FRST Logfile:
Code:
Alles auswählen Aufklappen ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:21-07-2014
Ran by Fujitsu Siemens (administrator) on FUJITSUSIEMENS on 22-07-2014 13:17:11
Running from C:\Users\Fujitsu Siemens\Downloads
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Cisco Systems, Inc.) C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe
() C:\Program Files\di6Safer-Surf\u3Safer-SurfU.exe
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
() C:\Program Files\di6Safer-Surf\Safer-Surf.exe
() C:\Users\Fujitsu Siemens\AppData\Local\pgcchelper\pgcchelper.exe
() C:\Users\Fujitsu Siemens\AppData\Local\fabulous_07212306\fabulous_07212306.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
(Dropbox, Inc.) C:\Users\Fujitsu Siemens\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
() C:\Program Files\di6Safer-Surf\h1Safer-SurfIC175.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Malwarebytes Corporation) C:\Program Files\ Malwarebytes Anti-Malware \mbam.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
==================== Registry (Whitelisted) ==================
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-03-21] (Microsoft Corporation)
HKU\.DEFAULT\...\RunOnce: [osk.exe] => osk.exe
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [93696 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [93696 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-688665322-2250143666-3437920823-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-688665322-2250143666-3437920823-1000\...\Run: [Google Update] => C:\Users\Fujitsu Siemens\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-15] (Google Inc.)
HKU\S-1-5-21-688665322-2250143666-3437920823-1000\...\Run: [Akamai NetSession Interface] => "C:\Users\Fujitsu Siemens\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-688665322-2250143666-3437920823-1000\...\Run: [pgcchelper] => C:\Users\Fujitsu Siemens\AppData\Local\pgcchelper\pgcchelper.exe [465920 2013-08-21] ()
HKU\S-1-5-21-688665322-2250143666-3437920823-1000\...\Run: [fabulous_07212306] => c:\users\fujitsu siemens\appdata\local\fabulous_07212306\fabulous_07212306.exe [2756608 2014-07-22] ()
HKU\S-1-5-21-688665322-2250143666-3437920823-1000\...\Run: [SSUPRDReminder] => C:\Program Files\System Speedup\SystemSpeedup.exe [7833952 2014-06-30] (System Speedup)
HKU\S-1-5-21-688665322-2250143666-3437920823-1000\...\RunOnce: [Application Restart #1] => C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\Application\chrome.exe [860488 2014-07-15] (Google Inc.)
HKU\S-1-5-21-688665322-2250143666-3437920823-1000\...\MountPoints2: {6938f7b5-3529-11e1-8c27-00174267ce2b} - E:\autostart.bat
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealPlayer Cloud Service UI.lnk
ShortcutTarget: RealPlayer Cloud Service UI.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\Users\Fujitsu Siemens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Fujitsu Siemens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Fujitsu Siemens\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Fujitsu Siemens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fabulous_07212306.lnk
ShortcutTarget: fabulous_07212306.lnk -> C:\Users\Fujitsu Siemens\AppData\Local\fabulous_07212306\fabulous_07212306.exe ()
Startup: C:\Users\Fujitsu Siemens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
ShortcutTarget: Facebook Messenger.lnk -> C:\Users\Fujitsu Siemens\AppData\Local\Facebook\Messenger\2.1.4814.0\FacebookMessenger.exe (No File)
Startup: C:\Users\Fujitsu Siemens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:14377;https=127.0.0.1:14377
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3314932&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP1CD5410F-AA97-44AF-AFBA-7EB0E833ED9B&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Safer-Surf -> {E82DCD4A-4697-3960-DB16-608E7F30551D} -> C:\Program Files\di6Safer-Surf\175.dll ()
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Fujitsu Siemens\AppData\Roaming\Mozilla\Firefox\Profiles\q6wkq4pp.default
FF SelectedSearchEngine: Google
FF Homepage: about :home
FF NetworkProxy: "ftp", "31.47.250.238"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "31.47.250.238"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "31.47.250.238"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "31.47.250.238"
FF NetworkProxy: "ssl_port", 3128
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=17.0.6.13 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=17.0.6 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=17.0.6 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=17.0.6 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=17.0.6.13 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer Cloud)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Fujitsu Siemens\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Fujitsu Siemens\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\Fujitsu Siemens\AppData\Roaming\Mozilla\Firefox\Profiles\q6wkq4pp.default\user.js
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [{8E8D8D12-A43B-4289-994D-DF2C7C0EF736}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-03-18]
FF HKCU\...\Firefox\Extensions: [{3CD553AA-E74C-4BEE-0DE1-A18B60EAD04C}] - C:\Program Files\di6Safer-Surf\175.xpi
FF Extension: Safer-Surf - C:\Program Files\di6Safer-Surf\175.xpi [2014-07-22]
Chrome:
=======
CHR HomePage: hxxp://google.de/
CHR StartupUrls: ""
CHR Plugin: (Shockwave Flash) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\Application\21.0.1180.79\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\Application\36.0.1985.125\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\Application\36.0.1985.125\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Facebook Desktop) - C:\Users\Fujitsu Siemens\AppData\Local\Facebook\Messenger\2.1.4590.0\npFbDesktopPlugin.dll No File
CHR Plugin: (Google Update) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (ProxFlow) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2013-06-08]
CHR Extension: (McAfee Security Scan+) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh [2014-02-23]
CHR Extension: (AdBlock) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-03-12]
CHR Extension: (RealPlayer Downloader) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-03-18]
CHR Extension: (Google Wallet) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Bitdefender QuickScan) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie [2013-11-24]
CHR Extension: (20-20 3D Viewer for IKEA) - C:\Users\Fujitsu Siemens\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfhldcakmgpmglboaclpfdedehjblalp [2013-12-26]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2014-02-12]
========================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-06-24] (Adobe Systems) [File not signed]
R2 HPSLPSVC; C:\Users\Fujitsu Siemens\AppData\Local\Temp\7zS3EF6\hpslpsvc32.dll [701288 2011-11-14] (Hewlett-Packard Co.)
R2 MBAMScheduler; C:\Program Files\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [30785672 2012-09-20] (Microsoft Corporation) [File not signed]
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-02-12] ()
R2 RealPlayer Cloud Service; C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1141336 2014-03-18] (RealNetworks, Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [23552 2014-02-14] () [File not signed]
R2 Safer-Surf; C:\Program Files\di6Safer-Surf\h1Safer-SurfIC175.exe [161280 2014-07-22] () [File not signed]
S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 vpnagent; C:\Program Files\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [557968 2013-07-19] (Cisco Systems, Inc.)
==================== Drivers (Whitelisted) ====================
S3 acsock; C:\Windows\System32\DRIVERS\acsock.sys [92112 2013-07-19] (Cisco Systems, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-07-22] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
S3 vpnva; C:\Windows\System32\DRIVERS\vpnva-6.sys [43120 2013-07-19] (Cisco Systems, Inc.)
R1 {2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gw; C:\Windows\System32\drivers\{2c976a7f-dbdc-4756-870f-f6d183fe7a7e}Gw.sys [52928 2014-04-24] (StdLib)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-22 13:08 - 2014-07-22 13:18 - 00017605 _____ () C:\Users\Fujitsu Siemens\Downloads\FRST.txt
2014-07-22 13:08 - 2014-07-22 13:08 - 01080320 _____ (Farbar) C:\Users\Fujitsu Siemens\Downloads\FRST.exe
2014-07-22 12:53 - 2014-07-22 13:17 - 00000000 ____D () C:\FRST
2014-07-22 12:25 - 2014-07-22 12:25 - 00000000 __SHD () C:\found.001
2014-07-22 01:13 - 2014-07-22 01:13 - 00001703 _____ () C:\AdwCleaner[R1].txt
2014-07-22 01:07 - 2014-07-22 13:13 - 00000404 _____ () C:\Windows\Tasks\Safer-Surf Update.job
2014-07-22 01:07 - 2014-07-22 13:13 - 00000384 _____ () C:\Windows\Tasks\Safer-Surf_wd.job
2014-07-22 01:07 - 2014-07-22 01:07 - 00581957 _____ () C:\Users\Fujitsu Siemens\Desktop\adwcleaner-1.606-en.exe
2014-07-22 01:07 - 2014-07-22 01:07 - 00001032 _____ () C:\Users\Public\Desktop\System Speedup.lnk
2014-07-22 01:07 - 2014-07-22 01:07 - 00001022 _____ () C:\Users\Fujitsu Siemens\Desktop\FLVM Player.lnk
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Roaming\System Speedup
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLVM Player
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Local\pgcchelper
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Speedup
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\Program Files\System Speedup
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\Program Files\FLVM Player
2014-07-22 01:07 - 2014-06-30 17:34 - 00018272 _____ (System Speedup) C:\Windows\system32\roboot.exe
2014-07-22 01:06 - 2014-07-22 01:56 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Local\fabulous_07212306
2014-07-22 01:06 - 2014-07-22 01:07 - 00000000 ____D () C:\Program Files\di6Safer-Surf
2014-07-22 00:47 - 2014-07-22 00:47 - 00596472 _____ (Popeler · sl) C:\Users\Fujitsu Siemens\Downloads\AdwCleaner (1).exe
2014-07-22 00:31 - 2014-07-22 00:31 - 00017078 _____ () C:\Users\Fujitsu Siemens\Downloads\download-adwcleaner.htm
2014-07-22 00:28 - 2014-07-22 00:29 - 00000000 ____D () C:\Users\Fujitsu Siemens\Desktop\21.07.2014
2014-07-21 22:57 - 2014-07-21 22:57 - 00151832 _____ () C:\Windows\Minidump\072114-75364-01.dmp
2014-07-21 22:57 - 2014-07-21 22:57 - 00000000 ____D () C:\Windows\Minidump
2014-07-21 22:56 - 2014-07-21 22:56 - 274642638 _____ () C:\Windows\MEMORY.DMP
2014-07-21 22:51 - 2014-07-21 22:51 - 00000000 __SHD () C:\found.000
2014-07-21 17:56 - 2014-07-22 13:14 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-21 17:56 - 2014-07-21 17:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-21 17:56 - 2014-07-21 17:56 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2014-07-21 17:56 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-21 17:56 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-21 10:31 - 2014-07-21 10:31 - 00016776 ____N () C:\bootsqm.dat
2014-07-15 08:39 - 2014-07-15 08:40 - 07651098 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-Reallusion-1.4.1.zip
2014-07-15 08:38 - 2014-07-15 08:39 - 19444303 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-BlendSwap-CC-BY-1.4.1.zip
2014-07-15 08:38 - 2014-07-15 08:39 - 17151461 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-BlendSwap-CC-0-1.4.1.zip
2014-07-15 08:36 - 2014-07-15 08:37 - 27676593 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-Scopia-1.4.1.zip
2014-07-15 08:36 - 2014-07-15 08:37 - 08901377 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-KatorLegaz-1.4.1.zip
2014-07-15 08:35 - 2014-07-15 08:36 - 08271417 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-Trees-1.4.1.zip
2014-07-15 08:35 - 2014-07-15 08:35 - 04321158 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-LucaPresidente-1.4.1.zip
2014-07-15 08:32 - 2014-07-15 08:33 - 24822781 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-Contributions-1.4.1.zip
2014-07-13 23:08 - 2014-07-15 07:20 - 05721024 _____ () C:\Users\Fujitsu Siemens\Documents\Wohnung Vegesack Fertig andere aufstelmöglichkeit.sh3d
2014-07-10 00:19 - 2014-07-20 01:23 - 14083382 _____ () C:\Users\Fujitsu Siemens\Documents\Wohnung Vegesack Fertig.sh3d
2014-07-08 06:20 - 2014-07-08 06:20 - 01399104 _____ () C:\Users\Fujitsu Siemens\Downloads\TT - Über die Methode des Mappings- Janine_Hoffmann.odt
2014-07-08 05:56 - 2014-07-08 05:56 - 00389148 _____ () C:\Users\Fujitsu Siemens\Downloads\TT - Ordnung - Kevin+Rosa.odt
2014-07-08 05:31 - 2014-07-08 05:31 - 00020267 _____ () C:\Users\Fujitsu Siemens\Downloads\Reflexion_1 (2).odt
2014-07-08 05:14 - 2014-07-08 05:14 - 01385841 _____ () C:\Users\Fujitsu Siemens\Downloads\Janine_Hoffmann_______________inthoff_finish_____________________________________________________________________________________________________26.odt
2014-07-08 04:21 - 2014-07-08 04:21 - 00024895 _____ () C:\Users\Fujitsu Siemens\Downloads\Endfassung_Aykut.odt
2014-07-05 04:50 - 2014-07-05 04:51 - 00020355 _____ () C:\Users\Fujitsu Siemens\Downloads\Erwartungshorizont_Hatice-Tekin.odt
2014-07-04 00:33 - 2014-07-04 01:41 - 00024617 _____ () C:\Users\Fujitsu Siemens\Downloads\Schreibaufgabe_Lese-und_Schreibdidaktik.odt
2014-07-03 01:53 - 2014-07-03 01:53 - 00026624 _____ () C:\Users\Fujitsu Siemens\Downloads\fachzeitschrift.odt
2014-07-01 07:18 - 2014-07-01 07:18 - 00024287 _____ () C:\Users\Fujitsu Siemens\Downloads\Fachdidaktik_Aufgabe_4-_Fachbuch.odt
2014-07-01 01:16 - 2014-07-01 01:16 - 00020267 _____ () C:\Users\Fujitsu Siemens\Downloads\Reflexion_1 (1).odt
2014-06-26 02:05 - 2014-07-09 23:35 - 04786749 _____ () C:\Users\Fujitsu Siemens\Documents\Wohnung Vegesack FINALl.sh3d
2014-06-25 13:56 - 2014-06-25 13:57 - 24753670 _____ () C:\Users\Fujitsu Siemens\Downloads\Literaturrechercheaufgabe_Didaktik.odt
2014-06-24 00:40 - 2014-06-24 00:40 - 00020096 _____ () C:\Users\Fujitsu Siemens\Downloads\Reflexion_1.odt
2014-06-22 13:48 - 2014-06-22 17:28 - 07798307 _____ () C:\Users\Fujitsu Siemens\Downloads\Lernarrangement_Broschüre.odt
2014-06-22 13:46 - 2014-06-22 13:47 - 00106918 _____ () C:\Users\Fujitsu Siemens\Downloads\Protokoll_vom_17.06.2014_WICHTIG_ABGABEN.odt
==================== One Month Modified Files and Folders =======
2014-07-22 13:18 - 2014-07-22 13:08 - 00017605 _____ () C:\Users\Fujitsu Siemens\Downloads\FRST.txt
2014-07-22 13:17 - 2014-07-22 12:53 - 00000000 ____D () C:\FRST
2014-07-22 13:17 - 2011-11-18 22:11 - 01463828 _____ () C:\Windows\WindowsUpdate.log
2014-07-22 13:14 - 2014-07-21 17:56 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-22 13:14 - 2014-02-02 15:18 - 00000000 ___RD () C:\Users\Fujitsu Siemens\Dropbox
2014-07-22 13:14 - 2014-02-02 15:15 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Roaming\DropboxMaster
2014-07-22 13:14 - 2014-02-02 15:13 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Roaming\Dropbox
2014-07-22 13:13 - 2014-07-22 01:07 - 00000404 _____ () C:\Windows\Tasks\Safer-Surf Update.job
2014-07-22 13:13 - 2014-07-22 01:07 - 00000384 _____ () C:\Windows\Tasks\Safer-Surf_wd.job
2014-07-22 13:13 - 2012-03-06 15:07 - 00093087 _____ () C:\Windows\setupact.log
2014-07-22 13:13 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-22 13:08 - 2014-07-22 13:08 - 01080320 _____ (Farbar) C:\Users\Fujitsu Siemens\Downloads\FRST.exe
2014-07-22 12:53 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-22 12:53 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-22 12:34 - 2012-08-15 12:37 - 00001160 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688665322-2250143666-3437920823-1000UA.job
2014-07-22 12:34 - 2012-08-15 12:37 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-688665322-2250143666-3437920823-1000Core.job
2014-07-22 12:25 - 2014-07-22 12:25 - 00000000 __SHD () C:\found.001
2014-07-22 02:00 - 2011-12-06 20:44 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Local\Adobe
2014-07-22 01:56 - 2014-07-22 01:06 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Local\fabulous_07212306
2014-07-22 01:56 - 2011-11-18 22:16 - 00000000 ____D () C:\Users\Fujitsu Siemens
2014-07-22 01:13 - 2014-07-22 01:13 - 00001703 _____ () C:\AdwCleaner[R1].txt
2014-07-22 01:07 - 2014-07-22 01:07 - 00581957 _____ () C:\Users\Fujitsu Siemens\Desktop\adwcleaner-1.606-en.exe
2014-07-22 01:07 - 2014-07-22 01:07 - 00001032 _____ () C:\Users\Public\Desktop\System Speedup.lnk
2014-07-22 01:07 - 2014-07-22 01:07 - 00001022 _____ () C:\Users\Fujitsu Siemens\Desktop\FLVM Player.lnk
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Roaming\System Speedup
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLVM Player
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Local\pgcchelper
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Speedup
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\Program Files\System Speedup
2014-07-22 01:07 - 2014-07-22 01:07 - 00000000 ____D () C:\Program Files\FLVM Player
2014-07-22 01:07 - 2014-07-22 01:06 - 00000000 ____D () C:\Program Files\di6Safer-Surf
2014-07-22 00:47 - 2014-07-22 00:47 - 00596472 _____ (Popeler · sl) C:\Users\Fujitsu Siemens\Downloads\AdwCleaner (1).exe
2014-07-22 00:31 - 2014-07-22 00:31 - 00017078 _____ () C:\Users\Fujitsu Siemens\Downloads\download-adwcleaner.htm
2014-07-22 00:29 - 2014-07-22 00:28 - 00000000 ____D () C:\Users\Fujitsu Siemens\Desktop\21.07.2014
2014-07-21 23:23 - 2011-11-18 22:24 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-21 22:57 - 2014-07-21 22:57 - 00151832 _____ () C:\Windows\Minidump\072114-75364-01.dmp
2014-07-21 22:57 - 2014-07-21 22:57 - 00000000 ____D () C:\Windows\Minidump
2014-07-21 22:56 - 2014-07-21 22:56 - 274642638 _____ () C:\Windows\MEMORY.DMP
2014-07-21 22:51 - 2014-07-21 22:51 - 00000000 __SHD () C:\found.000
2014-07-21 17:56 - 2014-07-21 17:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-07-21 17:56 - 2014-07-21 17:56 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware
2014-07-21 17:56 - 2014-03-14 16:59 - 00001060 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-07-21 17:56 - 2014-03-14 16:59 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Roaming\Malwarebytes
2014-07-21 17:56 - 2014-03-14 16:59 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-21 17:45 - 2012-12-24 09:25 - 00031794 _____ () C:\Windows\PFRO.log
2014-07-21 10:31 - 2014-07-21 10:31 - 00016776 ____N () C:\bootsqm.dat
2014-07-20 01:23 - 2014-07-10 00:19 - 14083382 _____ () C:\Users\Fujitsu Siemens\Documents\Wohnung Vegesack Fertig.sh3d
2014-07-15 08:40 - 2014-07-15 08:39 - 07651098 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-Reallusion-1.4.1.zip
2014-07-15 08:39 - 2014-07-15 08:38 - 19444303 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-BlendSwap-CC-BY-1.4.1.zip
2014-07-15 08:39 - 2014-07-15 08:38 - 17151461 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-BlendSwap-CC-0-1.4.1.zip
2014-07-15 08:37 - 2014-07-15 08:36 - 27676593 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-Scopia-1.4.1.zip
2014-07-15 08:37 - 2014-07-15 08:36 - 08901377 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-KatorLegaz-1.4.1.zip
2014-07-15 08:36 - 2014-07-15 08:35 - 08271417 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-Trees-1.4.1.zip
2014-07-15 08:35 - 2014-07-15 08:35 - 04321158 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-LucaPresidente-1.4.1.zip
2014-07-15 08:33 - 2014-07-15 08:32 - 24822781 _____ () C:\Users\Fujitsu Siemens\Downloads\3DModels-Contributions-1.4.1.zip
2014-07-15 07:20 - 2014-07-13 23:08 - 05721024 _____ () C:\Users\Fujitsu Siemens\Documents\Wohnung Vegesack Fertig andere aufstelmöglichkeit.sh3d
2014-07-13 17:41 - 2013-07-07 21:42 - 00000000 ____D () C:\Users\Fujitsu Siemens\Documents\My Kindle Content
2014-07-09 23:35 - 2014-06-26 02:05 - 04786749 _____ () C:\Users\Fujitsu Siemens\Documents\Wohnung Vegesack FINALl.sh3d
2014-07-08 06:20 - 2014-07-08 06:20 - 01399104 _____ () C:\Users\Fujitsu Siemens\Downloads\TT - Über die Methode des Mappings- Janine_Hoffmann.odt
2014-07-08 05:56 - 2014-07-08 05:56 - 00389148 _____ () C:\Users\Fujitsu Siemens\Downloads\TT - Ordnung - Kevin+Rosa.odt
2014-07-08 05:31 - 2014-07-08 05:31 - 00020267 _____ () C:\Users\Fujitsu Siemens\Downloads\Reflexion_1 (2).odt
2014-07-08 05:14 - 2014-07-08 05:14 - 01385841 _____ () C:\Users\Fujitsu Siemens\Downloads\Janine_Hoffmann_______________inthoff_finish_____________________________________________________________________________________________________26.odt
2014-07-08 04:21 - 2014-07-08 04:21 - 00024895 _____ () C:\Users\Fujitsu Siemens\Downloads\Endfassung_Aykut.odt
2014-07-05 04:51 - 2014-07-05 04:50 - 00020355 _____ () C:\Users\Fujitsu Siemens\Downloads\Erwartungshorizont_Hatice-Tekin.odt
2014-07-04 01:41 - 2014-07-04 00:33 - 00024617 _____ () C:\Users\Fujitsu Siemens\Downloads\Schreibaufgabe_Lese-und_Schreibdidaktik.odt
2014-07-03 01:53 - 2014-07-03 01:53 - 00026624 _____ () C:\Users\Fujitsu Siemens\Downloads\fachzeitschrift.odt
2014-07-01 07:18 - 2014-07-01 07:18 - 00024287 _____ () C:\Users\Fujitsu Siemens\Downloads\Fachdidaktik_Aufgabe_4-_Fachbuch.odt
2014-07-01 01:16 - 2014-07-01 01:16 - 00020267 _____ () C:\Users\Fujitsu Siemens\Downloads\Reflexion_1 (1).odt
2014-06-30 17:34 - 2014-07-22 01:07 - 00018272 _____ (System Speedup) C:\Windows\system32\roboot.exe
2014-06-25 13:57 - 2014-06-25 13:56 - 24753670 _____ () C:\Users\Fujitsu Siemens\Downloads\Literaturrechercheaufgabe_Didaktik.odt
2014-06-24 00:40 - 2014-06-24 00:40 - 00020096 _____ () C:\Users\Fujitsu Siemens\Downloads\Reflexion_1.odt
2014-06-23 00:59 - 2011-11-18 22:44 - 00000000 ____D () C:\Users\Fujitsu Siemens\AppData\Roaming\Adobe
2014-06-22 17:28 - 2014-06-22 13:48 - 07798307 _____ () C:\Users\Fujitsu Siemens\Downloads\Lernarrangement_Broschüre.odt
2014-06-22 16:11 - 2014-06-16 22:03 - 01515767 _____ () C:\Users\Fujitsu Siemens\Documents\Wohnung Vegesack.sh3d
2014-06-22 16:10 - 2014-06-18 10:02 - 01323765 _____ () C:\Users\Fujitsu Siemens\Documents\Wohnung Vegesack FINAL.sh3d
2014-06-22 13:47 - 2014-06-22 13:46 - 00106918 _____ () C:\Users\Fujitsu Siemens\Downloads\Protokoll_vom_17.06.2014_WICHTIG_ABGABEN.odt
Some content of TEMP:
====================
C:\Users\Fujitsu Siemens\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpagxko1.dll
C:\Users\Fujitsu Siemens\AppData\Local\Temp\Tsu1960F2C6.dll
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-18 00:00
==================== End Of Log ============================
--- --- ---
__________________