| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Telekom schickt Mahnung wegen Spam VersandWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
04.09.2014, 12:14
| #1 |
 |  Windows 7: Telekom schickt Mahnung wegen Spam Versand Mein Rechner fällt unter die Ausnahme für gewerblich genutzte Rechner. Es handelt sich um ein Netzwerk von 3 Rechnern mit einem zentralen Server und einem DSL Anschluss bei der Telekom. Diese hat jetzt eine Mahnung wegen angeblicher SPAM Attacke von unserem Server aus an die Firma geschickt. Zum angegebenen Zeitpunkt war niemand mit einem PC im Internet. Ich würde jetzt gerne wissen, ob mein Laptop einen Trojaner "eingefangen" hat, der diese SPAM Attacke möglich gemacht hat. Die diversen Log-Files von den Scannern: siehe unten - die Auswertung der Telekom mit der Nachricht der SPAM Attacke ist hier auch anbei. Mein Arbeitsplatz ist ein Schleudersitz und wenn auf meinem Rechner irgendetwas in dieser Richtung gefunden würde, wäre ich sofort auf ALG 1 und das wäre nicht so lustig. Deswegen hoffe ich, dass mir jemand von Euch helfen kann. Vielen Dank im Voraus. Code:
ATTFilter Benutzerkennung 6TBLJ5UZSCQR
IP-Adresse: 80.141.16.52
Datum/Uhrzeit des Vorfalls: Fri, 29 Aug 2014 19:00:00 +0200, entspricht deutscher Zeit: 29.08.2014, 19:00:00 (MESZ)
Beschwerdeart: Unerwünschte SMTP-Connects auf Mail Exchange
80.141.16.52,8/29/2014 6:00 PM,8/29/2014 8:00 PM,258,24,240,RED,< 0.1%,,,0, p508D1034.dip0.t-ipconnect.de,cvshbmqgice@absolutewebdesigns.com,(Spam Absender)
gesehen von 2014-08-29 18:00:00 bis 2014-08-29 20:00:00
In dieser Zeit mehr als 100 Verbindungsversuche zu Microsoft-/Hotmail-Servern auf Port 25.
Andere LOG-Files habe ich nicht. Das Einzige was mich stutzig macht, ist dass der Ventilator vom Laptop seit Freitag letzte Woche immer auf Hochtouren dreht (CPU ausgelastet?) und im Task.Manager keine verdächtige Aktivität zu entdecken ist. Viele Grüße Pagnasa |
|
04.09.2014, 12:20
| #2 |
| /// the machine /// TB-Ausbilder    | Windows 7: Telekom schickt Mahnung wegen Spam Versand Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
04.09.2014, 13:09
| #3 |
| | Windows 7: Telekom schickt Mahnung wegen Spam Versand Hallo Schrauber,
__________________danke für Deine superschnelle Rückantwort.  Ich werde die LOGS dann mal aufteilen, weil beim Einstellen die Webseite gemurrt hatte es wären zu viel Zeichen im Textfeld. Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 09:40 on 04/09/2014 (Bugge)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
-=E.O.F=-
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02
Ran by Bugge (administrator) on SE-NB-VOSTRO1 on 04-09-2014 09:45:11
Running from C:\Users\Bugge\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Mikogo GmbH) C:\Users\Bugge\AppData\Roaming\Mikogo\Mikogo-Service.exe
(Mikogo GmbH) C:\Users\Bugge\AppData\Roaming\Mikogo\Mikogo-Screen-Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\MSACCESS.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1666296860-1313954580-2417280352-1000\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [6265624 2014-07-23] (Piriform Ltd)
Lsa: [Notification Packages] DPPassFilter scecli
ShellIconOverlayIdentifiers: AutoCAD Digital Signatures Icon Overlay Handler -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USSMB/8
SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3324790&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SPAB24F626-351A-4F74-AC2C-3045AFB13F6E&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKCU - {7FF7D407-7BA3-47BA-9AC0-55B2FAED62A0} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.201
FireFox:
========
FF ProfilePath: C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @java.com/DTPlugin -> C:\Program Files\Java\jre6\bin\npDeployJava1.dll No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin -> C:\Program Files (x86)\Java\jre1.6.0_22\bin\npDeployJava1.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin HKCU: @autodesk.com/DWF -> C:\Program Files (x86)\Autodesk\Autodesk Design Review Browser Add-on v1.2\npADRdwf.dll (Autodesk)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin -> C:\Users\Bugge\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKCU: LWAPlugin15.8 -> C:\Users\Bugge\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\Bugge\AppData\Roaming\mozilla\plugins\npLWAPlugin15.8.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-12]
FF Extension: Block site - C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2014-03-18]
FF Extension: Adblock Plus - C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-02-13]
FF Extension: G Data BankGuard - C:\Program Files (x86)\Mozilla Firefox\extensions\{906305f7-aafc-45e9-8bbd-941950a84dad} [2014-09-03]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-09-03]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-09-03]
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt [2011-12-10]
FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - c:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\FirefoxExtension
FF HKLM-x32\...\Firefox\Extensions: [jid0-1wPBLrijxGVkIUhu0kFYq6ZaWzA@jetpack] - C:\Program Files (x86)\AntiBrowserSpy\Addons\Firefox
FF Extension: AntiBrowserSpy - SocialBlocker - C:\Program Files (x86)\AntiBrowserSpy\Addons\Firefox [2014-09-04]
Chrome:
=======
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6817544 2014-04-16] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO)
R2 Mikogo-Service; C:\Users\Bugge\AppData\Roaming\Mikogo\Mikogo-Service.exe [1116512 2013-11-29] (Mikogo GmbH)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-04-16] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-04-16] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-04-16] (COMODO)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-04-16] (COMODO)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-09-04] (Malwarebytes Corporation)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
U2 MatrikonOPC Genie Server; No ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-04 09:45 - 2014-09-04 09:46 - 00013762 _____ () C:\Users\Bugge\Downloads\FRST.txt
2014-09-04 09:43 - 2014-09-04 09:45 - 00000000 ____D () C:\FRST
2014-09-04 09:42 - 2014-09-04 09:42 - 02104832 _____ (Farbar) C:\Users\Bugge\Downloads\FRST64.exe
2014-09-04 09:40 - 2014-09-04 09:40 - 00000472 _____ () C:\Users\Bugge\Desktop\defogger_disable.log
2014-09-04 09:40 - 2014-09-04 09:40 - 00000000 _____ () C:\Users\Bugge\defogger_reenable
2014-09-04 09:38 - 2014-09-04 09:38 - 00050477 _____ () C:\Users\Bugge\Downloads\Defogger.exe
2014-09-04 08:50 - 2014-09-04 08:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntiBrowserSpy
2014-09-04 08:45 - 2014-09-04 08:53 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Abelssoft
2014-09-04 08:45 - 2014-09-04 08:50 - 00000000 ____D () C:\Program Files (x86)\AntiBrowserSpy
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Abelssoft
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-09-04 08:36 - 2014-09-04 08:36 - 00174088 _____ () C:\Users\Bugge\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-04 08:18 - 2014-09-04 08:20 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-04 08:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-03 16:26 - 2014-09-03 17:00 - 318311225 _____ () C:\Users\Bugge\Downloads\7fa547ad5c.720.mp4
2014-09-03 15:49 - 2014-09-03 16:26 - 252504616 _____ () C:\Users\Bugge\Downloads\Schlüpfertante.mp4
2014-09-03 15:47 - 2014-09-03 16:39 - 322367533 _____ () C:\Users\Bugge\Downloads\fbe10f9e74.720.mp4
2014-09-03 09:42 - 2014-09-03 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-29 08:24 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-29 08:24 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-29 08:24 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-29 08:19 - 2014-09-04 08:33 - 00132546 _____ () C:\Windows\WindowsUpdate.log
2014-08-27 17:56 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-27 17:56 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-27 17:56 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-27 17:56 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-27 17:55 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-27 17:55 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-27 17:55 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-27 17:55 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-27 17:55 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-27 17:55 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-26 14:42 - 2014-08-26 14:56 - 00006192 _____ () C:\xx7.log
2014-08-26 14:28 - 2005-08-03 16:05 - 00035892 _____ (Prolific Technology Inc.) C:\Windows\SysWOW64\SER9PL.sys
2014-08-26 14:28 - 2005-08-03 16:04 - 00026719 _____ () C:\Windows\SysWOW64\SERSPL.VXD
2014-08-26 14:13 - 2014-08-26 14:13 - 00003104 _____ () C:\Windows\System32\Tasks\{F4662A90-CFFC-436C-BC30-99FFB302A22B}
2014-08-20 10:21 - 2014-08-20 10:21 - 00000000 ____D () C:\log
2014-08-14 10:01 - 2014-08-14 10:01 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Adobe
2014-08-13 17:01 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 17:01 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-13 17:01 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 17:01 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 17:01 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-13 17:01 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-13 17:00 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-13 17:00 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 07:50 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 07:50 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-13 07:50 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 07:50 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 07:50 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 07:50 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-13 07:50 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 07:50 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 07:50 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 07:50 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 07:50 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 07:50 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 07:50 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 07:50 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-13 07:50 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 07:50 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 07:50 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 07:50 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 07:50 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 07:50 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 07:50 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-13 07:50 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-13 07:50 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-13 07:50 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-13 07:50 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 07:50 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 07:50 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-13 07:50 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 07:50 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-13 07:50 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 07:50 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-13 07:50 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-13 07:50 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 07:50 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-13 07:50 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-13 07:50 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-13 07:50 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-13 07:50 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 07:50 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 07:50 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 07:50 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 07:50 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 07:50 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-13 07:50 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-13 07:50 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-13 07:50 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 07:50 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-13 07:50 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-13 07:50 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-13 07:50 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-13 07:50 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 07:50 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 07:50 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 07:50 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-13 07:50 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-13 07:50 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-13 07:50 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 07:50 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-13 07:50 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 07:50 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-13 07:50 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 07:50 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-13 07:50 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 07:50 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 07:50 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 07:50 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 07:50 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 07:50 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-13 07:50 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-13 07:50 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-13 07:46 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 07:46 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 07:46 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 07:46 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-07 08:05 - 2014-08-27 19:28 - 00000000 ____D () C:\ProgramData\Package Cache
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-04 09:46 - 2014-09-04 09:45 - 00013762 _____ () C:\Users\Bugge\Downloads\FRST.txt
2014-09-04 09:45 - 2014-09-04 09:43 - 00000000 ____D () C:\FRST
2014-09-04 09:42 - 2014-09-04 09:42 - 02104832 _____ (Farbar) C:\Users\Bugge\Downloads\FRST64.exe
2014-09-04 09:40 - 2014-09-04 09:40 - 00000472 _____ () C:\Users\Bugge\Desktop\defogger_disable.log
2014-09-04 09:40 - 2014-09-04 09:40 - 00000000 _____ () C:\Users\Bugge\defogger_reenable
2014-09-04 09:40 - 2012-02-10 15:50 - 00000000 ____D () C:\Users\Bugge
2014-09-04 09:38 - 2014-09-04 09:38 - 00050477 _____ () C:\Users\Bugge\Downloads\Defogger.exe
2014-09-04 08:58 - 2012-02-24 12:27 - 00000000 ___RD () C:\Users\Bugge\Desktop\Selten benutzte Programme
2014-09-04 08:53 - 2014-09-04 08:45 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Abelssoft
2014-09-04 08:50 - 2014-09-04 08:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntiBrowserSpy
2014-09-04 08:50 - 2014-09-04 08:45 - 00000000 ____D () C:\Program Files (x86)\AntiBrowserSpy
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Abelssoft
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-09-04 08:36 - 2014-09-04 08:36 - 00174088 _____ () C:\Users\Bugge\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-04 08:36 - 2009-07-14 06:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-04 08:36 - 2009-07-14 06:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-04 08:33 - 2014-08-29 08:19 - 00132546 _____ () C:\Windows\WindowsUpdate.log
2014-09-04 08:29 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-04 08:28 - 2014-03-18 16:24 - 00000000 ____D () C:\AdwCleaner
2014-09-04 08:28 - 2012-04-26 08:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-04 08:20 - 2014-09-04 08:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-03-18 16:38 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Malwarebytes
2014-09-04 08:18 - 2014-03-18 16:38 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-04 08:12 - 2012-02-13 11:56 - 00000000 ____D () C:\Users\Bugge\Documents\Datenbank
2014-09-04 08:11 - 2012-04-25 10:31 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\vlc
2014-09-03 17:00 - 2014-09-03 16:26 - 318311225 _____ () C:\Users\Bugge\Downloads\7fa547ad5c.720.mp4
2014-09-03 16:39 - 2014-09-03 15:47 - 322367533 _____ () C:\Users\Bugge\Downloads\fbe10f9e74.720.mp4
2014-09-03 16:30 - 2012-11-05 12:55 - 00000000 ____D () C:\Users\Bugge\Jörg Bugge
2014-09-03 16:26 - 2014-09-03 15:49 - 252504616 _____ () C:\Users\Bugge\Downloads\Schlüpfertante.mp4
2014-09-03 13:57 - 2013-08-13 15:34 - 00000000 ____D () C:\Users\Bugge\Downloads\Neuer Ordner
2014-09-03 09:42 - 2014-09-03 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-03 07:47 - 2014-05-13 09:37 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Mikogo
2014-08-29 09:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-29 08:43 - 2010-11-21 08:50 - 00716204 _____ () C:\Windows\system32\perfh007.dat
2014-08-29 08:43 - 2010-11-21 08:50 - 00155060 _____ () C:\Windows\system32\perfc007.dat
2014-08-29 08:43 - 2009-07-14 07:13 - 01659204 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-29 08:20 - 2011-12-10 03:00 - 00000000 ____D () C:\ProgramData\Sonic
2014-08-28 11:09 - 2014-02-14 14:19 - 00000000 ____D () C:\Program Files (x86)\MySequip
2014-08-27 19:38 - 2012-02-14 15:18 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Skype
2014-08-27 19:28 - 2014-08-07 08:05 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-27 19:28 - 2013-03-12 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-27 19:28 - 2013-03-12 15:21 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-27 09:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-08-26 20:36 - 2012-03-27 09:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-08-26 20:36 - 2011-12-10 02:46 - 00000000 ____D () C:\ProgramData\Skype
2014-08-26 14:56 - 2014-08-26 14:42 - 00006192 _____ () C:\xx7.log
2014-08-26 14:28 - 2011-12-10 02:29 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-26 14:13 - 2014-08-26 14:13 - 00003104 _____ () C:\Windows\System32\Tasks\{F4662A90-CFFC-436C-BC30-99FFB302A22B}
2014-08-23 04:07 - 2014-08-29 08:24 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-29 08:24 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-29 08:24 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 08:05 - 2014-01-24 13:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-22 08:05 - 2012-02-13 17:49 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-21 08:21 - 2014-07-28 10:02 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-20 10:21 - 2014-08-20 10:21 - 00000000 ____D () C:\log
2014-08-15 10:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-08-15 09:07 - 2014-03-25 12:00 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\avidemux
2014-08-15 07:39 - 2012-04-11 08:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-14 10:01 - 2014-08-14 10:01 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Adobe
2014-08-14 07:43 - 2012-04-11 08:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-14 07:43 - 2012-04-11 08:35 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-14 07:43 - 2011-12-10 02:14 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-14 07:35 - 2012-02-10 15:54 - 00000000 ___RD () C:\Users\Bugge\Virtual Machines
2014-08-14 07:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-13 17:12 - 2012-02-13 10:20 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-13 17:07 - 2013-08-14 17:02 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 17:04 - 2012-02-13 16:25 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 17:00 - 2014-05-06 16:58 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-07 08:06 - 2013-03-12 15:21 - 00000000 ____D () C:\ProgramData\Avira
2014-08-07 04:06 - 2014-08-13 07:46 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-13 07:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
Some content of TEMP:
====================
C:\Users\Bugge\AppData\Local\Temp\avgnt.exe
C:\Users\Bugge\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-08-29 09:35
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-09-2014 02
Ran by Bugge at 2014-09-04 09:46:29
Running from C:\Users\Bugge\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: COMODO Antivirus (Disabled - Out of date) {0C2D2636-923D-EE52-2A83-E643204A8275}
FW: COMODO Firewall (Disabled) {8F7746F7-FE68-E084-3B6C-7404A51E8FB3}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
1888 Quick Flow Chart Creator 1.0 (HKLM-x32\...\1888 Quick Flow Chart Creator_is1) (Version: - 1888softwaredownloads.com)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Version: 2.00.11.17 - STMicroelectronics)
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
AntiBrowserSpy (HKLM-x32\...\{F78B5B4F-075A-4C81-AA27-E707861EB5B7}_is1) (Version: 141 - Abelssoft)
Any Video Converter 5.0.7 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft Funhouse 1.0 (HKLM-x32\...\{5FC4811E-29F4-4035-9274-43A16816152D}) (Version: - )
ArcSoft PhotoImpression 4 (HKLM-x32\...\{68D5CEF9-0DA8-47FE-B0EB-4CBFB5AAF662}) (Version: - )
Autodesk Design Review 2013 (HKLM-x32\...\Autodesk Design Review 2013) (Version: 13.0.0.82 - Autodesk, Inc.)
Autodesk Design Review 2013 (x32 Version: 13.0.0.82 - Autodesk, Inc.) Hidden
Autodesk Design Review Browser Add-on v1.2 (HKLM-x32\...\{CD49E43B-88B1-48AD-A3AF-43FAAAB41CB8}) (Version: 1.2.0 - Autodesk)
Avidemux 2.6 - 64bits (HKLM-x32\...\Avidemux 2.6 - 64bits (64-bit)) (Version: 2.6.8.9046 - )
Avira (HKLM-x32\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
BetterState 60.1 (HKLM-x32\...\BetterState 60.1) (Version: - )
CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source)
CamStudio version 2.7 (HKLM-x32\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7 - CamStudio Open Source)
CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform)
Citrix Online Launcher (HKLM-x32\...\{E1B40232-F73B-4BF9-A819-E352CCC1EDEF}) (Version: 1.0.122 - Citrix)
COMODO Internet Security (HKLM\...\{BCC0552D-76C0-4130-BFBD-49BE49ACC594}) (Version: 6.0.2566.2708 - COMODO Security Solutions Inc.)
CyberLink PowerDVD 9.5 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.5.1.4418 - CyberLink Corp.)
CyberLink PowerDVD 9.5 (x32 Version: 9.5.1.4418 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell Backup and Recovery Manager (HKLM\...\{50B4B603-A4C6-4739-AE96-6C76A0F8A388}) (Version: 1.3.1 - Dell Inc.)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Touchpad (HKLM\...\SynTPDeinstKey) (Version: 15.3.2.1 - Synaptics Incorporated)
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.46 - Creative Technology Ltd)
DigitalPersona Fingerprint Software 5.20 (HKLM\...\{C0C2D40A-1231-46FA-8F02-B45E6BF2036A}) (Version: 5.20.230 - DigitalPersona, Inc.)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
DWG TrueView 2012 (HKLM\...\DWG TrueView 2012) (Version: 18.2.51.0 - Autodesk)
DWG TrueView 2012 (Version: 18.2.51.0 - Autodesk) Hidden
elmeg Phone TAPI (HKLM-x32\...\{9A770DAE-BF29-4455-9C6F-20C2F5A940C1}) (Version: - )
Free Video Cutter 4.0.1 (HKLM-x32\...\Free Video Cutter) (Version: 4.0.1 - Free Video Cutter Team)
Free Video Joiner (HKLM-x32\...\{14FA6DD9-92ED-493D-A937-81A78870E08A}_is1) (Version: - FreeVideoJoiner.com)
Google Calendar Sync (HKLM-x32\...\Google Calendar Sync) (Version: - )
IcoFX 1.6.4 (HKLM-x32\...\IcoFX_is1) (Version: - )
Intel PROSet Wireless (Version: - ) Hidden
Intel PROSet Wireless (x32 Version: - ) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2455 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{2ABA2E8D-23CF-418F-BC8F-2EC99FA51A3F}) (Version: 1.2.1.0608 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{295AEB79-B53A-4F1B-860F-7800BB7E3681}) (Version: 14.2.1000 - Intel Corporation)
Intel(R) WiDi (HKLM-x32\...\{0DD706AF-B542-438C-999E-B30C7F625C8D}) (Version: 2.1.39.0 - Intel Corporation)
Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version: - )
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
MARS MR97310 VGA (HKLM-x32\...\{A8A3862C-3280-11D6-B2EA-0050BA18806B}) (Version: - )
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Lync Web App Plug-in (HKLM\...\{1AF770EE-5173-4E6F-A066-06068BDED9E7}) (Version: 15.8.8308.315 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2007 (HKLM-x32\...\PROR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mikogo (HKCU\...\Mikogo) (Version: 5.0.0 - Mikogo GmbH)
Mikogo 4 (HKCU\...\Mikogo 4) (Version: 4.7 - BeamYourScreen GmbH)
Mozilla Firefox 32.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0 (x86 de)) (Version: 32.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.4.6422.14 - PC-Doctor, Inc.)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Origin85 Viewer (HKLM-x32\...\{B2EC3C1F-6408-44D8-8C0F-EDD858C2FC71}) (Version: 8.5 - Originlab Corporation)
PC Camer@ (HKLM-x32\...\InstallShield_{A6903FF6-895A-4EA6-BDCC-BE1DD911103A}) (Version: 0.1.3.8 - Teconet)
PC Camer@ (x32 Version: 0.1.3.8 - Teconet) Hidden
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{C960FF38-431D-429D-AD1F-FBD12A45B7C5}) (Version: 2.0.17.17583 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
PictureResizer© 1.0.91 (HKLM-x32\...\PictureResizer©_is1) (Version: - NFU Design & Development)
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.1.0 - Prolific Technology INC)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.15 - Dell Inc.)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6353 - Realtek Semiconductor Corp.)
Roxio Activation Module (x32 Version: 1.0 - Roxio) Hidden
Roxio BackOnTrack (x32 Version: 1.3.3 - Roxio) Hidden
Roxio Burn (x32 Version: 1.8 - Roxio) Hidden
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio Creator Starter (x32 Version: 1.0.439 - Roxio) Hidden
Roxio Creator Starter (x32 Version: 5.0.0 - Roxio) Hidden
Roxio Express Labeler 3 (x32 Version: 3.2.2 - Roxio) Hidden
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Sequip-MCSA 1.0.4.13 (HKLM-x32\...\{4DD4F1AF-8EFE-40FA-A5D3-739FD1E12872}) (Version: - Sequip S+E GmbH)
SHARP MX/DX Series PCL/PS Printer Driver (HKLM-x32\...\SHARP MX-2300 2700 3500 4500 Series PCL PS Printer Driver) (Version: 1.00.000 - SHARP)
SilverFast UScan-SE 6.6.2r5 (HKLM-x32\...\SilverFast UScan-SE) (Version: - LaserSoft Imaging AG)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
SMRecorder 1.3.1 (HKLM-x32\...\SMRecorder) (Version: 1.3.1 - SMRecorder)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.14.7.201405202226 - Sony Mobile Communications AB)
Sony PC Companion 2.10.206 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.206 - Sony)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Teldat Phone TAPI64 V3.15 (HKLM-x32\...\InstallShield_{971B7F2B-4BDB-458F-93A1-17765BA2D231}) (Version: 3.15.0001 - Teldat GmbH)
Teldat Phone TAPI64 V3.15 (Version: 3.15.0001 - Teldat GmbH) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Ulead VideoStudio 7 SE VCD (HKLM-x32\...\{757AD3D4-036B-42FA-B0A4-96BD6F4605A0}) (Version: 7.0 - Ulead Systems, Inc.)
Unlocker 1.9.1-x64 (HKLM\...\Unlocker) (Version: 1.9.1 - Cedrick Collomb)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_PROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROR_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883097) 32-Bit Edition (HKLM-x32\...\{91120000-0014-0000-0000-0000000FF1CE}_PROR_{B2260BC9-D561-46EE-B33D-739CF760A2A9}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_PROR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_PROR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_PROR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Validity Sensors DDK (HKLM\...\{10AAF056-7792-497A-ACAF-3BF002196574}) (Version: 4.3.33.0 - Validity Sensors, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)
Windows-Treiberpaket - Teldat (WinUSB) MyDeviceClass (04/17/2012 1.0.0.3) (HKLM\...\9118686C67694136934D1AB2C3FFFAA93A555361) (Version: 04/17/2012 1.0.0.3 - Teldat)
WinRAR 5.10 beta 2 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.2 - win.rar GmbH)
XMind (HKLM-x32\...\XMind) (Version: 3.2.1 - XMind Ltd.)
yEd Graph Editor (HKCU\...\yEd Graph Editor) (Version: - yWorks GmbH)
yEd Graph Editor 3.10 (HKLM-x32\...\3309-7404-0599-8908) (Version: 3.10 - yWorks GmbH)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1666296860-1313954580-2417280352-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2012\dwgviewrficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1666296860-1313954580-2417280352-1000_Classes\CLSID\{C969B50E-DEED-EEC3-F096-F1AF3A48293A}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1666296860-1313954580-2417280352-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2012\dwgviewr.exe (Autodesk, Inc.)
==================== Restore Points =========================
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2014-09-04 08:56 - 00000895 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.google-analytics.com
127.0.0.1 google-analytics.com
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {1FBA7AC2-6ECD-4BF2-95B9-44A9B08066A3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd)
Task: {3868A5E3-A886-44FC-B0F8-427454C059EE} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-04-16] (COMODO)
Task: {3BFC2120-F735-44A8-9903-C050D76EDECC} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {739057E5-D0A6-4A1B-B654-F2D482DFF191} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-09-06] (PC-Doctor, Inc.)
Task: {C3C48C7E-19B5-458B-B4CA-B5C47B7ABD1C} - System32\Tasks\PCDoctorBackgroundMonitorTask-Retry => C:\Program Files\My Dell\uaclauncher.exe [2013-09-06] (PC-Doctor, Inc.)
Task: {E202F55F-7CE8-44C0-B148-F8FF02D703F9} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe [2014-04-16] (COMODO)
Task: {F4984DD4-796B-4CC0-9938-D878DCF59334} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-14] (Adobe Systems Incorporated)
Task: {FBE18F54-09D7-4BC4-9797-8822427BDECA} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-12-07] (PC-Doctor, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2011-12-10 03:28 - 2011-07-20 15:04 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-12-10 03:28 - 2011-04-23 04:22 - 00057640 _____ () C:\Program Files\Synaptics\SynTP\SynTPEnhPS.dll
2014-08-04 14:20 - 2014-08-04 14:20 - 00139056 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-08-04 14:20 - 2014-08-04 14:20 - 00067832 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2014-08-07 08:06 - 2014-08-04 14:20 - 00052472 ____N () C:\Users\Bugge\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2013-07-10 19:07 - 2013-07-10 19:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2011-05-26 21:18 - 2011-05-26 21:18 - 00136536 _____ () C:\Program Files (x86)\Microsoft Office\Office12\OUTLCTL.DLL
2014-09-03 09:42 - 2014-09-03 09:42 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\ProgramData\Temp:6152D44C
AlternateDataStreams: C:\ProgramData\Temp:890CC2F3
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\DpHost => ""="Service"
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\Services: GeekBuddyRSP => 2
MSCONFIG\Services: MatrikonOPC Server for Genie => 3
MSCONFIG\Services: MatrikonOPC Server for Simulation and Testing => 3
MSCONFIG\Services: OpcEnum => 3
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Google Calendar Sync.lnk => C:\Windows\pss\Google Calendar Sync.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^QuickScan (OpticFilm 7200).lnk => C:\Windows\pss\QuickScan (OpticFilm 7200).lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Bugge^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Bugge\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: BTMTrayAgent => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
MSCONFIG\startupreg: ccleaner => "C:\Program Files\CCleaner\CCleaner64.exe" /AUTO
MSCONFIG\startupreg: DBRMTray => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe
MSCONFIG\startupreg: Dell DataSafe Online => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
MSCONFIG\startupreg: Desktop Disc Tool => "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
MSCONFIG\startupreg: FreeFallProtection => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
MSCONFIG\startupreg: gbrspcontrol => "C:\Program Files (x86)\Common Files\Comodo\GeekBuddyRSP.exe" -controlservice -slave
MSCONFIG\startupreg: IntelPAN => "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray
MSCONFIG\startupreg: Mikogo => "C:\Users\Bugge\AppData\Roaming\Mikogo\mikogo-host.exe" -asp
MSCONFIG\startupreg: OfficeScanNT Monitor => "c:\Program Files (x86)\Trend Micro\Client Server Security Agent\pccntmon.exe" -HideWindow
MSCONFIG\startupreg: PDVD9LanguageShortcut => "C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
MSCONFIG\startupreg: QuickSet => c:\Program Files\Dell\QuickSet\QuickSet.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RemoteControl9 => "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
MSCONFIG\startupreg: RoxWatchTray => "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
==================== Faulty Device Manager Devices =============
Name: Intel(R) Centrino(R) Wireless-N 1030
Description: Intel(R) Centrino(R) Wireless-N 1030
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel Corporation
Service: NETwNs64
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (08/29/2014 05:08:46 PM) (Source: VSS) (EventID: 12305) (User: )
Description: Volumeschattenkopie-Dienstfehler: Volume bzw. Datenträger ist nicht richtig angeschlossen oder wurde nicht gefunden.
Fehlerkontext: DeviceIoControl(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy24 - 0000000000000270,0x00560034,0000000000326040,0,0000000000325030,4096,[0]).
Vorgang:
PostFinalCommitSnapshots wird verarbeitet
Kontext:
Ausführungskontext: System Provider
Error: (08/27/2014 07:28:25 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: Avira.OE.Systray.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Runtime.CallbackException
Stack:
at System.Runtime.Fx+IOCompletionThunk.UnhandledExceptionFrame(UInt32, UInt32, System.Threading.NativeOverlapped*)
at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)
Error: (08/27/2014 11:41:20 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (08/27/2014 11:41:20 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (08/27/2014 11:41:20 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (08/27/2014 11:41:20 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490)
Error: (08/27/2014 11:41:20 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (08/27/2014 11:41:20 AM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800)
Error: (08/27/2014 11:41:20 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
Error: (08/27/2014 11:41:20 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801)
System errors:
=============
Error: (09/04/2014 08:31:08 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/04/2014 08:14:22 AM) (Source: BROWSER) (EventID: 8032) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{5F126041-F1FD-4DCA-8346-2385EAF343A6}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.
Error: (09/03/2014 08:02:41 AM) (Source: BROWSER) (EventID: 8032) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{5F126041-F1FD-4DCA-8346-2385EAF343A6}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.
Error: (09/02/2014 04:27:12 PM) (Source: BROWSER) (EventID: 8032) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{5F126041-F1FD-4DCA-8346-2385EAF343A6}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.
Error: (09/02/2014 02:14:34 PM) (Source: volsnap) (EventID: 14) (User: )
Description: Die Schattenkopien von Volume "C:" wurden aufgrund eines E/A-Fehlers auf Volume "C:" abgebrochen.
Error: (09/02/2014 07:48:45 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (09/01/2014 01:16:45 PM) (Source: BROWSER) (EventID: 8032) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{5F126041-F1FD-4DCA-8346-2385EAF343A6}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.
Error: (09/01/2014 08:11:23 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
Error: (08/29/2014 05:08:45 PM) (Source: volsnap) (EventID: 14) (User: )
Description: Die Schattenkopien von Volume "C:" wurden aufgrund eines E/A-Fehlers auf Volume "C:" abgebrochen.
Error: (08/29/2014 08:20:48 AM) (Source: BROWSER) (EventID: 8032) (User: )
Description: Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport "\Device\NetBT_Tcpip_{11419210-3E7B-4744-B3F3-0FF81CED7B3F}" zu oft fehl.
Der Sicherungssuchdienst wird beendet.
Microsoft Office Sessions:
=========================
Error: (01/27/2014 05:55:28 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 0 seconds with 0 seconds of active time. This session ended with a crash.
Error: (01/27/2014 05:45:16 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 605 seconds with 0 seconds of active time. This session ended with a crash.
Error: (01/27/2014 05:35:05 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 605 seconds with 0 seconds of active time. This session ended with a crash.
Error: (01/27/2014 05:24:52 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 605 seconds with 0 seconds of active time. This session ended with a crash.
Error: (01/27/2014 05:14:41 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 552 seconds with 360 seconds of active time. This session ended with a crash.
Error: (01/27/2014 05:04:29 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 0 seconds with 0 seconds of active time. This session ended with a crash.
Error: (01/27/2014 04:54:20 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 0 seconds with 0 seconds of active time. This session ended with a crash.
Error: (01/27/2014 04:44:11 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 605 seconds with 0 seconds of active time. This session ended with a crash.
Error: (01/27/2014 04:34:00 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 605 seconds with 0 seconds of active time. This session ended with a crash.
Error: (01/27/2014 04:23:48 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 605 seconds with 0 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz
Percentage of memory in use: 55%
Total physical RAM: 3990.17 MB
Available physical RAM: 1790.62 MB
Total Pagefile: 7978.52 MB
Available Pagefile: 5375.03 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:278.46 GB) (Free:203.8 GB) NTFS
Drive s: () (Network) (Total:599.6 GB) (Free:357.75 GB)
Drive t: () (Network) (Total:599.6 GB) (Free:357.75 GB)
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298.1 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=19.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=278.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Der Rest ist im nächsten Post.
|
|
04.09.2014, 13:13
| #4 |
| | Windows 7: Telekom schickt Mahnung wegen Spam Versand Voilà, die nächsten LOGS: Code:
ATTFilter GMER Logfile: Avira Free Antivirus Erstellungsdatum der Reportdatei: Donnerstag, 4. September 2014 10:28 Das Programm läuft als uneingeschränkte Vollversion. Online-Dienste stehen zur Verfügung. Lizenznehmer : Avira Antivirus Free Seriennummer : 0000149996-AVHOE-0000001 Plattform : Windows 7 Professional Windowsversion : (Service Pack 1) [6.1.7601] Boot Modus : Normal gebootet Benutzername : SYSTEM Computername : SE-NB-VOSTRO1 Versionsinformationen: BUILD.DAT : 14.0.6.570 92022 Bytes 15.08.2014 10:30:00 AVSCAN.EXE : 14.0.6.548 1046608 Bytes 07.08.2014 05:49:02 AVSCANRC.DLL : 14.0.6.522 62544 Bytes 07.08.2014 05:49:02 LUKE.DLL : 14.0.6.522 57936 Bytes 07.08.2014 05:50:01 AVSCPLR.DLL : 14.0.6.548 92752 Bytes 07.08.2014 05:49:02 AVREG.DLL : 14.0.6.522 262224 Bytes 07.08.2014 05:48:56 avlode.dll : 14.0.6.526 603728 Bytes 07.08.2014 05:48:54 avlode.rdf : 14.0.4.42 65114 Bytes 17.07.2014 12:03:08 XBV00009.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:52 XBV00010.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:52 XBV00011.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:52 XBV00012.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:52 XBV00013.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:52 XBV00014.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:53 XBV00015.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:53 XBV00016.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:53 XBV00017.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:53 XBV00018.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:53 XBV00019.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:53 XBV00020.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:53 XBV00021.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:53 XBV00022.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:53 XBV00023.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:53 XBV00024.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:53 XBV00025.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:54 XBV00026.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:54 XBV00027.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:54 XBV00028.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:54 XBV00029.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:54 XBV00030.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:54 XBV00031.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:54 XBV00032.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:54 XBV00033.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:54 XBV00034.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:54 XBV00035.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:54 XBV00036.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:55 XBV00037.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:55 XBV00038.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:55 XBV00039.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:55 XBV00040.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:55 XBV00041.VDF : 8.11.165.190 2048 Bytes 07.08.2014 11:48:55 XBV00156.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:57 XBV00157.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:58 XBV00158.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:58 XBV00159.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:58 XBV00160.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:58 XBV00161.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:58 XBV00162.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:58 XBV00163.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:58 XBV00164.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:58 XBV00165.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:58 XBV00166.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:58 XBV00167.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:58 XBV00168.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:59 XBV00169.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:59 XBV00170.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:59 XBV00171.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:59 XBV00172.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:59 XBV00173.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:59 XBV00174.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:59 XBV00175.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:59 XBV00176.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:59 XBV00177.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:59 XBV00178.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:57:59 XBV00179.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00180.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00181.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00182.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00183.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00184.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00185.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00186.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00187.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00188.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00189.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00190.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:00 XBV00191.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:01 XBV00192.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:01 XBV00193.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:01 XBV00194.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:01 XBV00195.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:01 XBV00196.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:01 XBV00197.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:01 XBV00198.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:01 XBV00199.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:01 XBV00200.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:01 XBV00201.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:01 XBV00202.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:02 XBV00203.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:02 XBV00204.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:02 XBV00205.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:02 XBV00206.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:02 XBV00207.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:02 XBV00208.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:02 XBV00209.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:02 XBV00210.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:02 XBV00211.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:02 XBV00212.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:02 XBV00213.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00214.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00215.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00216.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00217.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00218.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00219.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00220.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00221.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00222.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00223.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00224.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:03 XBV00225.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:04 XBV00226.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:04 XBV00227.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:04 XBV00228.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:04 XBV00229.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:04 XBV00230.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:04 XBV00231.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:04 XBV00232.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:04 XBV00233.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:04 XBV00234.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:04 XBV00235.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:04 XBV00236.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00237.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00238.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00239.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00240.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00241.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00242.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00243.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00244.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00245.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00246.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00247.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:05 XBV00248.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:06 XBV00249.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:06 XBV00250.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:06 XBV00251.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:06 XBV00252.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:06 XBV00253.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:06 XBV00254.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:06 XBV00255.VDF : 8.11.167.234 2048 Bytes 19.08.2014 05:58:06 XBV00000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 11:39:19 XBV00001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 11:57:07 XBV00002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 20:41:32 XBV00003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 11:30:01 XBV00004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 11:40:08 XBV00005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 05:46:21 XBV00006.VDF : 7.11.139.38 15708672 Bytes 27.03.2014 12:57:20 XBV00007.VDF : 7.11.152.100 4193792 Bytes 02.06.2014 11:56:11 XBV00008.VDF : 8.11.165.192 4251136 Bytes 07.08.2014 11:48:52 XBV00042.VDF : 8.11.167.234 1073152 Bytes 19.08.2014 05:57:47 XBV00043.VDF : 8.11.167.236 3584 Bytes 19.08.2014 05:57:47 XBV00044.VDF : 8.11.167.238 17408 Bytes 19.08.2014 05:57:48 XBV00045.VDF : 8.11.167.242 7168 Bytes 19.08.2014 05:57:48 XBV00046.VDF : 8.11.167.248 2048 Bytes 19.08.2014 05:57:48 XBV00047.VDF : 8.11.168.26 19968 Bytes 19.08.2014 05:57:48 XBV00048.VDF : 8.11.168.44 10240 Bytes 19.08.2014 11:57:41 XBV00049.VDF : 8.11.168.60 2048 Bytes 19.08.2014 11:57:41 XBV00050.VDF : 8.11.168.78 27136 Bytes 20.08.2014 11:57:41 XBV00051.VDF : 8.11.168.80 2048 Bytes 20.08.2014 11:57:41 XBV00052.VDF : 8.11.168.98 15360 Bytes 20.08.2014 05:45:53 XBV00053.VDF : 8.11.168.100 2048 Bytes 20.08.2014 05:45:53 XBV00054.VDF : 8.11.168.116 28160 Bytes 20.08.2014 05:45:54 XBV00055.VDF : 8.11.168.118 9216 Bytes 20.08.2014 05:45:54 XBV00056.VDF : 8.11.168.120 4096 Bytes 20.08.2014 05:45:54 XBV00057.VDF : 8.11.168.124 12800 Bytes 21.08.2014 11:45:52 XBV00058.VDF : 8.11.168.126 25088 Bytes 21.08.2014 11:45:52 XBV00059.VDF : 8.11.168.132 33280 Bytes 21.08.2014 05:43:31 XBV00060.VDF : 8.11.168.134 2048 Bytes 21.08.2014 05:43:31 XBV00061.VDF : 8.11.168.138 11776 Bytes 21.08.2014 05:43:31 XBV00062.VDF : 8.11.168.140 3584 Bytes 21.08.2014 05:43:31 XBV00063.VDF : 8.11.168.158 3584 Bytes 22.08.2014 11:43:46 XBV00064.VDF : 8.11.168.174 2048 Bytes 22.08.2014 11:43:47 XBV00065.VDF : 8.11.168.180 5120 Bytes 22.08.2014 11:43:47 XBV00066.VDF : 8.11.168.220 7168 Bytes 22.08.2014 11:43:47 XBV00067.VDF : 8.11.168.222 20480 Bytes 22.08.2014 05:43:42 XBV00068.VDF : 8.11.168.226 17920 Bytes 22.08.2014 05:43:42 XBV00069.VDF : 8.11.168.230 8704 Bytes 22.08.2014 05:43:42 XBV00070.VDF : 8.11.168.234 4608 Bytes 23.08.2014 05:43:43 XBV00071.VDF : 8.11.168.236 4608 Bytes 23.08.2014 05:43:43 XBV00072.VDF : 8.11.168.238 4608 Bytes 23.08.2014 05:43:43 XBV00073.VDF : 8.11.168.240 37376 Bytes 23.08.2014 05:43:43 XBV00074.VDF : 8.11.168.242 2048 Bytes 23.08.2014 05:43:43 XBV00075.VDF : 8.11.168.244 38400 Bytes 24.08.2014 05:43:43 XBV00076.VDF : 8.11.168.246 2048 Bytes 24.08.2014 05:43:43 XBV00077.VDF : 8.11.168.248 14848 Bytes 24.08.2014 05:43:44 XBV00078.VDF : 8.11.168.252 2048 Bytes 24.08.2014 05:43:44 XBV00079.VDF : 8.11.168.254 24576 Bytes 24.08.2014 05:43:44 XBV00080.VDF : 8.11.169.2 2048 Bytes 24.08.2014 05:43:44 XBV00081.VDF : 8.11.169.4 22528 Bytes 25.08.2014 05:43:44 XBV00082.VDF : 8.11.169.20 6656 Bytes 25.08.2014 11:43:41 XBV00083.VDF : 8.11.169.36 4608 Bytes 25.08.2014 11:43:41 XBV00084.VDF : 8.11.169.38 11264 Bytes 25.08.2014 11:43:41 XBV00085.VDF : 8.11.169.40 2048 Bytes 25.08.2014 11:43:41 XBV00086.VDF : 8.11.169.54 8192 Bytes 25.08.2014 11:43:41 XBV00087.VDF : 8.11.169.62 28672 Bytes 25.08.2014 06:22:45 XBV00088.VDF : 8.11.169.66 14336 Bytes 25.08.2014 06:22:45 XBV00089.VDF : 8.11.169.68 3584 Bytes 25.08.2014 06:22:45 XBV00090.VDF : 8.11.169.72 15872 Bytes 26.08.2014 06:22:45 XBV00091.VDF : 8.11.169.74 6144 Bytes 26.08.2014 06:22:46 XBV00092.VDF : 8.11.169.76 12288 Bytes 26.08.2014 06:22:46 XBV00093.VDF : 8.11.169.78 5632 Bytes 26.08.2014 06:22:46 XBV00094.VDF : 8.11.169.80 25088 Bytes 26.08.2014 06:22:47 XBV00095.VDF : 8.11.169.82 5120 Bytes 26.08.2014 06:22:47 XBV00096.VDF : 8.11.169.88 24064 Bytes 26.08.2014 06:22:47 XBV00097.VDF : 8.11.169.90 9216 Bytes 26.08.2014 06:22:47 XBV00098.VDF : 8.11.169.94 33280 Bytes 26.08.2014 06:22:48 XBV00099.VDF : 8.11.169.108 7680 Bytes 26.08.2014 06:22:48 XBV00100.VDF : 8.11.169.122 5120 Bytes 26.08.2014 06:22:48 XBV00101.VDF : 8.11.169.136 3072 Bytes 27.08.2014 06:22:49 XBV00102.VDF : 8.11.169.138 8704 Bytes 27.08.2014 06:22:49 XBV00103.VDF : 8.11.169.140 15872 Bytes 27.08.2014 06:22:49 XBV00104.VDF : 8.11.169.142 10240 Bytes 27.08.2014 06:22:49 XBV00105.VDF : 8.11.169.144 17408 Bytes 27.08.2014 06:22:50 XBV00106.VDF : 8.11.169.148 18944 Bytes 27.08.2014 06:22:50 XBV00107.VDF : 8.11.169.150 2048 Bytes 27.08.2014 06:22:50 XBV00108.VDF : 8.11.169.152 14336 Bytes 27.08.2014 06:22:51 XBV00109.VDF : 8.11.169.154 2048 Bytes 27.08.2014 06:22:51 XBV00110.VDF : 8.11.169.156 2048 Bytes 27.08.2014 06:22:51 XBV00111.VDF : 8.11.169.160 11264 Bytes 27.08.2014 06:22:51 XBV00112.VDF : 8.11.169.164 31744 Bytes 28.08.2014 06:22:52 XBV00113.VDF : 8.11.169.166 18432 Bytes 28.08.2014 06:22:52 XBV00114.VDF : 8.11.169.168 10240 Bytes 28.08.2014 06:22:52 XBV00115.VDF : 8.11.169.186 35328 Bytes 28.08.2014 06:22:53 XBV00116.VDF : 8.11.169.202 8192 Bytes 28.08.2014 06:22:53 XBV00117.VDF : 8.11.169.214 2048 Bytes 28.08.2014 06:22:53 XBV00118.VDF : 8.11.169.216 2048 Bytes 28.08.2014 06:22:53 XBV00119.VDF : 8.11.169.230 40960 Bytes 29.08.2014 06:22:53 XBV00120.VDF : 8.11.169.232 8192 Bytes 29.08.2014 12:22:44 XBV00121.VDF : 8.11.169.238 45056 Bytes 29.08.2014 12:22:44 XBV00122.VDF : 8.11.169.242 4096 Bytes 29.08.2014 12:22:44 XBV00123.VDF : 8.11.169.248 52224 Bytes 29.08.2014 06:14:48 XBV00124.VDF : 8.11.170.12 4096 Bytes 29.08.2014 06:14:49 XBV00125.VDF : 8.11.170.24 2560 Bytes 29.08.2014 06:14:50 XBV00126.VDF : 8.11.170.38 5632 Bytes 30.08.2014 06:14:51 XBV00127.VDF : 8.11.170.40 19456 Bytes 30.08.2014 06:14:52 XBV00128.VDF : 8.11.170.42 25088 Bytes 30.08.2014 06:14:53 XBV00129.VDF : 8.11.170.44 69632 Bytes 31.08.2014 06:14:54 XBV00130.VDF : 8.11.170.48 7168 Bytes 31.08.2014 06:14:55 XBV00131.VDF : 8.11.170.50 8192 Bytes 31.08.2014 06:14:55 XBV00132.VDF : 8.11.170.52 19456 Bytes 01.09.2014 06:14:56 XBV00133.VDF : 8.11.170.64 3072 Bytes 01.09.2014 12:14:30 XBV00134.VDF : 8.11.170.74 3584 Bytes 01.09.2014 12:14:31 XBV00135.VDF : 8.11.170.84 8192 Bytes 01.09.2014 12:14:31 XBV00136.VDF : 8.11.170.90 41472 Bytes 01.09.2014 05:52:31 XBV00137.VDF : 8.11.170.94 2048 Bytes 01.09.2014 05:52:31 XBV00138.VDF : 8.11.170.96 29696 Bytes 01.09.2014 05:52:32 XBV00139.VDF : 8.11.170.100 28160 Bytes 01.09.2014 05:52:32 XBV00140.VDF : 8.11.170.102 23552 Bytes 01.09.2014 05:52:32 XBV00141.VDF : 8.11.170.106 13824 Bytes 02.09.2014 05:52:32 XBV00142.VDF : 8.11.170.116 10752 Bytes 02.09.2014 11:53:13 XBV00143.VDF : 8.11.170.126 5632 Bytes 02.09.2014 11:53:13 XBV00144.VDF : 8.11.170.136 13824 Bytes 02.09.2014 11:53:13 XBV00145.VDF : 8.11.170.140 23040 Bytes 02.09.2014 05:52:30 XBV00146.VDF : 8.11.170.142 7168 Bytes 02.09.2014 05:52:30 XBV00147.VDF : 8.11.170.144 16384 Bytes 02.09.2014 05:52:30 XBV00148.VDF : 8.11.170.148 25600 Bytes 02.09.2014 05:52:31 XBV00149.VDF : 8.11.170.150 12800 Bytes 02.09.2014 05:52:31 XBV00150.VDF : 8.11.170.152 5632 Bytes 02.09.2014 05:52:31 XBV00151.VDF : 8.11.170.158 4608 Bytes 03.09.2014 05:52:31 XBV00152.VDF : 8.11.170.160 3072 Bytes 03.09.2014 11:52:38 XBV00153.VDF : 8.11.170.166 25600 Bytes 03.09.2014 11:52:38 XBV00154.VDF : 8.11.170.168 14848 Bytes 03.09.2014 11:52:39 XBV00155.VDF : 8.11.170.170 2048 Bytes 03.09.2014 11:52:39 LOCAL001.VDF : 8.11.170.170 110097408 Bytes 03.09.2014 11:53:00 Engineversion : 8.3.24.20 AEVDF.DLL : 8.3.1.6 133992 Bytes 21.08.2014 05:45:53 AESCRIPT.DLL : 8.2.0.20 437104 Bytes 02.09.2014 11:53:10 AESCN.DLL : 8.3.2.2 139456 Bytes 21.07.2014 11:40:34 AESBX.DLL : 8.2.20.24 1409224 Bytes 12.05.2014 05:48:13 AERDL.DLL : 8.2.0.138 704888 Bytes 03.12.2013 06:40:27 AEPACK.DLL : 8.4.0.50 792488 Bytes 08.08.2014 05:35:39 AEOFFICE.DLL : 8.3.0.20 216104 Bytes 15.08.2014 05:44:40 AEHEUR.DLL : 8.1.4.1252 7428976 Bytes 02.09.2014 11:53:08 AEHELP.DLL : 8.3.1.0 278728 Bytes 02.06.2014 05:55:17 AEGEN.DLL : 8.1.7.28 450752 Bytes 06.06.2014 11:25:03 AEEXP.DLL : 8.4.2.32 247712 Bytes 02.09.2014 11:53:10 AEEMU.DLL : 8.1.3.4 399264 Bytes 08.08.2014 05:35:24 AEDROID.DLL : 8.4.2.24 442568 Bytes 05.06.2014 05:46:00 AECORE.DLL : 8.3.2.6 243712 Bytes 08.08.2014 05:35:24 AEBB.DLL : 8.1.2.0 60448 Bytes 08.08.2014 05:35:23 AVWINLL.DLL : 14.0.6.522 24144 Bytes 07.08.2014 05:48:47 AVPREF.DLL : 14.0.6.522 50256 Bytes 07.08.2014 05:48:56 AVREP.DLL : 14.0.6.522 219216 Bytes 07.08.2014 05:48:57 AVARKT.DLL : 14.0.5.368 226384 Bytes 24.06.2014 11:33:12 AVEVTLOG.DLL : 14.0.6.522 182352 Bytes 07.08.2014 05:48:52 SQLITE3.DLL : 14.0.6.522 452176 Bytes 07.08.2014 05:50:13 AVSMTP.DLL : 14.0.6.522 76368 Bytes 07.08.2014 05:49:03 NETNT.DLL : 14.0.6.522 13392 Bytes 07.08.2014 05:50:02 RCIMAGE.DLL : 14.0.6.544 4863568 Bytes 07.08.2014 05:48:47 RCTEXT.DLL : 14.0.6.558 76080 Bytes 02.09.2014 11:52:53 Konfiguration für den aktuellen Suchlauf: Job Name..............................: Vollständige Systemprüfung Konfigurationsdatei...................: C:\Program Files (x86)\Avira\AntiVir Desktop\sysscan.avp Protokollierung.......................: standard Primäre Aktion........................: Interaktiv Sekundäre Aktion......................: Ignorieren Durchsuche Masterbootsektoren.........: ein Durchsuche Bootsektoren...............: ein Bootsektoren..........................: C:, Durchsuche aktive Programme...........: ein Laufende Programme erweitert..........: ein Durchsuche Registrierung..............: ein Suche nach Rootkits...................: ein Integritätsprüfung von Systemdateien..: ein Prüfe alle Dateien....................: Alle Dateien Durchsuche Archive....................: ein Rekursionstiefe einschränken..........: 20 Archiv Smart Extensions...............: ein Makrovirenheuristik...................: ein Dateiheuristik........................: erweitert Abweichende Gefahrenkategorien........: +JOKE,+PCK,+SPR, Beginn des Suchlaufs: Donnerstag, 4. September 2014 10:28 Der Suchlauf über die Bootsektoren wird begonnen: Bootsektor 'HDD0(C  '[INFO] Es wurde kein Virus gefunden! Der Suchlauf nach versteckten Objekten wird begonnen. Der Suchlauf über gestartete Prozesse wird begonnen: Durchsuche Prozess 'svchost.exe' - '56' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '46' Modul(e) wurden durchsucht Durchsuche Prozess 'cmdagent.exe' - '126' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '77' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '91' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '117' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '85' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '142' Modul(e) wurden durchsucht Durchsuche Prozess 'spoolsv.exe' - '106' Modul(e) wurden durchsucht Durchsuche Prozess 'sched.exe' - '66' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '64' Modul(e) wurden durchsucht Durchsuche Prozess 'armsvc.exe' - '32' Modul(e) wurden durchsucht Durchsuche Prozess 'avguard.exe' - '132' Modul(e) wurden durchsucht Durchsuche Prozess 'Mikogo-Service.exe' - '42' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '41' Modul(e) wurden durchsucht Durchsuche Prozess 'Mikogo-Screen-Service.exe' - '40' Modul(e) wurden durchsucht Durchsuche Prozess 'Avira.OE.ServiceHost.exe' - '131' Modul(e) wurden durchsucht Durchsuche Prozess 'cavwp.exe' - '56' Modul(e) wurden durchsucht Durchsuche Prozess 'avshadow.exe' - '33' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '40' Modul(e) wurden durchsucht Durchsuche Prozess 'taskhost.exe' - '72' Modul(e) wurden durchsucht Durchsuche Prozess 'Dwm.exe' - '34' Modul(e) wurden durchsucht Durchsuche Prozess 'Explorer.EXE' - '216' Modul(e) wurden durchsucht Durchsuche Prozess 'igfxtray.exe' - '33' Modul(e) wurden durchsucht Durchsuche Prozess 'hkcmd.exe' - '32' Modul(e) wurden durchsucht Durchsuche Prozess 'igfxpers.exe' - '52' Modul(e) wurden durchsucht Durchsuche Prozess 'sidebar.exe' - '84' Modul(e) wurden durchsucht Durchsuche Prozess 'avgnt.exe' - '101' Modul(e) wurden durchsucht Durchsuche Prozess 'Avira.OE.Systray.exe' - '136' Modul(e) wurden durchsucht Durchsuche Prozess 'SearchIndexer.exe' - '63' Modul(e) wurden durchsucht Durchsuche Prozess 'LMS.exe' - '37' Modul(e) wurden durchsucht Durchsuche Prozess 'UNS.exe' - '48' Modul(e) wurden durchsucht Durchsuche Prozess 'SynTPEnh.exe' - '67' Modul(e) wurden durchsucht Durchsuche Prozess 'SynTPHelper.exe' - '20' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '32' Modul(e) wurden durchsucht Durchsuche Prozess 'firefox.exe' - '129' Modul(e) wurden durchsucht Durchsuche Prozess 'cistray.exe' - '68' Modul(e) wurden durchsucht Durchsuche Prozess 'cis.exe' - '75' Modul(e) wurden durchsucht Durchsuche Prozess 'avscan.exe' - '118' Modul(e) wurden durchsucht Durchsuche Prozess 'vssvc.exe' - '49' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '37' Modul(e) wurden durchsucht Durchsuche Prozess 'svchost.exe' - '19' Modul(e) wurden durchsucht Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht Durchsuche Prozess 'csrss.exe' - '17' Modul(e) wurden durchsucht Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht Durchsuche Prozess 'csrss.exe' - '19' Modul(e) wurden durchsucht Durchsuche Prozess 'winlogon.exe' - '36' Modul(e) wurden durchsucht Durchsuche Prozess 'services.exe' - '37' Modul(e) wurden durchsucht Durchsuche Prozess 'lsass.exe' - '83' Modul(e) wurden durchsucht Durchsuche Prozess 'lsm.exe' - '26' Modul(e) wurden durchsucht Untersuchung der Systemdateien wird begonnen: Signiert -> 'C:\Windows\system32\svchost.exe' Signiert -> 'C:\Windows\system32\winlogon.exe' Signiert -> 'C:\Windows\explorer.exe' Signiert -> 'C:\Windows\system32\smss.exe' Signiert -> 'C:\Windows\system32\wininet.DLL' Signiert -> 'C:\Windows\system32\wsock32.DLL' Signiert -> 'C:\Windows\system32\ws2_32.DLL' Signiert -> 'C:\Windows\system32\services.exe' Signiert -> 'C:\Windows\system32\lsass.exe' Signiert -> 'C:\Windows\system32\csrss.exe' Signiert -> 'C:\Windows\system32\drivers\kbdclass.sys' Signiert -> 'C:\Windows\system32\spoolsv.exe' Signiert -> 'C:\Windows\system32\alg.exe' Signiert -> 'C:\Windows\system32\wuauclt.exe' Signiert -> 'C:\Windows\system32\advapi32.DLL' Signiert -> 'C:\Windows\system32\user32.DLL' Signiert -> 'C:\Windows\system32\gdi32.DLL' Signiert -> 'C:\Windows\system32\kernel32.DLL' Signiert -> 'C:\Windows\system32\ntdll.DLL' Signiert -> 'C:\Windows\system32\ntoskrnl.exe' Signiert -> 'C:\Windows\system32\drivers\beep.sys' Signiert -> 'C:\Windows\system32\ctfmon.exe' Signiert -> 'C:\Windows\system32\imm32.dll' Signiert -> 'C:\Windows\system32\dsound.dll' Signiert -> 'C:\Windows\system32\aclui.dll' Signiert -> 'C:\Windows\system32\msvcrt.dll' Signiert -> 'C:\Windows\system32\d3d9.dll' Signiert -> 'C:\Windows\system32\dnsapi.dll' Signiert -> 'C:\Windows\system32\mshtml.dll' Signiert -> 'C:\Windows\system32\regsvr32.exe' Signiert -> 'C:\Windows\system32\rundll32.exe' Signiert -> 'C:\Windows\system32\userinit.exe' Signiert -> 'C:\Windows\system32\reg.exe' Signiert -> 'C:\Windows\regedit.exe' Die Systemdateien wurden durchsucht ('34' Dateien) Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen: Die Registry wurde durchsucht ( '3669' Dateien ). Der Suchlauf über die ausgewählten Dateien wird begonnen: Beginne mit der Suche in 'C:\' <OS> [0] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\CurrentSigned\x86x64\i386\WUDFUpdate_01007.dll [1] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{0471BDC9-9609-48CF-8972-707EBE20725A}\amd64\winusbcoinstaller2.dll [2] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{0471BDC9-9609-48CF-8972-707EBE20725A}\amd64\WUDFUpdate_01009.dll [3] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{0471BDC9-9609-48CF-8972-707EBE20725A}\i386\winusbcoinstaller2.dll [4] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{0471BDC9-9609-48CF-8972-707EBE20725A}\i386\WUDFUpdate_01009.dll [5] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CCFFEA6-8825-42c7-A2A5-94678EFB925F}\amd64\WUDFUpdate_01007.dll [6] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CCFFEA6-8825-42c7-A2A5-94678EFB925F}\i386\WUDFUpdate_01007.dll [7] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CD1390C-A74E-434A-B652-73D3683B3BEF}\amd64\winusbcoinstaller2.dll [8] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CD1390C-A74E-434A-B652-73D3683B3BEF}\amd64\WUDFUpdate_01009.dll [9] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CD1390C-A74E-434A-B652-73D3683B3BEF}\i386\winusbcoinstaller2.dll [10] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2CD1390C-A74E-434A-B652-73D3683B3BEF}\i386\WUDFUpdate_01009.dll [11] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2FC12C0B-6D73-4F66-8D2D-64E907627969}\amd64\winusbcoinstaller2.dll [12] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2FC12C0B-6D73-4F66-8D2D-64E907627969}\amd64\WUDFUpdate_01009.dll [13] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2FC12C0B-6D73-4F66-8D2D-64E907627969}\i386\winusbcoinstaller2.dll [14] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{2FC12C0B-6D73-4F66-8D2D-64E907627969}\i386\WUDFUpdate_01009.dll [15] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{335082FB-37CD-443F-A25D-8A8CECC4CAF3}\amd64\winusbcoinstaller2.dll [16] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{335082FB-37CD-443F-A25D-8A8CECC4CAF3}\amd64\WUDFUpdate_01009.dll [17] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{335082FB-37CD-443F-A25D-8A8CECC4CAF3}\i386\winusbcoinstaller2.dll [18] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{335082FB-37CD-443F-A25D-8A8CECC4CAF3}\i386\WUDFUpdate_01009.dll [19] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4804CEA3-DDE0-46A0-8430-54DFDE2C5EC0}\amd64\winusbcoinstaller2.dll [20] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4804CEA3-DDE0-46A0-8430-54DFDE2C5EC0}\amd64\WUDFUpdate_01009.dll [21] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4804CEA3-DDE0-46A0-8430-54DFDE2C5EC0}\i386\winusbcoinstaller2.dll [22] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4804CEA3-DDE0-46A0-8430-54DFDE2C5EC0}\i386\WUDFUpdate_01009.dll [23] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4B11437A-A1BD-4786-A0A2-916CB6DE3153}\amd64\winusbcoinstaller2.dll [24] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4B11437A-A1BD-4786-A0A2-916CB6DE3153}\amd64\WUDFUpdate_01009.dll [25] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4B11437A-A1BD-4786-A0A2-916CB6DE3153}\i386\winusbcoinstaller2.dll [26] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{4B11437A-A1BD-4786-A0A2-916CB6DE3153}\i386\WUDFUpdate_01009.dll [27] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{5A2F2D1B-F67A-4754-88D7-6E6F20C68D85}\amd64\winusbcoinstaller2.dll [28] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{5A2F2D1B-F67A-4754-88D7-6E6F20C68D85}\amd64\WUDFUpdate_01009.dll [29] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{5A2F2D1B-F67A-4754-88D7-6E6F20C68D85}\i386\winusbcoinstaller2.dll [30] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{5A2F2D1B-F67A-4754-88D7-6E6F20C68D85}\i386\WUDFUpdate_01009.dll [31] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{696E03A2-E631-4DAC-A8B3-4C19380CE316}\amd64\winusbcoinstaller2.dll [32] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{696E03A2-E631-4DAC-A8B3-4C19380CE316}\amd64\WUDFUpdate_01009.dll [33] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{696E03A2-E631-4DAC-A8B3-4C19380CE316}\i386\winusbcoinstaller2.dll [34] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{696E03A2-E631-4DAC-A8B3-4C19380CE316}\i386\WUDFUpdate_01009.dll [35] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{884EF9E6-97FC-41A1-9CD3-636DAAEA6035}\amd64\winusbcoinstaller2.dll [36] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{884EF9E6-97FC-41A1-9CD3-636DAAEA6035}\amd64\WUDFUpdate_01009.dll [37] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{884EF9E6-97FC-41A1-9CD3-636DAAEA6035}\i386\winusbcoinstaller2.dll [38] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{884EF9E6-97FC-41A1-9CD3-636DAAEA6035}\i386\WUDFUpdate_01009.dll [39] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{A5609460-97E8-4D84-9F38-23BDA4E869A2}\amd64\winusbcoinstaller2.dll [40] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{A5609460-97E8-4D84-9F38-23BDA4E869A2}\amd64\WUDFUpdate_01009.dll [41] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{A5609460-97E8-4D84-9F38-23BDA4E869A2}\i386\winusbcoinstaller2.dll [42] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{A5609460-97E8-4D84-9F38-23BDA4E869A2}\i386\WUDFUpdate_01009.dll [43] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{D89CC0CF-6D2C-47B6-8D3C-A6413F0DC159}\amd64\winusbcoinstaller2.dll [44] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{D89CC0CF-6D2C-47B6-8D3C-A6413F0DC159}\amd64\WUDFUpdate_01009.dll [45] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{D89CC0CF-6D2C-47B6-8D3C-A6413F0DC159}\i386\winusbcoinstaller2.dll [46] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{D89CC0CF-6D2C-47B6-8D3C-A6413F0DC159}\i386\WUDFUpdate_01009.dll [47] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{DCBD67C6-D741-45A9-AC84-E9DD1BC8E48C}\amd64\winusbcoinstaller2.dll [48] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{DCBD67C6-D741-45A9-AC84-E9DD1BC8E48C}\amd64\WUDFUpdate_01009.dll [49] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{DCBD67C6-D741-45A9-AC84-E9DD1BC8E48C}\i386\winusbcoinstaller2.dll [50] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{DCBD67C6-D741-45A9-AC84-E9DD1BC8E48C}\i386\WUDFUpdate_01009.dll [51] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{E1D21655-9444-4688-943A-4A7B81E772DE}\amd64\winusbcoinstaller2.dll [52] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{E1D21655-9444-4688-943A-4A7B81E772DE}\amd64\WUDFUpdate_01009.dll [53] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{E1D21655-9444-4688-943A-4A7B81E772DE}\i386\winusbcoinstaller2.dll [54] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{E1D21655-9444-4688-943A-4A7B81E772DE}\i386\WUDFUpdate_01009.dll [55] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EE975EE3-08EC-4949-9C38-3A637996A670}\amd64\winusbcoinstaller2.dll [56] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EE975EE3-08EC-4949-9C38-3A637996A670}\amd64\WUDFUpdate_01009.dll [57] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EE975EE3-08EC-4949-9C38-3A637996A670}\i386\winusbcoinstaller2.dll [58] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EE975EE3-08EC-4949-9C38-3A637996A670}\i386\WUDFUpdate_01009.dll [59] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EF68E455-7AD6-472C-A7CC-D55CC114FDEB}\amd64\winusbcoinstaller2.dll [60] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EF68E455-7AD6-472C-A7CC-D55CC114FDEB}\amd64\WUDFUpdate_01009.dll [61] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EF68E455-7AD6-472C-A7CC-D55CC114FDEB}\i386\winusbcoinstaller2.dll [62] Archivtyp: RSRC --> C:\Program Files (x86)\Sony\Sony PC Companion\Drivers\{EF68E455-7AD6-472C-A7CC-D55CC114FDEB}\i386\WUDFUpdate_01009.dll [63] Archivtyp: RSRC --> C:\Program Files (x86)\Teldat Phone TAPI64\Phone TAPI64 V3.15\TeldatWinUsb\amd64\winusbcoinstaller2.dll [64] Archivtyp: RSRC --> C:\Program Files (x86)\Teldat Phone TAPI64\Phone TAPI64 V3.15\TeldatWinUsb\amd64\WUDFUpdate_01009.dll [65] Archivtyp: RSRC --> C:\Program Files (x86)\Teldat Phone TAPI64\Phone TAPI64 V3.15\TeldatWinUsb\x86\winusbcoinstaller2.dll [66] Archivtyp: RSRC --> C:\Program Files (x86)\Teldat Phone TAPI64\Phone TAPI64 V3.15\TeldatWinUsb\x86\WUDFUpdate_01009.dll [67] Archivtyp: RSRC --> \\?\C:\ProgramData\COMODO\Cis\Quarantine\Temp\cmdinstall.exe_14-04-23_08.45.51.log.7z [WARNUNG] Zu wenig Speicher! Die Datei wurde nicht durchsucht! C:\ProgramData\COMODO\Cis\Quarantine\Temp\cmdinstall.exe_14-04-23_08.45.51.log.7z [WARNUNG] Zu wenig Speicher! Die Datei wurde nicht durchsucht! --> \\?\C:\Users\All Users\COMODO\Cis\Quarantine\Temp\cmdinstall.exe_14-04-23_08.45.51.log.7z [WARNUNG] Zu wenig Speicher! Die Datei wurde nicht durchsucht! C:\Users\All Users\COMODO\Cis\Quarantine\Temp\cmdinstall.exe_14-04-23_08.45.51.log.7z [WARNUNG] Zu wenig Speicher! Die Datei wurde nicht durchsucht! Ende des Suchlaufs: Donnerstag, 4. September 2014 12:11 Benötigte Zeit: 1:42:43 Stunde(n) Der Suchlauf wurde vollständig durchgeführt. 29309 Verzeichnisse wurden überprüft 1752768 Dateien wurden geprüft 0 Viren bzw. unerwünschte Programme wurden gefunden 0 Dateien wurden als verdächtig eingestuft 0 Dateien wurden gelöscht 0 Viren bzw. unerwünschte Programme wurden repariert 0 Dateien wurden in die Quarantäne verschoben 0 Dateien wurden umbenannt 0 Dateien konnten nicht durchsucht werden 1752768 Dateien ohne Befall 9523 Archive wurden durchsucht 2 Warnungen 0 Hinweise 7571 Objekte wurden beim Rootkitscan durchsucht 0 Versteckte Objekte wurden gefunden Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 04.09.2014 Suchlauf-Zeit: 12:21:36 Logdatei: Malwarebites-Suchlauf.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.09.04.02 Rootkit Datenbank: v2014.08.21.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Bugge Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 315569 Verstrichene Zeit: 13 Min, 9 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) |
|
05.09.2014, 08:05
| #5 |
| /// the machine /// TB-Ausbilder | Windows 7: Telekom schickt Mahnung wegen Spam Versand hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
06.09.2014, 11:01
| #6 |
| | Windows 7: Telekom schickt Mahnung wegen Spam Versand Hallo Schrauber, habe ComboFix wie von Dir gewünscht runtergeladen und wollte installieren aber der Installer bleibt auf dem Stand wie unten stehen: [IMG] https://www.flickr.com/photos/126784712@N06/ [/IMG] So blieb er stehen, bis ich nach 30 Minuten den Installer mit dem Task Manager beendet habe. Ist das normal oder braucht ComboFix noch länger um sich zu installieren? Gruß Pagnasa ...............habe heute auf meinem privaten Rechner probiert ComboFix zu installieren - das gleiche Szenario.................. Schönes Wochenende Pagnasa |
|
06.09.2014, 21:06
| #7 |
| /// the machine /// TB-Ausbilder | Windows 7: Telekom schickt Mahnung wegen Spam Versand Combofix löschen und neu laden, nochmal versuchen. Egal ob es klappt oder nit, direkt hiermit weiter: Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.09.2014, 10:15
| #8 |
| | Windows 7: Telekom schickt Mahnung wegen Spam Versand Hallo Schrauber, anbei die Logs v. d. gewünschten SW's: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 08.09.2014 Suchlauf-Zeit: 08:13:47 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.09.08.01 Rootkit Datenbank: v2014.08.21.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Bugge Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 316849 Verstrichene Zeit: 12 Min, 26 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter # AdwCleaner v3.309 - Bericht erstellt am 08/09/2014 um 08:45:11
# Aktualisiert 02/09/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Bugge - SE-NB-VOSTRO1
# Gestartet von : C:\Users\Bugge\Desktop\Selten benutzte Programme\adwcleaner_3.309.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Tasks ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17239
-\\ Mozilla Firefox v32.0 (x86 de)
[ Datei : C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [5211 octets] - [18/03/2014 16:24:24]
AdwCleaner[R1].txt - [1169 octets] - [20/03/2014 15:37:50]
AdwCleaner[R2].txt - [1290 octets] - [20/03/2014 15:44:34]
AdwCleaner[R3].txt - [1899 octets] - [07/04/2014 08:06:57]
AdwCleaner[R4].txt - [3001 octets] - [09/07/2014 16:15:25]
AdwCleaner[R5].txt - [1715 octets] - [04/09/2014 08:26:16]
AdwCleaner[R6].txt - [1593 octets] - [04/09/2014 10:09:12]
AdwCleaner[R7].txt - [1653 octets] - [08/09/2014 08:34:11]
AdwCleaner[R8].txt - [1713 octets] - [08/09/2014 08:44:45]
AdwCleaner[S0].txt - [4563 octets] - [18/03/2014 16:25:35]
AdwCleaner[S1].txt - [1187 octets] - [20/03/2014 15:38:45]
AdwCleaner[S2].txt - [1307 octets] - [20/03/2014 15:45:27]
AdwCleaner[S3].txt - [1918 octets] - [07/04/2014 08:07:49]
AdwCleaner[S4].txt - [3016 octets] - [09/07/2014 16:17:33]
AdwCleaner[S5].txt - [1776 octets] - [04/09/2014 08:28:04]
AdwCleaner[S6].txt - [1634 octets] - [08/09/2014 08:45:11]
########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [1694 octets] ##########
[/CODE] Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Bugge on 08.09.2014 at 8:49:36,51
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\Users\Bugge\AppData\Roaming\getrighttogo"
Successfully deleted: [Empty Folder] C:\Users\Bugge\appdata\local\{5374168C-EBF0-4CF4-A419-394BD9AC0BB7}
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.09.2014 at 10:10:55,39
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-09-2014 01
Ran by Bugge (administrator) on SE-NB-VOSTRO1 on 08-09-2014 10:15:44
Running from C:\Users\Bugge\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Mikogo GmbH) C:\Users\Bugge\AppData\Roaming\Mikogo\Mikogo-Service.exe
(Mikogo GmbH) C:\Users\Bugge\AppData\Roaming\Mikogo\Mikogo-Screen-Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1666296860-1313954580-2417280352-1000\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [6265624 2014-07-23] (Piriform Ltd)
Lsa: [Notification Packages] DPPassFilter scecli
ShellIconOverlayIdentifiers: AutoCAD Digital Signatures Icon Overlay Handler -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USSMB/8
SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3324790&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SPAB24F626-351A-4F74-AC2C-3045AFB13F6E&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKCU - {7FF7D407-7BA3-47BA-9AC0-55B2FAED62A0} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.201
FireFox:
========
FF ProfilePath: C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @java.com/DTPlugin -> C:\Program Files\Java\jre6\bin\npDeployJava1.dll No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin -> C:\Program Files (x86)\Java\jre1.6.0_22\bin\npDeployJava1.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin HKCU: @autodesk.com/DWF -> C:\Program Files (x86)\Autodesk\Autodesk Design Review Browser Add-on v1.2\npADRdwf.dll (Autodesk)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin -> C:\Users\Bugge\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKCU: LWAPlugin15.8 -> C:\Users\Bugge\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\Bugge\AppData\Roaming\mozilla\plugins\npLWAPlugin15.8.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-12]
FF Extension: Block site - C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2014-03-18]
FF Extension: Adblock Plus - C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-02-13]
FF Extension: G Data BankGuard - C:\Program Files (x86)\Mozilla Firefox\extensions\{906305f7-aafc-45e9-8bbd-941950a84dad} [2014-09-03]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-09-03]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-09-03]
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt [2011-12-10]
FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - c:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\FirefoxExtension
FF HKLM-x32\...\Firefox\Extensions: [jid0-1wPBLrijxGVkIUhu0kFYq6ZaWzA@jetpack] - C:\Program Files (x86)\AntiBrowserSpy\Addons\Firefox
FF Extension: AntiBrowserSpy - SocialBlocker - C:\Program Files (x86)\AntiBrowserSpy\Addons\Firefox [2014-09-04]
Chrome:
=======
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6817544 2014-04-16] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO)
R2 Mikogo-Service; C:\Users\Bugge\AppData\Roaming\Mikogo\Mikogo-Service.exe [1116512 2013-11-29] (Mikogo GmbH)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-04-16] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-04-16] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-04-16] (COMODO)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-04-16] (COMODO)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
U2 MatrikonOPC Genie Server; No ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-08 10:15 - 2014-09-08 10:15 - 00013522 _____ () C:\Users\Bugge\Downloads\FRST.txt
2014-09-08 10:15 - 2014-09-08 10:15 - 00000000 ____D () C:\Users\Bugge\Downloads\FRST-OlderVersion
2014-09-08 10:10 - 2014-09-08 10:10 - 00000811 _____ () C:\Users\Bugge\Downloads\JRT.txt
2014-09-08 08:49 - 2014-09-08 08:49 - 00000000 ____D () C:\Windows\ERUNT
2014-09-08 08:47 - 2014-09-08 08:47 - 00001774 _____ () C:\Users\Bugge\Downloads\AdwCleaner[S6].txt
2014-09-08 08:32 - 2014-09-08 08:32 - 00001156 _____ () C:\Users\Bugge\Downloads\mbam.txt
2014-09-08 08:12 - 2014-09-08 08:12 - 01016261 _____ (Thisisu) C:\Users\Bugge\Downloads\JRT.exe
2014-09-05 12:12 - 2014-09-05 12:12 - 00000000 ___SD () C:\32788R22FWJFW
2014-09-05 11:58 - 2014-09-05 11:58 - 05576440 ____R (Swearware) C:\Users\Bugge\Downloads\ComboFix(1).exe
2014-09-05 11:45 - 2014-09-05 11:46 - 05576440 ____R (Swearware) C:\Users\Bugge\Downloads\ComboFix.exe
2014-09-05 07:59 - 2014-09-08 08:47 - 00006603 _____ () C:\Windows\WindowsUpdate.log
2014-09-04 14:25 - 2014-09-05 14:21 - 00000000 ____D () C:\Users\Bugge\Downloads\Neuer Ordner (2)
2014-09-04 09:52 - 2014-09-04 09:52 - 00380416 _____ () C:\Users\Bugge\Downloads\Gmer-19357.exe
2014-09-04 09:43 - 2014-09-08 10:15 - 00000000 ____D () C:\FRST
2014-09-04 09:42 - 2014-09-08 10:15 - 02105344 _____ (Farbar) C:\Users\Bugge\Downloads\FRST64.exe
2014-09-04 09:40 - 2014-09-04 09:40 - 00000000 _____ () C:\Users\Bugge\defogger_reenable
2014-09-04 09:38 - 2014-09-04 09:38 - 00050477 _____ () C:\Users\Bugge\Downloads\Defogger.exe
2014-09-04 08:50 - 2014-09-04 08:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntiBrowserSpy
2014-09-04 08:45 - 2014-09-04 08:53 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Abelssoft
2014-09-04 08:45 - 2014-09-04 08:50 - 00000000 ____D () C:\Program Files (x86)\AntiBrowserSpy
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Abelssoft
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-09-04 08:18 - 2014-09-08 08:13 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-04 08:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-03 09:42 - 2014-09-03 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-29 08:24 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-29 08:24 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-29 08:24 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 17:56 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-27 17:56 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-27 17:56 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-27 17:56 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-27 17:55 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-27 17:55 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-27 17:55 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-27 17:55 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-27 17:55 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-27 17:55 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-26 14:42 - 2014-08-26 14:56 - 00006192 _____ () C:\xx7.log
2014-08-26 14:28 - 2005-08-03 16:05 - 00035892 _____ (Prolific Technology Inc.) C:\Windows\SysWOW64\SER9PL.sys
2014-08-26 14:28 - 2005-08-03 16:04 - 00026719 _____ () C:\Windows\SysWOW64\SERSPL.VXD
2014-08-26 14:13 - 2014-08-26 14:13 - 00003104 _____ () C:\Windows\System32\Tasks\{F4662A90-CFFC-436C-BC30-99FFB302A22B}
2014-08-20 10:21 - 2014-08-20 10:21 - 00000000 ____D () C:\log
2014-08-14 10:01 - 2014-08-14 10:01 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Adobe
2014-08-13 17:01 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 17:01 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-13 17:01 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 17:01 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 17:01 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-13 17:01 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-13 17:00 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-13 17:00 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 07:50 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 07:50 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-13 07:50 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 07:50 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 07:50 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 07:50 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-13 07:50 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 07:50 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 07:50 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 07:50 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 07:50 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 07:50 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 07:50 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 07:50 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-13 07:50 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 07:50 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 07:50 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 07:50 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 07:50 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 07:50 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 07:50 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-13 07:50 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-13 07:50 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-13 07:50 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-13 07:50 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 07:50 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 07:50 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-13 07:50 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 07:50 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-13 07:50 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 07:50 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-13 07:50 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-13 07:50 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 07:50 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-13 07:50 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-13 07:50 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-13 07:50 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-13 07:50 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 07:50 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 07:50 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 07:50 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 07:50 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 07:50 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-13 07:50 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-13 07:50 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-13 07:50 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 07:50 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-13 07:50 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-13 07:50 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-13 07:50 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-13 07:50 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 07:50 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 07:50 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 07:50 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-13 07:50 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-13 07:50 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-13 07:50 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 07:50 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-13 07:50 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 07:50 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-13 07:50 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 07:50 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-13 07:50 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 07:50 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 07:50 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 07:50 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 07:50 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 07:50 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-13 07:50 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-13 07:50 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-13 07:46 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 07:46 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 07:46 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 07:46 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-08 10:16 - 2014-09-08 10:15 - 00013522 _____ () C:\Users\Bugge\Downloads\FRST.txt
2014-09-08 10:15 - 2014-09-08 10:15 - 00000000 ____D () C:\Users\Bugge\Downloads\FRST-OlderVersion
2014-09-08 10:15 - 2014-09-04 09:43 - 00000000 ____D () C:\FRST
2014-09-08 10:15 - 2014-09-04 09:42 - 02105344 _____ (Farbar) C:\Users\Bugge\Downloads\FRST64.exe
2014-09-08 10:10 - 2014-09-08 10:10 - 00000811 _____ () C:\Users\Bugge\Downloads\JRT.txt
2014-09-08 08:53 - 2009-07-14 06:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-08 08:53 - 2009-07-14 06:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-08 08:50 - 2014-09-05 07:59 - 00006603 _____ () C:\Windows\WindowsUpdate.log
2014-09-08 08:49 - 2014-09-08 08:49 - 00000000 ____D () C:\Windows\ERUNT
2014-09-08 08:47 - 2014-09-08 08:47 - 00001774 _____ () C:\Users\Bugge\Downloads\AdwCleaner[S6].txt
2014-09-08 08:46 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-08 08:45 - 2014-03-18 16:24 - 00000000 ____D () C:\AdwCleaner
2014-09-08 08:45 - 2012-02-13 11:56 - 00000000 ____D () C:\Users\Bugge\Documents\Datenbank
2014-09-08 08:32 - 2014-09-08 08:32 - 00001156 _____ () C:\Users\Bugge\Downloads\mbam.txt
2014-09-08 08:13 - 2014-09-04 08:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-08 08:12 - 2014-09-08 08:12 - 01016261 _____ (Thisisu) C:\Users\Bugge\Downloads\JRT.exe
2014-09-08 07:50 - 2014-05-13 09:37 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Mikogo
2014-09-05 15:02 - 2014-03-25 12:00 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\avidemux
2014-09-05 14:21 - 2014-09-04 14:25 - 00000000 ____D () C:\Users\Bugge\Downloads\Neuer Ordner (2)
2014-09-05 12:21 - 2013-08-13 15:34 - 00000000 ____D () C:\Users\Bugge\Downloads\Neuer Ordner
2014-09-05 12:12 - 2014-09-05 12:12 - 00000000 ___SD () C:\32788R22FWJFW
2014-09-05 11:58 - 2014-09-05 11:58 - 05576440 ____R (Swearware) C:\Users\Bugge\Downloads\ComboFix(1).exe
2014-09-05 11:46 - 2014-09-05 11:45 - 05576440 ____R (Swearware) C:\Users\Bugge\Downloads\ComboFix.exe
2014-09-05 09:16 - 2012-04-25 10:31 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\vlc
2014-09-04 16:59 - 2010-11-21 08:50 - 00716204 _____ () C:\Windows\system32\perfh007.dat
2014-09-04 16:59 - 2010-11-21 08:50 - 00155060 _____ () C:\Windows\system32\perfc007.dat
2014-09-04 16:59 - 2009-07-14 07:13 - 01659204 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-04 14:58 - 2011-02-11 19:36 - 00000000 ____D () C:\Windows\panther
2014-09-04 14:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-09-04 12:20 - 2012-11-05 12:55 - 00000000 ____D () C:\Users\Bugge\Jörg Bugge
2014-09-04 09:52 - 2014-09-04 09:52 - 00380416 _____ () C:\Users\Bugge\Downloads\Gmer-19357.exe
2014-09-04 09:40 - 2014-09-04 09:40 - 00000000 _____ () C:\Users\Bugge\defogger_reenable
2014-09-04 09:40 - 2012-02-10 15:50 - 00000000 ____D () C:\Users\Bugge
2014-09-04 09:38 - 2014-09-04 09:38 - 00050477 _____ () C:\Users\Bugge\Downloads\Defogger.exe
2014-09-04 08:58 - 2012-02-24 12:27 - 00000000 ___RD () C:\Users\Bugge\Desktop\Selten benutzte Programme
2014-09-04 08:53 - 2014-09-04 08:45 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Abelssoft
2014-09-04 08:50 - 2014-09-04 08:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntiBrowserSpy
2014-09-04 08:50 - 2014-09-04 08:45 - 00000000 ____D () C:\Program Files (x86)\AntiBrowserSpy
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Abelssoft
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-09-04 08:28 - 2012-04-26 08:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-03-18 16:38 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Malwarebytes
2014-09-04 08:18 - 2014-03-18 16:38 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-03 09:42 - 2014-09-03 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-29 09:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-29 08:20 - 2011-12-10 03:00 - 00000000 ____D () C:\ProgramData\Sonic
2014-08-28 11:09 - 2014-02-14 14:19 - 00000000 ____D () C:\Program Files (x86)\MySequip
2014-08-27 19:38 - 2012-02-14 15:18 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Skype
2014-08-27 19:28 - 2014-08-07 08:05 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-27 19:28 - 2013-03-12 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-27 19:28 - 2013-03-12 15:21 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-27 09:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-08-26 20:36 - 2012-03-27 09:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-08-26 20:36 - 2011-12-10 02:46 - 00000000 ____D () C:\ProgramData\Skype
2014-08-26 14:56 - 2014-08-26 14:42 - 00006192 _____ () C:\xx7.log
2014-08-26 14:28 - 2011-12-10 02:29 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-26 14:13 - 2014-08-26 14:13 - 00003104 _____ () C:\Windows\System32\Tasks\{F4662A90-CFFC-436C-BC30-99FFB302A22B}
2014-08-23 04:07 - 2014-08-29 08:24 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-29 08:24 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-29 08:24 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 08:05 - 2014-01-24 13:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-22 08:05 - 2012-02-13 17:49 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-21 08:21 - 2014-07-28 10:02 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-20 10:21 - 2014-08-20 10:21 - 00000000 ____D () C:\log
2014-08-15 10:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-08-15 07:39 - 2012-04-11 08:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-14 10:01 - 2014-08-14 10:01 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Adobe
2014-08-14 07:43 - 2012-04-11 08:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-14 07:43 - 2012-04-11 08:35 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-14 07:43 - 2011-12-10 02:14 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-14 07:35 - 2012-02-10 15:54 - 00000000 ___RD () C:\Users\Bugge\Virtual Machines
2014-08-14 07:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-13 17:12 - 2012-02-13 10:20 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-13 17:07 - 2013-08-14 17:02 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 17:04 - 2012-02-13 16:25 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 17:00 - 2014-05-06 16:58 - 00000000 ___SD () C:\Windows\system32\CompatTel
Some content of TEMP:
====================
C:\Users\Bugge\AppData\Local\Temp\avgnt.exe
C:\Users\Bugge\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-08-29 09:35
==================== End Of Log ============================
--- --- --- --- --- --- Soweit die LOGs die ohne Probleme zu erstellen waren. Ich probier dann nochmal ComboFix zu installieren. Sollte das noch klappen, poste ich Dir gleich im Anschluss dieses LOG. Vielen Dank und bis nachher.. Pagnasa Hallo Schrauber, habe ComboFix jetzt installiert, d.h. das Fenster mit der COM liste ist kpl. abgelaufen und ComboFix hat einen Backup gemacht und es ging noch ein zweites Fenster auf. Danach ist aber nichts mehr passiert. Habe danach den Laptop noch 2x neu gestartet und nochmal den Installer laufen lassen, jedesmal derselbe Ablauf - kein Fenster mit irgendwelchen Anweisungen. Ich habe mir die installierten Files angeschaut aber keine *.exe für ComboFix gesehen und von den anderen Batch/exe files lass ich lieber die Finger. Eine *.txt Datei mit einem LOG ist auch nirgendwo auszumachen. Kann ich ComboFix im Installationsfolder mit einer der Batch oder EXE Files zum Laufen bringen?  Greets Pagnasa |
|
08.09.2014, 19:12
| #9 |
| /// the machine /// TB-Ausbilder | Windows 7: Telekom schickt Mahnung wegen Spam Versand Nee lass Combofix weg. ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.09.2014, 10:11
| #10 |
| | Windows 7: Telekom schickt Mahnung wegen Spam Versand Hallo Schrauber, anbei die gewünschten LOGs: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=2ac40d8dab62f24ca1c16d6e952b7b10
# engine=20064
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-09-09 08:09:39
# local_time=2014-09-09 10:09:39 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 8129 47159588 0 0
# compatibility_mode_1='COMODO Antivirus'
# compatibility_mode=3074 16777213 100 84 12012316 56703601 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 36610593 161880029 0 0
# scanned=172364
# found=10
# cleaned=0
# scan_time=4698
sh=16068B8977B4DC562AE782D91BC009472667E331 ft=1 fh=c3b5a87b7d152749 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Bugge\AppData\Local\Temp\OCS\ocs_v71a.exe.vir"
sh=638DA8DBB171564FA4F31D42E77EBB71A33E2A91 ft=1 fh=37f8f0712c5ccad4 vn="Variante von Win32/Bunndle potenziell unsichere Anwendung" ac=I fn="C:\Program Files\CamStudio 2.7\BunndleOfferManager.exe"
sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\apnic.dll"
sh=FFA8B6510D624A55F3EB7FFD6D5221A44944681C ft=1 fh=3386eb0d6ed0e5e1 vn="Variante von Win32/Bundled.Toolbar.Ask.G potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\apnstub.exe"
sh=1A3F14C0A66F9AF050D1F34FBACBAADC31751A07 ft=1 fh=2704a03a0f47b728 vn="Variante von Win32/Bundled.Toolbar.Ask potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\apntoolbarinstaller.exe"
sh=4B553651EF610C0614F8393D6C25ABA0A8F09ECA ft=1 fh=92ef1bb072edf568 vn="Variante von Win32/Bundled.Toolbar.Ask.D potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Avira\AntiVir Desktop\Offercast_AVIRAV7_.exe"
sh=4ED404284C10E99998307476535B00B02C95A7FA ft=1 fh=d49e129302cfcb3b vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Bugge\Downloads\AdwCleaner - CHIP-Downloader.exe"
sh=6EF633B9BF4CCF254CBB2F8DECB8899D243AAC51 ft=1 fh=3f3875e125c4d52a vn="möglicherweise Variante von Win32/RegistryNuke Anwendung" ac=I fn="C:\Users\Bugge\Downloads\PCMAX_AF_ErrorsFix_Setup.exe"
sh=B5B41E946960F17050C00A4891CFF46B08486A4D ft=1 fh=79895fd74f1827db vn="Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\Adobe\Shockwave 11\gt.exe"
sh=B5B41E946960F17050C00A4891CFF46B08486A4D ft=1 fh=79895fd74f1827db vn="Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung" ac=I fn="C:\Windows\SysWOW64\Adobe\Shockwave 11\gt.exe"
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-09-2014 01
Ran by Bugge (administrator) on SE-NB-VOSTRO1 on 09-09-2014 10:49:21
Running from C:\Users\Bugge\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Mikogo GmbH) C:\Users\Bugge\AppData\Roaming\Mikogo\Mikogo-Service.exe
(Mikogo GmbH) C:\Users\Bugge\AppData\Roaming\Mikogo\Mikogo-Screen-Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\MSACCESS.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_179.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_14_0_0_179.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dialer.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1275608 2014-03-25] (COMODO)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1666296860-1313954580-2417280352-1000\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [6265624 2014-07-23] (Piriform Ltd)
Lsa: [Notification Packages] DPPassFilter scecli
ShellIconOverlayIdentifiers: AutoCAD Digital Signatures Icon Overlay Handler -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USSMB/8
SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3324790&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SPAB24F626-351A-4F74-AC2C-3045AFB13F6E&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKCU - {7FF7D407-7BA3-47BA-9AC0-55B2FAED62A0} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.201
FireFox:
========
FF ProfilePath: C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @java.com/DTPlugin -> C:\Program Files\Java\jre6\bin\npDeployJava1.dll No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin -> C:\Program Files (x86)\Java\jre1.6.0_22\bin\npDeployJava1.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin HKCU: @autodesk.com/DWF -> C:\Program Files (x86)\Autodesk\Autodesk Design Review Browser Add-on v1.2\npADRdwf.dll (Autodesk)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin -> C:\Users\Bugge\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKCU: LWAPlugin15.8 -> C:\Users\Bugge\AppData\Roaming\Mozilla\Plugins\npLWAPlugin15.8.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\Bugge\AppData\Roaming\mozilla\plugins\npLWAPlugin15.8.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-08]
FF Extension: Block site - C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2014-03-18]
FF Extension: Adblock Plus - C:\Users\Bugge\AppData\Roaming\Mozilla\Firefox\Profiles\75arz8hq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-02-13]
FF Extension: G Data BankGuard - C:\Program Files (x86)\Mozilla Firefox\extensions\{906305f7-aafc-45e9-8bbd-941950a84dad} [2014-09-03]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2014-09-03]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-09-03]
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt [2011-12-10]
FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - c:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\FirefoxExtension
FF HKLM-x32\...\Firefox\Extensions: [jid0-1wPBLrijxGVkIUhu0kFYq6ZaWzA@jetpack] - C:\Program Files (x86)\AntiBrowserSpy\Addons\Firefox
FF Extension: AntiBrowserSpy - SocialBlocker - C:\Program Files (x86)\AntiBrowserSpy\Addons\Firefox [2014-09-04]
Chrome:
=======
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6817544 2014-04-16] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2264280 2014-03-25] (COMODO)
R2 Mikogo-Service; C:\Users\Bugge\AppData\Roaming\Mikogo\Mikogo-Service.exe [1116512 2013-11-29] (Mikogo GmbH)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-19] (Avira Operations GmbH & Co. KG)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2014-04-16] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [738472 2014-04-16] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48360 2014-04-16] (COMODO)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [105552 2014-04-16] (COMODO)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
U2 MatrikonOPC Genie Server; No ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-09 10:49 - 2014-09-09 10:49 - 00013942 _____ () C:\Users\Bugge\Downloads\FRST.txt
2014-09-09 08:06 - 2014-09-09 08:06 - 00176128 _____ () C:\Users\Bugge\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-08 11:26 - 2014-09-08 11:26 - 00000000 _____ () C:\Users\Bugge\defogger_reenable
2014-09-08 10:26 - 2014-09-08 10:26 - 00000000 ____D () C:\Windows\erdnt
2014-09-08 10:15 - 2014-09-08 10:15 - 00000000 ____D () C:\Users\Bugge\Downloads\FRST-OlderVersion
2014-09-08 08:49 - 2014-09-08 08:49 - 00000000 ____D () C:\Windows\ERUNT
2014-09-08 08:12 - 2014-09-08 08:12 - 01016261 _____ (Thisisu) C:\Users\Bugge\Downloads\JRT.exe
2014-09-05 07:59 - 2014-09-09 07:53 - 00033037 _____ () C:\Windows\WindowsUpdate.log
2014-09-04 14:25 - 2014-09-08 15:40 - 00000000 ____D () C:\Users\Bugge\Downloads\Neuer Ordner (2)
2014-09-04 09:52 - 2014-09-04 09:52 - 00380416 _____ () C:\Users\Bugge\Downloads\Gmer-19357.exe
2014-09-04 09:43 - 2014-09-09 10:49 - 00000000 ____D () C:\FRST
2014-09-04 09:42 - 2014-09-08 10:15 - 02105344 _____ (Farbar) C:\Users\Bugge\Downloads\FRST64.exe
2014-09-04 09:38 - 2014-09-04 09:38 - 00050477 _____ () C:\Users\Bugge\Downloads\Defogger.exe
2014-09-04 08:50 - 2014-09-04 08:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntiBrowserSpy
2014-09-04 08:45 - 2014-09-04 08:53 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Abelssoft
2014-09-04 08:45 - 2014-09-04 08:50 - 00000000 ____D () C:\Program Files (x86)\AntiBrowserSpy
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Abelssoft
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-09-04 08:18 - 2014-09-08 08:13 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-04 08:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-03 09:42 - 2014-09-03 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-29 08:24 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-29 08:24 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-29 08:24 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 17:56 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-27 17:56 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-27 17:56 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-27 17:56 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-27 17:55 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-27 17:55 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-27 17:55 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-27 17:55 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-27 17:55 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-27 17:55 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-27 17:55 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-26 14:42 - 2014-08-26 14:56 - 00006192 _____ () C:\xx7.log
2014-08-26 14:28 - 2005-08-03 16:05 - 00035892 _____ (Prolific Technology Inc.) C:\Windows\SysWOW64\SER9PL.sys
2014-08-26 14:28 - 2005-08-03 16:04 - 00026719 _____ () C:\Windows\SysWOW64\SERSPL.VXD
2014-08-26 14:13 - 2014-08-26 14:13 - 00003104 _____ () C:\Windows\System32\Tasks\{F4662A90-CFFC-436C-BC30-99FFB302A22B}
2014-08-20 10:21 - 2014-08-20 10:21 - 00000000 ____D () C:\log
2014-08-14 10:01 - 2014-08-14 10:01 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Adobe
2014-08-13 17:01 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 17:01 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-13 17:01 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 17:01 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 17:01 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-13 17:01 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-13 17:00 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-13 17:00 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 07:50 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 07:50 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-13 07:50 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 07:50 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 07:50 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 07:50 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-13 07:50 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 07:50 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 07:50 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 07:50 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 07:50 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 07:50 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 07:50 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 07:50 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-13 07:50 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 07:50 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 07:50 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 07:50 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 07:50 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 07:50 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 07:50 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-13 07:50 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-13 07:50 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-13 07:50 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-13 07:50 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 07:50 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 07:50 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-13 07:50 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 07:50 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-13 07:50 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 07:50 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-13 07:50 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-13 07:50 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 07:50 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-13 07:50 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-13 07:50 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-13 07:50 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-13 07:50 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 07:50 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 07:50 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 07:50 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 07:50 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 07:50 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-13 07:50 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-13 07:50 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-13 07:50 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 07:50 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-13 07:50 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-13 07:50 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-13 07:50 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-13 07:50 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 07:50 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 07:50 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 07:50 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-13 07:50 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-13 07:50 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-13 07:50 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 07:50 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 07:50 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-13 07:50 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-13 07:50 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 07:50 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-13 07:50 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 07:50 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-13 07:50 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 07:50 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 07:50 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 07:50 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 07:50 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 07:50 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-13 07:50 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-13 07:50 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-13 07:46 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 07:46 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 07:46 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 07:46 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-09 10:50 - 2014-09-09 10:49 - 00013942 _____ () C:\Users\Bugge\Downloads\FRST.txt
2014-09-09 10:49 - 2014-09-04 09:43 - 00000000 ____D () C:\FRST
2014-09-09 10:44 - 2013-08-13 15:34 - 00000000 ____D () C:\Users\Bugge\Downloads\Neuer Ordner
2014-09-09 10:44 - 2012-04-25 10:31 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\vlc
2014-09-09 08:06 - 2014-09-09 08:06 - 00176128 _____ () C:\Users\Bugge\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-09 08:04 - 2012-02-13 11:56 - 00000000 ____D () C:\Users\Bugge\Documents\Datenbank
2014-09-09 07:57 - 2009-07-14 06:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-09 07:57 - 2009-07-14 06:45 - 00031312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-09 07:53 - 2014-09-05 07:59 - 00033037 _____ () C:\Windows\WindowsUpdate.log
2014-09-09 07:48 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-08 15:40 - 2014-09-04 14:25 - 00000000 ____D () C:\Users\Bugge\Downloads\Neuer Ordner (2)
2014-09-08 15:30 - 2012-11-05 12:55 - 00000000 ____D () C:\Users\Bugge\Jörg Bugge
2014-09-08 11:26 - 2014-09-08 11:26 - 00000000 _____ () C:\Users\Bugge\defogger_reenable
2014-09-08 11:26 - 2012-02-10 15:50 - 00000000 ____D () C:\Users\Bugge
2014-09-08 10:26 - 2014-09-08 10:26 - 00000000 ____D () C:\Windows\erdnt
2014-09-08 10:15 - 2014-09-08 10:15 - 00000000 ____D () C:\Users\Bugge\Downloads\FRST-OlderVersion
2014-09-08 10:15 - 2014-09-04 09:42 - 02105344 _____ (Farbar) C:\Users\Bugge\Downloads\FRST64.exe
2014-09-08 08:49 - 2014-09-08 08:49 - 00000000 ____D () C:\Windows\ERUNT
2014-09-08 08:45 - 2014-03-18 16:24 - 00000000 ____D () C:\AdwCleaner
2014-09-08 08:13 - 2014-09-04 08:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-08 08:12 - 2014-09-08 08:12 - 01016261 _____ (Thisisu) C:\Users\Bugge\Downloads\JRT.exe
2014-09-08 07:50 - 2014-05-13 09:37 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Mikogo
2014-09-05 15:02 - 2014-03-25 12:00 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\avidemux
2014-09-04 16:59 - 2010-11-21 08:50 - 00716204 _____ () C:\Windows\system32\perfh007.dat
2014-09-04 16:59 - 2010-11-21 08:50 - 00155060 _____ () C:\Windows\system32\perfc007.dat
2014-09-04 16:59 - 2009-07-14 07:13 - 01659204 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-04 14:58 - 2011-02-11 19:36 - 00000000 ____D () C:\Windows\panther
2014-09-04 14:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Msdtc
2014-09-04 09:52 - 2014-09-04 09:52 - 00380416 _____ () C:\Users\Bugge\Downloads\Gmer-19357.exe
2014-09-04 09:38 - 2014-09-04 09:38 - 00050477 _____ () C:\Users\Bugge\Downloads\Defogger.exe
2014-09-04 08:58 - 2012-02-24 12:27 - 00000000 ___RD () C:\Users\Bugge\Desktop\Selten benutzte Programme
2014-09-04 08:53 - 2014-09-04 08:45 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Abelssoft
2014-09-04 08:50 - 2014-09-04 08:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntiBrowserSpy
2014-09-04 08:50 - 2014-09-04 08:45 - 00000000 ____D () C:\Program Files (x86)\AntiBrowserSpy
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Abelssoft
2014-09-04 08:45 - 2014-09-04 08:45 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-09-04 08:28 - 2012-04-26 08:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-09-04 08:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware
2014-09-04 08:18 - 2014-03-18 16:38 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Malwarebytes
2014-09-04 08:18 - 2014-03-18 16:38 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-03 09:42 - 2014-09-03 09:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-29 09:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-29 08:20 - 2011-12-10 03:00 - 00000000 ____D () C:\ProgramData\Sonic
2014-08-28 11:09 - 2014-02-14 14:19 - 00000000 ____D () C:\Program Files (x86)\MySequip
2014-08-27 19:38 - 2012-02-14 15:18 - 00000000 ____D () C:\Users\Bugge\AppData\Roaming\Skype
2014-08-27 19:28 - 2014-08-07 08:05 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-27 19:28 - 2013-03-12 15:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-27 19:28 - 2013-03-12 15:21 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-27 09:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-08-26 20:36 - 2012-03-27 09:47 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-08-26 20:36 - 2011-12-10 02:46 - 00000000 ____D () C:\ProgramData\Skype
2014-08-26 14:56 - 2014-08-26 14:42 - 00006192 _____ () C:\xx7.log
2014-08-26 14:28 - 2011-12-10 02:29 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-08-26 14:13 - 2014-08-26 14:13 - 00003104 _____ () C:\Windows\System32\Tasks\{F4662A90-CFFC-436C-BC30-99FFB302A22B}
2014-08-23 04:07 - 2014-08-29 08:24 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-29 08:24 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-29 08:24 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 08:05 - 2014-01-24 13:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-22 08:05 - 2012-02-13 17:49 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-21 08:21 - 2014-07-28 10:02 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-20 10:21 - 2014-08-20 10:21 - 00000000 ____D () C:\log
2014-08-15 10:46 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-08-15 07:39 - 2012-04-11 08:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-14 10:01 - 2014-08-14 10:01 - 00000000 ____D () C:\Users\Bugge\AppData\Local\Adobe
2014-08-14 07:43 - 2012-04-11 08:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-08-14 07:43 - 2012-04-11 08:35 - 00003824 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-08-14 07:43 - 2011-12-10 02:14 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-14 07:35 - 2012-02-10 15:54 - 00000000 ___RD () C:\Users\Bugge\Virtual Machines
2014-08-14 07:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-13 17:12 - 2012-02-13 10:20 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-13 17:07 - 2013-08-14 17:02 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 17:04 - 2012-02-13 16:25 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 17:00 - 2014-05-06 16:58 - 00000000 ___SD () C:\Windows\system32\CompatTel
Some content of TEMP:
====================
C:\Users\Bugge\AppData\Local\Temp\avgnt.exe
C:\Users\Bugge\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-08-29 09:35
==================== End Of Log ============================
--- --- --- Leider konnte ich SecurityCheck nicht ausführen, Windows sagt mir ich hätte nicht genügend Rechte um auf das Element zugreifen zu können - habe normal mit Doppelklick und mit Rechtsklick und "als Administrator ausführen" probiert. Jedesmal die gleiche Nachricht. greetsPagnasa |
|
10.09.2014, 07:35
| #11 |
| /// the machine /// TB-Ausbilder | Windows 7: Telekom schickt Mahnung wegen Spam Versand Passt schon. Noch Probleme mit dem Rechner?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
10.09.2014, 11:53
| #12 |
| |  Windows 7: Telekom schickt Mahnung wegen Spam Versand Hallo Schrauber, also, ahöm....., der Rechner hat ja immer funktioniert. Es ging ja nur darum herauszufinden ob der Spamversand über einen Trojaner der sich evtl. dort eingenistet hat, stattfinden konnte. Der Laptop "dreht" ja auch ständig auf Hochtouren, so als ob ein Hintergrundprogramm sehr fleißig irgendeine Aktivität ausührt. Wenn ich Deine Frage also richtig begreife ist mit den LOG's dann soweit alles OK und mein Rechner ist sauber?! Soll ich denn dann den Defogger den CD Emulator wieder einschalten lassen? Und soll ich die vom ESET gefundenen "Bedrohungen" in den Dateien lassen, as is? Liebe Grüße Pagnasa  |
|
10.09.2014, 20:21
| #13 |
| /// the machine /// TB-Ausbilder | Windows 7: Telekom schickt Mahnung wegen Spam Versand Natürlich kannst du die ESET FUnde löschen, das heisst also Avira löschen  Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.09.2014, 10:17
| #14 |
| | Windows 7: Telekom schickt Mahnung wegen Spam Versand Hallo Schrauber, habe eine Lobeshymne auf Dich gepostet und auch gespendet. Vielen Dank für Deine informative und schnelle Hilfe. Die Sachen die ich diese Woche von Dir gelernt habe kann ich auch gut für meinen privaten PC gebrauchen. Somit kannst Du diesen Thread aus deinem Abo löschen und viel Spaß mit den anderen Usern die Dich in Zukunft beschäftigen werden. Liebe Grüße Pagnasa  |
|
12.09.2014, 07:03
| #15 |
| /// the machine /// TB-Ausbilder | Windows 7: Telekom schickt Mahnung wegen Spam Versand Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 7: Telekom schickt Mahnung wegen Spam Versand |
| anschluss, arbeitsplatz, ausgelastet, auswertung, cpu ausgelastet, dsl, fehlercode 0x80070490, laptop, malware, netzwerk, programme, scanner, spam versand von meinem account, telekom, trojaner, verbindungsversuche, verdächtige, win32/bundled.toolbar.ask, win32/bundled.toolbar.ask.d, win32/bundled.toolbar.ask.g, win32/bundled.toolbar.google.d, win32/downloadsponsor.a, windows 7 |
Linear-Darstellung
