutBtFtCzztFzztFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDyEzy0BtC0DyCzztGzztB0E0AtG0A0F0FzytGtCzztA0AtGyDyC0E0EyCtDyC0DtByB0Azy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0D0FyDyBtD0C0CtGtD0C0CtBtGyDtAyD0FtGyC0ByE0BtGtA0Dzy0BtD0AtDtAtBtBzyzy2Q&cr=2054318036&ir=
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {6520DFD0-7405-458C-A90E-3CCC498D5E2E} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout
SearchScopes: HKCU - {792DF315-579A-41B7-AF43-A62729C82BC9} URL = hxxp://wetter.rtl.de/cp/shared/php/search_plz_ort.php?in={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default
FF NewTab: chrome://quick_start/content/index.html
FF SearchEngineOrder.1: Sichere Suche
FF Homepage: hxxp://www.arcor.de/
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A111DE662&p=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @real.com/nppl3260;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar-Player - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\abs@avira.com [2014-07-02]
FF Extension: Amazon-Icon - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\amazon-icon@giga.de [2014-04-22]
FF Extension: WOT - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-05-24]
FF Extension: DownloadHelper - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-24]
FF Extension: Bitdefender QuickScan - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2014-07-06]
FF Extension: Ghostery - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\firefox@ghostery.com.xpi [2014-05-24]
FF Extension: NoScript - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-06-07]
FF Extension: Adblock Plus - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-06]
FF Extension: Adblock Edge - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-05-27]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-01]
FF HKLM-x32\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-04-06]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-06-24] (Avira Operations GmbH & Co. KG)
S4 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
S4 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2798336 2014-02-13] (Acer Incorporated)
S4 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
S4 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-04-03] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-04-03] (McAfee, Inc.)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] ()
R2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-05-01] (RealNetworks, Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] () [File not signed]
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-06-24] (Avira Operations GmbH & Co. KG)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-04-03] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [177544 2014-04-03] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311856 2014-04-03] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-04-03] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-04-03] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [784760 2014-04-03] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [346760 2014-04-03] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-04-23] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2014-02-10] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-09 20:00 - 2014-07-09 20:00 - 00025249 _____ () C:\Users\mitzekatzen\Desktop\FRST5.txt
2014-07-09 20:00 - 2014-07-09 20:00 - 00000000 ____D () C:\Users\mitzekatzen\Desktop\FRST-OlderVersion
2014-07-09 15:05 - 2014-07-09 15:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-09 15:03 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-07-09 14:43 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-09 14:43 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 14:43 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 14:43 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 14:43 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-07-09 14:43 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-07-09 14:43 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-07-09 14:43 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-07-09 14:43 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-07-09 14:43 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 14:42 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 14:42 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 14:42 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-07-09 14:42 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 14:42 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 14:42 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 14:42 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 14:42 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 14:42 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 14:42 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 14:42 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 14:42 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 14:42 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 14:42 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 14:42 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 14:42 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 14:42 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 14:42 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 14:42 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 14:42 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 14:42 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 14:42 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 14:42 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 14:42 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 14:42 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 14:42 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 14:42 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 14:42 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 14:42 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 14:42 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 14:42 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 14:42 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 14:42 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-09 14:42 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-07-09 14:42 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-07-09 14:42 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-07-09 14:42 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 14:42 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-09 14:42 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-09 14:42 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 14:42 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-09 14:42 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-09 14:42 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-09 14:42 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-07-09 14:42 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-07-09 14:42 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-07-09 14:42 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-07-09 14:39 - 2014-07-09 14:39 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-07-07 12:03 - 2014-07-07 12:03 - 00000983 _____ () C:\Users\mitzekatzen\Desktop\checkup.txt
2014-07-07 11:49 - 2014-07-07 11:49 - 00000980 _____ () C:\Users\mitzekatzen\Desktop\Ereignisse.txt
2014-07-06 23:52 - 2014-07-06 23:52 - 00060610 _____ () C:\Users\mitzekatzen\Desktop\AVSCAN-20140706-203011-DAC3B7C9.LOG
2014-07-06 20:26 - 2014-07-06 20:25 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-06 20:16 - 2014-07-06 20:16 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-07-06 20:13 - 2014-06-24 20:39 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-06 20:13 - 2014-06-24 20:39 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-06 20:13 - 2014-06-24 20:39 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-06 20:06 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-07-06 19:18 - 2014-07-06 19:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\QuickScan
2014-07-05 17:12 - 2014-07-05 17:12 - 02347384 _____ (ESET) C:\Users\mitzekatzen\Desktop\esetsmartinstaller_deu-1.exe
2014-07-05 13:03 - 2014-07-05 13:02 - 00854390 _____ () C:\Users\mitzekatzen\Desktop\SecurityCheck.exe
2014-07-03 19:29 - 2014-07-03 19:29 - 00001119 _____ () C:\Users\mitzekatzen\Desktop\JRT.txt
2014-07-03 19:25 - 2014-07-03 19:25 - 00000000 ____D () C:\Windows\ERUNT
2014-07-03 19:23 - 2014-07-02 22:48 - 01016261 _____ (Thisisu) C:\Users\mitzekatzen\Desktop\JRT.exe
2014-07-03 19:19 - 2014-07-03 19:19 - 00009056 _____ () C:\Users\mitzekatzen\Desktop\AdwCleaner[S0].txt
2014-07-03 19:12 - 2014-07-03 19:15 - 00000000 ____D () C:\AdwCleaner
2014-07-03 19:11 - 2014-07-02 22:47 - 01346519 _____ () C:\Users\mitzekatzen\Desktop\adwcleaner_3.214.exe
2014-07-03 19:05 - 2014-07-03 19:05 - 00041128 _____ () C:\Users\mitzekatzen\Desktop\mbam.txt
2014-07-03 18:30 - 2014-07-03 19:01 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-03 18:30 - 2014-07-03 18:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-03 18:30 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-03 18:30 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-03 18:30 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-02 20:43 - 2014-07-09 20:00 - 00000000 ____D () C:\FRST
2014-07-02 20:41 - 2014-07-09 20:00 - 02084352 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-16 16:41 - 2014-07-06 20:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-16 16:41 - 2014-07-06 20:12 - 00000000 ____D () C:\ProgramData\Avira
2014-06-16 16:41 - 2014-07-06 20:12 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-16 16:41 - 2014-07-06 20:08 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-11 19:58 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 19:58 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 19:58 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 19:58 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-11 19:57 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 19:57 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 19:57 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-06-11 19:57 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 19:57 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-11 19:57 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-11 19:57 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-06-11 19:57 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-06-11 19:57 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-06-11 19:57 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll
2014-06-11 19:57 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-06-11 19:57 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-06-11 19:57 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-06-11 19:57 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-06-11 19:57 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-06-11 19:57 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-06-11 19:57 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-11 19:57 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-06-11 19:57 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-06-11 19:57 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-06-11 19:57 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-06-11 19:57 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-06-11 19:57 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-06-11 19:57 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-06-11 19:57 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-06-11 19:57 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2014-06-11 19:57 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-06-11 19:57 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-06-11 19:57 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2014-06-11 19:57 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 19:57 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 19:57 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-06-11 19:57 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2014-06-11 19:57 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-06-11 19:57 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-06-11 19:57 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-11 19:57 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2014-06-11 19:57 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2014-06-11 19:57 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-06-11 19:57 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-11 19:57 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2014-06-11 19:57 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-06-11 19:57 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-06-11 19:57 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-06-11 19:57 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-06-11 19:57 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-06-11 19:57 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2014-06-11 19:57 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-06-11 19:57 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-06-11 19:57 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-06-11 19:57 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-06-11 19:57 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-06-11 19:57 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-06-11 19:57 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-11 19:57 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-06-11 19:57 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-11 19:57 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-11 19:57 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-06-11 19:57 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-11 19:57 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-06-11 19:57 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-06-11 19:57 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-06-11 19:57 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-06-11 19:57 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-06-11 19:57 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-06-11 19:57 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-11 19:57 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-06-11 19:57 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-06-11 19:55 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-06-11 19:55 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-06-11 19:55 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-06-11 19:55 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-11 19:55 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-06-11 19:55 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-11 19:55 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-06-11 19:55 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-11 19:55 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-11 19:55 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2021-10-21 15:36 - 2014-01-19 14:29 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat
2021-10-04 09:34 - 2014-01-19 14:29 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat
2014-07-09 20:00 - 2014-07-09 20:00 - 00025249 _____ () C:\Users\mitzekatzen\Desktop\FRST5.txt
2014-07-09 20:00 - 2014-07-09 20:00 - 00000000 ____D () C:\Users\mitzekatzen\Desktop\FRST-OlderVersion
2014-07-09 20:00 - 2014-07-02 20:43 - 00000000 ____D () C:\FRST
2014-07-09 20:00 - 2014-07-02 20:41 - 02084352 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-07-09 20:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-07-09 19:59 - 2014-01-19 22:44 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-07-09 19:59 - 2014-01-19 22:44 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-07-09 19:59 - 2013-10-31 08:27 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-09 19:47 - 2014-04-16 20:48 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{26E28335-1916-4357-9E6B-52CB3526D0BF}
2014-07-09 19:20 - 2014-04-03 17:52 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-09 19:19 - 2014-04-07 14:04 - 00001142 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-09 19:01 - 2014-01-19 14:00 - 01155146 _____ () C:\Windows\WindowsUpdate.log
2014-07-09 15:11 - 2014-05-03 08:58 - 00003326 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-09 15:11 - 2014-05-01 20:59 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-09 15:11 - 2014-04-05 14:37 - 00000000 __RDO () C:\Users\mitzekatzen\SkyDrive
2014-07-09 15:10 - 2014-04-07 14:04 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-09 15:09 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-09 15:08 - 2013-08-22 16:44 - 00563464 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-09 15:06 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-07-09 15:05 - 2014-07-09 15:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-09 15:05 - 2013-08-22 21:11 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 15:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-07-09 15:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 15:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 15:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-07-09 15:05 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-07-09 15:04 - 2014-04-05 12:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 15:04 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-07-09 15:03 - 2014-04-05 12:58 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-09 14:39 - 2014-07-09 14:39 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-07-09 14:38 - 2014-05-31 17:19 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-09 14:38 - 2014-05-31 17:19 - 00003304 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-08 20:19 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-07-08 20:07 - 2013-10-31 08:20 - 02791134 _____ () C:\Windows\PFRO.log
2014-07-07 12:33 - 2014-04-22 15:46 - 00000000 ____D () C:\Users\mitzekatzen\Desktop\MEDIA-CONVERTER WANDLER
2014-07-07 12:03 - 2014-07-07 12:03 - 00000983 _____ () C:\Users\mitzekatzen\Desktop\checkup.txt
2014-07-07 11:49 - 2014-07-07 11:49 - 00000980 _____ () C:\Users\mitzekatzen\Desktop\Ereignisse.txt
2014-07-06 23:52 - 2014-07-06 23:52 - 00060610 _____ () C:\Users\mitzekatzen\Desktop\AVSCAN-20140706-203011-DAC3B7C9.LOG
2014-07-06 20:36 - 2014-04-23 19:56 - 00000000 ____D () C:\Users\mitzekatzen\Desktop\AVIRA free
2014-07-06 20:25 - 2014-07-06 20:26 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-06 20:16 - 2014-07-06 20:16 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-07-06 20:13 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-06 20:12 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Avira
2014-07-06 20:12 - 2014-06-16 16:41 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-06 20:08 - 2014-06-16 16:41 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-06 20:06 - 2014-04-06 23:03 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\CrashDumps
2014-07-06 19:18 - 2014-07-06 19:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\QuickScan
2014-07-05 17:13 - 2014-04-03 17:57 - 00000000 ____D () C:\Users\mitzekatzen\Downloads\Programmsoftware
2014-07-05 17:12 - 2014-07-05 17:12 - 02347384 _____ (ESET) C:\Users\mitzekatzen\Desktop\esetsmartinstaller_deu-1.exe
2014-07-05 13:04 - 2013-08-22 16:46 - 00026914 _____ () C:\Windows\setupact.log
2014-07-05 13:02 - 2014-07-05 13:03 - 00854390 _____ () C:\Users\mitzekatzen\Desktop\SecurityCheck.exe
2014-07-03 19:29 - 2014-07-03 19:29 - 00001119 _____ () C:\Users\mitzekatzen\Desktop\JRT.txt
2014-07-03 19:25 - 2014-07-03 19:25 - 00000000 ____D () C:\Windows\ERUNT
2014-07-03 19:19 - 2014-07-03 19:19 - 00009056 _____ () C:\Users\mitzekatzen\Desktop\AdwCleaner[S0].txt
2014-07-03 19:15 - 2014-07-03 19:12 - 00000000 ____D () C:\AdwCleaner
2014-07-03 19:15 - 2014-04-03 17:46 - 00000000 ____D () C:\Users\mitzekatzen
2014-07-03 19:05 - 2014-07-03 19:05 - 00041128 _____ () C:\Users\mitzekatzen\Desktop\mbam.txt
2014-07-03 19:01 - 2014-07-03 18:30 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-03 18:57 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Vss
2014-07-03 18:55 - 2014-04-05 12:30 - 00000000 ____D () C:\temp
2014-07-03 18:30 - 2014-07-03 18:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-02 22:48 - 2014-07-03 19:23 - 01016261 _____ (Thisisu) C:\Users\mitzekatzen\Desktop\JRT.exe
2014-07-02 22:47 - 2014-07-03 19:11 - 01346519 _____ () C:\Users\mitzekatzen\Desktop\adwcleaner_3.214.exe
2014-07-01 21:30 - 2014-04-10 15:22 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\HpUpdate
2014-07-01 00:45 - 2014-07-09 14:42 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-29 14:52 - 2014-01-19 14:41 - 00000000 ____D () C:\ProgramData\Atheros
2014-06-28 09:48 - 2014-07-09 14:42 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-28 09:07 - 2014-07-09 14:42 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-06-26 22:55 - 2013-08-22 17:38 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-26 22:55 - 2013-08-22 17:38 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-25 22:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-06-24 20:39 - 2014-07-06 20:13 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-24 20:39 - 2014-07-06 20:13 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-24 20:39 - 2014-07-06 20:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-22 22:14 - 2014-04-07 14:04 - 00004114 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-22 22:14 - 2014-04-07 14:04 - 00003878 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-20 12:41 - 2014-06-04 16:39 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\47076b4cc5bfaf77bbe68bb8381cfd6d
2014-06-19 03:39 - 2014-07-09 14:42 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-19 02:48 - 2014-07-09 14:42 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-19 02:16 - 2014-07-09 14:42 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-19 02:09 - 2014-07-09 14:42 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-19 01:51 - 2014-07-09 14:42 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-19 01:50 - 2014-07-09 14:42 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-19 01:48 - 2014-07-09 14:42 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-19 01:46 - 2014-07-09 14:42 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-19 01:39 - 2014-07-09 14:42 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-19 01:33 - 2014-07-09 14:42 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-19 01:32 - 2014-07-09 14:42 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-19 01:27 - 2014-07-09 14:42 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-19 01:12 - 2014-07-09 14:42 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-19 00:59 - 2014-07-09 14:42 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-19 00:58 - 2014-07-09 14:42 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-19 00:58 - 2014-07-09 14:42 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-19 00:57 - 2014-07-09 14:42 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-19 00:52 - 2014-07-09 14:42 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-19 00:51 - 2014-07-09 14:42 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-19 00:49 - 2014-07-09 14:42 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-19 00:45 - 2014-07-09 14:42 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-19 00:35 - 2014-07-09 14:42 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-19 00:34 - 2014-07-09 14:42 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-19 00:15 - 2014-07-09 14:42 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-19 00:13 - 2014-07-09 14:42 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-19 00:09 - 2014-07-09 14:42 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-19 00:07 - 2014-07-09 14:42 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-18 18:14 - 2014-04-10 00:07 - 00000000 ____D () C:\Eigene Dateien
2014-06-17 22:46 - 2014-06-03 23:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\Adobe
2014-06-17 18:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-17 00:26 - 2014-07-09 14:43 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-06-17 00:24 - 2014-07-09 14:43 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-06-16 16:41 - 2014-01-19 14:23 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-06-16 15:11 - 2014-04-06 12:07 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-06-16 15:09 - 2014-04-28 21:47 - 00000000 ____D () C:\Users\Peter
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-14 13:03 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-06-13 13:51 - 2014-04-06 11:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-06-12 23:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
Some content of TEMP:
====================
C:\Users\mitzekatzen\AppData\Local\Temp\avgnt.exe
C:\Users\mitzekatzen\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
Code:
ATTFilter
LastRegBack: 2014-07-02 17:48
==================== End Of Log ============================
vielleicht kannst du mir hierzu noch was sagen. |
|
09.07.2014, 19:13
| #12 |
| | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Hi Schrauber, erst mal vielen Dank für die bisher durchgeführten Aktionen. Ich bin froh, dass der Urheber der lästigen Meldung verschwunden ist. Kann man denn aus den verschiedenen LOG-Dateien ersehen, wo die Ursache war bzw. wer da was eingeschleußt hat? Da ich ja nicht so versiert bin, habe ich erst einmal mein Brot, deine Empfehlungen abzuarbeiten. Ich gebe dir dann Bescheid. Seit gestern habe ich noch eine lästige Musik auf einmal im Hintergrung, wie didum dingdongding (am laufenden Band). Ich könnte sicher den Ton abstellen, aber wo kommt das nun wieder her. Ich dachte erst, dass dies ein Hinweis für ein Update im Hintergrund wäre, aber falsch. Ich schicke dir deshalb noch mal ein FRST log (2x) mit: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-07-2014
Ran by mitzekatzen (administrator) on ASTRONOMIE on 09-07-2014 20:00:36
Running from C:\Users\mitzekatzen\Desktop
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(AMD) C:\Windows\System32\atieclxx.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_x64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
() C:\Program Files (x86)\Hardcopy\hcdll2_ex_Win32.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(sw4you) C:\Program Files (x86)\Hardcopy\hardcopy.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2890056 2013-09-06] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13647576 2013-08-27] (Realtek Semiconductor)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-10-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [vspdfprsrv.exe] => C:\Program Files (x86)\Avanquest\PDF Experte 8 Professional\vspdfprsrv.exe [6078464 2012-04-23] (Visagesoft)
HKLM-x32\...\Run: [Ulead AutoDetector v2] => C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\monitor.exe [90112 2004-08-27] (Ulead Systems, Inc.)
HKLM-x32\...\Run: [DInfoSetup] => C:\Program Files (x86)\D-Info99\SDinfo.exe [134656 1999-08-19] ()
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150016 2008-08-20] (Hewlett-Packard)
HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [296520 2014-05-01] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [224128 2014-03-18] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [183376 2014-05-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [bdruninstaller] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setupdownloader.exe" /args:"/after_restart"
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [750160 2014-06-24] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Atheros Communications))
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [AcerCloud] => C:\Program Files (x86)\Acer\Acer Portal\acpanel_win.exe [18247424 2014-02-13] (Acer Incorporated)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2014-04-10] (Google Inc.)
HKU\S-1-5-21-1462259780-1042906043-1045736432-1001\...\Run: [phonostar-PlayerTimer] => C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [42496 2014-01-11] ()
IFEO\acpanel_win.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\alohatripeaks-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\backitup.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ccc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cli.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\cradleofegyptcollectorsedition-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\epowerui.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\governorofpoker2_pe_wildtangent_v1.5-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\luxor_ev_x86-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\magic academy-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ncc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\nerorescueagent.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\pegglenights-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\photoproduct.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\plantsvszombies-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ravcpl64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\solitaire-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\trinklitsupreme-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\uninst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK
ShortcutTarget: Hardcopy.LNK -> C:\Program Files (x86)\Hardcopy\hardcopy.exe (sw4you)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk
ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin64\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
ShortcutTarget: WinZip Quick Pick.lnk -> C:\Program Files (x86)\WinZip\WZQKPICK.EXE (WinZip Computing, Inc. and H.C. Top Systems B.V.)
Startup: C:\Users\mitzekatzen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Photosmart 5520 series.lnk -> C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.arcor.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=ir_14_14_ie&cd=2XzuyEtN2Y1L1QzuyEtD0FtDtB0F0CtCyE0E0E0AtC0B0FyDtN0D0Tzu0SzztByEtN1L2XzutBtFtCzztFzztFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StDyEzy0BtC0DyCzztGzztB0E0AtG0A0F0FzytGtCzztA0AtGyDyC0E0EyCtDyC0DtByB0Azy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0D0FyDyBtD0C0CtGtD0C0CtBtGyDtAyD0FtGyC0ByE0BtGtA0Dzy0BtD0AtDtAtBtBzyzy2Q&cr=2054318036&ir=
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {096C9508-0CA2-410C-BD99-AF6765352394} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=ACJB
SearchScopes: HKCU - {6520DFD0-7405-458C-A90E-3CCC498D5E2E} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=securitascout
SearchScopes: HKCU - {792DF315-579A-41B7-AF43-A62729C82BC9} URL = hxxp://wetter.rtl.de/cp/shared/php/search_plz_ort.php?in={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll (RealDownloader)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default
FF NewTab: chrome://quick_start/content/index.html
FF SearchEngineOrder.1: Sichere Suche
FF Homepage: hxxp://www.arcor.de/
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&type=A111DE662&p=
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.5.2 - C:\Program Files (x86)\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @real.com/nppl3260;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=17.0.9 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=17.0.9.17 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar-Player - C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll ( )
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\abs@avira.com [2014-07-02]
FF Extension: Amazon-Icon - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\amazon-icon@giga.de [2014-04-22]
FF Extension: WOT - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-05-24]
FF Extension: DownloadHelper - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-24]
FF Extension: Bitdefender QuickScan - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2014-07-06]
FF Extension: Ghostery - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\firefox@ghostery.com.xpi [2014-05-24]
FF Extension: NoScript - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-06-07]
FF Extension: Adblock Plus - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-06]
FF Extension: Adblock Edge - C:\Users\mitzekatzen\AppData\Roaming\Mozilla\Firefox\Profiles\o27ths0t.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-05-27]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-05-01]
FF HKLM-x32\...\Firefox\Extensions: [{53D8DD28-1C83-41F3-B171-C2ED5B3E5DE8}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-04-06]
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-24] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1039952 2014-06-24] (Avira Operations GmbH & Co. KG)
S4 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [123984 2014-05-14] (Avira Operations GmbH & Co. KG)
S4 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2798336 2014-02-13] (Acer Incorporated)
S4 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-05] (Acer Incorporated)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [101192 2013-09-06] (ELAN Microelectronics Corp.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-04] (Intel Corporation)
S4 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-04-03] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [189912 2014-04-03] (McAfee, Inc.)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4278112 2013-08-01] (Symantec Corporation)
R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3999512 2013-06-03] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-04-06] ()
R2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-05-01] (RealNetworks, Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-04-07] () [File not signed]
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130584 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-06-24] (Avira Operations GmbH & Co. KG)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0405000.009\ccSetx64.sys [150104 2013-07-30] (Symantec Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70592 2014-04-03] (McAfee, Inc.)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-04] (Intel Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [177544 2014-04-03] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [311856 2014-04-03] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69352 2014-04-03] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [522360 2014-04-03] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [784760 2014-04-03] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [346760 2014-04-03] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
S3 SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [16152 2014-04-23] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2014-02-10] (TuneUp Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-09 20:00 - 2014-07-09 20:00 - 00025249 _____ () C:\Users\mitzekatzen\Desktop\FRST5.txt
2014-07-09 20:00 - 2014-07-09 20:00 - 00000000 ____D () C:\Users\mitzekatzen\Desktop\FRST-OlderVersion
2014-07-09 15:05 - 2014-07-09 15:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-09 15:03 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-07-09 14:43 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-09 14:43 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 14:43 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 14:43 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 14:43 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-07-09 14:43 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-07-09 14:43 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-07-09 14:43 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-07-09 14:43 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-07-09 14:43 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 14:42 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 14:42 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 14:42 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-07-09 14:42 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 14:42 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 14:42 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 14:42 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 14:42 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 14:42 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 14:42 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 14:42 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 14:42 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 14:42 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 14:42 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 14:42 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 14:42 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 14:42 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 14:42 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 14:42 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 14:42 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 14:42 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 14:42 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 14:42 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 14:42 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 14:42 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 14:42 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 14:42 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 14:42 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 14:42 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 14:42 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 14:42 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 14:42 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 14:42 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-09 14:42 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-07-09 14:42 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-07-09 14:42 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-07-09 14:42 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 14:42 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-09 14:42 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-09 14:42 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 14:42 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-09 14:42 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-09 14:42 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-09 14:42 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-07-09 14:42 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-07-09 14:42 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-07-09 14:42 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-07-09 14:39 - 2014-07-09 14:39 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-07-07 12:03 - 2014-07-07 12:03 - 00000983 _____ () C:\Users\mitzekatzen\Desktop\checkup.txt
2014-07-07 11:49 - 2014-07-07 11:49 - 00000980 _____ () C:\Users\mitzekatzen\Desktop\Ereignisse.txt
2014-07-06 23:52 - 2014-07-06 23:52 - 00060610 _____ () C:\Users\mitzekatzen\Desktop\AVSCAN-20140706-203011-DAC3B7C9.LOG
2014-07-06 20:26 - 2014-07-06 20:25 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-06 20:16 - 2014-07-06 20:16 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-07-06 20:13 - 2014-06-24 20:39 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-07-06 20:13 - 2014-06-24 20:39 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-07-06 20:13 - 2014-06-24 20:39 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-07-06 20:06 - 2014-01-19 09:38 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-07-06 19:18 - 2014-07-06 19:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\QuickScan
2014-07-05 17:12 - 2014-07-05 17:12 - 02347384 _____ (ESET) C:\Users\mitzekatzen\Desktop\esetsmartinstaller_deu-1.exe
2014-07-05 13:03 - 2014-07-05 13:02 - 00854390 _____ () C:\Users\mitzekatzen\Desktop\SecurityCheck.exe
2014-07-03 19:29 - 2014-07-03 19:29 - 00001119 _____ () C:\Users\mitzekatzen\Desktop\JRT.txt
2014-07-03 19:25 - 2014-07-03 19:25 - 00000000 ____D () C:\Windows\ERUNT
2014-07-03 19:23 - 2014-07-02 22:48 - 01016261 _____ (Thisisu) C:\Users\mitzekatzen\Desktop\JRT.exe
2014-07-03 19:19 - 2014-07-03 19:19 - 00009056 _____ () C:\Users\mitzekatzen\Desktop\AdwCleaner[S0].txt
2014-07-03 19:12 - 2014-07-03 19:15 - 00000000 ____D () C:\AdwCleaner
2014-07-03 19:11 - 2014-07-02 22:47 - 01346519 _____ () C:\Users\mitzekatzen\Desktop\adwcleaner_3.214.exe
2014-07-03 19:05 - 2014-07-03 19:05 - 00041128 _____ () C:\Users\mitzekatzen\Desktop\mbam.txt
2014-07-03 18:30 - 2014-07-03 19:01 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-03 18:30 - 2014-07-03 18:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-03 18:30 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-03 18:30 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-03 18:30 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-02 20:43 - 2014-07-09 20:00 - 00000000 ____D () C:\FRST
2014-07-02 20:41 - 2014-07-09 20:00 - 02084352 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-16 16:41 - 2014-07-06 20:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-06-16 16:41 - 2014-07-06 20:12 - 00000000 ____D () C:\ProgramData\Avira
2014-06-16 16:41 - 2014-07-06 20:12 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-06-16 16:41 - 2014-07-06 20:08 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-11 19:58 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 19:58 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 19:58 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 19:58 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-11 19:57 - 2014-05-10 05:46 - 02151424 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 19:57 - 2014-05-10 05:22 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 19:57 - 2014-05-09 01:06 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-06-11 19:57 - 2014-05-05 06:02 - 03360256 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 19:57 - 2014-04-30 13:16 - 01336648 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-06-11 19:57 - 2014-04-30 05:51 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-06-11 19:57 - 2014-04-18 16:57 - 00032600 _____ (Microsoft Corporation) C:\Windows\system32\ploptin.dll
2014-06-11 19:57 - 2014-04-18 16:44 - 01466856 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-06-11 19:57 - 2014-04-18 15:29 - 01200288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-06-11 19:57 - 2014-04-18 11:44 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\energyprov.dll
2014-06-11 19:57 - 2014-04-18 10:32 - 00805376 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-06-11 19:57 - 2014-04-18 10:21 - 01126912 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 10:09 - 08652800 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-18 09:51 - 00836608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-06-11 19:57 - 2014-04-18 09:49 - 05833216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-06-11 19:57 - 2014-04-14 11:20 - 00324888 _____ (Microsoft Corporation) C:\Windows\system32\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-14 10:01 - 00285144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCaptureEngine.dll
2014-06-11 19:57 - 2014-04-11 08:13 - 01200128 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-06-11 19:57 - 2014-04-11 06:51 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 06:23 - 00209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpencom.dll
2014-06-11 19:57 - 2014-04-11 05:30 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-06-11 19:57 - 2014-04-09 13:53 - 00337240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2014-06-11 19:57 - 2014-04-09 08:39 - 00191488 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 07:44 - 00144384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2014-06-11 19:57 - 2014-04-09 05:33 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2014-06-11 19:57 - 2014-04-08 04:01 - 00589656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00372568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-06-11 19:57 - 2014-04-06 18:34 - 00275800 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-06-11 19:57 - 2014-04-06 18:32 - 00125496 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 18:31 - 21268952 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-11 19:57 - 2014-04-06 18:30 - 00201920 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 18:24 - 00360792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fltMgr.sys
2014-06-11 19:57 - 2014-04-06 18:20 - 02140888 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01403856 _____ (Microsoft Corporation) C:\Windows\system32\winmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 01379064 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00881616 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00765408 _____ (Microsoft Corporation) C:\Windows\system32\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00609448 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00491744 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00467496 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00463256 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00364640 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00244880 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-06-11 19:57 - 2014-04-06 18:20 - 00233912 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-06-11 19:57 - 2014-04-06 18:20 - 00028408 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-06-11 19:57 - 2014-04-06 17:23 - 00098584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 18755672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-11 19:57 - 2014-04-06 17:22 - 00178184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 02144984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 01209616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmde.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00707048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00669856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmpeg2srcsnk.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00518544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00406504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00387896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00326024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-06-11 19:57 - 2014-04-06 17:16 - 00305768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-06-11 19:57 - 2014-04-06 14:58 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2014-06-11 19:57 - 2014-04-06 14:51 - 00467968 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-06-11 19:57 - 2014-04-06 14:33 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\MDEServer.exe
2014-06-11 19:57 - 2014-04-06 14:24 - 00271872 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2014-06-11 19:57 - 2014-04-06 14:06 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2014-06-11 19:57 - 2014-04-06 13:55 - 16872448 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:54 - 12711424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-06-11 19:57 - 2014-04-06 13:26 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2014-06-11 19:57 - 2014-04-06 13:20 - 00201216 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-06-11 19:57 - 2014-04-06 13:01 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-06-11 19:57 - 2014-04-06 12:52 - 00955904 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:51 - 01230336 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:37 - 00800768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-06-11 19:57 - 2014-04-06 12:36 - 00888320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-06-11 19:57 - 2014-04-06 12:05 - 01222656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-06 11:59 - 00982016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Streaming.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 02124840 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00307304 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-06-11 19:57 - 2014-04-03 10:12 - 00130144 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2014-06-11 19:57 - 2014-04-03 09:59 - 02518872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 19:57 - 2014-04-03 09:59 - 00428888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 19:57 - 2014-04-03 06:03 - 00230808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-06-11 19:57 - 2014-04-03 06:03 - 00111528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpapi.dll
2014-06-11 19:57 - 2014-04-03 05:53 - 01797896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d9.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 04269056 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-06-11 19:57 - 2014-04-03 04:53 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-06-11 19:57 - 2014-04-03 04:51 - 01584128 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-06-11 19:57 - 2014-04-03 04:23 - 00402432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-06-11 19:57 - 2014-04-03 04:23 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlscsp.dll
2014-06-11 19:57 - 2014-04-03 04:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2014-06-11 19:57 - 2014-04-01 08:23 - 00384856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-06-11 19:57 - 2014-03-31 07:42 - 07425368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-06-11 19:57 - 2014-03-31 02:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d8thk.dll
2014-06-11 19:57 - 2014-03-31 02:01 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-06-11 19:57 - 2014-03-31 01:43 - 00761856 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-06-11 19:57 - 2014-03-31 00:54 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-06-11 19:57 - 2014-03-31 00:49 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:35 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-06-11 19:57 - 2014-03-31 00:11 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-06-11 19:57 - 2014-03-30 23:47 - 00872448 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-06-11 19:57 - 2014-03-28 17:58 - 00407016 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2014-06-11 19:57 - 2014-03-27 08:16 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-06-11 19:57 - 2014-03-27 07:36 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:59 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-06-11 19:57 - 2014-03-27 06:48 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll
2014-06-11 19:57 - 2014-03-27 06:19 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-06-11 19:57 - 2014-03-27 05:46 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-06-11 19:57 - 2014-03-27 05:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\swprv.dll
2014-06-11 19:57 - 2014-03-27 05:10 - 01436160 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-06-11 19:57 - 2014-03-25 00:58 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-06-11 19:57 - 2014-03-20 05:48 - 00263424 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-06-11 19:57 - 2014-03-20 02:44 - 06645248 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-11 19:57 - 2014-03-20 01:33 - 05774848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-11 19:57 - 2014-03-19 10:15 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 10:07 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-06-11 19:57 - 2014-03-19 09:24 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-11 19:57 - 2014-03-19 09:17 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanhlp.dll
2014-06-11 19:57 - 2014-03-19 08:36 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:56 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-11 19:57 - 2014-03-19 07:45 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-06-11 19:57 - 2014-03-19 07:19 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 07:07 - 00370176 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 07:02 - 01527296 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-06-11 19:57 - 2014-03-19 07:00 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-06-11 19:57 - 2014-03-19 06:51 - 00300544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-06-11 19:57 - 2014-03-19 06:31 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-06-11 19:57 - 2014-03-19 06:18 - 02688000 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-06-11 19:57 - 2014-03-18 10:19 - 00077312 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-06-11 19:57 - 2014-03-18 07:00 - 07173120 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-18 06:52 - 05104640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2014-06-11 19:57 - 2014-03-17 07:09 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 06:11 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-06-11 19:57 - 2014-03-17 05:01 - 00486912 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-06-11 19:57 - 2014-03-17 04:47 - 01025024 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-06-11 19:57 - 2014-03-17 04:45 - 00370176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-06-11 19:57 - 2014-03-14 08:26 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-14 08:10 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GeofenceMonitorService.dll
2014-06-11 19:57 - 2014-03-06 14:42 - 00310616 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-06-11 19:55 - 2014-05-19 08:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-06-11 19:55 - 2014-05-19 08:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-06-11 19:55 - 2014-05-19 07:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 03048904 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-06-11 19:55 - 2014-05-01 15:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-06-11 19:55 - 2014-05-01 09:14 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-06-11 19:55 - 2014-05-01 09:05 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-06-11 19:55 - 2014-05-01 08:51 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-06-11 19:55 - 2014-05-01 07:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-06-11 19:55 - 2014-04-30 06:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-06-11 19:55 - 2014-04-30 06:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-06-11 19:55 - 2014-04-30 05:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
==================== One Month Modified Files and Folders =======
2021-10-21 15:36 - 2014-01-19 14:29 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat
2021-10-04 09:34 - 2014-01-19 14:29 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat
2014-07-09 20:00 - 2014-07-09 20:00 - 00025249 _____ () C:\Users\mitzekatzen\Desktop\FRST5.txt
2014-07-09 20:00 - 2014-07-09 20:00 - 00000000 ____D () C:\Users\mitzekatzen\Desktop\FRST-OlderVersion
2014-07-09 20:00 - 2014-07-02 20:43 - 00000000 ____D () C:\FRST
2014-07-09 20:00 - 2014-07-02 20:41 - 02084352 _____ (Farbar) C:\Users\mitzekatzen\Desktop\FRST64.exe
2014-07-09 20:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-07-09 19:59 - 2014-01-19 22:44 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2014-07-09 19:59 - 2014-01-19 22:44 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2014-07-09 19:59 - 2013-10-31 08:27 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-09 19:47 - 2014-04-16 20:48 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{26E28335-1916-4357-9E6B-52CB3526D0BF}
2014-07-09 19:20 - 2014-04-03 17:52 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-09 19:19 - 2014-04-07 14:04 - 00001142 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-09 19:01 - 2014-01-19 14:00 - 01155146 _____ () C:\Windows\WindowsUpdate.log
2014-07-09 15:11 - 2014-05-03 08:58 - 00003326 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-09 15:11 - 2014-05-01 20:59 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-09 15:11 - 2014-04-05 14:37 - 00000000 __RDO () C:\Users\mitzekatzen\SkyDrive
2014-07-09 15:10 - 2014-04-07 14:04 - 00001138 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-09 15:09 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-09 15:08 - 2013-08-22 16:44 - 00563464 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-09 15:06 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-07-09 15:05 - 2014-07-09 15:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-09 15:05 - 2013-08-22 21:11 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 15:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-07-09 15:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 15:05 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-09 15:05 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-07-09 15:05 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-07-09 15:04 - 2014-04-05 12:58 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 15:04 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-07-09 15:03 - 2014-04-05 12:58 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-09 14:39 - 2014-07-09 14:39 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-07-09 14:38 - 2014-05-31 17:19 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-09 14:38 - 2014-05-31 17:19 - 00003304 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1462259780-1042906043-1045736432-1001
2014-07-08 20:19 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-07-08 20:07 - 2013-10-31 08:20 - 02791134 _____ () C:\Windows\PFRO.log
2014-07-07 12:33 - 2014-04-22 15:46 - 00000000 ____D () C:\Users\mitzekatzen\Desktop\MEDIA-CONVERTER WANDLER
2014-07-07 12:03 - 2014-07-07 12:03 - 00000983 _____ () C:\Users\mitzekatzen\Desktop\checkup.txt
2014-07-07 11:49 - 2014-07-07 11:49 - 00000980 _____ () C:\Users\mitzekatzen\Desktop\Ereignisse.txt
2014-07-06 23:52 - 2014-07-06 23:52 - 00060610 _____ () C:\Users\mitzekatzen\Desktop\AVSCAN-20140706-203011-DAC3B7C9.LOG
2014-07-06 20:36 - 2014-04-23 19:56 - 00000000 ____D () C:\Users\mitzekatzen\Desktop\AVIRA free
2014-07-06 20:25 - 2014-07-06 20:26 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-06 20:16 - 2014-07-06 20:16 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\Avira
2014-07-06 20:13 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-07-06 20:12 - 2014-06-16 16:41 - 00000000 ____D () C:\ProgramData\Avira
2014-07-06 20:12 - 2014-06-16 16:41 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-07-06 20:08 - 2014-06-16 16:41 - 00001117 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-07-06 20:06 - 2014-04-06 23:03 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\CrashDumps
2014-07-06 19:18 - 2014-07-06 19:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\QuickScan
2014-07-05 17:13 - 2014-04-03 17:57 - 00000000 ____D () C:\Users\mitzekatzen\Downloads\Programmsoftware
2014-07-05 17:12 - 2014-07-05 17:12 - 02347384 _____ (ESET) C:\Users\mitzekatzen\Desktop\esetsmartinstaller_deu-1.exe
2014-07-05 13:04 - 2013-08-22 16:46 - 00026914 _____ () C:\Windows\setupact.log
2014-07-05 13:02 - 2014-07-05 13:03 - 00854390 _____ () C:\Users\mitzekatzen\Desktop\SecurityCheck.exe
2014-07-03 19:29 - 2014-07-03 19:29 - 00001119 _____ () C:\Users\mitzekatzen\Desktop\JRT.txt
2014-07-03 19:25 - 2014-07-03 19:25 - 00000000 ____D () C:\Windows\ERUNT
2014-07-03 19:19 - 2014-07-03 19:19 - 00009056 _____ () C:\Users\mitzekatzen\Desktop\AdwCleaner[S0].txt
2014-07-03 19:15 - 2014-07-03 19:12 - 00000000 ____D () C:\AdwCleaner
2014-07-03 19:15 - 2014-04-03 17:46 - 00000000 ____D () C:\Users\mitzekatzen
2014-07-03 19:05 - 2014-07-03 19:05 - 00041128 _____ () C:\Users\mitzekatzen\Desktop\mbam.txt
2014-07-03 19:01 - 2014-07-03 18:30 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-03 18:57 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\Vss
2014-07-03 18:55 - 2014-04-05 12:30 - 00000000 ____D () C:\temp
2014-07-03 18:30 - 2014-07-03 18:30 - 00001082 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-03 18:30 - 2014-07-03 18:30 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-07-02 22:48 - 2014-07-03 19:23 - 01016261 _____ (Thisisu) C:\Users\mitzekatzen\Desktop\JRT.exe
2014-07-02 22:47 - 2014-07-03 19:11 - 01346519 _____ () C:\Users\mitzekatzen\Desktop\adwcleaner_3.214.exe
2014-07-01 21:30 - 2014-04-10 15:22 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Roaming\HpUpdate
2014-07-01 00:45 - 2014-07-09 14:42 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Bluetooth Folder
2014-06-29 14:52 - 2014-06-29 14:52 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\BMExplorer
2014-06-29 14:52 - 2014-01-19 14:41 - 00000000 ____D () C:\ProgramData\Atheros
2014-06-28 09:48 - 2014-07-09 14:42 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-28 09:07 - 2014-07-09 14:42 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-06-26 22:55 - 2013-08-22 17:38 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-26 22:55 - 2013-08-22 17:38 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-25 22:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-06-24 20:39 - 2014-07-06 20:13 - 00130584 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-24 20:39 - 2014-07-06 20:13 - 00117712 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-24 20:39 - 2014-07-06 20:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-06-22 22:14 - 2014-06-22 22:14 - 00000000 ____D () C:\Program Files (x86)\GUM501.tmp
2014-06-22 22:14 - 2014-04-07 14:04 - 00004114 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-22 22:14 - 2014-04-07 14:04 - 00003878 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-20 12:41 - 2014-06-04 16:39 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\47076b4cc5bfaf77bbe68bb8381cfd6d
2014-06-19 03:39 - 2014-07-09 14:42 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-19 02:48 - 2014-07-09 14:42 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-19 02:16 - 2014-07-09 14:42 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-19 02:09 - 2014-07-09 14:42 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-19 01:51 - 2014-07-09 14:42 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-19 01:50 - 2014-07-09 14:42 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-19 01:48 - 2014-07-09 14:42 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-19 01:46 - 2014-07-09 14:42 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-19 01:39 - 2014-07-09 14:42 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-19 01:33 - 2014-07-09 14:42 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-19 01:32 - 2014-07-09 14:42 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-19 01:27 - 2014-07-09 14:42 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-19 01:12 - 2014-07-09 14:42 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-19 00:59 - 2014-07-09 14:42 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-19 00:58 - 2014-07-09 14:42 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-19 00:58 - 2014-07-09 14:42 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-19 00:57 - 2014-07-09 14:42 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-19 00:52 - 2014-07-09 14:42 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-19 00:51 - 2014-07-09 14:42 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-19 00:49 - 2014-07-09 14:42 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-19 00:45 - 2014-07-09 14:42 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-19 00:35 - 2014-07-09 14:42 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-19 00:34 - 2014-07-09 14:42 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-19 00:15 - 2014-07-09 14:42 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-19 00:13 - 2014-07-09 14:42 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-19 00:09 - 2014-07-09 14:42 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-19 00:07 - 2014-07-09 14:42 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-18 18:14 - 2014-04-10 00:07 - 00000000 ____D () C:\Eigene Dateien
2014-06-17 22:46 - 2014-06-03 23:18 - 00000000 ____D () C:\Users\mitzekatzen\AppData\Local\Adobe
2014-06-17 18:07 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-17 00:26 - 2014-07-09 14:43 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-06-17 00:24 - 2014-07-09 14:43 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-06-16 16:41 - 2014-01-19 14:23 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\ProgramData\McAfee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-06-16 15:13 - 2013-10-31 08:40 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-06-16 15:11 - 2014-04-06 12:07 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-06-16 15:09 - 2014-04-28 21:47 - 00000000 ____D () C:\Users\Peter
2014-06-15 11:33 - 2014-06-15 11:33 - 00000000 ____D () C:\Users\mitzekatzen\Documents\Fax
2014-06-14 13:03 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-06-13 13:51 - 2014-04-06 11:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-12 23:25 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2014-06-12 23:25 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-06-11 19:54 - 2014-06-11 19:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 19:53 - 2014-06-11 19:53 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 19:53 - 2014-06-11 19:53 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 19:51 - 2014-06-11 19:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
Some content of TEMP:
====================
C:\Users\mitzekatzen\AppData\Local\Temp\avgnt.exe
C:\Users\mitzekatzen\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
Code:
ATTFilter
LastRegBack: 2014-07-02 17:48
==================== End Of Log ============================
Vielleicht kannst du mir hier noch helfen. Gruß Peter |
|
10.07.2014, 15:08
| #13 | |
| /// the machine /// TB-Ausbilder | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.GenZitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
12.07.2014, 17:56
| #14 |
| | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Hi Schrauber, eigentlich nicht so richtig, ich glaube, es ist was aus der Registry, das eine ist ein Telefonbuch (D-info99), was von einer CD installiert wurde, das andere ist ein Internet-Radio (phonostar-Player), aber ich kann beides nicht so richtig zuordnen, wobei beide schon relativ lange auf dem PC installiert sind. Vielleicht kannst Du mir mitteilen, was es mit den beiden Einträgen auf sich hat, danke. Ich bin noch bei der Abarbeitung Deiner Hinweise, aber fast fertig. Sobald ich das erledigt habe, gebe ich Bescheid und eventuelle Ergebnisse.  Gruß Peter |
|
13.07.2014, 13:06
| #15 |
| /// the machine /// TB-Ausbilder | Sicherheitsmeldung AVIRA: C:Windows\Temp\RSTUpdater.exe; TR/Dropper.Gen Das Radio Ding würde ich mal deinstallieren.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
Linear-Darstellung
