Vaio FZ21M mit Windows 7 CPU und Lüfter ständig über 70% und teilweises Einfrieren

Schumania · 03.07.2014, 20:48

Mein Läppi will nicht mehr richtig!
CPU ständig weit über 70%
Lüfter am Anschlag
Programme und Internet teilweise extrem langsam bis hin zu völligem Einfrieren!

Ausserdem in der Taskleiste ein icon das sich nicht entfernen lässt - bei anklicken öffnet sich Browser mit folgender Adresse: hxxp://search.safefinder.com/?st=sc&q=

Ratlos um Hilfe bitte!
Danke

Hier die Logfiles von defogger, frst und gmer

Code:

ATTFilter

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 21:18 on 03/07/2014 (user)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version:01-07-2014
Ran by user at 2014-07-03 17:11:50
Running from C:\Users\user\Downloads\Andreas\Programme\security
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Anti-Virus (Enabled - Out of date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

Adobe Flash Player 13 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.125 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
AllShare Framework DMS (HKLM\...\{1C2A409B-3D00-4EE7-B13C-3C70AB8704B0}) (Version: 1.3.23 - Samsung)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version:  - ALPS ELECTRIC CO., LTD.)
ANT Drivers Installer x86 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
CameraHelperMsi (Version: 13.51.815.0 - Logitech) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Dart.O.Mat 501 (R2D2) (HKLM\...\InstallShield_{0F93411B-7262-414F-B452-F1BE4767990E}) (Version: 3.1.1.1 - Sheriff Productions)
Dart.O.Mat 501 (R2D2) (Version: 3.1.1.1 - Sheriff Productions) Hidden
Dojotech Spotify Recorder (HKLM\...\{461179FC-E2AC-4CC8-AA95-82D35FB3E7EA}) (Version: 3.3 - Dojotech Software)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
Elevated Installer (Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Fotogalerie (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free Video to MP3 Converter version 5.0.36.319 (HKLM\...\Free Video to MP3 Converter_is1) (Version: 5.0.36.319 - DVDVideoSoft Ltd.)
Garmin Express (HKLM\...\{55ae01f2-f0a8-4342-a9cc-a0327cdaa811}) (Version: 3.2.7.0 - Garmin Ltd or its subsidiaries)
Garmin Express (Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (Version: 3.2.7.0 - Garmin Ltd or its subsidiaries) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Talk Plugin (HKLM\...\{C1E3DFE7-4EAD-3E9E-A826-E06055BA5921}) (Version: 5.4.2.18903 - Google)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Kaspersky Anti-Virus (HKLM\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Anti-Virus (Version: 14.0.0.4651 - Kaspersky Lab) Hidden
K-Lite Codec Pack 9.3.0 (Basic) (HKLM\...\KLiteCodecPack_is1) (Version: 9.3.0 - )
Konz 2013 (HKLM\...\InstallShield_{76651FD7-2B71-4B61-9F3A-E82F52F08D92}) (Version: 1.00.0000 - USM)
Konz 2013 (Version: 1.00.0000 - USM) Hidden
Logitech Webcam-Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
LWS Facebook (Version: 13.50.854.0 - Logitech) Hidden
LWS Gallery (Version: 13.51.827.0 - Logitech) Hidden
LWS Help_main (Version: 13.51.828.0 - Logitech) Hidden
LWS Launcher (Version: 13.51.828.0 - Logitech) Hidden
LWS Motion Detection (Version: 13.51.815.0 - Logitech) Hidden
LWS Pictures And Video (Version: 13.51.815.0 - Logitech) Hidden
LWS Twitter (Version: 13.30.1346.0 - Logitech) Hidden
LWS Webcam Software (Version: 13.51.815.0 - Logitech) Hidden
LWS WLM Plugin (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (Version: 13.31.1038.0 - Logitech) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Camera Codec Pack (HKLM\...\{968AE11C-EDF7-4D18-B416-848DA26EADFA}) (Version: 6.3.9723.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Outlook-Sicherung für Persönliche Ordner (HKLM\...\{C63E7C60-25EB-11D3-8EDA-00A0C911E8E5}) (Version: 1.10.0.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{887868A2-D6DE-3255-AA92-AA0B5A59B874}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM\...\{92a68ee6-690a-4c60-b5ac-4292593cb68c}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden
Movie Maker (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (Version: 16.4.1108.0727 - Microsoft) Hidden
MyPhoneExplorer (HKLM\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
NVIDIA 3D Vision Treiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (Version: 7.17.13.2702 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden
Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
PokerStars.eu (HKLM\...\PokerStars.eu) (Version:  - PokerStars.eu)
Ravensburger tiptoi (HKLM\...\Ravensburger tiptoi) (Version:  - )
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.5.1.12123_2 - Samsung Electronics Co., Ltd.) Hidden
Samsung Link 1.8.1.1405191947 (HKLM\...\8474-7877-9059-0204) (Version: 1.8.1.1405191947 - Copyright 2013 SAMSUNG)
Samsung SideSync 3.0 (HKLM\...\Samsung SideSync) (Version: 3.0.2.546 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (HKLM\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.44.0 - SAMSUNG Electronics Co., Ltd.)
scoreBOARDchief 2010 (HKLM\...\{4FA6AD7A-5845-4957-8E7C-2B6AB63BE08C}) (Version: 1.00.0000 - Sheriff Productions)
Skype™ 6.16 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Spotify (HKCU\...\Spotify) (Version: 0.9.10.14.g578d350b - Spotify AB)
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.)
Steuer 2012 (HKLM\...\{01159E8A-44F7-4885-A7F9-872CE4D74063}) (Version: 20.00.8137 - Buhl Data Service GmbH)
Sync-Plus (HKLM\...\Sync-Plus) (Version: 1.0.0.4 - Deutsche Telekom AG)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2881065) 32-Bit Edition (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{B7EF38F7-1D58-4085-A9A4-0F6C69A5AA1E}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VAIO Camera Capture Utility (HKLM\...\{6D2576EC-A0E9-418A-A09A-409933A3B6F4}) (Version: 2.7.03.09250 - Sony Corporation)
VideoDownloaderUltimate for Firefox (HKCU\...\VideoDownloaderUltimate_Firefox) (Version:  - Link64)
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
Windows 7 Upgrade Advisor (HKLM\...\{9A4D182C-35C7-4791-8484-4304EBC9101A}) (Version: 2.0.5000.0 - Microsoft Corporation)
Windows Live Communications Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
WinRAR 5.00 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH)

==================== Restore Points  =========================

12-06-2014 21:11:14 Windows Update
12-06-2014 21:15:20 Garmin Express
12-06-2014 21:17:34 Garmin Express
13-06-2014 03:36:18 Windows Update
14-06-2014 04:23:32 Installed Microsoft Fix it 50123
14-06-2014 05:20:51 Windows Update
14-06-2014 18:04:00 Installed Microsoft Camera Codec Pack
14-06-2014 18:24:31 Installed Microsoft Camera Codec Pack
18-06-2014 17:39:15 Windows Update
18-06-2014 19:44:15 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
18-06-2014 20:10:45 DirectX wurde installiert
19-06-2014 22:20:43 Installed Dojotech Spotify Recorder
20-06-2014 05:12:37 Microsoft Office Outlook Connector wurde installiert.
24-06-2014 12:33:43 Windows Update
01-07-2014 23:08:38 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {11D6DE3F-FB16-40E0-8A22-0E96095B344F} - System32\Tasks\{284D1D92-1121-47AE-8C4C-4CAFA091E189} => Chrome.exe hxxp://ui.skype.com/ui/0/6.16.0.105/de/abandoninstall?page=tsProgressBar
Task: {23AA3E77-EA56-4D0A-95B7-2AD8DB36CC1F} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000UA => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2014-04-09] (Google Inc.)
Task: {5804BF5F-474B-4A5B-8E69-7BEDC877FBE1} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {5DB0A8CD-6B59-4227-97CC-EFEA547A6136} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\user\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <==== ATTENTION
Task: {64067346-0771-47F1-BC98-445F4BF469F7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-19] (Google Inc.)
Task: {66F66D36-7996-4ECD-9098-99819961FA26} - System32\Tasks\{9FD6DDA8-E344-4A9F-B634-D051E10925DC} => C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE [2014-01-29] (Microsoft Corporation)
Task: {8AB61B0D-B6E7-402A-BD49-23D3882FFE41} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search &amp; Destroy 2\SDImmunize.exe
Task: {8F0DAB64-7DEE-4414-BDDF-E5F9388174A8} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {9B5A8CAF-13FA-4521-8168-46561E518AB7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-19] (Google Inc.)
Task: {9D059AC3-8455-4CE9-8C55-6CCBCD0CC320} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {A89D4F36-7DB3-4F1B-BA5B-92A1CFC35829} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search &amp; Destroy 2\SDUpdate.exe
Task: {AE916A25-1AE8-4095-9142-E3F3D9DB674E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-02] (Adobe Systems Incorporated)
Task: {BBA256D4-3C80-45B8-B15C-DAAE60890856} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-05-13] (Microsoft)
Task: {C85ED31B-B738-4C55-8094-CDD95477255F} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search &amp; Destroy 2\SDScan.exe
Task: {D8216727-0661-4F0D-A6B2-DE01EDD44B39} - System32\Tasks\GarminUpdaterTask => C:\Program Files\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-06-09] ()
Task: {D8FFCA2E-8018-47C1-83C3-A8FDA25B0D3A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000Core => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2014-04-09] (Google Inc.)
Task: {E873BE66-45E8-4F45-8C50-B864EF6B3447} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {F0C9192B-1BC4-475C-9941-40AA4F6DA03E} - System32\Tasks\{B24D3F7D-D002-420A-BCB6-7B8FD715235D} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.16.0.105/en/abandoninstall?page=tsProgressBar
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000Core.job => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000UA.job => C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-12-14 21:31 - 2013-08-30 01:08 - 00088864 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\dblite.dll
2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\kpcengine.2.3.dll
2014-01-23 19:52 - 2014-05-19 19:47 - 00014848 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll
2014-01-23 19:52 - 2014-05-19 19:47 - 01595392 _____ () C:\Program Files\Samsung\Samsung Link\scone_proxy.dll
2014-01-23 19:52 - 2014-05-19 19:47 - 01165824 _____ () C:\Program Files\Samsung\Samsung Link\scone_stub.dll
2013-12-21 11:15 - 2013-12-21 11:15 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\JNIInterface.dll
2013-12-21 11:15 - 2013-12-21 11:15 - 00119296 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ASFAPI.dll
2013-12-21 11:17 - 2013-12-21 11:17 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MediaDB_Manager.dll
2013-10-01 09:46 - 2013-10-01 09:46 - 00025600 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MediaDB.dll
2013-10-22 09:48 - 2013-10-22 09:48 - 00707072 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ContentDirectoryPresenter.dll
2013-12-21 11:17 - 2013-12-21 11:17 - 00589824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DMS_Manager.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00038912 _____ () C:\Windows\system32\boost_date_time-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00012800 _____ () C:\Windows\system32\boost_system-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00046592 _____ () C:\Windows\system32\boost_thread-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00227840 _____ () C:\Windows\system32\boost_serialization-vc90-mt-1_47.dll
2014-01-23 19:52 - 2014-05-19 19:47 - 00041472 _____ () C:\Program Files\Samsung\Samsung Link\JniIO.dll
2014-06-24 17:31 - 2014-06-24 17:31 - 00640512 _____ () C:\Windows\Temp\sqlite-3.7.151-x86-sqlitejdbc.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 01114624 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DMSManager.dll
2013-10-24 16:53 - 2013-10-24 16:53 - 00107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMCDP.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 00102400 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\FolderCDP.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 00077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MetadataFramework.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\sqlite3.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MoodExtractor.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 05717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMImgExtractor.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AutoChaptering.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexpat.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoThumb.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 04671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avcodec-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avutil-50.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avformat-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\swscale-0.dll
2013-10-25 19:49 - 2013-10-25 19:49 - 00028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AudioExtractor.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ID3Driver.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\tag.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libThumbnail.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RichInfoDriver.dll
2013-12-11 16:45 - 2013-12-11 16:45 - 00017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoExtractor.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 00117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ThumbnailMaker.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 01033728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageMagickWrapper.dll
2013-12-11 16:45 - 2013-12-11 16:45 - 00134144 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoMetadataDriver.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libKeyFrame.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\SECMetaDriver.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 00012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageExtractor.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\photoDriver.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexif-12.dll.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 00013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\TextExtractor.dll
2013-10-24 16:53 - 2013-10-24 16:53 - 00032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\Autobackup.dll
2013-04-19 16:38 - 2013-04-19 16:38 - 00055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RosettaAllShare.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_serialization-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_date_time-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_system-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 00046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_thread-vc90-mt-1_47.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 00044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\us.dll
2014-06-13 04:21 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-13 04:21 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-13 04:21 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
2014-06-13 04:21 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-13 04:21 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-07-02 01:25 - 2014-07-02 01:25 - 17024688 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\startupfolder: C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupfolder: C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sync-Plus.lnk => C:\Windows\pss\Sync-Plus.lnk.Startup
MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files\Garmin\Express Tray\ExpressTray.exe"
MSCONFIG\startupreg: Google Update => "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: KiesAirMessage => C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
MSCONFIG\startupreg: KiesPreload => C:\Program Files\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide

==================== Faulty Device Manager Devices =============

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/03/2014 02:23:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AllShareFrameworkDMS.exe, Version: 1.3.0.23, Zeitstempel: 0x52b52bb2
Name des fehlerhaften Moduls: DMSManager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a81842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000940c
ID des fehlerhaften Prozesses: 0x1fe8
Startzeit der fehlerhaften Anwendung: 0xAllShareFrameworkDMS.exe0
Pfad der fehlerhaften Anwendung: AllShareFrameworkDMS.exe1
Pfad des fehlerhaften Moduls: AllShareFrameworkDMS.exe2
Berichtskennung: AllShareFrameworkDMS.exe3

Error: (07/03/2014 02:23:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AllShareFrameworkDMS.exe, Version: 1.3.0.23, Zeitstempel: 0x52b52bb2
Name des fehlerhaften Moduls: DMSManager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a81842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000940c
ID des fehlerhaften Prozesses: 0x1e18
Startzeit der fehlerhaften Anwendung: 0xAllShareFrameworkDMS.exe0
Pfad der fehlerhaften Anwendung: AllShareFrameworkDMS.exe1
Pfad des fehlerhaften Moduls: AllShareFrameworkDMS.exe2
Berichtskennung: AllShareFrameworkDMS.exe3

Error: (07/03/2014 02:23:09 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AllShareFrameworkDMS.exe, Version: 1.3.0.23, Zeitstempel: 0x52b52bb2
Name des fehlerhaften Moduls: DMSManager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a81842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000940c
ID des fehlerhaften Prozesses: 0x1cc4
Startzeit der fehlerhaften Anwendung: 0xAllShareFrameworkDMS.exe0
Pfad der fehlerhaften Anwendung: AllShareFrameworkDMS.exe1
Pfad des fehlerhaften Moduls: AllShareFrameworkDMS.exe2
Berichtskennung: AllShareFrameworkDMS.exe3

Error: (07/03/2014 02:23:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AllShareFrameworkDMS.exe, Version: 1.3.0.23, Zeitstempel: 0x52b52bb2
Name des fehlerhaften Moduls: DMSManager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a81842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000940c
ID des fehlerhaften Prozesses: 0x1b88
Startzeit der fehlerhaften Anwendung: 0xAllShareFrameworkDMS.exe0
Pfad der fehlerhaften Anwendung: AllShareFrameworkDMS.exe1
Pfad des fehlerhaften Moduls: AllShareFrameworkDMS.exe2
Berichtskennung: AllShareFrameworkDMS.exe3

Error: (07/03/2014 02:22:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AllShareFrameworkDMS.exe, Version: 1.3.0.23, Zeitstempel: 0x52b52bb2
Name des fehlerhaften Moduls: DMSManager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a81842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000940c
ID des fehlerhaften Prozesses: 0x1920
Startzeit der fehlerhaften Anwendung: 0xAllShareFrameworkDMS.exe0
Pfad der fehlerhaften Anwendung: AllShareFrameworkDMS.exe1
Pfad des fehlerhaften Moduls: AllShareFrameworkDMS.exe2
Berichtskennung: AllShareFrameworkDMS.exe3

Error: (07/03/2014 02:22:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AllShareFrameworkDMS.exe, Version: 1.3.0.23, Zeitstempel: 0x52b52bb2
Name des fehlerhaften Moduls: DMSManager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a81842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000940c
ID des fehlerhaften Prozesses: 0x1814
Startzeit der fehlerhaften Anwendung: 0xAllShareFrameworkDMS.exe0
Pfad der fehlerhaften Anwendung: AllShareFrameworkDMS.exe1
Pfad des fehlerhaften Moduls: AllShareFrameworkDMS.exe2
Berichtskennung: AllShareFrameworkDMS.exe3

Error: (07/03/2014 02:22:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AllShareFrameworkDMS.exe, Version: 1.3.0.23, Zeitstempel: 0x52b52bb2
Name des fehlerhaften Moduls: DMSManager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a81842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000940c
ID des fehlerhaften Prozesses: 0x1f94
Startzeit der fehlerhaften Anwendung: 0xAllShareFrameworkDMS.exe0
Pfad der fehlerhaften Anwendung: AllShareFrameworkDMS.exe1
Pfad des fehlerhaften Moduls: AllShareFrameworkDMS.exe2
Berichtskennung: AllShareFrameworkDMS.exe3

Error: (07/03/2014 02:22:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AllShareFrameworkDMS.exe, Version: 1.3.0.23, Zeitstempel: 0x52b52bb2
Name des fehlerhaften Moduls: DMSManager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a81842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000940c
ID des fehlerhaften Prozesses: 0x1e1c
Startzeit der fehlerhaften Anwendung: 0xAllShareFrameworkDMS.exe0
Pfad der fehlerhaften Anwendung: AllShareFrameworkDMS.exe1
Pfad des fehlerhaften Moduls: AllShareFrameworkDMS.exe2
Berichtskennung: AllShareFrameworkDMS.exe3

Error: (07/03/2014 02:22:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AllShareFrameworkDMS.exe, Version: 1.3.0.23, Zeitstempel: 0x52b52bb2
Name des fehlerhaften Moduls: DMSManager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a81842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000940c
ID des fehlerhaften Prozesses: 0x1c6c
Startzeit der fehlerhaften Anwendung: 0xAllShareFrameworkDMS.exe0
Pfad der fehlerhaften Anwendung: AllShareFrameworkDMS.exe1
Pfad des fehlerhaften Moduls: AllShareFrameworkDMS.exe2
Berichtskennung: AllShareFrameworkDMS.exe3

Error: (07/03/2014 02:22:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AllShareFrameworkDMS.exe, Version: 1.3.0.23, Zeitstempel: 0x52b52bb2
Name des fehlerhaften Moduls: DMSManager.dll, Version: 0.0.0.0, Zeitstempel: 0x52a81842
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000940c
ID des fehlerhaften Prozesses: 0x1b48
Startzeit der fehlerhaften Anwendung: 0xAllShareFrameworkDMS.exe0
Pfad der fehlerhaften Anwendung: AllShareFrameworkDMS.exe1
Pfad des fehlerhaften Moduls: AllShareFrameworkDMS.exe2
Berichtskennung: AllShareFrameworkDMS.exe3


System errors:
=============
Error: (07/03/2014 04:11:15 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (07/03/2014 02:25:55 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (07/02/2014 01:20:36 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (07/02/2014 00:49:47 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Samsung Link Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/02/2014 00:45:02 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎02.‎07.‎2014 um 00:43:39 unerwartet heruntergefahren.

Error: (06/25/2014 02:32:42 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (06/25/2014 10:47:10 AM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (06/24/2014 07:51:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Samsung Link Service" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.

Error: (06/24/2014 06:00:45 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (06/24/2014 02:21:21 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0


Microsoft Office Sessions:
=========================
Error: (08/25/2012 00:30:36 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 9 seconds with 0 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-06-21 11:23:51.064
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-21 11:23:51.058
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-21 11:23:51.002
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-21 11:23:50.979
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-21 11:23:50.972
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-21 11:23:50.966
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-21 11:23:50.923
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-21 11:23:50.917
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-21 11:23:50.883
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-06-21 11:23:50.861
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 83%
Total physical RAM: 2046.43 MB
Available physical RAM: 347.45 MB
Total Pagefile: 4092.86 MB
Available Pagefile: 1225.43 MB
Total Virtual: 2047.88 MB
Available Virtual: 1886.98 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:148.95 GB) (Free:3.06 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 39BA1E98)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

==================== End Of Log ============================

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:01-07-2014
Ran by user (administrator) on SCHUMI-VAIO on 03-07-2014 17:09:28
Running from C:\Users\user\Downloads\Andreas\Programme\security
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\plugin-nm-server.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [167936 2012-09-03] (Alps Electric Co., Ltd.)
HKLM\...\Run: [vdultimate_firefox] => C:\ProgramData\VideoDownloaderUltimate\Firefox\vdultimate.exe [954368 2014-03-20] (Link64 GmbH)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] - rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-1806344340-3721178228-3502498018-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1806344340-3721178228-3502498018-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1806344340-3721178228-3502498018-1000\...\MountPoints2: {7c1cd4c3-03bb-11e2-8d0c-001bfb8d0a1e} - G:\AutoRun.exe
HKU\S-1-5-21-1806344340-3721178228-3502498018-1000\...\MountPoints2: {7c1cd4de-03bb-11e2-8d0c-001bfb8d0a1e} - G:\AutoRun.exe
Startup: C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
BootExecute: autocheck autochk * sdnclean.exe
GroupPolicyUsers\S-1-5-21-1806344340-3721178228-3502498018-1005\User: Group Policy restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1806344340-3721178228-3502498018-1004\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF68C6225F388CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}
SearchScopes: HKCU - DefaultScope {A1BD49DC-EFF7-4B2A-A983-4CEA6A90107D} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {A1BD49DC-EFF7-4B2A-A983-4CEA6A90107D} URL = https://www.google.com/search?q={searchTerms}
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\biqofvfm.default-1400897853959
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\user\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\user\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com [2013-10-19]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-10-19]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com [2013-10-19]
FF HKLM\...\Firefox\Extensions: [vdultimate@link64] - C:\ProgramData\VideoDownloaderUltimate\Firefox\videodownloaderultimate.xpi
FF Extension: Youtube and more - Video Downloader Ultimate - C:\ProgramData\VideoDownloaderUltimate\Firefox\videodownloaderultimate.xpi [2014-03-20]

Chrome: 
=======
CHR HomePage: https://chrome.google.com/webstore/launcher
CHR StartupUrls: "hxxp://www.google.de/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.4.600\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.550.14) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U55) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\user\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File
CHR Plugin: (Google Talk Plugin) - C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (HD for YouTube™) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2014-06-19]
CHR Extension: (Kaspersky Protection) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-03-25]
CHR Extension: (Google Cast) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-06-19]
CHR Extension: (vGet Cast (DLNA Controller)) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekdjofnchpbfmnfbedalmbdlhbabiapi [2014-06-19]
CHR Extension: (VNC Viewer for Google Chrome™) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\iabmpiboiopbgfabjmgeedhcmjenhbla [2014-06-19]
CHR Extension: (Video-Chat Vanilla Show) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgaehlpildddphihhaghbgijfebbbaeo [2014-06-19]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-27]
CHR Extension: (Google Chrome to Phone Extension) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco [2014-06-19]
CHR Extension: (Black & Gray) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\opngpggidjbhmmlapgcmcedfgblofagi [2014-06-26]
CHR HKLM\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-06-26]
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx [2013-08-14]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\ChromeExt\ab.crx [2013-08-14]

========================== Services (Whitelisted) =================

R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [401800 2013-12-21] (Samsung) [File not signed]
R2 avp; C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-19] (Kaspersky Lab ZAO)
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-07-18] (Teruten) [File not signed]
R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [310272 2012-06-01] (Microsoft Corporation)
R2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [435032 2014-06-09] (Garmin Ltd or its subsidiaries)
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [573280 2014-05-19] (Copyright 2013 SAMSUNG)
S3 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [741640 2014-05-13] (DEVGURU Co., LTD.)
S2 STacSV; C:\Windows\system32\stacsv.exe [94208 2012-08-25] (SigmaTel, Inc.)

==================== Drivers (Whitelisted) ====================

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [300544 2007-03-20] (AfaTech                  )
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-07-18] () [File not signed]
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-11-07] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [94304 2014-03-24] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [576608 2014-03-24] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-10-19] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25184 2014-02-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-19] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [144992 2013-12-19] (Kaspersky Lab ZAO)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [40736 2013-11-27] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv.sys [29728 2013-12-06] (Visicom Media Inc.)
S3 ss_conn_usb_driver; C:\Windows\System32\Drivers\ss_conn_usb_driver.sys [23296 2014-05-13] (DEVGURU Co., LTD.)
S3 STHDA; C:\Windows\System32\drivers\stwrt.sys [326656 2012-08-25] (SigmaTel, Inc.)
R3 ti21sony; C:\Windows\System32\drivers\ti21sony.sys [812544 2012-08-24] (Texas Instruments)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [15872 2013-02-12] (Microsoft Corporation)
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-03 17:08 - 2014-07-03 17:09 - 00000000 ___DC () C:\FRST
2014-07-03 17:07 - 2014-07-03 17:07 - 00000000 _____ () C:\Users\user\defogger_reenable
2014-07-03 17:00 - 2014-07-03 17:00 - 00051776 _____ () C:\Users\user\Desktop\Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten  - Trojaner-Board.htm
2014-07-03 15:42 - 2014-07-03 15:42 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2014-07-03 14:18 - 2014-07-03 14:18 - 00000056 _____ () C:\Windows\setupact.log
2014-07-03 14:18 - 2014-07-03 14:18 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-26 03:28 - 2014-06-26 03:28 - 00002261 _____ () C:\Users\user\Desktop\Chrome App Launcher.lnk
2014-06-26 03:28 - 2014-06-26 03:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-25 22:44 - 2014-06-25 22:44 - 00002164 _____ () C:\Users\user\Desktop\Samsung Link.lnk
2014-06-24 17:53 - 2014-06-24 17:53 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-24 17:35 - 2014-06-24 17:37 - 86530912 _____ (Copyright 2013 SAMSUNG) C:\Users\user\Downloads\SamsungLink_Installer32.exe
2014-06-24 16:19 - 2014-07-03 17:06 - 00000000 ___RD () C:\Users\user\Dropbox
2014-06-24 16:19 - 2014-06-24 16:19 - 00001386 _____ () C:\Users\user\Desktop\Dropbox.lnk
2014-06-24 16:16 - 2014-07-03 16:07 - 00000000 ____D () C:\Users\user\AppData\Roaming\DropboxMaster
2014-06-24 16:15 - 2014-06-24 16:15 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-24 16:11 - 2014-06-24 16:11 - 00318944 _____ (Dropbox, Inc.) C:\Users\user\Downloads\DropboxInstaller(1).exe
2014-06-20 07:11 - 2014-06-20 07:11 - 00000000 ___DC () C:\Program Files\MSECache
2014-06-20 04:14 - 2014-06-20 04:14 - 00088143 _____ () C:\Users\user\Downloads\collectionCache.bnk
2014-06-20 02:06 - 2014-06-20 02:06 - 00000000 ____D () C:\Users\user\AppData\Roaming\Dojotech Software
2014-06-20 01:47 - 2014-06-20 01:47 - 00000000 ____H () C:\Users\user\Documents\Default.rdp
2014-06-20 00:25 - 2014-06-20 00:25 - 00002637 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ___DC () C:\Program Files\Dojotech Software
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-06-20 00:12 - 2014-06-21 18:24 - 00000000 ____D () C:\Users\user\AppData\Roaming\Spotify
2014-06-20 00:12 - 2014-06-20 02:49 - 00000000 ____D () C:\Users\user\AppData\Local\Spotify
2014-06-20 00:12 - 2014-06-20 00:12 - 00001803 _____ () C:\Users\user\Desktop\Spotify.lnk
2014-06-20 00:12 - 2014-06-20 00:12 - 00001789 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-20 00:11 - 2014-06-20 00:11 - 00126112 _____ (Spotify Ltd) C:\Users\user\Downloads\SpotifySetup.exe
2014-06-18 22:19 - 2014-06-18 22:19 - 00001115 _____ () C:\Users\Public\Desktop\SideSync 3.0.lnk
2014-06-18 22:13 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-06-18 22:13 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-06-18 22:13 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-06-18 22:13 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-06-18 22:13 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-06-18 22:13 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-06-18 22:13 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-06-18 22:13 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-06-18 22:13 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-06-18 22:13 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-06-18 22:13 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-06-18 22:13 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-06-18 22:13 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-06-18 22:13 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-06-18 22:13 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-06-18 22:13 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-06-18 22:13 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-06-18 22:13 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-06-18 22:13 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-06-18 22:13 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-06-18 22:13 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-06-18 22:13 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-06-18 22:13 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-06-18 22:13 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-06-18 22:13 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-06-18 22:13 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-06-18 22:13 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-06-18 22:13 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-06-18 22:13 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-06-18 22:13 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-06-18 22:13 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-06-18 22:13 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-06-18 22:13 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-06-18 22:13 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-06-18 22:13 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-06-18 22:13 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-06-18 22:13 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-06-18 22:13 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-06-18 22:13 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-06-18 22:13 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-06-18 22:13 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-06-18 22:12 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-06-18 22:12 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-06-18 22:12 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-06-18 22:12 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-06-18 22:12 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-06-18 22:12 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-06-18 22:12 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-06-18 22:12 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-06-18 22:12 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-06-18 22:12 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-06-18 22:12 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-06-18 22:12 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-06-18 22:12 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-06-18 22:12 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-06-18 22:12 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-06-18 22:12 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-06-18 22:12 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-06-18 22:12 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-06-18 22:12 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-06-18 22:12 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-06-18 22:12 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-06-18 22:12 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-06-18 22:12 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-06-18 22:12 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-06-18 22:12 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-06-18 22:12 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-06-18 22:12 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-06-18 22:12 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-06-18 22:12 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-06-18 22:12 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-06-18 22:07 - 2014-06-18 22:13 - 00000000 ____D () C:\Windows\system32\directx
2014-06-18 22:07 - 2014-06-18 22:09 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-06-18 22:06 - 2014-05-13 06:09 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-06-18 22:06 - 2014-05-13 06:09 - 00089856 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-06-18 22:06 - 2014-05-13 06:09 - 00023296 _____ (DEVGURU Co., LTD.) C:\Windows\system32\Drivers\ss_conn_usb_driver.sys
2014-06-18 21:42 - 2014-06-18 21:42 - 38300512 _____ (Samsung) C:\Users\Andreas\Downloads\SideSync_3.0.2.546_signed.exe
2014-06-14 06:38 - 2014-06-14 06:38 - 02077392 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\IE11-Windows6.1.exe
2014-06-14 06:14 - 2014-06-14 06:14 - 00985600 _____ () C:\Users\Andreas\Downloads\MicrosoftFixit50123.msi
2014-06-14 06:09 - 2014-06-14 06:09 - 09699328 _____ () C:\Users\Andreas\Downloads\MicrosoftCameraCodecPack-x86.msi
2014-06-14 05:49 - 2014-06-14 05:49 - 01245384 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\wlsetup-web.exe
2014-06-14 03:45 - 2014-06-14 03:45 - 00000000 ____D () C:\Users\Andreas\Documents\Microsoft Hardware
2014-06-14 03:06 - 2014-06-14 03:06 - 09974912 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\FF2014 deDE.exe
2014-06-13 23:40 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-13 23:40 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-13 23:40 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-13 23:40 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-13 23:40 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-13 23:40 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-13 23:40 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-13 23:40 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-13 23:40 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-13 23:40 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-13 23:40 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-13 23:40 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-13 23:40 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-13 23:40 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-13 23:40 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-13 23:40 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-13 23:40 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-13 23:40 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-13 23:40 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-13 23:40 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-13 23:40 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-13 23:40 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-13 23:40 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-13 23:40 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-13 23:40 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-13 23:40 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-13 23:40 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-13 23:40 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-13 23:39 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-13 23:39 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-13 23:39 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-13 23:39 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-13 23:39 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-13 23:39 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-13 23:39 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-13 23:39 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-13 23:38 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Garmin
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Garmin
2014-06-12 23:16 - 2014-06-12 23:16 - 00001870 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2014-06-12 23:16 - 2014-06-12 23:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 23:12 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-12 23:12 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-06 06:01 - 2014-06-06 06:01 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Logitech® Webcam-Software
2014-06-06 05:30 - 2014-06-06 05:30 - 00000000 ____D () C:\Users\user\Documents\ProcAlyzer Dumps
2014-06-06 02:16 - 2014-06-06 02:16 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-06-06 02:14 - 2014-06-06 02:14 - 00002161 _____ () C:\Users\user\Desktop\Avira PC Cleaner.lnk
2014-06-04 03:12 - 2014-06-04 03:12 - 00000000 ____D () C:\Windows\pss
2014-06-04 02:53 - 2014-06-04 02:53 - 00000000 ____D () C:\Users\user\AppData\Local\Logitech® Webcam-Software
2014-06-04 02:48 - 2014-06-04 02:48 - 00000000 ____D () C:\ProgramData\LogiShrd
2014-06-04 02:47 - 2014-06-04 02:47 - 00000000 ____D () C:\Users\user\AppData\Roaming\Leadertech
2014-06-04 02:45 - 2014-06-19 21:20 - 00008652 _____ () C:\Windows\system32\lvcoinst.log
2014-06-04 02:45 - 2014-06-04 02:46 - 00003825 _____ () C:\Windows\LDPINST.LOG
2014-06-04 02:44 - 2014-06-04 02:48 - 00000000 ____D () C:\Program Files\Common Files\LogiShrd
2014-06-04 02:44 - 2014-06-04 02:46 - 00000000 ____D () C:\Program Files\Logitech
2014-06-04 02:44 - 2014-06-04 02:44 - 00001594 _____ () C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
2014-06-04 02:44 - 2014-06-04 02:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2014-06-04 02:40 - 2014-06-04 02:41 - 74637872 _____ (Logitech, Inc.) C:\Users\user\Downloads\lws251.exe

==================== One Month Modified Files and Folders =======

2014-07-03 17:09 - 2014-07-03 17:08 - 00000000 ___DC () C:\FRST
2014-07-03 17:07 - 2014-07-03 17:07 - 00000000 _____ () C:\Users\user\defogger_reenable
2014-07-03 17:06 - 2014-06-24 16:19 - 00000000 ___RD () C:\Users\user\Dropbox
2014-07-03 17:03 - 2012-08-25 03:17 - 00000000 ____D () C:\Users\user\Downloads\Andreas
2014-07-03 17:00 - 2014-07-03 17:00 - 00051776 _____ () C:\Users\user\Desktop\Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten  - Trojaner-Board.htm
2014-07-03 16:58 - 2014-04-09 11:23 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000UA.job
2014-07-03 16:39 - 2012-08-25 03:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-03 16:30 - 2012-08-22 21:48 - 01512855 _____ () C:\Windows\WindowsUpdate.log
2014-07-03 16:25 - 2013-07-19 01:22 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-03 16:20 - 2012-08-24 13:12 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-07-03 16:16 - 2009-07-14 06:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-03 16:16 - 2009-07-14 06:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-03 16:07 - 2014-06-24 16:16 - 00000000 ____D () C:\Users\user\AppData\Roaming\DropboxMaster
2014-07-03 16:07 - 2014-03-05 13:34 - 00000000 ____D () C:\Users\user\AppData\Roaming\Dropbox
2014-07-03 15:42 - 2014-07-03 15:42 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2014-07-03 15:07 - 2014-03-17 05:24 - 00000000 ____D () C:\Users\user\Desktop\The.Wolf.of.Wall.Street.DVDSCR.L
2014-07-03 14:20 - 2012-12-12 01:57 - 00100864 ___SH () C:\Users\user\Desktop\Thumbs.db
2014-07-03 14:18 - 2014-07-03 14:18 - 00000056 _____ () C:\Windows\setupact.log
2014-07-03 14:18 - 2014-07-03 14:18 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-03 14:18 - 2014-02-20 20:03 - 00000438 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-07-03 14:18 - 2013-07-19 01:22 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-03 14:18 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-03 14:17 - 2013-12-14 21:32 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-02 05:23 - 2012-08-22 21:56 - 01628044 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-02 04:03 - 2014-05-09 01:02 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Windows Live
2014-07-02 03:16 - 2014-05-18 02:18 - 00000000 ____D () C:\Users\Andreas\Desktop\Neues Verzeichnis
2014-07-02 02:51 - 2014-05-17 23:39 - 00000000 ____D () C:\Users\Andreas\Desktop\Sicherung Galaxy S3 Gerätespeicher komplett 17.05.20014
2014-07-02 01:25 - 2012-08-25 03:38 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-07-02 01:25 - 2012-08-25 03:38 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-07-02 00:59 - 2014-04-09 11:23 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000Core.job
2014-06-26 05:40 - 2012-09-15 01:30 - 00000000 ____D () C:\Users\user\AppData\Roaming\vlc
2014-06-26 03:28 - 2014-06-26 03:28 - 00002261 _____ () C:\Users\user\Desktop\Chrome App Launcher.lnk
2014-06-26 03:28 - 2014-06-26 03:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-25 22:44 - 2014-06-25 22:44 - 00002164 _____ () C:\Users\user\Desktop\Samsung Link.lnk
2014-06-24 19:14 - 2014-05-24 03:26 - 00006144 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-24 17:53 - 2014-06-24 17:53 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-24 17:53 - 2013-02-01 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-24 17:37 - 2014-06-24 17:35 - 86530912 _____ (Copyright 2013 SAMSUNG) C:\Users\user\Downloads\SamsungLink_Installer32.exe
2014-06-24 16:19 - 2014-06-24 16:19 - 00001386 _____ () C:\Users\user\Desktop\Dropbox.lnk
2014-06-24 16:15 - 2014-06-24 16:15 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-24 16:11 - 2014-06-24 16:11 - 00318944 _____ (Dropbox, Inc.) C:\Users\user\Downloads\DropboxInstaller(1).exe
2014-06-21 18:24 - 2014-06-20 00:12 - 00000000 ____D () C:\Users\user\AppData\Roaming\Spotify
2014-06-21 08:22 - 2012-09-22 00:36 - 00007643 _____ () C:\Users\user\AppData\Local\resmon.resmoncfg
2014-06-21 06:24 - 2013-07-17 09:49 - 00000000 ____D () C:\Users\user\AppData\Local\Windows Live
2014-06-21 05:57 - 2013-06-27 02:55 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2014-06-20 07:55 - 2014-02-24 04:07 - 00301056 ___SH () C:\Users\Andreas\Downloads\Thumbs.db
2014-06-20 07:50 - 2013-02-01 15:11 - 00000000 ____D () C:\Users\user\AppData\Roaming\Samsung
2014-06-20 07:11 - 2014-06-20 07:11 - 00000000 ___DC () C:\Program Files\MSECache
2014-06-20 04:14 - 2014-06-20 04:14 - 00088143 _____ () C:\Users\user\Downloads\collectionCache.bnk
2014-06-20 02:49 - 2014-06-20 00:12 - 00000000 ____D () C:\Users\user\AppData\Local\Spotify
2014-06-20 02:06 - 2014-06-20 02:06 - 00000000 ____D () C:\Users\user\AppData\Roaming\Dojotech Software
2014-06-20 01:47 - 2014-06-20 01:47 - 00000000 ____H () C:\Users\user\Documents\Default.rdp
2014-06-20 01:36 - 2014-01-07 19:19 - 00000000 ___RD () C:\Users\Andreas\Desktop\Bilder Canon aktuell
2014-06-20 00:25 - 2014-06-20 00:25 - 00002637 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ___DC () C:\Program Files\Dojotech Software
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-06-20 00:12 - 2014-06-20 00:12 - 00001803 _____ () C:\Users\user\Desktop\Spotify.lnk
2014-06-20 00:12 - 2014-06-20 00:12 - 00001789 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-20 00:11 - 2014-06-20 00:11 - 00126112 _____ (Spotify Ltd) C:\Users\user\Downloads\SpotifySetup.exe
2014-06-19 21:20 - 2014-06-04 02:45 - 00008652 _____ () C:\Windows\system32\lvcoinst.log
2014-06-19 21:19 - 2012-08-22 21:51 - 00000000 ____D () C:\Users\user\AppData\Local\VirtualStore
2014-06-19 17:55 - 2012-08-23 20:54 - 00152602 _____ () C:\Windows\PFRO.log
2014-06-19 06:52 - 2013-07-18 01:26 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Skype
2014-06-18 22:20 - 2014-03-07 19:29 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\SAMSUNG
2014-06-18 22:19 - 2014-06-18 22:19 - 00001115 _____ () C:\Users\Public\Desktop\SideSync 3.0.lnk
2014-06-18 22:13 - 2014-06-18 22:07 - 00000000 ____D () C:\Windows\system32\directx
2014-06-18 22:12 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-06-18 22:09 - 2014-06-18 22:07 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-06-18 22:07 - 2013-02-01 15:44 - 00000000 ____D () C:\temp
2014-06-18 21:51 - 2014-03-31 17:41 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-18 21:51 - 2013-10-25 11:07 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-18 21:45 - 2014-02-08 15:54 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-18 21:45 - 2013-02-01 15:02 - 00000000 ____D () C:\Program Files\Samsung
2014-06-18 21:43 - 2014-03-05 13:36 - 00000000 ___RD () C:\Users\Andreas\Dropbox
2014-06-18 21:42 - 2014-06-18 21:42 - 38300512 _____ (Samsung) C:\Users\Andreas\Downloads\SideSync_3.0.2.546_signed.exe
2014-06-18 21:18 - 2014-04-16 23:59 - 00040960 ___SH () C:\Users\Andreas\Desktop\Thumbs.db
2014-06-18 20:24 - 2014-03-05 13:31 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Dropbox
2014-06-18 19:40 - 2014-03-05 13:34 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\DropboxMaster
2014-06-16 01:22 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-15 14:13 - 2014-02-07 17:28 - 00000000 ____D () C:\Users\Andreas\Desktop\Kontoauszüge DiBa 2014
2014-06-15 01:05 - 2014-05-09 14:23 - 00000000 ____D () C:\Users\Andreas\Desktop\Kreditanträge 2014
2014-06-14 20:52 - 2013-08-07 18:46 - 00000000 ____D () C:\Users\user\AppData\Roaming\Mozilla
2014-06-14 20:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-06-14 08:12 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-06-14 07:30 - 2014-05-08 01:19 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-14 06:38 - 2014-06-14 06:38 - 02077392 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\IE11-Windows6.1.exe
2014-06-14 06:14 - 2014-06-14 06:14 - 00985600 _____ () C:\Users\Andreas\Downloads\MicrosoftFixit50123.msi
2014-06-14 06:09 - 2014-06-14 06:09 - 09699328 _____ () C:\Users\Andreas\Downloads\MicrosoftCameraCodecPack-x86.msi
2014-06-14 05:49 - 2014-06-14 05:49 - 01245384 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\wlsetup-web.exe
2014-06-14 03:45 - 2014-06-14 03:45 - 00000000 ____D () C:\Users\Andreas\Documents\Microsoft Hardware
2014-06-14 03:06 - 2014-06-14 03:06 - 09974912 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\FF2014 deDE.exe
2014-06-13 05:46 - 2012-08-24 11:52 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-13 05:45 - 2013-07-17 08:18 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-13 05:40 - 2012-08-23 21:46 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-13 04:21 - 2013-07-19 01:23 - 00002133 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Garmin
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Garmin
2014-06-12 23:16 - 2014-06-12 23:16 - 00001870 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2014-06-12 23:16 - 2014-06-12 23:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 23:16 - 2014-02-08 15:55 - 00000000 ____D () C:\ProgramData\Garmin
2014-06-12 23:16 - 2014-02-08 15:54 - 00000000 ____D () C:\Program Files\Garmin
2014-06-08 10:48 - 2014-06-13 23:39 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 10:43 - 2014-06-13 23:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-06 06:01 - 2014-06-06 06:01 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Logitech® Webcam-Software
2014-06-06 05:30 - 2014-06-06 05:30 - 00000000 ____D () C:\Users\user\Documents\ProcAlyzer Dumps
2014-06-06 05:29 - 2014-04-08 07:26 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-06-06 02:16 - 2014-06-06 02:16 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-06-06 02:16 - 2014-04-21 12:14 - 00000000 ___RD () C:\Program Files\Skype
2014-06-06 02:16 - 2013-06-27 02:55 - 00000000 ____D () C:\ProgramData\Skype
2014-06-06 02:14 - 2014-06-06 02:14 - 00002161 _____ () C:\Users\user\Desktop\Avira PC Cleaner.lnk
2014-06-06 01:52 - 2014-04-08 07:36 - 00002161 _____ () C:\Users\Andreas\Desktop\Avira PC Cleaner.lnk
2014-06-06 01:52 - 2014-04-08 06:58 - 00002217 _____ () C:\Users\Andreas\Desktop\Entfernen des Avira PC Cleaners.lnk
2014-06-05 22:24 - 2014-04-08 07:26 - 00000000 ____D () C:\Program Files\Spybot - Search & Destroy 2
2014-06-05 21:59 - 2014-05-22 05:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartCam
2014-06-05 21:32 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-05 21:32 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-06-05 21:31 - 2009-07-14 10:57 - 00000000 ____D () C:\Windows\ShellNew
2014-06-05 21:27 - 2014-01-06 05:34 - 00000000 ____D () C:\Program Files\webcamXP5
2014-06-04 03:12 - 2014-06-04 03:12 - 00000000 ____D () C:\Windows\pss
2014-06-04 02:53 - 2014-06-04 02:53 - 00000000 ____D () C:\Users\user\AppData\Local\Logitech® Webcam-Software
2014-06-04 02:48 - 2014-06-04 02:48 - 00000000 ____D () C:\ProgramData\LogiShrd
2014-06-04 02:48 - 2014-06-04 02:44 - 00000000 ____D () C:\Program Files\Common Files\LogiShrd
2014-06-04 02:47 - 2014-06-04 02:47 - 00000000 ____D () C:\Users\user\AppData\Roaming\Leadertech
2014-06-04 02:46 - 2014-06-04 02:45 - 00003825 _____ () C:\Windows\LDPINST.LOG
2014-06-04 02:46 - 2014-06-04 02:44 - 00000000 ____D () C:\Program Files\Logitech
2014-06-04 02:45 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32
2014-06-04 02:44 - 2014-06-04 02:44 - 00001594 _____ () C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
2014-06-04 02:44 - 2014-06-04 02:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2014-06-04 02:41 - 2014-06-04 02:40 - 74637872 _____ (Logitech, Inc.) C:\Users\user\Downloads\lws251.exe

Some content of TEMP:
====================
C:\Users\Andreas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmplwuv1h.dll
C:\Users\Andreas\AppData\Local\Temp\i4jdel0.exe
C:\Users\Andreas\AppData\Local\Temp\K-Lite_Codec_Pack_Basic.exe
C:\Users\Andreas\AppData\Local\Temp\SamsungAPInstaller_1400736245862.exe
C:\Users\Sabine\AppData\Local\Temp\SamsungAPInstaller_1394206136382.exe
C:\Users\user\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp2v8fa4.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-20 13:13

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Code:

ATTFilter

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-07-03 21:02:10
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4 Hitachi_HTS545016B9A300 rev.PBBOC60F 149,05GB
Running: Gmer-19357.exe; Driver: C:\Users\user\AppData\Local\Temp\axdirpog.sys


---- System - GMER 2.1 ----

SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwAdjustPrivilegesToken [0x8F872990]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwAlpcConnectPort [0x8F8231CE]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwAlpcSendWaitReceivePort [0x8F823400]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwConnectPort [0x8F822FC8]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwCreateSection [0x8F87555C]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwCreateThread [0x8F87498C]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwCreateThreadEx [0x8F874BD8]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwDebugActiveProcess [0x8F87451E]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwDeviceIoControlFile [0x8F813640]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwDuplicateObject [0x8F872AD2]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwLoadDriver [0x8F8725FE]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwMapViewOfSection [0x8F875312]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwOpenProcess [0x8F874052]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwOpenSection [0x8F87578C]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwOpenThread [0x8F87467E]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwQueueApcThread [0x8F8751C6]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwRequestWaitReplyPort [0x8F8232D4]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwResumeThread [0x8F874EE2]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwSecureConnectPort [0x8F8230C8]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwSetContextThread [0x8F875048]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwSetInformationToken [0x8F813A5A]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwSetSystemInformation [0x8F872936]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwSuspendProcess [0x8F87425A]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwSuspendThread [0x8F874D82]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwSystemDebugControl [0x8F813A6C]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwTerminateProcess [0x8F8743C0]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwTerminateThread [0x8F874882]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwUnmapViewOfSection [0x8F875894]
SSDT    \SystemRoot\system32\DRIVERS\klif.sys                                                            ZwWriteVirtualMemory [0x8F87561E]

---- Kernel code sections - GMER 2.1 ----

.text   ntkrnlpa.exe!ZwRollbackEnlistment + 142D                                                         8308BA15 1 Byte  [06]
.text   ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                           830C5212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text   ntkrnlpa.exe!KeRemoveQueueEx + 10D7                                                              830CC46C 4 Bytes  [90, 29, 87, 8F]
.text   ntkrnlpa.exe!KeRemoveQueueEx + 10FF                                                              830CC494 4 Bytes  [CE, 31, 82, 8F]
.text   ntkrnlpa.exe!KeRemoveQueueEx + 1143                                                              830CC4D8 4 Bytes  [00, 34, 82, 8F]
.text   ntkrnlpa.exe!KeRemoveQueueEx + 1193                                                              830CC528 4 Bytes  [C8, 2F, 82, 8F] {ENTER 0x822f, 0x8f}
.text   ntkrnlpa.exe!KeRemoveQueueEx + 11F7                                                              830CC58C 4 Bytes  [5C, 55, 87, 8F]
.text   ...                                                                                              

---- Threads - GMER 2.1 ----

Thread  SYSTEM [4:5952]                                                                                  B625CF2E

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001bfb8d0a1e                      
Reg     HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001bfb8d0a1e@e4121dabb6f5         0xCD 0xA2 0x85 0x61 ...
Reg     HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\001bfb8d0a1e@38ece48a2c83         0x2D 0xE6 0xCE 0xE6 ...
Reg     HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001bfb8d0a1e (not active ControlSet)  
Reg     HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001bfb8d0a1e@e4121dabb6f5             0xCD 0xA2 0x85 0x61 ...
Reg     HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\001bfb8d0a1e@38ece48a2c83             0x2D 0xE6 0xCE 0xE6 ...

---- EOF - GMER 2.1 ----

schrauber · 03.07.2014, 21:26

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Schumania · 05.07.2014, 09:30

Code:

ATTFilter

ComboFix 14-07-03.01 - user 05.07.2014   8:54.2.2 - x86
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.2046.624 [GMT 2:00]
ausgeführt von:: c:\users\user\Desktop\ComboFix.exe
AV: Kaspersky Anti-Virus *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886}
SP: Kaspersky Anti-Virus *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Java\jre7\bin\jp2ssv.dll
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\system32\Tasks\BackgroundContainer Startup Task
c:\windows\TEMP\sqlite-3.7.151-x86-sqlitejdbc.dll
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-06-05 bis 2014-07-05  ))))))))))))))))))))))))))))))
.
.
2014-07-05 07:29 . 2014-07-05 07:29	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2014-07-05 07:29 . 2014-07-05 07:29	--------	d-----w-	c:\users\Sabine\AppData\Local\temp
2014-07-05 07:29 . 2014-07-05 07:29	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-07-03 15:08 . 2014-07-03 15:13	--------	dc----w-	C:\FRST
2014-07-03 13:42 . 2014-07-03 13:42	--------	d-----w-	c:\users\user\AppData\Local\Adobe
2014-06-24 14:19 . 2014-07-03 21:09	--------	d-----r-	c:\users\user\Dropbox
2014-06-24 14:16 . 2014-07-03 20:03	--------	d-----w-	c:\users\user\AppData\Roaming\DropboxMaster
2014-06-20 05:11 . 2014-06-20 05:11	--------	dc----w-	c:\program files\MSECache
2014-06-20 00:06 . 2014-06-20 00:06	--------	d-----w-	c:\users\user\AppData\Roaming\Dojotech Software
2014-06-19 22:25 . 2014-06-19 22:25	--------	dc----w-	c:\program files\Dojotech Software
2014-06-19 22:12 . 2014-06-20 00:49	--------	d-----w-	c:\users\user\AppData\Local\Spotify
2014-06-19 22:12 . 2014-06-21 16:24	--------	d-----w-	c:\users\user\AppData\Roaming\Spotify
2014-06-18 20:12 . 2007-10-22 01:37	17928	----a-w-	c:\windows\system32\X3DAudio1_2.dll
2014-06-18 20:07 . 2014-06-18 20:09	--------	d--h--w-	c:\windows\msdownld.tmp
2014-06-18 20:06 . 2014-05-13 04:09	89856	----a-w-	c:\windows\system32\drivers\ssudbus.sys
2014-06-18 20:06 . 2014-05-13 04:09	23296	----a-w-	c:\windows\system32\drivers\ss_conn_usb_driver.sys
2014-06-18 20:06 . 2014-05-13 04:09	184192	----a-w-	c:\windows\system32\drivers\ssudmdm.sys
2014-06-18 17:48 . 2014-07-03 14:47	163504	----a-w-	c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
2014-06-13 21:39 . 2014-03-26 14:27	1389056	----a-w-	c:\windows\system32\msxml6.dll
2014-06-13 21:39 . 2014-03-26 14:27	1237504	----a-w-	c:\windows\system32\msxml3.dll
2014-06-13 21:39 . 2014-03-26 14:25	2048	----a-w-	c:\windows\system32\msxml6r.dll
2014-06-13 21:39 . 2014-03-26 14:25	2048	----a-w-	c:\windows\system32\msxml3r.dll
2014-06-13 21:39 . 2014-04-05 02:25	1294272	----a-w-	c:\windows\system32\drivers\tcpip.sys
2014-06-13 21:39 . 2014-04-05 02:24	187840	----a-w-	c:\windows\system32\drivers\FWPKCLNT.SYS
2014-06-13 21:39 . 2014-06-08 08:48	391680	----a-w-	c:\windows\system32\aepdu.dll
2014-06-13 21:39 . 2014-06-08 08:43	302592	----a-w-	c:\windows\system32\aeinv.dll
2014-06-13 21:38 . 2014-04-25 02:06	626688	----a-w-	c:\windows\system32\usp10.dll
2014-06-12 21:17 . 2014-06-12 21:17	--------	d-----w-	c:\users\Default\AppData\Roaming\Garmin
2014-06-12 21:12 . 2014-05-08 09:06	2742784	----a-w-	c:\windows\system32\rdpcorets.dll
2014-06-12 21:12 . 2014-05-08 09:06	13824	----a-w-	c:\windows\system32\RdpGroupPolicyExtension.dll
2014-06-06 04:01 . 2014-06-06 04:01	--------	d-----w-	c:\users\Andreas\AppData\Local\Logitech® Webcam-Software
2014-06-06 00:16 . 2014-06-06 00:16	--------	d-----w-	c:\program files\Common Files\Skype
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-07-05 07:31 . 2014-07-05 07:31	62576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{96521CD5-522E-4DE9-96C6-D0D2F8F32BAF}\offreg.dll
2014-07-01 23:25 . 2012-08-25 01:38	71344	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2014-07-01 23:25 . 2012-08-25 01:38	699056	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2014-06-05 10:54 . 2014-07-01 23:10	8140904	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{96521CD5-522E-4DE9-96C6-D0D2F8F32BAF}\mpengine.dll
2014-06-04 00:46 . 2014-06-04 00:46	53248	----a-r-	c:\users\user\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2014-04-14 18:13 . 2014-05-08 00:05	94632	----a-w-	c:\windows\system32\WindowsAccessBridge.dll
2014-04-12 02:15 . 2014-05-14 15:33	67520	----a-w-	c:\windows\system32\drivers\ksecdd.sys
2014-04-12 02:15 . 2014-05-14 15:33	136640	----a-w-	c:\windows\system32\drivers\ksecpkg.sys
2014-04-12 02:12 . 2014-05-14 15:33	100352	----a-w-	c:\windows\system32\sspicli.dll
2014-04-12 02:12 . 2014-05-14 15:33	15872	----a-w-	c:\windows\system32\sspisrv.dll
2014-04-12 02:12 . 2014-05-14 15:33	22016	----a-w-	c:\windows\system32\secur32.dll
2014-04-12 02:11 . 2014-05-14 15:33	1059840	----a-w-	c:\windows\system32\lsasrv.dll
2014-04-12 02:11 . 2014-05-14 15:33	22528	----a-w-	c:\windows\system32\lsass.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-07-17 07:50	220632	----a-w-	c:\users\user\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-07-17 07:50	220632	----a-w-	c:\users\user\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-07-17 07:50	220632	----a-w-	c:\users\user\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\Andreas\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\Andreas\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\Andreas\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2012-09-02 167936]
"vdultimate_firefox"="c:\programdata\VideoDownloaderUltimate\Firefox\vdultimate.exe" [2014-03-20 954368]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpUninstallDeleteDir"="rmdir" [X]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0\0sdnclean.exe
.
[HKLM\~\startupfolder\C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk]
path=c:\users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
backup=c:\windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^user^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Sync-Plus.lnk]
path=c:\users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sync-Plus.lnk
backup=c:\windows\pss\Sync-Plus.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp]
2014-06-09 10:47	122200	----a-w-	c:\program files\Garmin\Express Tray\ExpressTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2014-04-09 09:23	116648	----atw-	c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage]
2013-07-18 05:36	578560	----a-w-	c:\program files\Samsung\Kies\KiesAirMessage.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
2013-09-04 10:16	1564528	----a-w-	c:\program files\Samsung\Kies\Kies.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
2013-09-04 10:16	311152	----a-w-	c:\program files\Samsung\Kies\KiesTrayAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWS]
2012-09-12 22:38	204136	----a-w-	c:\program files\Logitech\LWS\Webcam Software\LWS.exe
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Spybot-S&D Cleaning"="c:\program files\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean
"Google Update"="c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"Spotify Web Helper"="c:\users\user\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SDTray"="c:\program files\Spybot - Search & Destroy 2\SDTray.exe"
"Samsung Link"="c:\program files\Samsung\Samsung Link\Samsung Link Tray Agent.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"Logitech Download Assistant"=c:\windows\system32\rundll32.exe c:\windows\System32\LogiLDA.dll,LogiFetch
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-10-23 172192]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2014-05-13 89856]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2014-05-30 108032]
R3 ManyCam;ManyCam Virtual Webcam;c:\windows\system32\DRIVERS\mcvidrv.sys [2013-11-27 40736]
R3 mcaudrv_simple;ManyCam Virtual Microphone;c:\windows\system32\drivers\mcaudrv.sys [2013-12-06 29728]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2013-09-20 1042272]
R3 ss_conn_usb_driver;SAMSUNG Mobile USB Connectivity Device Driver;c:\windows\system32\Drivers\ss_conn_usb_driver.sys [2014-05-13 23296]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2014-05-13 184192]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2013-10-02 49152]
R3 usbrndis6;USB-RNDIS6-Adapter;c:\windows\system32\DRIVERS\usb80236.sys [2013-02-12 15872]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2013-05-08 1343400]
R4 klflt;klflt;c:\windows\system32\DRIVERS\klflt.sys [2014-03-24 94304]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2013-10-19 25696]
S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys [2013-04-12 14432]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [2013-05-14 45024]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys [2013-12-19 144992]
S2 AllShare Framework DMS;AllShare Framework DMS;c:\program files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [2013-12-21 401800]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2013-07-18 233472]
S2 ftpsvc;Microsoft-FTP-Dienst;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 Garmin Core Update Service;Garmin Core Update Service;c:\program files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2014-06-09 435032]
S2 Samsung Link Service;Samsung Link Service;c:\program files\Samsung\Samsung Link\Samsung Link.exe [2014-05-19 573280]
S2 ss_conn_service;SAMSUNG Mobile Connectivity Service;c:\program files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [2014-05-13 741640]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-08-29 414496]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2013-07-18 37344]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [2014-02-18 25184]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2013-10-19 25696]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 R5U870FLx86;R5U870 UVC Lower Filter  ;c:\windows\system32\Drivers\R5U870FLx86.sys [2012-08-25 75008]
S3 R5U870FUx86;R5U870 UVC Upper Filter  ;c:\windows\system32\Drivers\R5U870FUx86.sys [2012-08-25 43904]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2007-08-03 9344]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
S3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2012-08-24 812544]
S3 yukonw7;NDIS6.2-Miniporttreiber für Marvell Yukon-Ethernet-Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2009-07-13 311296]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
ftpsvc	REG_MULTI_SZ   	ftpsvc
LPDService	REG_MULTI_SZ   	LPDSVC
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-06-13 02:16	1091912	----a-w-	c:\program files\Google\Chrome\Application\35.0.1916.153\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-07-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-25 23:25]
.
2014-07-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-07-18 23:22]
.
2014-07-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-07-18 23:22]
.
2014-07-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000Core.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2014-04-09 09:23]
.
2014-07-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000UA.job
- c:\users\user\AppData\Local\Google\Update\GoogleUpdate.exe [2014-04-09 09:23]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.de/
mStart Page = about:blank
uInternet Settings,ProxyServer = localhost:21320
uSearchAssistant = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\biqofvfm.default-1400897853959\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.de/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Notify-SDWinLogon - SDWinLogon.dll
AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\SAMSUNG\USB Drivers\25_escape\Uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\System32\WUDFHost.exe
c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\taskhost.exe
c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe
c:\program files\Microsoft Mouse and Keyboard Center\itype.exe
c:\windows\system32\conhost.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
c:\windows\system32\conhost.exe
c:\windows\system32\WerFault.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-07-05  10:23:50 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-07-05 08:23
.
Vor Suchlauf: 1.638.416.384 Bytes frei
Nach Suchlauf: 1.939.636.224 Bytes frei
.
- - End Of File - - A61B002CFDCC5BE40C2FD55E7B662E11
A36C5E4F47E84449FF07ED3517B43A31

schrauber · 05.07.2014, 22:23

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Schumania · 06.07.2014, 02:15

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 06.07.2014
Suchlauf-Zeit: 00:55:43
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.07.05.10
Rootkit Datenbank: v2014.07.03.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: user

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 366612
Verstrichene Zeit: 24 Min, 20 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 1
PUP.Optional.PriceGong.A, HKU\S-1-5-21-1806344340-3721178228-3502498018-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, In Quarantäne, [d01e02993b404fe755ee884b6c96bc44], 

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 16
PUP.Optional.SnapDo.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Ersetzt,[e10da6f57b00d1659ed071192cd89c64]
PUP.Optional.SnapDo.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRaxo67ounJhqib0rXFhtLLIHmXcfrN_YrlKmIMMmL36uP71ylMOLLFSRijAADIFooWZGvDFWAYiDsOvKHqY_2c8_8CIkC4P4gzJISJv-Z4Y6eAz-Ys-P6VImAbP_BCTYcM53mA,,&q={searchTerms}),Ersetzt,[16d8e9b2f685c86eaac5e4a68c7804fc]
PUP.Optional.Snapdo, HKU\S-1-5-21-1806344340-3721178228-3502498018-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[816d534835464de93e98a9ea08fc21df]
PUP.Optional.Snapdo, HKU\S-1-5-21-1806344340-3721178228-3502498018-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[9c52fe9dc2b979bdd007b8db0cf840c0]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-1806344340-3721178228-3502498018-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[11dd4a5176053600e28d1c6e32d25ca4]
PUP.Optional.Snapdo, HKU\S-1-5-21-1806344340-3721178228-3502498018-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[6a84f0abe299fb3b11c3355e54b0ef11]
PUP.Optional.Snapdo, HKU\S-1-5-21-1806344340-3721178228-3502498018-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[4ca24e4da6d523136073a6ed7a8a9c64]
PUP.Optional.Snapdo, HKU\S-1-5-21-1806344340-3721178228-3502498018-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[d915ddbe2754c373fadc11820bf9926e]
PUP.Optional.Snapdo, HKU\S-1-5-21-1806344340-3721178228-3502498018-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[8b63d6c5aad120165c7beba858aca15f]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-1806344340-3721178228-3502498018-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[32bc45563b40b97dd19e107ac14313ed]
PUP.Optional.Snapdo, HKU\S-1-5-21-1806344340-3721178228-3502498018-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Hl-ZCujvH1WoKfjHXgpQ-ZKB639XT_r4RUsNdIqBgEjvpOc3Mylqcw7XcNgzVPM,, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Hl-ZCujvH1WoKfjHXgpQ-ZKB639XT_r4RUsNdIqBgEjvpOc3Mylqcw7XcNgzVPM,),Ersetzt,[d41a217ae893ac8a6c69068dce364db3]
PUP.Optional.Snapdo, HKU\S-1-5-21-1806344340-3721178228-3502498018-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[d21cbbe06e0d53e34a89fe95dd27fa06]
PUP.Optional.Snapdo, HKU\S-1-5-21-1806344340-3721178228-3502498018-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[5599b0eba0db42f428ac791a17ed9d63]
PUP.Optional.Snapdo, HKU\S-1-5-21-1806344340-3721178228-3502498018-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[e20cfd9ebfbcc5716274f69d0400fa06]
PUP.Optional.Snapdo, HKU\S-1-5-21-1806344340-3721178228-3502498018-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (hxxp://www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[e00e6d2e493271c555827a1956aeab55]
PUP.Optional.SnapDo.A, HKU\S-1-5-21-1806344340-3721178228-3502498018-1006-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q={searchTerms}),Ersetzt,[eb03514a0c6f270f2946afdb63a128d8]

Ordner: 1
PUP.Optional.Conduit.A, C:\ProgramData\Conduit\IE, In Quarantäne, [12dc3c5f35462f070395b6e3aa58ef11], 

Dateien: 11
PUP.Optional.Spigot.A, C:\Users\Andreas\Downloads\camfrog.exe, In Quarantäne, [8b63b5e6e09b86b04bba9794936e34cc], 
PUP.Optional.Conduit, C:\Users\Andreas\Downloads\TeamViewer_TSA33QA76.exe, In Quarantäne, [c32b6635bfbc0a2cb7c9e3dbc0443cc4], 
PUP.Optional.InstallCore, C:\Users\Andreas\Downloads\UltimateCodec.exe, In Quarantäne, [14dae5b6483385b1ff51123ab84953ad], 
PUP.Optional.WebSearch.A, C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\2ivn8l1g.default\searchplugins\Web Search.xml, In Quarantäne, [86686a31fa81f244f2fc17b7a45efd03], 
PUP.Optional.WebSearch.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\95rx6kfn.default\searchplugins\Web Search.xml, In Quarantäne, [41ad7526a8d3ad891bd3bc12d9297789], 
PUP.Optional.SnapDo.A, C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\2ivn8l1g.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5GLpt4JYHBoFrDtXteBgXh15cKZbGtHDO8j7gIk2wQbLgNI2mDYIEIaRs6d5WyOw,");), Ersetzt,[bc3253486d0ea88e1bdb92308b79d12f]
PUP.Optional.SnapDo.A, C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\2ivn8l1g.default\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q=");), Ersetzt,[5698c8d3cead83b3d91e91319074af51]
PUP.Optional.Snapdo.A, C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: (   "homepage": "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Hl-ZCujvH1WoKfjHXgpQ-ZKB639XT_r4RUsNdIqBgEjvpOc3Mylqcw7XcNgzVPM,",), Ersetzt,[d31ba0fb196282b4b5ef853d50b47f81]
PUP.Optional.SnapDo.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\95rx6kfn.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5GLpt4JYHBoFrDtXteBgXh15cKZbGtHDO8j7gIk2wQbLgNI2mDYIEIaRs6d5WyOw,");), Ersetzt,[86685843aecd9c9a4fa706bcbb49857b]
PUP.Optional.SnapDo.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\95rx6kfn.default\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Et6BspecLnWumbgOWVlmUPxhJEpqLRD1ATDTUXQ3C-HurCbu_wYzOA9jMHp_-80,&q=");), Ersetzt,[9b5352491d5eec4afcfb13afee16c43c]
PUP.Optional.Snapdo.A, C:\Users\Sabine\AppData\Roaming\Mozilla\Firefox\Profiles\95rx6kfn.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWnWE23Qik11mFwB7WTYnaVdQO2kd50qAix741KJqWx_35UIjtxv1izJP6vTIcRC1_wLrckH5p2uF9DmfVocHjBVkksZX5Hl-ZCujvH1WoKfjHXgpQ-ZKB639XT_r4RUsNdIqBgEjvpOc3Mylqcw7XcNgzVPM,");), Ersetzt,[48a675261c5f9a9c53f513b0689c55ab]

Physische Sektoren: 0
(No malicious items detected)


(end)

Code:

ATTFilter

# AdwCleaner v3.214 - Bericht erstellt am 06/07/2014 um 02:14:00
# Aktualisiert 29/06/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : user - SCHUMI-VAIO
# Gestartet von : C:\Users\user\Desktop\adwcleaner_3.214.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Conduit
Ordner Gelöscht : C:\ProgramData\Kaspersky Lab\SafeBrowser
Ordner Gelöscht : C:\Windows\system32\SearchProtect
Ordner Gelöscht : C:\users\user\AppData\Local\NativeMessaging
Ordner Gelöscht : C:\users\user\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\users\user\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa
Ordner Gelöscht : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa
Ordner Gelöscht : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
Verknüpfung Desinfiziert : C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programme\Search.lnk

***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5DB0A8CD-6B59-4227-97CC-EFEA547A6136}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5DB0A8CD-6B59-4227-97CC-EFEA547A6136}
[#] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EC9510D-A439-4950-9399-B6399EDF9EA7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3317892
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\PIP
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKLM\Software\PIP
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v30.0 (de)

[ Datei : C:\users\user\AppData\Roaming\Mozilla\Firefox\Profiles\biqofvfm.default-1400897853959\prefs.js ]


-\\ Google Chrome v35.0.1916.153

[ Datei : C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Extension] : blbkdnmdcafmfhinpmnlhhddbepgkeaa
Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb

[ Datei : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Extension] : blbkdnmdcafmfhinpmnlhhddbepgkeaa
Gelöscht [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Gelöscht [Extension] : flpcjncodpafbgdpnkljologafpionhb

[ Datei : C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Extension] : blbkdnmdcafmfhinpmnlhhddbepgkeaa

*************************

AdwCleaner[R0].txt - [4889 octets] - [06/07/2014 02:08:16]
AdwCleaner[S0].txt - [4338 octets] - [06/07/2014 02:14:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4398 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x86
Ran by user on 06.07.2014 at  2:45:08,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Program Files\myfree codec"



~~~ FireFox

Emptied folder: C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\biqofvfm.default-1400897853959\minidumps [4 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.07.2014 at  2:50:43,71
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:01-07-2014
Ran by user (administrator) on SCHUMI-VAIO on 06-07-2014 02:51:36
Running from C:\Users\user\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [167936 2012-09-03] (Alps Electric Co., Ltd.)
HKLM\...\Run: [vdultimate_firefox] => C:\ProgramData\VideoDownloaderUltimate\Firefox\vdultimate.exe [954368 2014-03-20] (Link64 GmbH)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [1425208 2012-09-20] (Logitech, Inc.)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] - rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-1806344340-3721178228-3502498018-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1806344340-3721178228-3502498018-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
BootExecute: autocheck autochk * sdnclean.exe
GroupPolicyUsers\S-1-5-21-1806344340-3721178228-3502498018-1005\User: Group Policy restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1806344340-3721178228-3502498018-1004\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF68C6225F388CF01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {A1BD49DC-EFF7-4B2A-A983-4CEA6A90107D} URL = https://www.google.com/search?q={searchTerms}
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\biqofvfm.default-1400897853959
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\user\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\user\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com [2013-10-19]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-10-19]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com [2013-10-19]
FF HKLM\...\Firefox\Extensions: [vdultimate@link64] - C:\ProgramData\VideoDownloaderUltimate\Firefox\videodownloaderultimate.xpi
FF Extension: Youtube and more - Video Downloader Ultimate - C:\ProgramData\VideoDownloaderUltimate\Firefox\videodownloaderultimate.xpi [2014-03-20]

Chrome: 
=======
CHR HomePage: https://chrome.google.com/webstore/launcher
CHR StartupUrls: "hxxp://www.google.de/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.4.600\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.550.14) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U55) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\user\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File
CHR Plugin: (Google Talk Plugin) - C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (HD for YouTube™) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2014-06-19]
CHR Extension: (No Name) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-03-25]
CHR Extension: (Google Cast) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-06-19]
CHR Extension: (vGet Cast (DLNA Controller)) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekdjofnchpbfmnfbedalmbdlhbabiapi [2014-06-19]
CHR Extension: (VNC Viewer for Google Chrome™) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\iabmpiboiopbgfabjmgeedhcmjenhbla [2014-06-19]
CHR Extension: (Video-Chat Vanilla Show) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgaehlpildddphihhaghbgijfebbbaeo [2014-06-19]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-27]
CHR Extension: (Google Chrome to Phone Extension) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco [2014-06-19]
CHR Extension: (Black & Gray) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\opngpggidjbhmmlapgcmcedfgblofagi [2014-06-26]
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx [2013-08-14]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\ChromeExt\ab.crx [2013-08-14]

========================== Services (Whitelisted) =================

R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [401800 2013-12-21] (Samsung) [File not signed]
S2 avp; C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-19] (Kaspersky Lab ZAO)
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-07-18] (Teruten) [File not signed]
R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [310272 2012-06-01] (Microsoft Corporation)
R2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [435032 2014-06-09] (Garmin Ltd or its subsidiaries)
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [573280 2014-05-19] (Copyright 2013 SAMSUNG)
S3 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [741640 2014-05-13] (DEVGURU Co., LTD.)
S2 STacSV; C:\Windows\system32\stacsv.exe [94208 2012-08-25] (SigmaTel, Inc.)

==================== Drivers (Whitelisted) ====================

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [300544 2007-03-20] (AfaTech                  )
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-07-18] () [File not signed]
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-11-07] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [94304 2014-03-24] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [576608 2014-03-24] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-10-19] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25184 2014-02-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-19] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [144992 2013-12-19] (Kaspersky Lab ZAO)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [40736 2013-11-27] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv.sys [29728 2013-12-06] (Visicom Media Inc.)
S3 ss_conn_usb_driver; C:\Windows\System32\Drivers\ss_conn_usb_driver.sys [23296 2014-05-13] (DEVGURU Co., LTD.)
S3 STHDA; C:\Windows\System32\drivers\stwrt.sys [326656 2012-08-25] (SigmaTel, Inc.)
R3 ti21sony; C:\Windows\System32\drivers\ti21sony.sys [812544 2012-08-24] (Texas Instruments)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [15872 2013-02-12] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\user\AppData\Local\Temp\catchme.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-06 02:50 - 2014-07-06 02:50 - 00000834 _____ () C:\Users\user\Desktop\JRT.txt
2014-07-06 02:45 - 2014-07-06 02:45 - 00000000 ____D () C:\Windows\ERUNT
2014-07-06 02:43 - 2014-07-06 02:43 - 00004478 _____ () C:\Users\user\Desktop\AdwCleaner[S0].txt
2014-07-06 02:07 - 2014-07-06 02:14 - 00000000 ___DC () C:\AdwCleaner
2014-07-06 02:05 - 2014-07-06 02:05 - 00016189 _____ () C:\Users\user\Desktop\mbam.txt
2014-07-06 00:54 - 2014-07-06 02:02 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-06 00:53 - 2014-07-06 00:53 - 00001076 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ___DC () C:\Program Files\ Malwarebytes Anti-Malware 
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-06 00:53 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-06 00:53 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-06 00:53 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-06 00:40 - 2014-07-06 00:41 - 00002080 _____ () C:\Users\user\Desktop\Neues Textdokument (2).txt
2014-07-06 00:40 - 2014-07-06 00:40 - 01016261 _____ (Thisisu) C:\Users\user\Desktop\JRT.exe
2014-07-06 00:39 - 2014-07-06 00:39 - 01346519 _____ () C:\Users\user\Desktop\adwcleaner_3.214.exe
2014-07-06 00:38 - 2014-07-06 00:39 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\user\Desktop\mbam-setup-2.0.2.1012.exe
2014-07-06 00:37 - 2014-07-06 00:37 - 00060290 _____ () C:\Users\user\Desktop\Anleitung   Malwarebytes Anti-Malware  - Trojaner-Board.htm
2014-07-05 12:26 - 2014-07-06 02:40 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-07-05 10:23 - 2014-07-05 10:23 - 00021396 ____C () C:\ComboFix.txt
2014-07-03 23:16 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-03 23:16 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-03 23:16 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-03 23:16 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-03 23:16 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-03 23:16 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-03 23:16 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-03 23:16 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-03 23:15 - 2014-07-05 10:23 - 00000000 ___DC () C:\Qoobox
2014-07-03 23:14 - 2014-07-05 10:20 - 00000000 ____D () C:\Windows\erdnt
2014-07-03 23:10 - 2014-07-03 23:12 - 05213907 ____R (Swearware) C:\Users\user\Desktop\ComboFix.exe
2014-07-03 21:02 - 2014-07-03 21:02 - 00006516 _____ () C:\Users\user\Desktop\Gmer.txt
2014-07-03 18:52 - 2014-07-03 18:52 - 300952539 _____ () C:\Windows\MEMORY.DMP
2014-07-03 18:52 - 2014-07-03 18:52 - 00174960 _____ () C:\Windows\Minidump\070314-58968-01.dmp
2014-07-03 18:40 - 2014-07-03 18:40 - 00380416 _____ () C:\Users\user\Desktop\dp6h7y2w.exe
2014-07-03 17:17 - 2014-07-03 17:17 - 00000897 _____ () C:\Users\user\Desktop\Neues Textdokument.txt
2014-07-03 17:11 - 2014-07-03 17:13 - 00042981 _____ () C:\Users\user\Desktop\Addition.txt
2014-07-03 17:09 - 2014-07-06 02:51 - 00018865 _____ () C:\Users\user\Desktop\FRST.txt
2014-07-03 17:08 - 2014-07-06 02:51 - 00000000 ___DC () C:\FRST
2014-07-03 17:07 - 2014-07-03 21:18 - 00000470 _____ () C:\Users\user\Desktop\defogger_disable.log
2014-07-03 17:07 - 2014-07-03 17:07 - 00000000 _____ () C:\Users\user\defogger_reenable
2014-07-03 17:03 - 2014-07-03 17:03 - 00380416 _____ () C:\Users\user\Desktop\Gmer-19357.exe
2014-07-03 17:01 - 2014-07-03 17:01 - 01073664 _____ (Farbar) C:\Users\user\Desktop\FRST.exe
2014-07-03 17:01 - 2014-07-03 17:01 - 00050477 _____ () C:\Users\user\Desktop\Defogger.exe
2014-07-03 17:00 - 2014-07-03 17:00 - 00051776 _____ () C:\Users\user\Desktop\Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten  - Trojaner-Board.htm
2014-07-03 15:42 - 2014-07-03 15:42 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2014-07-03 14:18 - 2014-07-06 02:39 - 00000594 _____ () C:\Windows\setupact.log
2014-07-03 14:18 - 2014-07-03 14:18 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-26 03:28 - 2014-06-26 03:28 - 00002261 _____ () C:\Users\user\Desktop\Chrome App Launcher.lnk
2014-06-26 03:28 - 2014-06-26 03:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-25 22:44 - 2014-06-25 22:44 - 00002164 _____ () C:\Users\user\Desktop\Samsung Link.lnk
2014-06-24 17:53 - 2014-06-24 17:53 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-24 17:35 - 2014-06-24 17:37 - 86530912 _____ (Copyright 2013 SAMSUNG) C:\Users\user\Downloads\SamsungLink_Installer32.exe
2014-06-24 16:19 - 2014-07-03 23:09 - 00000000 ___RD () C:\Users\user\Dropbox
2014-06-24 16:19 - 2014-06-24 16:19 - 00001386 _____ () C:\Users\user\Desktop\Dropbox.lnk
2014-06-24 16:16 - 2014-07-03 22:03 - 00000000 ____D () C:\Users\user\AppData\Roaming\DropboxMaster
2014-06-24 16:15 - 2014-06-24 16:15 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-24 16:11 - 2014-06-24 16:11 - 00318944 _____ (Dropbox, Inc.) C:\Users\user\Downloads\DropboxInstaller(1).exe
2014-06-20 07:11 - 2014-06-20 07:11 - 00000000 ___DC () C:\Program Files\MSECache
2014-06-20 04:14 - 2014-06-20 04:14 - 00088143 _____ () C:\Users\user\Downloads\collectionCache.bnk
2014-06-20 02:06 - 2014-06-20 02:06 - 00000000 ____D () C:\Users\user\AppData\Roaming\Dojotech Software
2014-06-20 01:47 - 2014-06-20 01:47 - 00000000 ____H () C:\Users\user\Documents\Default.rdp
2014-06-20 00:25 - 2014-06-20 00:25 - 00002637 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ___DC () C:\Program Files\Dojotech Software
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-06-20 00:12 - 2014-06-21 18:24 - 00000000 ____D () C:\Users\user\AppData\Roaming\Spotify
2014-06-20 00:12 - 2014-06-20 02:49 - 00000000 ____D () C:\Users\user\AppData\Local\Spotify
2014-06-20 00:12 - 2014-06-20 00:12 - 00001803 _____ () C:\Users\user\Desktop\Spotify.lnk
2014-06-20 00:12 - 2014-06-20 00:12 - 00001789 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-20 00:11 - 2014-06-20 00:11 - 00126112 _____ (Spotify Ltd) C:\Users\user\Downloads\SpotifySetup.exe
2014-06-18 22:19 - 2014-06-18 22:19 - 00001115 _____ () C:\Users\Public\Desktop\SideSync 3.0.lnk
2014-06-18 22:13 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-06-18 22:13 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-06-18 22:13 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-06-18 22:13 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-06-18 22:13 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-06-18 22:13 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-06-18 22:13 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-06-18 22:13 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-06-18 22:13 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-06-18 22:13 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-06-18 22:13 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-06-18 22:13 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-06-18 22:13 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-06-18 22:13 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-06-18 22:13 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-06-18 22:13 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-06-18 22:13 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-06-18 22:13 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-06-18 22:13 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-06-18 22:13 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-06-18 22:13 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-06-18 22:13 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-06-18 22:13 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-06-18 22:13 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-06-18 22:13 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-06-18 22:13 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-06-18 22:13 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-06-18 22:13 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-06-18 22:13 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-06-18 22:13 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-06-18 22:13 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-06-18 22:13 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-06-18 22:13 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-06-18 22:13 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-06-18 22:13 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-06-18 22:13 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-06-18 22:13 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-06-18 22:13 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-06-18 22:13 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-06-18 22:13 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-06-18 22:13 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-06-18 22:12 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-06-18 22:12 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-06-18 22:12 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-06-18 22:12 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-06-18 22:12 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-06-18 22:12 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-06-18 22:12 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-06-18 22:12 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-06-18 22:12 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-06-18 22:12 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-06-18 22:12 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-06-18 22:12 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-06-18 22:12 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-06-18 22:12 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-06-18 22:12 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-06-18 22:12 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-06-18 22:12 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-06-18 22:12 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-06-18 22:12 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-06-18 22:12 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-06-18 22:12 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-06-18 22:12 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-06-18 22:12 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-06-18 22:12 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-06-18 22:12 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-06-18 22:12 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-06-18 22:12 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-06-18 22:12 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-06-18 22:12 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-06-18 22:12 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-06-18 22:07 - 2014-06-18 22:13 - 00000000 ____D () C:\Windows\system32\directx
2014-06-18 22:07 - 2014-06-18 22:09 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-06-18 22:06 - 2014-05-13 06:09 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-06-18 22:06 - 2014-05-13 06:09 - 00089856 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-06-18 22:06 - 2014-05-13 06:09 - 00023296 _____ (DEVGURU Co., LTD.) C:\Windows\system32\Drivers\ss_conn_usb_driver.sys
2014-06-18 21:42 - 2014-06-18 21:42 - 38300512 _____ (Samsung) C:\Users\Andreas\Downloads\SideSync_3.0.2.546_signed.exe
2014-06-14 06:38 - 2014-06-14 06:38 - 02077392 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\IE11-Windows6.1.exe
2014-06-14 06:14 - 2014-06-14 06:14 - 00985600 _____ () C:\Users\Andreas\Downloads\MicrosoftFixit50123.msi
2014-06-14 06:09 - 2014-06-14 06:09 - 09699328 _____ () C:\Users\Andreas\Downloads\MicrosoftCameraCodecPack-x86.msi
2014-06-14 05:49 - 2014-06-14 05:49 - 01245384 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\wlsetup-web.exe
2014-06-14 03:45 - 2014-06-14 03:45 - 00000000 ____D () C:\Users\Andreas\Documents\Microsoft Hardware
2014-06-14 03:06 - 2014-06-14 03:06 - 09974912 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\FF2014 deDE.exe
2014-06-13 23:40 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-13 23:40 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-13 23:40 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-13 23:40 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-13 23:40 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-13 23:40 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-13 23:40 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-13 23:40 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-13 23:40 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-13 23:40 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-13 23:40 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-13 23:40 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-13 23:40 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-13 23:40 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-13 23:40 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-13 23:40 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-13 23:40 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-13 23:40 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-13 23:40 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-13 23:40 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-13 23:40 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-13 23:40 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-13 23:40 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-13 23:40 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-13 23:40 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-13 23:40 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-13 23:40 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-13 23:40 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-13 23:39 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-13 23:39 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-13 23:39 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-13 23:39 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-13 23:39 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-13 23:39 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-13 23:39 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-13 23:39 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-13 23:38 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Garmin
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Garmin
2014-06-12 23:16 - 2014-06-12 23:16 - 00001870 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2014-06-12 23:16 - 2014-06-12 23:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 23:12 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-12 23:12 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-06 06:01 - 2014-06-06 06:01 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Logitech® Webcam-Software
2014-06-06 05:30 - 2014-06-06 05:30 - 00000000 ____D () C:\Users\user\Documents\ProcAlyzer Dumps
2014-06-06 02:16 - 2014-06-06 02:16 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-06-06 02:14 - 2014-06-06 02:14 - 00002161 _____ () C:\Users\user\Desktop\Avira PC Cleaner.lnk

==================== One Month Modified Files and Folders =======

2014-07-06 02:52 - 2014-07-03 17:09 - 00018865 _____ () C:\Users\user\Desktop\FRST.txt
2014-07-06 02:51 - 2014-07-03 17:08 - 00000000 ___DC () C:\FRST
2014-07-06 02:50 - 2014-07-06 02:50 - 00000834 _____ () C:\Users\user\Desktop\JRT.txt
2014-07-06 02:49 - 2009-07-14 06:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-06 02:49 - 2009-07-14 06:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-06 02:45 - 2014-07-06 02:45 - 00000000 ____D () C:\Windows\ERUNT
2014-07-06 02:43 - 2014-07-06 02:43 - 00004478 _____ () C:\Users\user\Desktop\AdwCleaner[S0].txt
2014-07-06 02:40 - 2014-07-05 12:26 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-07-06 02:40 - 2013-07-19 01:22 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-06 02:40 - 2012-08-24 13:12 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-07-06 02:39 - 2014-07-03 14:18 - 00000594 _____ () C:\Windows\setupact.log
2014-07-06 02:39 - 2013-12-14 21:32 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-06 02:39 - 2012-08-23 20:54 - 00155888 _____ () C:\Windows\PFRO.log
2014-07-06 02:39 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-06 02:37 - 2012-08-22 21:48 - 01606858 _____ () C:\Windows\WindowsUpdate.log
2014-07-06 02:25 - 2013-07-19 01:22 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-06 02:14 - 2014-07-06 02:07 - 00000000 ___DC () C:\AdwCleaner
2014-07-06 02:14 - 2014-04-17 00:21 - 00001250 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-07-06 02:05 - 2014-07-06 02:05 - 00016189 _____ () C:\Users\user\Desktop\mbam.txt
2014-07-06 02:02 - 2014-07-06 00:54 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-06 01:58 - 2014-04-09 11:23 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000UA.job
2014-07-06 01:39 - 2012-08-25 03:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-06 01:22 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\Performance
2014-07-06 00:58 - 2014-04-09 11:23 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000Core.job
2014-07-06 00:53 - 2014-07-06 00:53 - 00001076 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ___DC () C:\Program Files\ Malwarebytes Anti-Malware 
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-06 00:41 - 2014-07-06 00:40 - 00002080 _____ () C:\Users\user\Desktop\Neues Textdokument (2).txt
2014-07-06 00:40 - 2014-07-06 00:40 - 01016261 _____ (Thisisu) C:\Users\user\Desktop\JRT.exe
2014-07-06 00:40 - 2012-08-25 03:17 - 00000000 ____D () C:\Users\user\Downloads\Andreas
2014-07-06 00:39 - 2014-07-06 00:39 - 01346519 _____ () C:\Users\user\Desktop\adwcleaner_3.214.exe
2014-07-06 00:39 - 2014-07-06 00:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\user\Desktop\mbam-setup-2.0.2.1012.exe
2014-07-06 00:37 - 2014-07-06 00:37 - 00060290 _____ () C:\Users\user\Desktop\Anleitung   Malwarebytes Anti-Malware  - Trojaner-Board.htm
2014-07-05 10:23 - 2014-07-05 10:23 - 00021396 ____C () C:\ComboFix.txt
2014-07-05 10:23 - 2014-07-03 23:15 - 00000000 ___DC () C:\Qoobox
2014-07-05 10:23 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-07-05 10:20 - 2014-07-03 23:14 - 00000000 ____D () C:\Windows\erdnt
2014-07-05 10:15 - 2009-07-14 04:04 - 00000215 ____C () C:\Windows\system.ini
2014-07-05 09:20 - 2014-01-06 04:21 - 00000000 ____D () C:\ProgramData\Temp
2014-07-03 23:12 - 2014-07-03 23:10 - 05213907 ____R (Swearware) C:\Users\user\Desktop\ComboFix.exe
2014-07-03 23:09 - 2014-06-24 16:19 - 00000000 ___RD () C:\Users\user\Dropbox
2014-07-03 22:03 - 2014-06-24 16:16 - 00000000 ____D () C:\Users\user\AppData\Roaming\DropboxMaster
2014-07-03 22:03 - 2014-03-05 13:34 - 00000000 ____D () C:\Users\user\AppData\Roaming\Dropbox
2014-07-03 21:18 - 2014-07-03 17:07 - 00000470 _____ () C:\Users\user\Desktop\defogger_disable.log
2014-07-03 21:02 - 2014-07-03 21:02 - 00006516 _____ () C:\Users\user\Desktop\Gmer.txt
2014-07-03 18:52 - 2014-07-03 18:52 - 300952539 _____ () C:\Windows\MEMORY.DMP
2014-07-03 18:52 - 2014-07-03 18:52 - 00174960 _____ () C:\Windows\Minidump\070314-58968-01.dmp
2014-07-03 18:52 - 2014-01-06 05:14 - 00000000 ____D () C:\Windows\Minidump
2014-07-03 18:40 - 2014-07-03 18:40 - 00380416 _____ () C:\Users\user\Desktop\dp6h7y2w.exe
2014-07-03 17:17 - 2014-07-03 17:17 - 00000897 _____ () C:\Users\user\Desktop\Neues Textdokument.txt
2014-07-03 17:13 - 2014-07-03 17:11 - 00042981 _____ () C:\Users\user\Desktop\Addition.txt
2014-07-03 17:07 - 2014-07-03 17:07 - 00000000 _____ () C:\Users\user\defogger_reenable
2014-07-03 17:03 - 2014-07-03 17:03 - 00380416 _____ () C:\Users\user\Desktop\Gmer-19357.exe
2014-07-03 17:01 - 2014-07-03 17:01 - 01073664 _____ (Farbar) C:\Users\user\Desktop\FRST.exe
2014-07-03 17:01 - 2014-07-03 17:01 - 00050477 _____ () C:\Users\user\Desktop\Defogger.exe
2014-07-03 17:00 - 2014-07-03 17:00 - 00051776 _____ () C:\Users\user\Desktop\Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten  - Trojaner-Board.htm
2014-07-03 15:42 - 2014-07-03 15:42 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2014-07-03 15:07 - 2014-03-17 05:24 - 00000000 ____D () C:\Users\user\Desktop\The.Wolf.of.Wall.Street.DVDSCR.L
2014-07-03 14:20 - 2012-12-12 01:57 - 00100864 ___SH () C:\Users\user\Desktop\Thumbs.db
2014-07-03 14:18 - 2014-07-03 14:18 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-02 05:23 - 2012-08-22 21:56 - 01628044 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-02 04:03 - 2014-05-09 01:02 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Windows Live
2014-07-02 03:16 - 2014-05-18 02:18 - 00000000 ____D () C:\Users\Andreas\Desktop\Neues Verzeichnis
2014-07-02 02:51 - 2014-05-17 23:39 - 00000000 ____D () C:\Users\Andreas\Desktop\Sicherung Galaxy S3 Gerätespeicher komplett 17.05.20014
2014-07-02 01:25 - 2012-08-25 03:38 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-07-02 01:25 - 2012-08-25 03:38 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-06-26 05:40 - 2012-09-15 01:30 - 00000000 ____D () C:\Users\user\AppData\Roaming\vlc
2014-06-26 03:28 - 2014-06-26 03:28 - 00002261 _____ () C:\Users\user\Desktop\Chrome App Launcher.lnk
2014-06-26 03:28 - 2014-06-26 03:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-25 22:44 - 2014-06-25 22:44 - 00002164 _____ () C:\Users\user\Desktop\Samsung Link.lnk
2014-06-24 19:14 - 2014-05-24 03:26 - 00006144 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-24 17:53 - 2014-06-24 17:53 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-24 17:53 - 2013-02-01 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-24 17:37 - 2014-06-24 17:35 - 86530912 _____ (Copyright 2013 SAMSUNG) C:\Users\user\Downloads\SamsungLink_Installer32.exe
2014-06-24 16:19 - 2014-06-24 16:19 - 00001386 _____ () C:\Users\user\Desktop\Dropbox.lnk
2014-06-24 16:15 - 2014-06-24 16:15 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-24 16:11 - 2014-06-24 16:11 - 00318944 _____ (Dropbox, Inc.) C:\Users\user\Downloads\DropboxInstaller(1).exe
2014-06-21 18:24 - 2014-06-20 00:12 - 00000000 ____D () C:\Users\user\AppData\Roaming\Spotify
2014-06-21 08:22 - 2012-09-22 00:36 - 00007643 _____ () C:\Users\user\AppData\Local\resmon.resmoncfg
2014-06-21 06:24 - 2013-07-17 09:49 - 00000000 ____D () C:\Users\user\AppData\Local\Windows Live
2014-06-21 05:57 - 2013-06-27 02:55 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2014-06-20 07:55 - 2014-02-24 04:07 - 00301056 ___SH () C:\Users\Andreas\Downloads\Thumbs.db
2014-06-20 07:50 - 2013-02-01 15:11 - 00000000 ____D () C:\Users\user\AppData\Roaming\Samsung
2014-06-20 07:11 - 2014-06-20 07:11 - 00000000 ___DC () C:\Program Files\MSECache
2014-06-20 04:14 - 2014-06-20 04:14 - 00088143 _____ () C:\Users\user\Downloads\collectionCache.bnk
2014-06-20 02:49 - 2014-06-20 00:12 - 00000000 ____D () C:\Users\user\AppData\Local\Spotify
2014-06-20 02:06 - 2014-06-20 02:06 - 00000000 ____D () C:\Users\user\AppData\Roaming\Dojotech Software
2014-06-20 01:47 - 2014-06-20 01:47 - 00000000 ____H () C:\Users\user\Documents\Default.rdp
2014-06-20 01:36 - 2014-01-07 19:19 - 00000000 ___RD () C:\Users\Andreas\Desktop\Bilder Canon aktuell
2014-06-20 00:25 - 2014-06-20 00:25 - 00002637 _____ () C:\Users\Public\Desktop\Dojotech Spotify Recorder.lnk
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ___DC () C:\Program Files\Dojotech Software
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-06-20 00:12 - 2014-06-20 00:12 - 00001803 _____ () C:\Users\user\Desktop\Spotify.lnk
2014-06-20 00:12 - 2014-06-20 00:12 - 00001789 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-20 00:11 - 2014-06-20 00:11 - 00126112 _____ (Spotify Ltd) C:\Users\user\Downloads\SpotifySetup.exe
2014-06-19 21:20 - 2014-06-04 02:45 - 00008652 _____ () C:\Windows\system32\lvcoinst.log
2014-06-19 21:19 - 2012-08-22 21:51 - 00000000 ____D () C:\Users\user\AppData\Local\VirtualStore
2014-06-19 06:52 - 2013-07-18 01:26 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Skype
2014-06-18 22:20 - 2014-03-07 19:29 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\SAMSUNG
2014-06-18 22:19 - 2014-06-18 22:19 - 00001115 _____ () C:\Users\Public\Desktop\SideSync 3.0.lnk
2014-06-18 22:13 - 2014-06-18 22:07 - 00000000 ____D () C:\Windows\system32\directx
2014-06-18 22:12 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-06-18 22:09 - 2014-06-18 22:07 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-06-18 22:07 - 2013-02-01 15:44 - 00000000 ____D () C:\temp
2014-06-18 21:51 - 2014-03-31 17:41 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-18 21:51 - 2013-10-25 11:07 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-18 21:45 - 2014-02-08 15:54 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-18 21:45 - 2013-02-01 15:02 - 00000000 ____D () C:\Program Files\Samsung
2014-06-18 21:43 - 2014-03-05 13:36 - 00000000 ___RD () C:\Users\Andreas\Dropbox
2014-06-18 21:42 - 2014-06-18 21:42 - 38300512 _____ (Samsung) C:\Users\Andreas\Downloads\SideSync_3.0.2.546_signed.exe
2014-06-18 21:18 - 2014-04-16 23:59 - 00040960 ___SH () C:\Users\Andreas\Desktop\Thumbs.db
2014-06-18 20:24 - 2014-03-05 13:31 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Dropbox
2014-06-18 19:40 - 2014-03-05 13:34 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\DropboxMaster
2014-06-16 01:22 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-15 14:13 - 2014-02-07 17:28 - 00000000 ____D () C:\Users\Andreas\Desktop\Kontoauszüge DiBa 2014
2014-06-15 01:05 - 2014-05-09 14:23 - 00000000 ____D () C:\Users\Andreas\Desktop\Kreditanträge 2014
2014-06-14 20:52 - 2013-08-07 18:46 - 00000000 ____D () C:\Users\user\AppData\Roaming\Mozilla
2014-06-14 20:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-06-14 08:12 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-06-14 07:30 - 2014-05-08 01:19 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-14 06:38 - 2014-06-14 06:38 - 02077392 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\IE11-Windows6.1.exe
2014-06-14 06:14 - 2014-06-14 06:14 - 00985600 _____ () C:\Users\Andreas\Downloads\MicrosoftFixit50123.msi
2014-06-14 06:09 - 2014-06-14 06:09 - 09699328 _____ () C:\Users\Andreas\Downloads\MicrosoftCameraCodecPack-x86.msi
2014-06-14 05:49 - 2014-06-14 05:49 - 01245384 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\wlsetup-web.exe
2014-06-14 03:45 - 2014-06-14 03:45 - 00000000 ____D () C:\Users\Andreas\Documents\Microsoft Hardware
2014-06-14 03:06 - 2014-06-14 03:06 - 09974912 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\FF2014 deDE.exe
2014-06-13 05:46 - 2012-08-24 11:52 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-13 05:45 - 2013-07-17 08:18 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-13 05:40 - 2012-08-23 21:46 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-13 04:21 - 2013-07-19 01:23 - 00002133 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Garmin
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Garmin
2014-06-12 23:16 - 2014-06-12 23:16 - 00001870 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2014-06-12 23:16 - 2014-06-12 23:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 23:16 - 2014-02-08 15:55 - 00000000 ____D () C:\ProgramData\Garmin
2014-06-12 23:16 - 2014-02-08 15:54 - 00000000 ____D () C:\Program Files\Garmin
2014-06-08 10:48 - 2014-06-13 23:39 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 10:43 - 2014-06-13 23:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-06 06:01 - 2014-06-06 06:01 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Logitech® Webcam-Software
2014-06-06 05:30 - 2014-06-06 05:30 - 00000000 ____D () C:\Users\user\Documents\ProcAlyzer Dumps
2014-06-06 05:29 - 2014-04-08 07:26 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-06-06 02:16 - 2014-06-06 02:16 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-06-06 02:16 - 2014-04-21 12:14 - 00000000 ___RD () C:\Program Files\Skype
2014-06-06 02:16 - 2013-06-27 02:55 - 00000000 ____D () C:\ProgramData\Skype
2014-06-06 02:14 - 2014-06-06 02:14 - 00002161 _____ () C:\Users\user\Desktop\Avira PC Cleaner.lnk
2014-06-06 01:52 - 2014-04-08 07:36 - 00002161 _____ () C:\Users\Andreas\Desktop\Avira PC Cleaner.lnk
2014-06-06 01:52 - 2014-04-08 06:58 - 00002217 _____ () C:\Users\Andreas\Desktop\Entfernen des Avira PC Cleaners.lnk

Some content of TEMP:
====================
C:\Users\user\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-20 13:13

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 06.07.2014, 11:38

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Schumania · 08.07.2014, 22:49

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=3aa459765f9ec547998e37698a7f4332
# engine=19079
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-07-08 08:34:44
# local_time=2014-07-08 10:34:44 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Kaspersky Anti-Virus'
# compatibility_mode=1293 16777214 100 100 0 36329706 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 210500 156482875 0 0
# scanned=213492
# found=18
# cleaned=0
# scan_time=9335
sh=D4D640E4A04D91DEF41DAD844D1EC046FA1D5F3E ft=1 fh=f32a1de57c3d142e vn="Variante von Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\NativeMessaging\CT3317892\1_0_0_7\TBMessagingHost.exe.vir"
sh=47684BC9F96872C4134DD46689D013BD8E51A14A ft=1 fh=47ffb6bc73749a57 vn="Win32/Toolbar.Conduit.AH evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\NativeMessaging\CT3317892\1_0_0_9\TBMessagingHost.exe.vir"
sh=068A54F966DB6AC14BCA0E39E2A99E3F0027304D ft=1 fh=39f7a16b0423d981 vn="Win64/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Andreas\AppData\LocalLow\RadioTotal1\hk64tbRadi.dll"
sh=CC6AF3A384A61C1C621BA5AB43583E82FF281530 ft=1 fh=bbbd034bf7d0bf76 vn="Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Andreas\AppData\LocalLow\RadioTotal1\hktbRadi.dll"
sh=9B3B44428CC80CC43F085AE514E7E16F7963EACC ft=1 fh=4c03fc1250fa29f9 vn="Variante von Win32/Toolbar.Conduit.P evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Andreas\AppData\LocalLow\RadioTotal1\ldrtbRadi.dll"
sh=33457E2F2405727124C107D6DEAF24C94E992463 ft=1 fh=e719e166edfd7994 vn="Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Andreas\AppData\LocalLow\RadioTotal1\tbRadi.dll"
sh=B5C93DA0C608B26C9487ABC49CCB643C9A15ED33 ft=1 fh=75f1c65aa8a331ed vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Andreas\AppData\LocalLow\RadioTotal1\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.6.12\bin\PriceGongIE.dll"
sh=45FCE453799F5C9325959AC55FFD442A714AD0DC ft=1 fh=9ec8e296cce51c5e vn="Win32/StartPage.OPH Trojaner" ac=I fn="C:\Users\Andreas\Desktop\Privat\vlc-2.0.3-win32.exe"
sh=4690D25146977A6F2F82DF126CA5E703BFA8F153 ft=1 fh=ce3faad2cf2d8de5 vn="Variante von MSIL/DownloadGuide.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Andreas\Downloads\Dart.O.Mat_501__R2D2_-Downloader.exe"
sh=45595A56F3661DFC87F288A9EF848E8DEEF80894 ft=1 fh=e1de575926778212 vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\Andreas\Downloads\FreeVideoToMP3Converter_5.0.36.319.exe"
sh=D1593EC6C9314834F3AA725A9334DC293F1422C7 ft=1 fh=97ff90bae23b398c vn="Variante von MSIL/DownloadGuide.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Andreas\Downloads\scoreboard-Downloader.exe"
sh=EB67DFB46B5446B8718914DD9ED57F6BE0B58806 ft=1 fh=57acb2ee72838ec2 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\Desktop\Alte Firefox-Daten\o39t0xo0.default\extensions\{a1c9c947-20bf-b2d2-ef8c-b26c53a7c832}\components\SmartbarFireFoxRemotePlugin_23.dll"
sh=DEFD57BDA7758FEA7920340A3088AE3A79B40529 ft=1 fh=ae1e9cd28e06bdc9 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\Desktop\Alte Firefox-Daten\o39t0xo0.default\extensions\{a1c9c947-20bf-b2d2-ef8c-b26c53a7c832}\components\SmartbarFireFoxRemotePlugin_24.dll"
sh=C778E5E119A965952E29D1216A055A263F653155 ft=1 fh=2924f4772f758b94 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\Desktop\Alte Firefox-Daten\o39t0xo0.default\extensions\{a1c9c947-20bf-b2d2-ef8c-b26c53a7c832}\components\SmartbarFireFoxRemotePlugin_25.dll"
sh=7156BD27311CFA3FECB282FABAB0990F6E76EE7F ft=1 fh=ff5ca7f501cec009 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\Desktop\Alte Firefox-Daten\o39t0xo0.default\extensions\{a1c9c947-20bf-b2d2-ef8c-b26c53a7c832}\components\SmartbarFireFoxRemotePlugin_26.dll"
sh=70CBF3C62290F9AE19CBED273B032D0262555565 ft=1 fh=c58c54be43328cac vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\Desktop\Alte Firefox-Daten\o39t0xo0.default\extensions\{a1c9c947-20bf-b2d2-ef8c-b26c53a7c832}\components\SmartbarFireFoxRemotePlugin_27.dll"
sh=1622BA167CF685631AD3E588C13C1630A9DD98D1 ft=1 fh=86cd7b0c364799f9 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\Desktop\Alte Firefox-Daten\o39t0xo0.default\extensions\{a1c9c947-20bf-b2d2-ef8c-b26c53a7c832}\components\SmartbarFireFoxRemotePlugin_28.dll"
sh=76C19267783B1C3FBE78C7EDFB19EEE1CA020E5B ft=1 fh=24f1c525cd32bc9c vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="C:\Users\user\Downloads\Andreas\Programme\MyPhoneExplorer_Setup_1.8.5.exe"

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.85  
 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Kaspersky Anti-Virus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Spybot - Search & Destroy 
 Java 7 Update 55  
 Java version out of Date! 
 Adobe Flash Player 	14.0.0.145  
 Adobe Reader XI  
 Mozilla Firefox (30.0) 
 Google Chrome 35.0.1916.114  
 Google Chrome 35.0.1916.153  
````````Process Check: objlist.exe by Laurent````````  
 Kaspersky Lab Kaspersky Anti-Virus 14.0.0 avpui.exe  
 Kaspersky Lab Kaspersky Anti-Virus 14.0.0 avp.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-07-2014 01
Ran by user (administrator) on SCHUMI-VAIO on 08-07-2014 23:31:44
Running from C:\Users\user\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Teruten) C:\Windows\System32\FsUsbExService.Exe
(Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Samsung) C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [167936 2012-09-03] (Alps Electric Co., Ltd.)
HKLM\...\Run: [vdultimate_firefox] => C:\ProgramData\VideoDownloaderUltimate\Firefox\vdultimate.exe [954368 2014-03-20] (Link64 GmbH)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [1425208 2012-09-20] (Logitech, Inc.)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] - rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-1806344340-3721178228-3502498018-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1806344340-3721178228-3502498018-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers:  SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
BootExecute: autocheck autochk * sdnclean.exe
GroupPolicyUsers\S-1-5-21-1806344340-3721178228-3502498018-1005\User: Group Policy restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-1806344340-3721178228-3502498018-1004\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF68C6225F388CF01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {A1BD49DC-EFF7-4B2A-A983-4CEA6A90107D} URL = https://www.google.com/search?q={searchTerms}
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\biqofvfm.default-1400897853959
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @nvidia.com/3DVision - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\user\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\user\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\user\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\url_advisor@kaspersky.com [2013-10-19]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2013-10-19]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\FFExt\content_blocker@kaspersky.com [2013-10-19]
FF HKLM\...\Firefox\Extensions: [vdultimate@link64] - C:\ProgramData\VideoDownloaderUltimate\Firefox\videodownloaderultimate.xpi
FF Extension: Youtube and more - Video Downloader Ultimate - C:\ProgramData\VideoDownloaderUltimate\Firefox\videodownloaderultimate.xpi [2014-03-20]

Chrome: 
=======
CHR HomePage: https://chrome.google.com/webstore/launcher
CHR StartupUrls: "hxxp://www.google.de/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.4.600\_platform_specific\win_x86\widevinecdmadapter.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 7.0.550.14) - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U55) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\user\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll No File
CHR Plugin: (Google Talk Plugin) - C:\Users\user\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\user\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (HD for YouTube™) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjbfncbadcmnkopckegnmjgihagponf [2014-06-19]
CHR Extension: (Google Cast) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd [2014-06-19]
CHR Extension: (vGet Cast (DLNA Controller)) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekdjofnchpbfmnfbedalmbdlhbabiapi [2014-06-19]
CHR Extension: (VNC Viewer for Google Chrome™) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\iabmpiboiopbgfabjmgeedhcmjenhbla [2014-06-19]
CHR Extension: (Video-Chat Vanilla Show) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgaehlpildddphihhaghbgijfebbbaeo [2014-06-19]
CHR Extension: (Google Wallet) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-27]
CHR Extension: (Google Chrome to Phone Extension) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco [2014-06-19]
CHR Extension: (Black & Gray) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\opngpggidjbhmmlapgcmcedfgblofagi [2014-06-26]
CHR HKLM\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx [2013-08-14]
CHR HKLM\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\ChromeExt\ab.crx [2013-08-14]

========================== Services (Whitelisted) =================

R2 AllShare Framework DMS; C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe [401800 2013-12-21] (Samsung) [File not signed]
R2 avp; C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-19] (Kaspersky Lab ZAO)
R2 FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [233472 2013-07-18] (Teruten) [File not signed]
R2 ftpsvc; C:\Windows\system32\inetsrv\ftpsvc.dll [310272 2012-06-01] (Microsoft Corporation)
R2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [435032 2014-06-09] (Garmin Ltd or its subsidiaries)
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [573280 2014-05-19] (Copyright 2013 SAMSUNG)
S3 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [741640 2014-05-13] (DEVGURU Co., LTD.)
S2 STacSV; C:\Windows\system32\stacsv.exe [94208 2012-08-25] (SigmaTel, Inc.)

==================== Drivers (Whitelisted) ====================

S3 AF15BDA; C:\Windows\System32\DRIVERS\AF15BDA.sys [300544 2007-03-20] (AfaTech                  )
R3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [37344 2013-07-18] () [File not signed]
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-11-07] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [94304 2014-03-24] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [576608 2014-03-24] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-10-19] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25184 2014-02-18] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-19] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [14432 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [45024 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [144992 2013-12-19] (Kaspersky Lab ZAO)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [40736 2013-11-27] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv.sys [29728 2013-12-06] (Visicom Media Inc.)
S3 ss_conn_usb_driver; C:\Windows\System32\Drivers\ss_conn_usb_driver.sys [23296 2014-05-13] (DEVGURU Co., LTD.)
S3 STHDA; C:\Windows\System32\drivers\stwrt.sys [326656 2012-08-25] (SigmaTel, Inc.)
R3 ti21sony; C:\Windows\System32\drivers\ti21sony.sys [812544 2012-08-24] (Texas Instruments)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [15872 2013-02-12] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\user\AppData\Local\Temp\catchme.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-08 23:31 - 2014-07-08 23:31 - 00000000 ____D () C:\Users\user\Desktop\FRST-OlderVersion
2014-07-08 23:29 - 2014-07-08 23:29 - 00000931 _____ () C:\Users\user\Desktop\checkup.txt
2014-07-08 19:22 - 2014-07-08 19:23 - 00854390 _____ () C:\Users\user\Desktop\SecurityCheck.exe
2014-07-08 19:20 - 2014-07-08 19:20 - 02347384 _____ (ESET) C:\Users\user\Desktop\esetsmartinstaller_deu.exe
2014-07-06 14:04 - 2014-07-06 14:04 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\WinRAR
2014-07-06 14:03 - 2014-07-06 14:03 - 00000000 ____D () C:\Users\Public\Documents\CrashDump
2014-07-06 13:56 - 2014-07-06 13:56 - 00000000 ____D () C:\Users\Sabine\Documents\samsung
2014-07-06 13:54 - 2014-07-06 13:54 - 00000000 ____D () C:\Users\Sabine\Documents\DVDVideoSoft
2014-07-06 13:54 - 2014-07-06 13:54 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\DVDVideoSoft
2014-07-06 02:50 - 2014-07-06 02:50 - 00000834 _____ () C:\Users\user\Desktop\JRT.txt
2014-07-06 02:45 - 2014-07-06 02:45 - 00000000 ____D () C:\Windows\ERUNT
2014-07-06 02:43 - 2014-07-06 02:43 - 00004478 _____ () C:\Users\user\Desktop\AdwCleaner[S0].txt
2014-07-06 02:07 - 2014-07-06 02:14 - 00000000 ___DC () C:\AdwCleaner
2014-07-06 02:05 - 2014-07-06 02:05 - 00016189 _____ () C:\Users\user\Desktop\mbam.txt
2014-07-06 00:54 - 2014-07-06 02:02 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ___DC () C:\Program Files\ Malwarebytes Anti-Malware 
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-06 00:53 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-06 00:53 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-06 00:53 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-06 00:40 - 2014-07-08 19:14 - 00001661 _____ () C:\Users\user\Desktop\Neues Textdokument (2).txt
2014-07-06 00:40 - 2014-07-06 00:40 - 01016261 _____ (Thisisu) C:\Users\user\Desktop\JRT.exe
2014-07-06 00:39 - 2014-07-06 00:39 - 01346519 _____ () C:\Users\user\Desktop\adwcleaner_3.214.exe
2014-07-06 00:38 - 2014-07-06 00:39 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\user\Desktop\mbam-setup-2.0.2.1012.exe
2014-07-06 00:37 - 2014-07-06 00:37 - 00060290 _____ () C:\Users\user\Desktop\Anleitung   Malwarebytes Anti-Malware  - Trojaner-Board.htm
2014-07-05 12:26 - 2014-07-07 02:11 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-07-05 10:23 - 2014-07-05 10:23 - 00021396 ____C () C:\ComboFix.txt
2014-07-03 23:16 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-07-03 23:16 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-07-03 23:16 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-07-03 23:16 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-07-03 23:16 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-07-03 23:16 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-07-03 23:16 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-07-03 23:16 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-07-03 23:15 - 2014-07-05 10:23 - 00000000 ___DC () C:\Qoobox
2014-07-03 23:14 - 2014-07-05 10:20 - 00000000 ____D () C:\Windows\erdnt
2014-07-03 23:10 - 2014-07-03 23:12 - 05213907 ____R (Swearware) C:\Users\user\Desktop\ComboFix.exe
2014-07-03 21:02 - 2014-07-03 21:02 - 00006516 _____ () C:\Users\user\Desktop\Gmer.txt
2014-07-03 18:52 - 2014-07-03 18:52 - 300952539 _____ () C:\Windows\MEMORY.DMP
2014-07-03 18:52 - 2014-07-03 18:52 - 00174960 _____ () C:\Windows\Minidump\070314-58968-01.dmp
2014-07-03 18:40 - 2014-07-03 18:40 - 00380416 _____ () C:\Users\user\Desktop\dp6h7y2w.exe
2014-07-03 17:17 - 2014-07-03 17:17 - 00000897 _____ () C:\Users\user\Desktop\Neues Textdokument.txt
2014-07-03 17:11 - 2014-07-03 17:13 - 00042981 _____ () C:\Users\user\Desktop\Addition.txt
2014-07-03 17:09 - 2014-07-08 23:31 - 00018901 _____ () C:\Users\user\Desktop\FRST.txt
2014-07-03 17:08 - 2014-07-08 23:32 - 00000000 ___DC () C:\FRST
2014-07-03 17:07 - 2014-07-03 21:18 - 00000470 _____ () C:\Users\user\Desktop\defogger_disable.log
2014-07-03 17:07 - 2014-07-03 17:07 - 00000000 _____ () C:\Users\user\defogger_reenable
2014-07-03 17:03 - 2014-07-03 17:03 - 00380416 _____ () C:\Users\user\Desktop\Gmer-19357.exe
2014-07-03 17:01 - 2014-07-08 23:31 - 01074688 ____C (Farbar) C:\Users\user\Desktop\FRST.exe
2014-07-03 17:01 - 2014-07-03 17:01 - 00050477 _____ () C:\Users\user\Desktop\Defogger.exe
2014-07-03 17:00 - 2014-07-03 17:00 - 00051776 _____ () C:\Users\user\Desktop\Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten  - Trojaner-Board.htm
2014-07-03 15:42 - 2014-07-03 15:42 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2014-07-03 14:18 - 2014-07-07 02:10 - 00000762 _____ () C:\Windows\setupact.log
2014-07-03 14:18 - 2014-07-03 14:18 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-26 03:28 - 2014-06-26 03:28 - 00002261 _____ () C:\Users\user\Desktop\Chrome App Launcher.lnk
2014-06-26 03:28 - 2014-06-26 03:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-25 22:44 - 2014-06-25 22:44 - 00002164 _____ () C:\Users\user\Desktop\Samsung Link.lnk
2014-06-24 17:53 - 2014-06-24 17:53 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-24 17:35 - 2014-06-24 17:37 - 86530912 _____ (Copyright 2013 SAMSUNG) C:\Users\user\Downloads\SamsungLink_Installer32.exe
2014-06-24 16:19 - 2014-07-03 23:09 - 00000000 ___RD () C:\Users\user\Dropbox
2014-06-24 16:19 - 2014-06-24 16:19 - 00001386 _____ () C:\Users\user\Desktop\Dropbox.lnk
2014-06-24 16:16 - 2014-07-03 22:03 - 00000000 ____D () C:\Users\user\AppData\Roaming\DropboxMaster
2014-06-24 16:15 - 2014-06-24 16:15 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-24 16:11 - 2014-06-24 16:11 - 00318944 _____ (Dropbox, Inc.) C:\Users\user\Downloads\DropboxInstaller(1).exe
2014-06-20 07:11 - 2014-06-20 07:11 - 00000000 ___DC () C:\Program Files\MSECache
2014-06-20 04:14 - 2014-06-20 04:14 - 00088143 _____ () C:\Users\user\Downloads\collectionCache.bnk
2014-06-20 02:06 - 2014-06-20 02:06 - 00000000 ____D () C:\Users\user\AppData\Roaming\Dojotech Software
2014-06-20 01:47 - 2014-06-20 01:47 - 00000000 ____H () C:\Users\user\Documents\Default.rdp
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ___DC () C:\Program Files\Dojotech Software
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-06-20 00:12 - 2014-06-21 18:24 - 00000000 ____D () C:\Users\user\AppData\Roaming\Spotify
2014-06-20 00:12 - 2014-06-20 02:49 - 00000000 ____D () C:\Users\user\AppData\Local\Spotify
2014-06-20 00:12 - 2014-06-20 00:12 - 00001803 _____ () C:\Users\user\Desktop\Spotify.lnk
2014-06-20 00:12 - 2014-06-20 00:12 - 00001789 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-20 00:11 - 2014-06-20 00:11 - 00126112 _____ (Spotify Ltd) C:\Users\user\Downloads\SpotifySetup.exe
2014-06-18 22:13 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-06-18 22:13 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-06-18 22:13 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-06-18 22:13 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-06-18 22:13 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-06-18 22:13 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-06-18 22:13 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-06-18 22:13 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-06-18 22:13 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-06-18 22:13 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-06-18 22:13 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-06-18 22:13 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-06-18 22:13 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-06-18 22:13 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-06-18 22:13 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-06-18 22:13 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-06-18 22:13 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-06-18 22:13 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-06-18 22:13 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-06-18 22:13 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-06-18 22:13 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-06-18 22:13 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-06-18 22:13 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-06-18 22:13 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-06-18 22:13 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-06-18 22:13 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-06-18 22:13 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-06-18 22:13 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-06-18 22:13 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-06-18 22:13 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-06-18 22:13 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-06-18 22:13 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-06-18 22:13 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-06-18 22:13 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-06-18 22:13 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-06-18 22:13 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-06-18 22:13 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-06-18 22:13 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-06-18 22:13 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-06-18 22:13 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-06-18 22:13 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-06-18 22:13 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-06-18 22:13 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-06-18 22:13 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-06-18 22:12 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-06-18 22:12 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-06-18 22:12 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-06-18 22:12 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-06-18 22:12 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-06-18 22:12 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-06-18 22:12 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-06-18 22:12 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-06-18 22:12 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-06-18 22:12 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-06-18 22:12 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-06-18 22:12 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-06-18 22:12 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-06-18 22:12 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-06-18 22:12 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-06-18 22:12 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-06-18 22:12 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-06-18 22:12 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-06-18 22:12 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-06-18 22:12 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-06-18 22:12 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-06-18 22:12 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-06-18 22:12 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-06-18 22:12 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-06-18 22:12 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-06-18 22:12 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-06-18 22:12 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-06-18 22:12 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-06-18 22:12 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-06-18 22:12 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-06-18 22:07 - 2014-06-18 22:13 - 00000000 ____D () C:\Windows\system32\directx
2014-06-18 22:07 - 2014-06-18 22:09 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-06-18 22:06 - 2014-05-13 06:09 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-06-18 22:06 - 2014-05-13 06:09 - 00089856 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-06-18 22:06 - 2014-05-13 06:09 - 00023296 _____ (DEVGURU Co., LTD.) C:\Windows\system32\Drivers\ss_conn_usb_driver.sys
2014-06-18 21:42 - 2014-06-18 21:42 - 38300512 _____ (Samsung) C:\Users\Andreas\Downloads\SideSync_3.0.2.546_signed.exe
2014-06-14 06:38 - 2014-06-14 06:38 - 02077392 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\IE11-Windows6.1.exe
2014-06-14 06:14 - 2014-06-14 06:14 - 00985600 _____ () C:\Users\Andreas\Downloads\MicrosoftFixit50123.msi
2014-06-14 06:09 - 2014-06-14 06:09 - 09699328 _____ () C:\Users\Andreas\Downloads\MicrosoftCameraCodecPack-x86.msi
2014-06-14 05:49 - 2014-06-14 05:49 - 01245384 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\wlsetup-web.exe
2014-06-14 03:45 - 2014-06-14 03:45 - 00000000 ____D () C:\Users\Andreas\Documents\Microsoft Hardware
2014-06-14 03:06 - 2014-06-14 03:06 - 09974912 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\FF2014 deDE.exe
2014-06-13 23:40 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-13 23:40 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-13 23:40 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-13 23:40 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-13 23:40 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-13 23:40 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-13 23:40 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-13 23:40 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-13 23:40 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-13 23:40 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-13 23:40 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-13 23:40 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-13 23:40 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-13 23:40 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-13 23:40 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-13 23:40 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-13 23:40 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-13 23:40 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-13 23:40 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-13 23:40 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-13 23:40 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-13 23:40 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-13 23:40 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-13 23:40 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-13 23:40 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-13 23:40 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-13 23:40 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-13 23:40 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-13 23:39 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-13 23:39 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-13 23:39 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-13 23:39 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-13 23:39 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-13 23:39 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-13 23:39 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-13 23:39 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-13 23:38 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Garmin
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Garmin
2014-06-12 23:16 - 2014-06-12 23:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 23:12 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-12 23:12 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll

==================== One Month Modified Files and Folders =======

2014-07-08 23:32 - 2014-07-03 17:09 - 00018901 _____ () C:\Users\user\Desktop\FRST.txt
2014-07-08 23:32 - 2014-07-03 17:08 - 00000000 ___DC () C:\FRST
2014-07-08 23:31 - 2014-07-08 23:31 - 00000000 ____D () C:\Users\user\Desktop\FRST-OlderVersion
2014-07-08 23:31 - 2014-07-03 17:01 - 01074688 ____C (Farbar) C:\Users\user\Desktop\FRST.exe
2014-07-08 23:29 - 2014-07-08 23:29 - 00000931 _____ () C:\Users\user\Desktop\checkup.txt
2014-07-08 23:25 - 2013-07-19 01:22 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-08 22:58 - 2014-04-09 11:23 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000UA.job
2014-07-08 22:57 - 2012-08-24 13:12 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-07-08 22:39 - 2012-08-25 03:38 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-08 22:20 - 2012-08-22 21:48 - 01666854 _____ () C:\Windows\WindowsUpdate.log
2014-07-08 19:23 - 2014-07-08 19:22 - 00854390 _____ () C:\Users\user\Desktop\SecurityCheck.exe
2014-07-08 19:22 - 2012-08-25 03:17 - 00000000 ____D () C:\Users\user\Downloads\Andreas
2014-07-08 19:20 - 2014-07-08 19:20 - 02347384 _____ (ESET) C:\Users\user\Desktop\esetsmartinstaller_deu.exe
2014-07-08 19:14 - 2014-07-06 00:40 - 00001661 _____ () C:\Users\user\Desktop\Neues Textdokument (2).txt
2014-07-08 18:39 - 2012-08-25 03:38 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-07-08 18:39 - 2012-08-25 03:38 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-07-08 18:35 - 2014-04-09 11:23 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1806344340-3721178228-3502498018-1000Core.job
2014-07-08 18:35 - 2013-07-19 01:22 - 00001090 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-07 02:18 - 2009-07-14 06:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-07 02:18 - 2009-07-14 06:34 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-07 02:11 - 2014-07-05 12:26 - 00000374 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-07-07 02:10 - 2014-07-03 14:18 - 00000762 _____ () C:\Windows\setupact.log
2014-07-07 02:10 - 2013-12-14 21:32 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-07 02:10 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-06 14:04 - 2014-07-06 14:04 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\WinRAR
2014-07-06 14:03 - 2014-07-06 14:03 - 00000000 ____D () C:\Users\Public\Documents\CrashDump
2014-07-06 13:56 - 2014-07-06 13:56 - 00000000 ____D () C:\Users\Sabine\Documents\samsung
2014-07-06 13:56 - 2014-03-29 11:32 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\SAMSUNG
2014-07-06 13:56 - 2014-01-25 09:40 - 00000000 ____D () C:\Users\Sabine\AppData\Local\SAMSUNG
2014-07-06 13:54 - 2014-07-06 13:54 - 00000000 ____D () C:\Users\Sabine\Documents\DVDVideoSoft
2014-07-06 13:54 - 2014-07-06 13:54 - 00000000 ____D () C:\Users\Sabine\AppData\Roaming\DVDVideoSoft
2014-07-06 04:01 - 2014-03-17 05:24 - 00000000 ____D () C:\Users\user\Desktop\The.Wolf.of.Wall.Street.DVDSCR.L
2014-07-06 03:11 - 2014-04-17 00:21 - 00001328 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2014-07-06 02:50 - 2014-07-06 02:50 - 00000834 _____ () C:\Users\user\Desktop\JRT.txt
2014-07-06 02:45 - 2014-07-06 02:45 - 00000000 ____D () C:\Windows\ERUNT
2014-07-06 02:43 - 2014-07-06 02:43 - 00004478 _____ () C:\Users\user\Desktop\AdwCleaner[S0].txt
2014-07-06 02:39 - 2012-08-23 20:54 - 00155888 _____ () C:\Windows\PFRO.log
2014-07-06 02:14 - 2014-07-06 02:07 - 00000000 ___DC () C:\AdwCleaner
2014-07-06 02:05 - 2014-07-06 02:05 - 00016189 _____ () C:\Users\user\Desktop\mbam.txt
2014-07-06 02:02 - 2014-07-06 00:54 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-06 01:26 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\Performance
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ___DC () C:\Program Files\ Malwarebytes Anti-Malware 
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-06 00:53 - 2014-07-06 00:53 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-06 00:40 - 2014-07-06 00:40 - 01016261 _____ (Thisisu) C:\Users\user\Desktop\JRT.exe
2014-07-06 00:39 - 2014-07-06 00:39 - 01346519 _____ () C:\Users\user\Desktop\adwcleaner_3.214.exe
2014-07-06 00:39 - 2014-07-06 00:38 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\user\Desktop\mbam-setup-2.0.2.1012.exe
2014-07-06 00:37 - 2014-07-06 00:37 - 00060290 _____ () C:\Users\user\Desktop\Anleitung   Malwarebytes Anti-Malware  - Trojaner-Board.htm
2014-07-05 10:23 - 2014-07-05 10:23 - 00021396 ____C () C:\ComboFix.txt
2014-07-05 10:23 - 2014-07-03 23:15 - 00000000 ___DC () C:\Qoobox
2014-07-05 10:23 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-07-05 10:20 - 2014-07-03 23:14 - 00000000 ____D () C:\Windows\erdnt
2014-07-05 10:15 - 2009-07-14 04:04 - 00000215 ____C () C:\Windows\system.ini
2014-07-05 09:20 - 2014-01-06 04:21 - 00000000 ____D () C:\ProgramData\Temp
2014-07-03 23:12 - 2014-07-03 23:10 - 05213907 ____R (Swearware) C:\Users\user\Desktop\ComboFix.exe
2014-07-03 23:09 - 2014-06-24 16:19 - 00000000 ___RD () C:\Users\user\Dropbox
2014-07-03 22:03 - 2014-06-24 16:16 - 00000000 ____D () C:\Users\user\AppData\Roaming\DropboxMaster
2014-07-03 22:03 - 2014-03-05 13:34 - 00000000 ____D () C:\Users\user\AppData\Roaming\Dropbox
2014-07-03 21:18 - 2014-07-03 17:07 - 00000470 _____ () C:\Users\user\Desktop\defogger_disable.log
2014-07-03 21:02 - 2014-07-03 21:02 - 00006516 _____ () C:\Users\user\Desktop\Gmer.txt
2014-07-03 18:52 - 2014-07-03 18:52 - 300952539 _____ () C:\Windows\MEMORY.DMP
2014-07-03 18:52 - 2014-07-03 18:52 - 00174960 _____ () C:\Windows\Minidump\070314-58968-01.dmp
2014-07-03 18:52 - 2014-01-06 05:14 - 00000000 ____D () C:\Windows\Minidump
2014-07-03 18:40 - 2014-07-03 18:40 - 00380416 _____ () C:\Users\user\Desktop\dp6h7y2w.exe
2014-07-03 17:17 - 2014-07-03 17:17 - 00000897 _____ () C:\Users\user\Desktop\Neues Textdokument.txt
2014-07-03 17:13 - 2014-07-03 17:11 - 00042981 _____ () C:\Users\user\Desktop\Addition.txt
2014-07-03 17:07 - 2014-07-03 17:07 - 00000000 _____ () C:\Users\user\defogger_reenable
2014-07-03 17:03 - 2014-07-03 17:03 - 00380416 _____ () C:\Users\user\Desktop\Gmer-19357.exe
2014-07-03 17:01 - 2014-07-03 17:01 - 00050477 _____ () C:\Users\user\Desktop\Defogger.exe
2014-07-03 17:00 - 2014-07-03 17:00 - 00051776 _____ () C:\Users\user\Desktop\Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten  - Trojaner-Board.htm
2014-07-03 15:42 - 2014-07-03 15:42 - 00000000 ____D () C:\Users\user\AppData\Local\Adobe
2014-07-03 14:20 - 2012-12-12 01:57 - 00100864 ___SH () C:\Users\user\Desktop\Thumbs.db
2014-07-03 14:18 - 2014-07-03 14:18 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-02 05:23 - 2012-08-22 21:56 - 01628044 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-02 04:03 - 2014-05-09 01:02 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Windows Live
2014-07-02 03:16 - 2014-05-18 02:18 - 00000000 ____D () C:\Users\Andreas\Desktop\Neues Verzeichnis
2014-07-02 02:51 - 2014-05-17 23:39 - 00000000 ____D () C:\Users\Andreas\Desktop\Sicherung Galaxy S3 Gerätespeicher komplett 17.05.20014
2014-06-26 05:40 - 2012-09-15 01:30 - 00000000 ____D () C:\Users\user\AppData\Roaming\vlc
2014-06-26 03:28 - 2014-06-26 03:28 - 00002261 _____ () C:\Users\user\Desktop\Chrome App Launcher.lnk
2014-06-26 03:28 - 2014-06-26 03:28 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-06-25 22:44 - 2014-06-25 22:44 - 00002164 _____ () C:\Users\user\Desktop\Samsung Link.lnk
2014-06-24 19:14 - 2014-05-24 03:26 - 00006144 _____ () C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-24 17:53 - 2014-06-24 17:53 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-24 17:53 - 2013-02-01 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2014-06-24 17:37 - 2014-06-24 17:35 - 86530912 _____ (Copyright 2013 SAMSUNG) C:\Users\user\Downloads\SamsungLink_Installer32.exe
2014-06-24 16:19 - 2014-06-24 16:19 - 00001386 _____ () C:\Users\user\Desktop\Dropbox.lnk
2014-06-24 16:15 - 2014-06-24 16:15 - 00000000 ____D () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-06-24 16:11 - 2014-06-24 16:11 - 00318944 _____ (Dropbox, Inc.) C:\Users\user\Downloads\DropboxInstaller(1).exe
2014-06-21 18:24 - 2014-06-20 00:12 - 00000000 ____D () C:\Users\user\AppData\Roaming\Spotify
2014-06-21 08:22 - 2012-09-22 00:36 - 00007643 _____ () C:\Users\user\AppData\Local\resmon.resmoncfg
2014-06-21 06:24 - 2013-07-17 09:49 - 00000000 ____D () C:\Users\user\AppData\Local\Windows Live
2014-06-21 05:57 - 2013-06-27 02:55 - 00000000 ____D () C:\Users\user\AppData\Roaming\Skype
2014-06-20 07:55 - 2014-02-24 04:07 - 00301056 ___SH () C:\Users\Andreas\Downloads\Thumbs.db
2014-06-20 07:50 - 2013-02-01 15:11 - 00000000 ____D () C:\Users\user\AppData\Roaming\Samsung
2014-06-20 07:11 - 2014-06-20 07:11 - 00000000 ___DC () C:\Program Files\MSECache
2014-06-20 04:14 - 2014-06-20 04:14 - 00088143 _____ () C:\Users\user\Downloads\collectionCache.bnk
2014-06-20 02:49 - 2014-06-20 00:12 - 00000000 ____D () C:\Users\user\AppData\Local\Spotify
2014-06-20 02:06 - 2014-06-20 02:06 - 00000000 ____D () C:\Users\user\AppData\Roaming\Dojotech Software
2014-06-20 01:47 - 2014-06-20 01:47 - 00000000 ____H () C:\Users\user\Documents\Default.rdp
2014-06-20 01:36 - 2014-01-07 19:19 - 00000000 ___RD () C:\Users\Andreas\Desktop\Bilder Canon aktuell
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ___DC () C:\Program Files\Dojotech Software
2014-06-20 00:25 - 2014-06-20 00:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dojotech Software
2014-06-20 00:12 - 2014-06-20 00:12 - 00001803 _____ () C:\Users\user\Desktop\Spotify.lnk
2014-06-20 00:12 - 2014-06-20 00:12 - 00001789 _____ () C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-06-20 00:11 - 2014-06-20 00:11 - 00126112 _____ (Spotify Ltd) C:\Users\user\Downloads\SpotifySetup.exe
2014-06-19 21:20 - 2014-06-04 02:45 - 00008652 _____ () C:\Windows\system32\lvcoinst.log
2014-06-19 21:19 - 2012-08-22 21:51 - 00000000 ____D () C:\Users\user\AppData\Local\VirtualStore
2014-06-19 06:52 - 2013-07-18 01:26 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Skype
2014-06-18 22:20 - 2014-03-07 19:29 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\SAMSUNG
2014-06-18 22:13 - 2014-06-18 22:07 - 00000000 ____D () C:\Windows\system32\directx
2014-06-18 22:12 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-06-18 22:09 - 2014-06-18 22:07 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-06-18 22:07 - 2013-02-01 15:44 - 00000000 ____D () C:\temp
2014-06-18 21:51 - 2014-03-31 17:41 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-18 21:51 - 2013-10-25 11:07 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-18 21:45 - 2014-02-08 15:54 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-18 21:45 - 2013-02-01 15:02 - 00000000 ____D () C:\Program Files\Samsung
2014-06-18 21:43 - 2014-03-05 13:36 - 00000000 ___RD () C:\Users\Andreas\Dropbox
2014-06-18 21:42 - 2014-06-18 21:42 - 38300512 _____ (Samsung) C:\Users\Andreas\Downloads\SideSync_3.0.2.546_signed.exe
2014-06-18 21:18 - 2014-04-16 23:59 - 00040960 ___SH () C:\Users\Andreas\Desktop\Thumbs.db
2014-06-18 20:24 - 2014-03-05 13:31 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Dropbox
2014-06-18 19:40 - 2014-03-05 13:34 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\DropboxMaster
2014-06-16 01:22 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-15 14:13 - 2014-02-07 17:28 - 00000000 ____D () C:\Users\Andreas\Desktop\Kontoauszüge DiBa 2014
2014-06-15 01:05 - 2014-05-09 14:23 - 00000000 ____D () C:\Users\Andreas\Desktop\Kreditanträge 2014
2014-06-14 20:52 - 2013-08-07 18:46 - 00000000 ____D () C:\Users\user\AppData\Roaming\Mozilla
2014-06-14 20:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-06-14 08:12 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-06-14 07:30 - 2014-05-08 01:19 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-14 06:38 - 2014-06-14 06:38 - 02077392 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\IE11-Windows6.1.exe
2014-06-14 06:14 - 2014-06-14 06:14 - 00985600 _____ () C:\Users\Andreas\Downloads\MicrosoftFixit50123.msi
2014-06-14 06:09 - 2014-06-14 06:09 - 09699328 _____ () C:\Users\Andreas\Downloads\MicrosoftCameraCodecPack-x86.msi
2014-06-14 05:49 - 2014-06-14 05:49 - 01245384 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\wlsetup-web.exe
2014-06-14 03:45 - 2014-06-14 03:45 - 00000000 ____D () C:\Users\Andreas\Documents\Microsoft Hardware
2014-06-14 03:06 - 2014-06-14 03:06 - 09974912 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\FF2014 deDE.exe
2014-06-13 05:46 - 2012-08-24 11:52 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-13 05:45 - 2013-07-17 08:18 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-13 05:40 - 2012-08-23 21:46 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-13 04:21 - 2013-07-19 01:23 - 00002133 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Garmin
2014-06-12 23:17 - 2014-06-12 23:17 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Garmin
2014-06-12 23:16 - 2014-06-12 23:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 23:16 - 2014-02-08 15:55 - 00000000 ____D () C:\ProgramData\Garmin
2014-06-12 23:16 - 2014-02-08 15:54 - 00000000 ____D () C:\Program Files\Garmin
2014-06-08 10:48 - 2014-06-13 23:39 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 10:43 - 2014-06-13 23:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Some content of TEMP:
====================
C:\Users\user\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-20 13:13

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 09.07.2014, 18:05

Java updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] - rmdir /s /q "\SearchProtect"
ProxyServer: localhost:21320

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

Fertig

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Schumania · 10.07.2014, 04:20

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:05-07-2014 01
Ran by user at 2014-07-10 03:27:05 Run:1
Running from C:\Users\user\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] - rmdir /s /q "\SearchProtect"
ProxyServer: localhost:21320
*****************

HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpUninstallDeleteDir => value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.

==== End of Fixlog ====

schrauber · 10.07.2014, 17:55

fertig

10.07.2014, 17:55	#10
schrauber /// the machine /// TB-Ausbilder	Vaio FZ21M mit Windows 7 CPU und Lüfter ständig über 70% und teilweises Einfrieren fertig __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Vaio FZ21M mit Windows 7 CPU und Lüfter ständig über 70% und teilweises Einfrieren

Log-Analyse und Auswertung: Vaio FZ21M mit Windows 7 CPU und Lüfter ständig über 70% und teilweises Einfrieren