FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-07-2014 01
Ran by Goldacker (administrator) on GOLDACKER-PC on 06-07-2014 00:16:55
Running from C:\Users\Goldacker\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Money\System\REMINDER.EXE
(TomTom) C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(CyberLink) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
() C:\Program Files (x86)\Hewlett-Packard\Shared\HpqToaster.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [SmartMenu] => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [610872 2009-07-21] ()
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-03-23] (IDT, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-07-02] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HPCam_Menu] => c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)
HKLM-x32\...\Run: [QlbCtrl.exe] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [323640 2010-02-25] ( Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [UpdatePRCShortCut] => C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [60464 2009-06-22] (EasyBits Software AS)
HKLM-x32\...\Run: [WirelessAssistant] => C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [498744 2009-07-23] (Hewlett-Packard)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-07-04] (AVAST Software)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-03-24] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-06-24] (Hewlett-Packard)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2014-05-31] (Microsoft Corporation)
HKU\.DEFAULT\...\Policies\system: [WallpaperStyle] 2
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\Run: [HPADVISOR] => C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1668664 2009-07-15] (Hewlett-Packard)
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2009-06-17] (Hewlett-Packard Company)
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\Run: [HP Officejet 6700 (NET)] => C:\Program Files\HP\HP Officejet 6700\Bin\ScanToPCActivationApp.exe [2676584 2011-09-09] (Hewlett-Packard Co.)
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\Run: [Reminder] => C:\Program Files (x86)\Microsoft Money\System\reminder.exe [37376 1998-07-25] (Microsoft Corporation)
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [473464 2014-03-17] (TomTom)
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\Run: [Mobile Partner] => C:\Program Files (x86)\MobileWiFi\MobileWiFi
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\Policies\system: [WallpaperStyle] 2
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\MountPoints2: G - G:\AutoRun.exe
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\MountPoints2: {0867b181-fdca-11e3-b0db-00269ee3cbf3} - G:\AutoRun.exe
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\MountPoints2: {0867b1ac-fdca-11e3-b0db-00269ee3cbf3} - G:\AutoRun.exe
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\MountPoints2: {0867b1b2-fdca-11e3-b0db-00269ee3cbf3} - G:\AutoRun.exe
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\MountPoints2: {0867b1c1-fdca-11e3-b0db-00269ee3cbf3} - G:\AutoRun.exe
HKU\S-1-5-21-3802872301-1441439519-2785009991-1001\...\MountPoints2: {c4120985-fece-11e3-91ae-00269ee3cbf3} - G:\AutoRun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Goldacker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 6700 (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 6700\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 1 (GFS Unread Stub) -> {99FD978C-D287-4F50-827F-B2C658EDA8E7} => C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 2 (GFS Stub) -> {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} => C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) -> {920E6DB1-9907-4370-B3A0-BAFC03D81399} => C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 3 (GFS Folder) -> {16F3DD56-1AF5-4347-846D-7C10C4192619} => C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: Groove Explorer Icon Overlay 4 (GFS Unread Mark) -> {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} => C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52272 2009-08-20] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Goldacker\AppData\Roaming\Mozilla\Firefox\Profiles\rokapxhk.default
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_125.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_125.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF SearchPlugin: C:\Users\Goldacker\AppData\Roaming\Mozilla\Firefox\Profiles\rokapxhk.default\searchplugins\yahoo-avast.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Goldacker\AppData\Roaming\Mozilla\Firefox\Profiles\rokapxhk.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-06-14]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-29]

==================== Services (Whitelisted) =================

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [89600 2009-03-02] (Andrea Electronics Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-29] (AVAST Software)
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [2231616 2010-07-19] ()
R2 ezSharedSvc; C:\Windows\SysWOW64\ezsvc7.dll [129584 2009-02-22] (EasyBits Sofware AS) [File not signed]
R2 HP Health Check Service; C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe [124928 2009-07-09] (Hewlett-Packard) [File not signed]
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-06-17] (Hewlett-Packard Company) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-01-21] ()
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe [247808 2010-03-23] (IDT, Inc.)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [X]

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-29] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-29] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-29] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-29] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-29] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-29] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-29] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-29] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-06] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-05-12] (Malwarebytes Corporation)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2010-06-10] (CACE Technologies)
S1 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
U4 eabfiltr; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-06 00:06 - 2014-07-06 00:06 - 00000461 _____ () C:\Users\Goldacker\Downloads\Fixtext.txt
2014-07-05 23:43 - 2014-07-05 23:43 - 00024270 _____ () C:\Users\Goldacker\Documents\Stronghold AntiMalware1.htm
2014-07-05 23:43 - 2014-07-05 23:43 - 00000000 ____D () C:\Users\Goldacker\Documents\Stronghold AntiMalware1-Dateien
2014-07-05 23:19 - 2014-07-05 23:19 - 00001081 _____ () C:\Users\Public\Desktop\FastStone Capture.lnk
2014-07-05 23:19 - 2014-07-05 23:19 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\FastStone
2014-07-05 23:19 - 2014-07-05 23:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2014-07-05 23:19 - 2014-07-05 23:19 - 00000000 ____D () C:\Program Files (x86)\FastStone Capture
2014-07-05 23:18 - 2014-07-05 23:18 - 01424742 _____ () C:\Users\Goldacker\Downloads\FSCaptureSetup53_CB-DL-Manager [1].exe
2014-07-05 23:17 - 2014-07-05 23:17 - 00788832 _____ ( ) C:\Users\Goldacker\Downloads\FSCaptureSetup53_CB-DL-Manager.exe
2014-07-05 23:16 - 2014-07-05 23:16 - 00010832 _____ () C:\Users\Goldacker\Downloads\FastStone Capture - CHIP-Installer.exe
2014-07-05 22:33 - 2011-11-04 09:27 - 00296816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-07-05 22:31 - 2014-07-05 22:32 - 00000000 ____D () C:\MS-datei
2014-07-05 22:12 - 2014-07-05 22:12 - 00001475 _____ () C:\Users\Goldacker\Desktop\Fixlist.txt
2014-07-05 22:02 - 2014-07-05 22:02 - 00442824 _____ () C:\Users\Goldacker\Downloads\440236_intl_x64_zip.exe
2014-07-05 21:44 - 2014-07-05 21:44 - 00006916 _____ () C:\Users\Goldacker\Desktop\HitmanPro_20140705_2144.log
2014-07-05 21:37 - 2014-07-05 21:44 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-07-05 21:34 - 2014-07-05 21:37 - 11185664 _____ (SurfRight B.V.) C:\Users\Goldacker\Downloads\HitmanPro_x64.exe
2014-07-05 21:22 - 2014-07-05 21:22 - 00056981 _____ () C:\Users\Goldacker\Desktop\FRST-05-07-14.txt
2014-07-05 21:18 - 2014-07-05 21:18 - 00000000 ____D () C:\Users\Goldacker\Downloads\FRST-OlderVersion
2014-07-05 20:01 - 2014-07-05 20:02 - 00274736 _____ () C:\Windows\Minidump\070514-58359-01.dmp
2014-07-05 20:01 - 2014-07-05 20:01 - 574303026 _____ () C:\Windows\MEMORY.DMP
2014-07-05 20:01 - 2014-07-05 20:01 - 00000000 ____D () C:\Windows\Minidump
2014-07-05 19:40 - 2014-07-05 19:41 - 02347384 _____ (ESET) C:\Users\Goldacker\Downloads\esetsmartinstaller_deu.exe
2014-07-05 19:37 - 2014-07-05 19:37 - 00001170 _____ () C:\malware-05-07-14.txt
2014-07-05 18:54 - 2014-07-05 18:54 - 00036715 _____ () C:\malware-04-07-14.txt
2014-07-04 23:20 - 2014-07-04 22:58 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-07-04 22:59 - 2014-07-04 22:40 - 00000416 _____ () C:\zoek-results2014-07-04-204042.log
2014-07-04 22:53 - 2014-07-04 22:53 - 00000416 _____ () C:\Users\Goldacker\Desktop\zoek-results.log
2014-07-04 22:40 - 2014-07-04 23:22 - 00010882 _____ () C:\zoek-results.log
2014-07-04 22:34 - 2014-07-04 23:13 - 00000000 ____D () C:\zoek_backup
2014-07-04 22:33 - 2014-07-04 22:34 - 01285120 _____ () C:\Users\Goldacker\Downloads\zoek.exe
2014-07-04 21:49 - 2014-07-04 21:49 - 00056289 _____ () C:\Users\Goldacker\Desktop\FRST.txt
2014-07-04 21:48 - 2014-07-04 21:48 - 00037041 _____ () C:\Users\Goldacker\Desktop\Addition.txt
2014-07-04 21:27 - 2014-07-05 22:25 - 00038106 _____ () C:\Users\Goldacker\Downloads\Addition.txt
2014-07-04 21:26 - 2014-07-06 00:16 - 00018204 _____ () C:\Users\Goldacker\Downloads\FRST.txt
2014-07-04 21:26 - 2014-07-06 00:16 - 00000000 ____D () C:\FRST
2014-07-04 21:10 - 2014-07-05 21:18 - 02084352 _____ (Farbar) C:\Users\Goldacker\Downloads\FRST64.exe
2014-07-04 16:58 - 2014-07-06 00:04 - 00000000 ____D () C:\Users\Public\Documents\Stronghold AntiMalware
2014-07-04 16:56 - 2014-07-04 16:56 - 06593992 _____ (Security Stronghold ) C:\Users\Goldacker\Downloads\StrongholdAntiMalware.exe
2014-07-04 15:59 - 2014-07-04 16:25 - 00000000 ____D () C:\AdwCleaner
2014-07-04 15:59 - 2014-07-04 15:59 - 01346519 _____ () C:\Users\Goldacker\Downloads\adwcleaner_3.214.exe
2014-07-04 13:17 - 2014-07-06 00:10 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-04 13:17 - 2014-07-04 13:17 - 00001108 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-04 13:17 - 2014-07-04 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-04 13:17 - 2014-07-04 13:17 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-04 13:17 - 2014-07-04 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-04 13:17 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-04 13:17 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-04 13:17 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-04 13:15 - 2014-07-04 13:16 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Goldacker\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-04 11:17 - 2014-07-04 11:17 - 00001270 _____ () C:\Users\Goldacker\Desktop\Revo Uninstaller.lnk
2014-07-04 11:16 - 2014-07-04 11:16 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Goldacker\Downloads\revosetup.exe
2014-07-04 11:02 - 2014-07-04 11:27 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\Nico Mak Computing
2014-07-04 11:00 - 2014-07-04 11:00 - 04892480 _____ (WinZip International LLC ) C:\Users\Goldacker\Downloads\wzmp_8.exe
2014-07-02 16:26 - 2014-07-02 16:26 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-02 16:25 - 2014-07-02 16:25 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Goldacker\Downloads\revosetup95.exe
2014-07-02 13:43 - 2014-07-02 13:43 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\PhotoScape
2014-07-02 12:58 - 2014-07-02 12:58 - 00003112 _____ () C:\Windows\System32\Tasks\{3A0298E0-03F2-436A-8150-1EC6E0B45B21}
2014-06-27 17:12 - 2012-03-23 05:56 - 00439808 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys
2014-06-27 17:12 - 2012-03-07 04:30 - 00229376 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2014-06-27 17:12 - 2012-03-07 04:30 - 00104448 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2014-06-27 17:12 - 2012-03-07 04:30 - 00073216 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2014-06-27 17:12 - 2011-12-31 03:20 - 00225920 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2014-06-27 17:12 - 2011-11-24 13:30 - 00090112 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2014-06-27 17:12 - 2011-11-24 13:30 - 00030720 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2014-06-27 17:12 - 2010-10-08 10:59 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2014-06-27 17:12 - 2010-09-26 12:09 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2014-06-27 17:12 - 2010-08-06 01:43 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2014-06-27 17:12 - 2010-07-27 03:52 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2014-06-27 17:12 - 2010-03-20 06:06 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2014-06-27 15:56 - 2014-06-27 15:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
2014-06-27 15:56 - 2014-06-27 15:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcecm_01007.Wdf
2014-06-27 15:56 - 2014-06-27 15:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2014-06-27 15:55 - 2014-06-27 15:55 - 00001168 _____ () C:\Users\Public\Desktop\MobileWiFi.lnk
2014-06-27 15:55 - 2014-06-27 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2014-06-27 15:55 - 2011-08-16 10:40 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2014-06-27 15:54 - 2014-06-27 15:55 - 00000000 ____D () C:\ProgramData\DatacardService
2014-06-27 15:54 - 2014-06-27 15:55 - 00000000 ____D () C:\Program Files (x86)\MobileWiFi
2014-06-21 19:28 - 2014-06-21 19:28 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-06-21 19:28 - 2014-06-21 19:28 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-06-21 19:28 - 2014-06-21 19:28 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-06-21 19:28 - 2014-06-21 19:28 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-21 19:28 - 2014-06-21 19:28 - 00000000 ____D () C:\ProgramData\Sun
2014-06-21 19:28 - 2014-06-21 19:28 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-21 19:28 - 2014-06-21 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-21 19:28 - 2014-06-21 19:28 - 00000000 ____D () C:\Program Files (x86)\Java
2014-06-21 19:18 - 2014-06-21 19:18 - 00918952 _____ (Oracle Corporation) C:\Users\Goldacker\Downloads\jxpiinstall.exe
2014-06-18 22:20 - 2014-06-18 22:20 - 00001251 _____ () C:\Users\Goldacker\Desktop\Music Editor Free (2).lnk
2014-06-18 22:17 - 2014-06-18 22:29 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\Music Editor Free
2014-06-18 22:16 - 2014-06-18 22:16 - 00001251 _____ () C:\Users\Goldacker\AppData\Roaming\Microsoft\Windows\Start Menu\Music Editor Free.lnk
2014-06-18 22:16 - 2014-06-18 22:16 - 00001227 _____ () C:\Users\Goldacker\Desktop\Music Editor Free.lnk
2014-06-18 22:16 - 2014-06-18 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music Editor Free
2014-06-18 22:16 - 2014-06-18 22:16 - 00000000 ____D () C:\Program Files (x86)\Music Editor Free
2014-06-18 22:16 - 2006-03-23 12:56 - 00113486 _____ () C:\Windows\SysWOW64\NCTWMAProfiles.prx
2014-06-18 22:16 - 2005-05-18 11:52 - 01212416 _____ (Online Media Technologies Ltd.) C:\Windows\SysWOW64\NCTAudioInformation2.dll
2014-06-18 22:16 - 2005-05-17 12:37 - 01986560 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\NCTAudioFile2.dll
2014-06-18 22:16 - 2005-04-25 13:01 - 00458752 _____ (Online Media Technologies Ltd.) C:\Windows\SysWOW64\NCTAudioRecord2.dll
2014-06-18 22:16 - 2005-04-25 13:01 - 00458752 _____ (Online Media Technologies Ltd.) C:\Windows\SysWOW64\NCTAudioPlayer2.dll
2014-06-18 22:16 - 2005-04-15 12:08 - 00880640 _____ (Online Media Technologies Ltd.) C:\Windows\SysWOW64\NCTAudioEditor2.dll
2014-06-18 22:16 - 2005-04-04 17:21 - 00602112 _____ (Online Media Technologies Ltd.) C:\Windows\SysWOW64\NCTAudioTransform2.dll
2014-06-18 22:16 - 2005-03-28 15:54 - 00479232 _____ (Online Media Technologies Ltd.) C:\Windows\SysWOW64\NCTAudioVisualization2.dll
2014-06-18 22:16 - 2005-03-28 15:52 - 00417792 _____ (Online Media Technologies Ltd.) C:\Windows\SysWOW64\NCTTextToAudio2.dll
2014-06-18 22:16 - 2005-02-24 11:51 - 00348160 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\NCTWMAFile2.dll
2014-06-18 22:16 - 2004-11-04 13:31 - 00835584 _____ (NCT) C:\Windows\SysWOW64\NCTAudioCDGrabber2.dll
2014-06-18 22:16 - 2002-01-05 16:37 - 00344064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr70.dll
2014-06-18 22:14 - 2014-06-18 22:14 - 15871352 _____ (Copyright© 2005-2014 MEFMedia, Inc. ) C:\Users\Goldacker\Downloads\MusicEditorFree_CB-DL-Manager [1].exe
2014-06-18 22:13 - 2014-06-18 22:13 - 00719128 _____ ( ) C:\Users\Goldacker\Downloads\MusicEditorFree_CB-DL-Manager.exe
2014-06-18 22:09 - 2014-06-18 22:09 - 00308709 _____ () C:\Users\Goldacker\Downloads\mp3DC220.exe
2014-06-18 17:34 - 2014-06-21 19:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-15 18:18 - 2014-06-20 21:54 - 02280360 ____R () C:\Users\Goldacker\Documents\Albert Sicherungskopie.mbf
2014-06-15 18:14 - 2014-06-20 21:49 - 03738896 ____R () C:\Users\Goldacker\Documents\Anna Sicherungskopie.mbf
2014-06-15 11:17 - 2014-06-20 23:14 - 03493072 ____R () C:\Users\Goldacker\Documents\Jessica Sicherungskopie.mbf
2014-06-15 10:53 - 2014-06-15 10:53 - 03166720 _____ () C:\Users\Goldacker\Documents\QC_140615105342.bak
2014-06-11 15:01 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 15:01 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-11 15:01 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 15:01 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 15:01 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-11 15:01 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 15:01 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 15:01 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 15:01 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 15:01 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-11 15:01 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 15:01 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 15:01 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 15:01 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-11 15:01 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-11 15:01 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 15:01 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 15:01 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-11 15:01 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-11 15:01 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 15:01 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 15:01 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-11 15:01 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 15:01 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 15:01 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-11 15:01 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-11 15:01 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 15:01 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 15:01 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 15:01 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-11 15:01 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 15:01 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-11 15:01 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-11 15:01 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-11 15:01 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 15:01 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-11 15:01 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-11 15:01 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 15:01 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-11 15:01 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-11 15:01 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-11 15:01 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 15:01 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-11 15:01 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-11 15:01 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-11 15:01 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 15:01 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-11 15:01 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 15:01 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-11 15:01 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-11 15:01 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-11 15:01 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-11 15:01 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 15:01 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-11 15:01 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-11 15:01 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-11 15:01 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 15:01 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 15:01 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-11 15:01 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 15:01 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-11 15:01 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-11 15:01 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-11 15:01 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 15:01 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-11 15:01 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-11 14:59 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-11 14:59 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-08 08:58 - 2014-06-08 17:10 - 1566572544 _____ () C:\Users\Goldacker\Documents\windows-backup-2014.iso
2014-06-07 08:57 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-06-07 08:57 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-06-07 08:53 - 2014-06-07 08:53 - 00001905 _____ () C:\Users\Goldacker\Desktop\CDBurnerXP.lnk
2014-06-06 23:20 - 2014-06-06 23:20 - 00001955 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-06-06 23:20 - 2014-06-06 23:20 - 00001905 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2014-06-06 23:20 - 2014-06-06 23:20 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\Canneverbe Limited
2014-06-06 23:20 - 2014-06-06 23:20 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-06-06 23:20 - 2014-06-06 23:20 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2014-06-06 23:18 - 2014-06-06 23:18 - 05405880 _____ (Canneverbe Limited ) C:\Users\Goldacker\Downloads\cdbxp_setup_4.5.4.4852_minimal.exe
2014-06-06 18:29 - 2014-06-06 18:29 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\TuneUp Software
2014-06-06 18:29 - 2014-06-06 18:29 - 00000000 ____D () C:\Users\Goldacker\AppData\Local\TuneUp Software
2014-06-06 18:27 - 2014-06-06 18:31 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-06-06 18:27 - 2014-06-06 18:27 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-06-06 12:32 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-06-06 12:32 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-06-06 12:32 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-06-06 12:32 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-06-06 12:32 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-06-06 12:32 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-06-06 12:32 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-06-06 12:32 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-06-06 12:32 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-06-06 12:32 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-06-06 12:32 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-06-06 12:32 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-06-06 12:32 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-06-06 12:32 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-06-06 12:32 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-06-06 12:32 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-06-06 12:31 - 2012-08-23 16:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-06-06 12:31 - 2012-08-23 16:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-06-06 12:31 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-06-06 12:31 - 2012-08-23 12:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-06-06 12:30 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-06-06 12:30 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-06-06 12:30 - 2012-05-04 13:00 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-06-06 12:30 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-06-06 10:41 - 2014-06-06 10:41 - 00000056 ____H () C:\Windows\SysWOW64\ezsidmv.dat

==================== One Month Modified Files and Folders =======

2014-07-06 00:17 - 2014-07-04 21:26 - 00018204 _____ () C:\Users\Goldacker\Downloads\FRST.txt
2014-07-06 00:16 - 2014-07-04 21:26 - 00000000 ____D () C:\FRST
2014-07-06 00:16 - 2009-07-14 06:51 - 00104470 _____ () C:\Windows\setupact.log
2014-07-06 00:16 - 2009-07-14 06:45 - 00023024 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-06 00:16 - 2009-07-14 06:45 - 00023024 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-06 00:10 - 2014-07-04 13:17 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-06 00:10 - 2014-05-29 23:10 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-07-06 00:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-06 00:08 - 2014-05-29 21:42 - 01689703 _____ () C:\Windows\WindowsUpdate.log
2014-07-06 00:06 - 2014-07-06 00:06 - 00000461 _____ () C:\Users\Goldacker\Downloads\Fixtext.txt
2014-07-06 00:04 - 2014-07-04 16:58 - 00000000 ____D () C:\Users\Public\Documents\Stronghold AntiMalware
2014-07-05 23:43 - 2014-07-05 23:43 - 00024270 _____ () C:\Users\Goldacker\Documents\Stronghold AntiMalware1.htm
2014-07-05 23:43 - 2014-07-05 23:43 - 00000000 ____D () C:\Users\Goldacker\Documents\Stronghold AntiMalware1-Dateien
2014-07-05 23:43 - 2014-06-01 11:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-05 23:19 - 2014-07-05 23:19 - 00001081 _____ () C:\Users\Public\Desktop\FastStone Capture.lnk
2014-07-05 23:19 - 2014-07-05 23:19 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\FastStone
2014-07-05 23:19 - 2014-07-05 23:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2014-07-05 23:19 - 2014-07-05 23:19 - 00000000 ____D () C:\Program Files (x86)\FastStone Capture
2014-07-05 23:18 - 2014-07-05 23:18 - 01424742 _____ () C:\Users\Goldacker\Downloads\FSCaptureSetup53_CB-DL-Manager [1].exe
2014-07-05 23:17 - 2014-07-05 23:17 - 00788832 _____ ( ) C:\Users\Goldacker\Downloads\FSCaptureSetup53_CB-DL-Manager.exe
2014-07-05 23:16 - 2014-07-05 23:16 - 00010832 _____ () C:\Users\Goldacker\Downloads\FastStone Capture - CHIP-Installer.exe
2014-07-05 22:32 - 2014-07-05 22:31 - 00000000 ____D () C:\MS-datei
2014-07-05 22:25 - 2014-07-04 21:27 - 00038106 _____ () C:\Users\Goldacker\Downloads\Addition.txt
2014-07-05 22:12 - 2014-07-05 22:12 - 00001475 _____ () C:\Users\Goldacker\Desktop\Fixlist.txt
2014-07-05 22:09 - 2014-05-29 22:36 - 00000000 ____D () C:\Users\Goldacker
2014-07-05 22:03 - 2014-05-29 22:41 - 00000000 ____D () C:\Users\Goldacker\AppData\Local\VirtualStore
2014-07-05 22:02 - 2014-07-05 22:02 - 00442824 _____ () C:\Users\Goldacker\Downloads\440236_intl_x64_zip.exe
2014-07-05 21:44 - 2014-07-05 21:44 - 00006916 _____ () C:\Users\Goldacker\Desktop\HitmanPro_20140705_2144.log
2014-07-05 21:44 - 2014-07-05 21:37 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-07-05 21:37 - 2014-07-05 21:34 - 11185664 _____ (SurfRight B.V.) C:\Users\Goldacker\Downloads\HitmanPro_x64.exe
2014-07-05 21:22 - 2014-07-05 21:22 - 00056981 _____ () C:\Users\Goldacker\Desktop\FRST-05-07-14.txt
2014-07-05 21:18 - 2014-07-05 21:18 - 00000000 ____D () C:\Users\Goldacker\Downloads\FRST-OlderVersion
2014-07-05 21:18 - 2014-07-04 21:10 - 02084352 _____ (Farbar) C:\Users\Goldacker\Downloads\FRST64.exe
2014-07-05 20:19 - 2009-08-20 19:03 - 00699342 _____ () C:\Windows\system32\perfh007.dat
2014-07-05 20:19 - 2009-08-20 19:03 - 00149450 _____ () C:\Windows\system32\perfc007.dat
2014-07-05 20:19 - 2009-07-14 07:13 - 01619284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-05 20:02 - 2014-07-05 20:01 - 00274736 _____ () C:\Windows\Minidump\070514-58359-01.dmp
2014-07-05 20:01 - 2014-07-05 20:01 - 574303026 _____ () C:\Windows\MEMORY.DMP
2014-07-05 20:01 - 2014-07-05 20:01 - 00000000 ____D () C:\Windows\Minidump
2014-07-05 19:41 - 2014-07-05 19:40 - 02347384 _____ (ESET) C:\Users\Goldacker\Downloads\esetsmartinstaller_deu.exe
2014-07-05 19:37 - 2014-07-05 19:37 - 00001170 _____ () C:\malware-05-07-14.txt
2014-07-05 19:10 - 2014-05-31 23:16 - 00000072 _____ () C:\Users\Public\LMDebug.log
2014-07-05 18:54 - 2014-07-05 18:54 - 00036715 _____ () C:\malware-04-07-14.txt
2014-07-05 18:23 - 2014-06-01 11:11 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-05 18:23 - 2014-06-01 11:11 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-05 18:23 - 2014-06-01 11:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-07-05 18:22 - 2014-05-31 11:18 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-07-05 18:21 - 2014-05-29 22:47 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\HpUpdate
2014-07-04 23:22 - 2014-07-04 22:40 - 00010882 _____ () C:\zoek-results.log
2014-07-04 23:21 - 2014-05-29 21:57 - 00347060 _____ () C:\Windows\PFRO.log
2014-07-04 23:13 - 2014-07-04 22:34 - 00000000 ____D () C:\zoek_backup
2014-07-04 22:58 - 2014-07-04 23:20 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-07-04 22:53 - 2014-07-04 22:53 - 00000416 _____ () C:\Users\Goldacker\Desktop\zoek-results.log
2014-07-04 22:40 - 2014-07-04 22:59 - 00000416 _____ () C:\zoek-results2014-07-04-204042.log
2014-07-04 22:34 - 2014-07-04 22:33 - 01285120 _____ () C:\Users\Goldacker\Downloads\zoek.exe
2014-07-04 21:49 - 2014-07-04 21:49 - 00056289 _____ () C:\Users\Goldacker\Desktop\FRST.txt
2014-07-04 21:48 - 2014-07-04 21:48 - 00037041 _____ () C:\Users\Goldacker\Desktop\Addition.txt
2014-07-04 19:38 - 2014-05-30 19:16 - 27108184 ____R () C:\Users\Goldacker\Documents\Meine Finanzen Sicherungskopie.mbf
2014-07-04 16:56 - 2014-07-04 16:56 - 06593992 _____ (Security Stronghold ) C:\Users\Goldacker\Downloads\StrongholdAntiMalware.exe
2014-07-04 16:25 - 2014-07-04 15:59 - 00000000 ____D () C:\AdwCleaner
2014-07-04 15:59 - 2014-07-04 15:59 - 01346519 _____ () C:\Users\Goldacker\Downloads\adwcleaner_3.214.exe
2014-07-04 15:50 - 2009-08-20 09:18 - 00000000 ____D () C:\Windows\PCHEALTH
2014-07-04 13:17 - 2014-07-04 13:17 - 00001108 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-04 13:17 - 2014-07-04 13:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-07-04 13:17 - 2014-07-04 13:17 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-04 13:17 - 2014-07-04 13:17 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-07-04 13:16 - 2014-07-04 13:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Goldacker\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-04 11:27 - 2014-07-04 11:02 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\Nico Mak Computing
2014-07-04 11:17 - 2014-07-04 11:17 - 00001270 _____ () C:\Users\Goldacker\Desktop\Revo Uninstaller.lnk
2014-07-04 11:16 - 2014-07-04 11:16 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Goldacker\Downloads\revosetup.exe
2014-07-04 11:00 - 2014-07-04 11:00 - 04892480 _____ (WinZip International LLC ) C:\Users\Goldacker\Downloads\wzmp_8.exe
2014-07-02 16:26 - 2014-07-02 16:26 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-02 16:25 - 2014-07-02 16:25 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Goldacker\Downloads\revosetup95.exe
2014-07-02 13:43 - 2014-07-02 13:43 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\PhotoScape
2014-07-02 12:58 - 2014-07-02 12:58 - 00003112 _____ () C:\Windows\System32\Tasks\{3A0298E0-03F2-436A-8150-1EC6E0B45B21}
2014-06-28 20:00 - 2014-05-29 22:41 - 00003976 _____ () C:\Windows\System32\Tasks\Registration
2014-06-27 15:56 - 2014-06-27 15:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
2014-06-27 15:56 - 2014-06-27 15:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcecm_01007.Wdf
2014-06-27 15:56 - 2014-06-27 15:56 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2014-06-27 15:55 - 2014-06-27 15:55 - 00001168 _____ () C:\Users\Public\Desktop\MobileWiFi.lnk
2014-06-27 15:55 - 2014-06-27 15:55 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2014-06-27 15:55 - 2014-06-27 15:54 - 00000000 ____D () C:\ProgramData\DatacardService
2014-06-27 15:55 - 2014-06-27 15:54 - 00000000 ____D () C:\Program Files (x86)\MobileWiFi
2014-06-22 11:02 - 2014-05-29 23:37 - 00001141 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-22 11:02 - 2014-05-29 23:37 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-21 19:28 - 2014-06-21 19:28 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-06-21 19:28 - 2014-06-21 19:28 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-06-21 19:28 - 2014-06-21 19:28 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-06-21 19:28 - 2014-06-21 19:28 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-06-21 19:28 - 2014-06-21 19:28 - 00000000 ____D () C:\ProgramData\Sun
2014-06-21 19:28 - 2014-06-21 19:28 - 00000000 ____D () C:\ProgramData\Oracle
2014-06-21 19:28 - 2014-06-21 19:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-21 19:28 - 2014-06-21 19:28 - 00000000 ____D () C:\Program Files (x86)\Java
2014-06-21 19:21 - 2014-06-18 17:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-21 19:18 - 2014-06-21 19:18 - 00918952 _____ (Oracle Corporation) C:\Users\Goldacker\Downloads\jxpiinstall.exe
2014-06-21 19:12 - 2014-06-02 14:42 - 00000000 ____D () C:\Users\Goldacker\AppData\Local\Adobe
2014-06-20 23:14 - 2014-06-15 11:17 - 03493072 ____R () C:\Users\Goldacker\Documents\Jessica Sicherungskopie.mbf
2014-06-20 22:18 - 2014-05-31 22:09 - 00022006 _____ () C:\Users\Goldacker\AppData\Local\LayoutPanels.xml
2014-06-20 22:18 - 2014-05-31 22:09 - 00020819 _____ () C:\Users\Goldacker\AppData\Local\Layout.xml
2014-06-20 22:18 - 2014-05-31 22:09 - 00012573 _____ () C:\Users\Goldacker\AppData\Local\Layout_Card.xml
2014-06-20 22:18 - 2014-05-31 21:50 - 00004450 _____ () C:\Users\Goldacker\AppData\Local\QC.ini
2014-06-20 22:00 - 2014-05-31 21:50 - 06291456 _____ () C:\Users\Goldacker\AppData\Local\QC.mdf
2014-06-20 22:00 - 2014-05-31 21:50 - 01572864 _____ () C:\Users\Goldacker\AppData\Local\QC_log.ldf
2014-06-20 21:54 - 2014-06-15 18:18 - 02280360 ____R () C:\Users\Goldacker\Documents\Albert Sicherungskopie.mbf
2014-06-20 21:53 - 2014-05-31 21:57 - 00002492 _____ () C:\Users\Goldacker\Documents\Kursdaten_QuoteCompiler.qwb
2014-06-20 21:53 - 2014-05-31 21:50 - 00023553 _____ () C:\Users\Goldacker\AppData\Local\QC.log
2014-06-20 21:49 - 2014-06-15 18:14 - 03738896 ____R () C:\Users\Goldacker\Documents\Anna Sicherungskopie.mbf
2014-06-20 21:23 - 2014-05-31 21:50 - 00021988 _____ () C:\Users\Goldacker\AppData\Local\LayoutPanels_Default.xml
2014-06-20 21:22 - 2014-05-31 16:09 - 00000000 ____D () C:\Users\Goldacker\AppData\Local\Deployment
2014-06-20 09:12 - 2014-05-29 23:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-18 22:29 - 2014-06-18 22:17 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\Music Editor Free
2014-06-18 22:20 - 2014-06-18 22:20 - 00001251 _____ () C:\Users\Goldacker\Desktop\Music Editor Free (2).lnk
2014-06-18 22:16 - 2014-06-18 22:16 - 00001251 _____ () C:\Users\Goldacker\AppData\Roaming\Microsoft\Windows\Start Menu\Music Editor Free.lnk
2014-06-18 22:16 - 2014-06-18 22:16 - 00001227 _____ () C:\Users\Goldacker\Desktop\Music Editor Free.lnk
2014-06-18 22:16 - 2014-06-18 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music Editor Free
2014-06-18 22:16 - 2014-06-18 22:16 - 00000000 ____D () C:\Program Files (x86)\Music Editor Free
2014-06-18 22:14 - 2014-06-18 22:14 - 15871352 _____ (Copyright© 2005-2014 MEFMedia, Inc. ) C:\Users\Goldacker\Downloads\MusicEditorFree_CB-DL-Manager [1].exe
2014-06-18 22:13 - 2014-06-18 22:13 - 00719128 _____ ( ) C:\Users\Goldacker\Downloads\MusicEditorFree_CB-DL-Manager.exe
2014-06-18 22:09 - 2014-06-18 22:09 - 00308709 _____ () C:\Users\Goldacker\Downloads\mp3DC220.exe
2014-06-15 18:18 - 2014-05-31 22:10 - 00070889 _____ () C:\Users\Goldacker\AppData\Local\QC_140531.log
2014-06-15 10:53 - 2014-06-15 10:53 - 03166720 _____ () C:\Users\Goldacker\Documents\QC_140615105342.bak
2014-06-13 10:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-11 22:37 - 2014-05-31 16:22 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-11 22:35 - 2009-08-20 10:26 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-11 22:33 - 2014-06-02 14:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-08 17:10 - 2014-06-08 08:58 - 1566572544 _____ () C:\Users\Goldacker\Documents\windows-backup-2014.iso
2014-06-08 11:13 - 2014-06-11 14:59 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-11 14:59 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 08:53 - 2014-06-07 08:53 - 00001905 _____ () C:\Users\Goldacker\Desktop\CDBurnerXP.lnk
2014-06-06 23:20 - 2014-06-06 23:20 - 00001955 _____ () C:\Users\Public\Desktop\CDBurnerXP.lnk
2014-06-06 23:20 - 2014-06-06 23:20 - 00001905 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2014-06-06 23:20 - 2014-06-06 23:20 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\Canneverbe Limited
2014-06-06 23:20 - 2014-06-06 23:20 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-06-06 23:20 - 2014-06-06 23:20 - 00000000 ____D () C:\Program Files (x86)\CDBurnerXP
2014-06-06 23:18 - 2014-06-06 23:18 - 05405880 _____ (Canneverbe Limited ) C:\Users\Goldacker\Downloads\cdbxp_setup_4.5.4.4852_minimal.exe
2014-06-06 18:31 - 2014-06-06 18:27 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-06-06 18:29 - 2014-06-06 18:29 - 00000000 ____D () C:\Users\Goldacker\AppData\Roaming\TuneUp Software
2014-06-06 18:29 - 2014-06-06 18:29 - 00000000 ____D () C:\Users\Goldacker\AppData\Local\TuneUp Software
2014-06-06 18:27 - 2014-06-06 18:27 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2014-06-06 12:37 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-06-06 12:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-06 10:41 - 2014-06-06 10:41 - 00000056 ____H () C:\Windows\SysWOW64\ezsidmv.dat

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-18 16:35

==================== End Of Log ============================
         

--- --- ---


Das programm unten rechts ist weg ....
Die Datei unter öffentliche Dokumente ist noch da kann ich Diese jetzt löschen?

Ja, lösche das Zeug und probiere morgen nochmal den ESET-Scan...

Hallo Jürgen,

anbei der Scan......

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=658bdb46f6cb4943a3b845addd1fb3c8
# engine=19040
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-07-06 12:46:19
# local_time=2014-07-06 02:46:19 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 100 95 125775 3209859 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 9446 156237429 0 0
# scanned=206495
# found=11
# cleaned=0
# scan_time=7665
sh=5B692FAC0BFEE8DE9CC83E0DC2F5DFA12E15E702 ft=1 fh=9cdbb654185e03c8 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe.vir"
sh=C1C723067CE078FBB46100ADAFA04EC8B970D33B ft=1 fh=d2071d8e9c6b1de9 vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\SPTool.dll.vir"
sh=9780E38EBC2D7EA2AB42A88EDE2B3EBF7107DBD6 ft=1 fh=3a49362a559c1bed vn="Variante von Win32/Conduit.SearchProtect.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\Main\bin\uninstall.exe.vir"
sh=3B2DE698CB1472FDF0F1C6F226AC729E4884A539 ft=1 fh=6ac9354da4175c01 vn="Win32/VOPackage.J evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Goldacker\Desktop\VOPackage.exe.xBAD"
sh=0A46D1943C0AEE8D36A4EE5AAD7CC420D47FFAAE ft=1 fh=26d53975922e76a1 vn="Variante von Win32/InstallCore.PK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Goldacker\Downloads\FSCaptureSetup53_CB-DL-Manager.exe"
sh=BBCB47196BC05E19CF74B90F99920252922E3854 ft=1 fh=c71c00112ef4dcc9 vn="Variante von Win32/InstallCore.OY evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Goldacker\Downloads\MusicEditorFree_CB-DL-Manager.exe"
sh=A981E3D6F03D3BD57D1472F33A4093A01533F8A8 ft=1 fh=7aaf7b3d0491af48 vn="Variante von MSIL/AdvancedSystemProtector.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Goldacker\Downloads\wzmp_8.exe"
sh=5E563903CD6F759059676861828DA596675BEFAE ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit.R evtl. unerwünschte Anwendung" ac=I fn="D:\GOLDACKER-PC\Backup Set 2014-06-01 121025\Backup Files 2014-06-08 201113\Backup files 1.zip"
sh=1A88EBC7389B80E4373E79827A595E2FF0A2FAE9 ft=0 fh=0000000000000000 vn="Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="D:\GOLDACKER-PC\Backup Set 2014-06-01 121025\Backup Files 2014-06-22 191315\Backup files 1.zip"
sh=9B6F082382D20F44DA771974504BF60379AB2E6A ft=0 fh=0000000000000000 vn="Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="D:\GOLDACKER-PC\Backup Set 2014-06-29 190001\Backup Files 2014-06-29 190001\Backup files 1.zip"
sh=71AFD4BF97407EC7F9FDE73005F7BF68ED08295F ft=0 fh=0000000000000000 vn="Variante von Win32/InstallCore.OY evtl. unerwünschte Anwendung" ac=I fn="D:\GOLDACKER-PC\Backup Set 2014-06-29 190001\Backup Files 2014-06-29 190001\Backup files 3.zip"
         

Hallo Jürgen,

vielen Dank für deine Hilfe und deine Mühe mit meinem Problem.
Deine ganze Geduld die Du aufgebracht hast.....

Eine letzte Frage ist jetzt okay oder brauchst du noch Informationen von Mir?
Welche Programme soll ich deinstallieren die ich aufgespielt habe?

Hi,
nö können wir so lassen.

Du musst einfach besser aufpassen von wo, Du welche Programm ladest.

FastStone Capture - CHIP-Installer.exe
C:\Users\Goldacker\Downloads\wzmp_8.exe
         

Das ist das Zeug was ich meine. Danach ist der PC vermüllt.


Cleanup:

Alle Logs gepostet? Ja! Dann lade Dir bitte DelFix herunter.

• Schließe alle offenen Programme.
• Starte die delfix.exe mit einem Doppelklick.
• Setze vor jede Funktion ein Häkchen.
• Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

>>clean<<
Wir haben es geschafft!
Die Logs sehen für mich im Moment sauber aus.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.
Es bleibt mir nur noch, Dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen.

Wie kann ich mich in Zukunft besser schützen?

Tipps, Dos & Don'ts

Updates & Software

• Beim Betriebsystem Windows die automatischen Updates aktivieren.
  
  Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:
• Browser
• Java
• Flash-Player & PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.

Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.



Firewall, Antivirus & Co.

• Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.
  
• Verwende ein Antivirusprogramm mit Echtzeitscanner und stets aktueller Signaturendatenbank. (Updatefunktion aktivieren!)
  Meine Empfehlungen:
  Kaspersky Antivirus
  Emsisoft Anti-Malware
  avast Free Antivirus
• Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.
  
  Optional:
• NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
  
  

Cracks, Downloads & Co.


Neben unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert.
Der Besuch dubioser Websites kann bereits Risiken bergen. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Illegale Cracks, Keygens und Serials sind ein ausgesprochen einfacher und beliebter Weg um Malware zu verbreiten.
Bei Dateien aus Peer-to-Peer- und Filesharingprogrammen oder von Filehostern kann man nie sicher sein, ob auch wirklich drin ist, was drauf steht. (Trojanisches Pferd^^)

• Auch virustotal.com ist Dein Freund! Lade dubiose oder unbekannte Dateien hoch, bevor Du diese startest oder installierst.

Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden zu verleiten, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).

• Surfe daher mit Vorsicht und klicke mit Verstand.
• Sei skeptisch bei unerwarteten E-Mails, insbesondere wenn sie Anhänge enthalten. Auch wenn sie auf den ersten Blick authentisch wirken, persönliche Daten von Dir enthalten oder vermeintlich von einem bekannten Absender stammen: Lieber nochmals in Ruhe überdenken oder nachfragen, anstatt einfach mal Links oder ausführbare Anhänge öffnen oder irgendwo Deine Daten eingeben.
• Auch in sozialen Netzwerken oder über Instant Messaging Systeme können schädliche Links oder Dateien die Runde machen. Erhältst Du von einem Deiner Freunde eine Nachricht, die merkwürdig ist oder so sensationell interessant, dass man einfach draufklicken muss, dann hat bei ihm/ihr wahrscheinlich Neugier über Verstand gesiegt und Du solltest nicht denselben Fehler machen.

Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.

• Lade Software in erster Priorität immer direkt vom Hersteller herunter. Viele Softwareportale (z.B. Softonic) packen noch unnützes Zeug mit in die Installation. Alternativ dazu wähle ein sauberes Portal wie Filepony oder heise.
• Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
• Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwarecleaner .
  

Abschließend noch ein paar grundsätzliche Bemerkungen:

• Erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
• Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.