|
Plagegeister aller Art und deren Bekämpfung: Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bitWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
21.12.2014, 02:10 | #1 |
| Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bit Hallo Leute, bin nach verzweifelten versuchen und langen google suchen auf Euch gestoßen! Ich hab schon viele Beiträge hier gelesen und hoffe ich hab das selbe Glück wie schon einige vor mir das mein Problem ohne neu aufsetzen behoben werden kann! Ich hab das wie es scheint weitverbreitete Sicherheitscenter Problem, es ist deaktiviert, und lässt sich auch nicht aktivieren, egal ob in den Diensten, oder in der regedit, egal ob Admin oder User, einzige unterschied was ich bisher sehen konnte das ich in den Diensten nur Local Service eintragen kann, sobald ich versuche NT AUTHORITY\Local Service bekomme ich eine Fehlermeldung. Hab Avira Antivir deinstalliert, Spybot deinstalliert, TuneUp deinstalliert, machte eine Prüfung mit HiJackThis, hab chkdsk ausgeführt, hab versucht Win7 zurückzusetzen, jedoch existieren meine alten wiederherstellungspunkte nicht mehr, Hab alle möglichen Windows reparaturen versucht, zb Microsoft FixIt, Systemreparatur, Abgesicherter Modus usw, langsam gehen mir die Ideen aus was ich noch versuchen könnte! Will mein System einfach nicht verlieren, zuviele wichtige Daten in den Softwaren, allein das neu aufsetzen und alles wieder so hinbringen wie es jetzt ist würde mich um 2 Wochen zurückwerfen, weshalb ich Euch sehr dankbar wäre, wenn Ihr mir helfen könntet! |
21.12.2014, 07:13 | #2 |
/// the machine /// TB-Ausbilder | Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bit hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
21.12.2014, 17:11 | #3 | |
| Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bitZitat:
Ich hoffe Du kannst damit was anfangen! Lg Dany |
21.12.2014, 19:11 | #4 |
| Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bitFRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-12-2014 01 Ran by PC-Technik (administrator) on PC-TECHNIK-PC on 21-12-2014 17:08:02 Running from C:\Users\PC-Technik\Desktop Loaded Profile: PC-Technik (Available profiles: PC-Technik & DefaultAppPool) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Englisch (USA) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft-ISATAP-Adapter\tunnel.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft-ISATAP-Adapter\tunnel.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (Autodata Limited) C:\Program Files (x86)\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe (DTS) C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe (Microsoft Corporation) C:\Windows\ehome\ehrecvr.exe (Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Realtek) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe (Realtek Semiconductor Corp.) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Akamai Technologies, Inc.) C:\Users\PC-Technik\AppData\Local\Akamai\netsession_win.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe (Akamai Technologies, Inc.) C:\Users\PC-Technik\AppData\Local\Akamai\netsession_win.exe (Dropbox, Inc.) C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6470760 2012-05-15] (Realtek Semiconductor) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.) HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] () HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe [740736 2012-08-03] (ASUS Cloud Corporation) HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe [2081792 2013-03-29] (CHENGDU YIWO Tech Development Co., Ltd) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [d3dim32] => rundll32.exe iroq HKLM-x32\...\Run: [ASUS Camera ScreenSaver] => C:\Windows\ASScrProlog.exe [37232 2013-12-24] () HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [Akamai NetSession Interface] => C:\Users\PC-Technik\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [GoogleChromeAutoLaunch_2A702D7A3A705AC0D83BEF373BEE53C5] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816 2014-10-20] (Apple Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Policies\Explorer: [] HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1415048 2014-03-05] (Autodesk, Inc.) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-10-06] (Microsoft Corporation) Startup: C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-1144226690-2465283230-36961558-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled. ProxyServer: [.DEFAULT] => http=127.0.0.1:50621;https=127.0.0.1:50621 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-1144226690-2465283230-36961558-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-1144226690-2465283230-36961558-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin HKU\S-1-5-21-1144226690-2465283230-36961558-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\PC-Technik\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKU\S-1-5-21-1144226690-2465283230-36961558-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\PC-Technik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\webssearches.xml FF HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff FF HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Firefox\Extensions: [freegames197@BestOffers] - C:\Users\PC-Technik\AppData\Roaming\Mozilla\Extensions\freegames197@BestOffers FF Extension: No Name - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff [Not Found] FF Extension: No Name - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha209\ff [Not Found] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.at/ CHR StartupUrls: Default -> "hxxp://www.google.at/" CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-05] CHR Extension: (Google Drive) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-05] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-27] CHR Extension: (YouTube) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-05] CHR Extension: (Google-Suche) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-05] CHR Extension: (Appgenerator - kostenlos Apps erstellen) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\efnmkpompmmellmbhajanpbomlklkcdd [2014-11-17] CHR Extension: (Avira Browserschutz) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-15] CHR Extension: (Facebook Invite All) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\inmmhkeajgflmokoaaoadgkhhmibjbpj [2014-02-20] CHR Extension: (Twoo Notifications) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\mggafhpkgkfebnjfbiefbbbicikgchlf [2013-10-05] CHR Extension: (Tiësto) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmeobddjkkgkglnogihcaejaleikhdh [2013-10-05] CHR Extension: (Google Wallet) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-05] CHR Extension: (Google Mail) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-05] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.) [File not signed] R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-09-11] () R2 ASDiskUnlocker; C:\Program Files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe [258688 2010-12-02] (ASUSTeK Computer Inc.) R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [915584 2010-12-02] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-09-11] (ASUSTeK Computer Inc.) R2 Autodata Limited License Service; C:\Program Files (x86)\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe [72704 2014-04-22] (Autodata Limited) [File not signed] R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [File not signed] R2 DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [210024 2011-05-31] (DTS) S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed] R2 Realtek11nCU; C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek) [File not signed] S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH) R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation) R2 xtu; C:\Program Files (x86)\Microsoft-ISATAP-Adapter\tunnel.exe [32768 2011-10-11] (Microsoft Corporation) [File not signed] S2 Crypkey License; crypserv.exe [X] S2 HPSLPSVC; C:\Users\PC-TEC~1\AppData\Local\Temp\7zS48BC\hpslpsvc64.dll [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 a8djavs_x64; C:\Windows\System32\Drivers\a8djavs_x64.sys [44560 2008-12-09] (Native Instruments GmbH) S3 a8djusb_x64; C:\Windows\System32\Drivers\a8djusb_x64.sys [233488 2008-12-09] (Native Instruments GmbH) R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices) R3 ASFLTDrv.sys; C:\Program Files (x86)\ASUS\Disk Unlocker\ASFLTDrv64.sys [16512 2010-09-16] (ASUSTeK Computer Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-09-11] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-10-11] (Disc Soft Ltd) R1 ElRawDisk; C:\Windows\system32\drivers\dddskx64.sys [26024 2009-02-12] (EldoS Corporation) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [17480 2013-03-07] () [File not signed] S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [13896 2013-03-07] () [File not signed] S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9800 2013-03-07] () [File not signed] S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] () [File not signed] R2 Hardlock; C:\Windows\SysWOW64\drivers\hardlock.sys [670208 2004-11-05] (Aladdin Knowledge Systems Ltd.) [File not signed] S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (QUALCOMM Incorporated) R3 kncbda; C:\Windows\System32\DRIVERS\kncbda64.sys [195712 2012-03-22] (ODSoft multimedia) R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [848384 2011-02-11] (Realtek Semiconductor Corporation ) S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2008-07-11] (SafeNet, Inc.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-10-06] (Duplex Secure Ltd.) R1 VDiskBus; C:\Windows\System32\DRIVERS\VDiskBus64.sys [43136 2010-09-21] (ASUSTeK Computer Inc.) U3 a1drbp5b; C:\Windows\System32\Drivers\a1drbp5b.sys [0 ] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S1 NetworkX; \SystemRoot\system32\ckldrv.sys [X] S2 SVKP; \??\C:\Windows\system32\SVKP.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-21 17:06 - 2014-12-21 17:07 - 00040138 _____ () C:\Users\PC-Technik\Desktop\Addition.txt 2014-12-21 17:05 - 2014-12-21 17:08 - 00025524 _____ () C:\Users\PC-Technik\Desktop\FRST.txt 2014-12-21 17:04 - 2014-12-21 17:08 - 00000000 ____D () C:\FRST 2014-12-21 17:03 - 2014-12-21 17:03 - 02122240 _____ (Farbar) C:\Users\PC-Technik\Desktop\FRST64.exe 2014-12-21 05:38 - 2014-12-21 05:38 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-PC-TECHNIK-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat 2014-12-21 05:38 - 2014-12-21 05:38 - 00000000 ____D () C:\RegBackup 2014-12-21 05:02 - 2014-12-21 05:02 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Tweaking.com - Windows Repair 2014-12-21 05:01 - 2014-12-21 05:01 - 07871773 _____ () C:\Users\PC-Technik\Downloads\tweaking.com_windows_repair_aio.zip 2014-12-20 23:48 - 2014-12-21 09:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014 2014-12-20 23:47 - 2014-12-21 09:28 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014 2014-12-20 21:13 - 2014-12-20 21:19 - 00000000 ____D () C:\ProgramData\ParetoLogic 2014-12-20 21:13 - 2014-12-20 21:13 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\ParetoLogic 2014-12-20 21:13 - 2014-12-20 21:13 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\DriverCure 2014-12-20 20:42 - 2014-12-20 20:42 - 15549025 _____ () C:\Users\PC-Technik\Downloads\Microsoft_Fix-it-Paket.zip 2014-12-20 17:37 - 2014-12-20 17:37 - 00347816 _____ (Microsoft Corporation) C:\Users\PC-Technik\Downloads\MicrosoftFixit.WinSecurity.FISC.134252040448177.1.2.Run.exe 2014-12-20 17:35 - 2014-12-20 17:35 - 00347816 _____ (Microsoft Corporation) C:\Users\PC-Technik\Downloads\MicrosoftFixit.malware.FISC.134252040448177.1.1.Run.exe 2014-12-20 17:32 - 2014-12-20 17:32 - 00184704 _____ () C:\Users\PC-Technik\Downloads\qsinstaller (1).exe 2014-12-20 17:28 - 2014-12-20 17:28 - 00184704 _____ () C:\Users\PC-Technik\Downloads\qsinstaller.exe 2014-12-20 14:15 - 2014-12-20 14:15 - 00103798 _____ () C:\Users\PC-Technik\Desktop\Extras.Txt 2014-12-20 14:13 - 2014-12-20 14:13 - 00156318 _____ () C:\Users\PC-Technik\Desktop\OTL.Txt 2014-12-20 14:05 - 2014-12-20 14:05 - 00602112 _____ (OldTimer Tools) C:\Users\PC-Technik\Desktop\OTL.exe 2014-12-20 13:08 - 2014-12-20 14:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2014-12-20 13:08 - 2014-12-20 13:20 - 00000000 ____D () C:\Users\PC-Technik\Desktop\mbar 2014-12-20 13:08 - 2014-12-20 13:08 - 00135384 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-12-20 13:08 - 2014-12-20 13:08 - 00096472 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-12-20 13:07 - 2014-12-20 13:07 - 16448208 _____ (Malwarebytes Corp.) C:\Users\PC-Technik\Desktop\mbar-1.08.2.1001.exe 2014-12-20 12:38 - 2014-12-20 12:57 - 00000000 ____D () C:\ComboFix 2014-12-20 12:38 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-12-20 12:38 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-12-20 12:38 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-12-20 12:35 - 2014-12-20 12:56 - 00000000 ____D () C:\Qoobox 2014-12-20 12:35 - 2014-12-20 12:55 - 00000000 ____D () C:\Windows\erdnt 2014-12-20 12:34 - 2014-12-20 12:34 - 05601641 ____R (Swearware) C:\Users\PC-Technik\Desktop\ComboFix.exe 2014-12-20 12:32 - 2014-12-20 12:32 - 00002634 _____ () C:\Users\PC-Technik\Downloads\Winmgmt.reg 2014-12-20 11:59 - 2014-12-20 12:35 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part28.rar 2014-12-20 11:29 - 2014-12-20 12:37 - 00001945 _____ () C:\Windows\epplauncher.mif 2014-12-20 03:17 - 2014-12-20 13:08 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-12-20 03:14 - 2014-12-20 03:14 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\PC-Technik\Downloads\mbam-setup-2.0.4.1028.exe 2014-12-20 02:11 - 2014-12-20 02:27 - 47016448 _____ () C:\Users\PC-Technik\Downloads\1555.part28.rar.crdownload 2014-12-20 00:18 - 2014-12-20 00:18 - 12290974 _____ (ImageWriter Developers ) C:\Users\PC-Technik\Downloads\Win32DiskImager-0.9.5-install.exe 2014-12-20 00:10 - 2014-12-20 00:15 - 220806959 _____ () C:\Users\PC-Technik\Downloads\cm-11-20141112-SNAPSHOT-M12-mondrianwifi.zip 2014-12-20 00:09 - 2014-12-20 00:14 - 245457499 _____ () C:\Users\PC-Technik\Downloads\cm-11-20141112-SNAPSHOT-M12-pollux_windy.zip 2014-12-19 23:00 - 2014-12-19 23:00 - 02056192 _____ () C:\Users\PC-Technik\Downloads\CMInstaller.msi 2014-12-19 16:47 - 2014-12-19 16:47 - 06078240 _____ () C:\Users\PC-Technik\Downloads\67751-29219.apk 2014-12-19 16:36 - 2014-12-19 17:12 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part24.rar 2014-12-19 03:52 - 2014-12-19 04:12 - 00000000 ____D () C:\AdwCleaner 2014-12-19 03:52 - 2014-12-19 03:52 - 02166272 _____ () C:\Users\PC-Technik\Downloads\adwcleaner_4.105.exe 2014-12-19 03:22 - 2014-12-19 03:32 - 00016405 _____ () C:\Users\PC-Technik\Desktop\hijackthis.log 2014-12-19 02:57 - 2014-12-19 02:59 - 00000000 ____D () C:\Program Files (x86)\toolstarFRPRO 2014-12-19 02:13 - 2014-12-19 03:03 - 00000000 ____D () C:\Program Files (x86)\Disk Doctors FAT Data Recovery 2014-12-19 02:12 - 2014-12-19 02:13 - 00000000 ____D () C:\Program Files (x86)\Disk Doctors Instant File Recovery 2014-12-19 02:07 - 2014-12-19 02:08 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Data recoverys 2014-12-18 23:49 - 2014-12-19 00:24 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part27.rar 2014-12-18 19:20 - 2014-12-18 19:56 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part23.rar 2014-12-18 13:01 - 2014-12-18 13:37 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part20.rar 2014-12-18 10:42 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-12-18 10:42 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-12-18 02:09 - 2014-12-18 02:45 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part19.rar 2014-12-17 17:55 - 2014-12-17 17:55 - 00000000 ____D () C:\Program Files\LSoft Technologies 2014-12-17 17:51 - 2014-12-17 17:52 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Haus 2014-12-17 16:39 - 2014-12-17 16:39 - 00000255 _____ () C:\Users\PC-Technik\Downloads\houseindustryremix (1).m3u 2014-12-17 16:13 - 2014-12-17 16:13 - 00000255 _____ () C:\Users\PC-Technik\Downloads\houseindustryremix.m3u 2014-12-17 15:03 - 2014-12-17 15:39 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part18.rar 2014-12-17 04:15 - 2014-12-17 04:51 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part17.rar 2014-12-17 01:11 - 2014-12-17 01:47 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part16.rar 2014-12-16 20:12 - 2014-12-16 20:48 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part15.rar 2014-12-16 16:26 - 2014-12-16 17:02 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part14.rar 2014-12-16 13:21 - 2014-12-16 13:53 - 536070392 _____ () C:\Users\PC-Technik\Downloads\Airplane.Repo.-.Die.Inkasso-Piloten.S02E02.Die.Helikopter.Flugschule.rar 2014-12-16 13:13 - 2014-12-16 13:49 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part13.rar 2014-12-16 03:51 - 2014-12-16 04:27 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part12.rar 2014-12-16 00:38 - 2014-12-16 01:14 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part11.rar 2014-12-15 19:58 - 2014-12-15 20:34 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part10.rar 2014-12-15 15:48 - 2014-12-15 16:24 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part09.rar 2014-12-15 12:47 - 2014-12-15 13:23 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part08.rar 2014-12-15 03:40 - 2014-12-15 04:16 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part07.rar 2014-12-14 18:56 - 2014-12-14 19:32 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part06.rar 2014-12-14 01:36 - 2014-12-14 02:12 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part04.rar 2014-12-13 22:35 - 2014-12-13 23:10 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part05.rar 2014-12-13 21:27 - 2014-12-13 21:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2014-12-13 15:33 - 2014-12-13 16:09 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part03.rar 2014-12-13 04:24 - 2014-12-13 05:00 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part02.rar 2014-12-12 23:32 - 2014-12-13 00:07 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part01.rar 2014-12-12 23:16 - 2014-12-16 17:14 - 00000000 ____D () C:\Users\PC-Technik\Documents\Usenet.nl 2014-12-12 23:16 - 2014-12-12 23:16 - 07457256 _____ ( ) C:\Users\PC-Technik\Downloads\UsenetNLSetup_1.30.exe 2014-12-12 22:04 - 2014-12-12 22:25 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\UseNeXT 2014-12-12 22:04 - 2014-12-12 22:22 - 00000000 ____D () C:\Users\PC-Technik\Documents\UseNeXT 2014-12-12 22:02 - 2014-12-12 22:02 - 05270008 _____ (Tangysoft Ltd. ) C:\Users\PC-Technik\Downloads\UseNeXT_freetrial_421828w.exe 2014-12-12 15:32 - 2014-12-19 02:13 - 00000267 _____ () C:\Windows\Crypkey.ini 2014-12-12 15:32 - 2006-03-01 02:10 - 00069632 _____ (CrypKey (Canada) Ltd.) C:\Windows\SysWOW64\Crypserv.exe 2014-12-12 15:32 - 2006-01-10 03:47 - 00031846 _____ () C:\Windows\SysWOW64\Ckldrv.sys 2014-12-12 15:32 - 1999-06-18 22:49 - 00165888 _____ (Kenonic Controls) C:\Windows\Ckconfig.exe 2014-12-12 15:32 - 1996-05-03 18:21 - 00027648 ____R () C:\Windows\Setup_ck.exe 2014-12-12 15:32 - 1996-05-03 16:36 - 00018432 _____ () C:\Windows\Setup_ck.dll 2014-12-12 15:32 - 1995-07-04 19:33 - 00011776 _____ () C:\Windows\Ckrfresh.exe 2014-12-12 15:31 - 2014-12-19 02:11 - 00000000 ____D () C:\Program Files (x86)\Disk Doctors Instant File Recovery2 2014-12-11 04:58 - 2014-12-11 05:47 - 39067974 _____ () C:\Users\PC-Technik\Desktop\1.1million word list1.txt 2014-12-11 04:41 - 2014-12-11 04:41 - 01187372 _____ () C:\Users\PC-Technik\Downloads\wordlist-ao-20101027.txt.xz 2014-12-11 04:40 - 2014-12-11 04:40 - 00692513 _____ () C:\Users\PC-Technik\Downloads\EOWL-v1.1.2.zip 2014-12-11 04:34 - 2014-12-11 04:35 - 10389619 _____ () C:\Users\PC-Technik\Desktop\1.1million word list.txt 2014-12-11 04:16 - 2014-12-11 04:16 - 01487872 _____ () C:\Users\PC-Technik\Downloads\UnRarIt-13.03.10 (1).msi 2014-12-11 04:13 - 2014-12-11 04:13 - 00000000 ____D () C:\Users\PC-Technik\Downloads\BruteForce_0.9.1 2014-12-11 04:11 - 2014-12-11 04:17 - 00003037 _____ () C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UnRarIt.Net.lnk 2014-12-11 04:11 - 2014-12-11 04:12 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\.unrarit 2014-12-11 04:11 - 2014-12-11 04:11 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\Nils_Maier 2014-12-11 04:11 - 2014-12-11 04:11 - 00000000 ____D () C:\Program Files (x86)\Nils Maier 2014-12-11 04:10 - 2014-12-11 04:10 - 01487872 _____ () C:\Users\PC-Technik\Downloads\UnRarIt-13.03.10.msi 2014-12-11 04:00 - 2014-12-11 04:00 - 02169813 _____ () C:\Users\PC-Technik\Downloads\BruteForce_0.9.1.zip 2014-12-11 03:46 - 2014-12-11 03:46 - 05745152 _____ () C:\Users\PC-Technik\Downloads\archpr_setup_en.msi 2014-12-11 03:44 - 2014-12-11 03:44 - 01020928 _____ () C:\Users\PC-Technik\Downloads\Advanced Archive Password Recovery 4.54.exe 2014-12-11 03:30 - 2014-12-11 03:30 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Car DVD 2014-12-11 03:20 - 2014-12-11 03:20 - 00000000 ____D () C:\Windows\system32\appraiser 2014-12-11 03:16 - 2014-12-11 03:16 - 05745152 _____ () C:\Users\PC-Technik\Downloads\archpr_5455setup_en.msi 2014-12-11 03:01 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-12-11 03:01 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-12-11 03:01 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-12-11 03:01 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2014-12-11 03:01 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2014-12-11 03:01 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2014-12-11 03:01 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2014-12-11 03:01 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2014-12-11 03:01 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2014-12-11 03:01 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2014-12-11 00:18 - 2014-12-21 16:46 - 00000320 _____ () C:\Windows\Tasks\Kijv.job 2014-12-11 00:18 - 2014-12-11 00:18 - 00167936 __RSH () C:\Windows\SysWOW64\KBDCZA.dll 2014-12-11 00:18 - 2014-12-11 00:18 - 00002600 _____ () C:\Windows\System32\Tasks\Kijv 2014-12-10 23:18 - 2014-12-10 23:18 - 00160037 _____ () C:\Users\Public\Documents\DD_IFR_Scan_Info# Wed, 10-Dec-2014.dds 2014-12-10 21:50 - 2014-12-10 21:50 - 00632298 _____ () C:\Users\PC-Technik\Downloads\web_sitemap_03180ea3_046.xml.gz 2014-12-10 09:40 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-12-10 09:40 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-12-10 09:40 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2014-12-10 09:39 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-12-10 09:39 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-12-10 09:39 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-12-10 09:39 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-12-10 09:39 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-12-10 09:39 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-12-10 09:39 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-12-10 09:39 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-12-10 09:39 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-12-10 09:39 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-12-10 09:39 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-12-10 09:39 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-12-10 09:39 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-12-10 09:39 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-12-10 09:39 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-12-10 09:39 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-12-10 09:39 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-10 09:39 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-12-10 09:39 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-12-10 09:39 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-12-10 09:39 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-10 09:39 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-12-10 09:39 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-12-10 09:39 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-12-10 09:39 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-12-10 09:39 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-12-10 09:39 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-12-10 09:39 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-12-10 09:39 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-12-10 09:39 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-12-10 09:39 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-12-10 09:39 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-12-10 09:39 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-12-10 09:39 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-12-10 09:39 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-12-10 09:39 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-12-10 09:39 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-12-10 09:39 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-12-10 09:39 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-12-10 09:39 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-12-10 09:39 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-12-10 09:39 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-12-10 09:39 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-12-10 09:39 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-12-10 09:39 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-12-10 09:39 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-12-10 09:39 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-12-10 09:39 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-12-10 09:39 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-12-10 09:39 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-12-10 09:39 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-12-10 09:39 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-12-10 09:39 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-12-10 09:39 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-12-10 09:39 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-10 09:39 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-12-10 09:39 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-12-10 09:39 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-12-10 09:39 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-12-10 09:39 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2014-12-10 09:39 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2014-12-10 09:39 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-12-10 09:39 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-10 09:39 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2014-12-10 09:39 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2014-12-10 09:39 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2014-12-10 09:39 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2014-12-10 09:39 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2014-12-10 09:39 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2014-12-10 09:39 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2014-12-10 09:39 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe 2014-12-07 02:16 - 2014-12-07 02:16 - 00011761 _____ () C:\Users\PC-Technik\Downloads\the_2k12.zip 2014-12-07 01:56 - 2014-12-11 03:31 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Red Rose HP Neu 2014-12-05 01:20 - 2014-12-05 01:23 - 00009216 ___SH () C:\Users\PC-Technik\Documents\Thumbs.db 2014-12-04 15:06 - 2014-12-04 15:06 - 00000230 _____ () C:\Users\PC-Technik\Downloads\houseindustry (4).m3u 2014-12-03 19:58 - 2014-12-11 03:19 - 00001494 _____ () C:\Users\PC-Technik\Desktop\links.txt 2014-12-01 04:36 - 2014-12-11 03:33 - 00000000 ____D () C:\Users\PC-Technik\Desktop\QR Codes 2014-12-01 02:26 - 2014-12-01 02:26 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\TeamViewer 2014-11-25 18:01 - 2014-11-27 14:55 - 02923520 _____ () C:\Users\PC-Technik\Desktop\Bauträger Anbot.msg 2014-11-25 02:11 - 2014-11-25 02:13 - 00000000 ____D () C:\Users\PC-Technik\Downloads\cache 2014-11-24 23:41 - 2014-11-24 23:41 - 00000230 _____ () C:\Users\PC-Technik\Downloads\houseindustry (3).m3u 2014-11-24 19:14 - 2014-11-24 19:16 - 377555464 _____ () C:\Users\PC-Technik\Downloads\Toni Andi Lewi-HD.mp4 2014-11-24 19:14 - 2014-11-24 19:15 - 122726550 _____ () C:\Users\PC-Technik\Downloads\Toni Andi Lewi-SD.mp4 2014-11-22 02:01 - 2014-11-22 02:01 - 00000230 _____ () C:\Users\PC-Technik\Downloads\houseindustry (2).m3u ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-21 17:07 - 2014-01-18 08:32 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\CrashDumps 2014-12-21 17:02 - 2009-07-14 05:45 - 00017360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-21 17:02 - 2009-07-14 05:45 - 00017360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-21 17:00 - 2013-10-05 22:00 - 00413914 _____ () C:\Users\PC-Technik\Network_Meter_Data.js 2014-12-21 16:58 - 2013-10-05 18:13 - 01474948 _____ () C:\Windows\WindowsUpdate.log 2014-12-21 16:53 - 2014-09-11 06:48 - 00000948 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000UA.job 2014-12-21 16:51 - 2013-10-05 21:42 - 00756352 _____ () C:\Windows\system32\perfh007.dat 2014-12-21 16:51 - 2013-10-05 21:42 - 00170398 _____ () C:\Windows\system32\perfc007.dat 2014-12-21 16:51 - 2009-07-14 06:13 - 01798624 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-12-21 16:50 - 2013-12-10 20:23 - 00000000 ___RD () C:\Users\PC-Technik\Dropbox 2014-12-21 16:50 - 2013-12-10 20:19 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Dropbox 2014-12-21 16:48 - 2009-07-14 05:45 - 05247104 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-12-21 16:47 - 2014-10-01 19:19 - 00000000 ___RD () C:\Users\PC-Technik\iCloudDrive 2014-12-21 16:47 - 2014-01-27 17:41 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-12-21 16:47 - 2013-10-05 21:26 - 00187600 _____ () C:\Users\PC-Technik\AppData\Local\GDIPFONTCACHEV1.DAT 2014-12-21 16:46 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-21 16:46 - 2009-07-14 05:51 - 00001451 _____ () C:\Windows\setupact.log 2014-12-21 16:45 - 2013-10-05 19:09 - 01070590 _____ () C:\Windows\PFRO.log 2014-12-21 16:45 - 2009-07-14 08:46 - 00000000 ____D () C:\Windows\CSC 2014-12-21 16:44 - 2013-10-05 21:43 - 00000030 _____ () C:\Users\PC-Technik\AppData\Roaming\Network Meter_Usage.ini 2014-12-21 16:30 - 2014-01-27 17:41 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-12-21 09:28 - 2014-04-02 12:05 - 00000000 ____D () C:\Users\DefaultAppPool 2014-12-21 09:28 - 2013-10-24 00:14 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Admin 2014-12-21 09:28 - 2013-10-06 02:15 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\Akamai 2014-12-21 09:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-12-21 07:53 - 2014-09-11 06:48 - 00000926 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000Core.job 2014-12-21 06:29 - 2009-07-14 03:34 - 00000870 _____ () C:\Windows\win.ini 2014-12-21 05:54 - 2009-07-14 03:34 - 00000855 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_557 2014-12-21 05:32 - 2013-10-05 20:51 - 00000000 ____D () C:\Users\PC-Technik\Documents\Outlook-Dateien 2014-12-21 03:37 - 2013-10-06 01:39 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\B9F30EF3-249A-4758-9030-64EE56A48147.aplzod 2014-12-21 02:03 - 2013-11-18 19:31 - 00000058 _____ () C:\Users\PC-Technik\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat 2014-12-21 02:00 - 2013-10-05 18:59 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\Adobe 2014-12-21 00:37 - 2013-10-06 15:08 - 02464704 _____ () C:\Windows\PE_Rom.dll 2014-12-21 00:37 - 2013-10-06 15:08 - 00000000 _____ () C:\Windows\Path.idx 2014-12-21 00:31 - 2013-10-05 18:23 - 00000000 ____D () C:\Users\PC-Technik 2014-12-20 23:58 - 2013-10-05 18:38 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-12-20 13:21 - 2009-07-14 05:45 - 00000000 ____D () C:\Windows\Setup 2014-12-20 12:51 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-12-20 12:51 - 2009-07-14 03:34 - 00000027 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_400 2014-12-20 12:49 - 2009-07-14 03:34 - 25427968 _____ () C:\Windows\system32\config\system.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 128188416 _____ () C:\Windows\system32\config\software.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2014-12-20 03:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Resources 2014-12-20 03:42 - 2014-09-29 09:08 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-12-20 02:55 - 2014-01-27 20:26 - 00001908 _____ () C:\Windows\diagwrn.xml 2014-12-20 02:55 - 2014-01-27 20:26 - 00001908 _____ () C:\Windows\diagerr.xml 2014-12-20 02:53 - 2009-07-14 05:51 - 00000000 _____ () C:\Windows\setuperr.log 2014-12-20 02:48 - 2014-09-29 09:08 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2014-12-20 02:36 - 2013-10-06 13:01 - 00000000 ____D () C:\ProgramData\Package Cache 2014-12-19 04:49 - 2014-11-15 14:58 - 00000992 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk 2014-12-19 04:49 - 2013-10-05 18:53 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2014-12-19 04:19 - 2013-10-06 01:29 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2014-12-19 04:12 - 2014-01-27 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-12-19 04:12 - 2013-10-05 18:24 - 00001026 _____ () C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-12-19 03:43 - 2013-10-05 23:27 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2014-12-19 03:26 - 2014-04-17 14:03 - 00000000 ____D () C:\Users\PC-Technik\Downloads\sonstiges 2014-12-19 03:20 - 2013-12-10 20:19 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-12-19 03:02 - 2014-04-22 18:19 - 00000000 ____D () C:\Program Files (x86)\accordiva 2014-12-19 03:01 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-12-19 03:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-12-19 02:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-12-19 00:26 - 2014-04-02 01:23 - 00000000 ____D () C:\ProgramData\TEMP 2014-12-18 21:47 - 2014-09-05 17:23 - 00000000 ____D () C:\Users\PC-Technik\Downloads\transfer 2014-12-18 21:46 - 2014-11-14 02:25 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Videos Auto 2014-12-17 17:51 - 2014-09-16 20:33 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Events 2014-12-17 17:48 - 2014-11-18 20:29 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Pinky HP 2014-12-17 17:12 - 2013-12-08 21:26 - 00000000 ____D () C:\Users\PC-Technik\Desktop\ARNO 2014-12-17 05:53 - 2014-07-11 17:20 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\13542 2014-12-16 23:14 - 2014-09-06 13:57 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Mp3tag 2014-12-15 10:03 - 2013-10-05 19:05 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-12-13 03:00 - 2013-10-05 21:50 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-12-11 03:33 - 2014-11-10 19:10 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Welcome to House Industry Radio video 2014-12-11 03:33 - 2014-09-15 11:36 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Sagay Promotion 2014-12-11 03:20 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-12-11 03:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-12-11 03:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat 2014-12-11 03:19 - 2013-10-21 23:05 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\BitTorrent 2014-12-11 03:17 - 2014-05-14 20:59 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-12-11 03:09 - 2013-10-05 21:09 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-12-11 03:09 - 2013-10-05 21:09 - 00000000 ____D () C:\Windows\system32\MRT 2014-12-11 02:03 - 2014-05-14 18:20 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Musik 2014-12-05 17:28 - 2013-10-05 20:36 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Software 2014-12-05 16:48 - 2013-11-01 21:14 - 00000000 ____D () C:\Users\PC-Technik\Downloads\EZ Generator 2014-11-28 00:03 - 2014-11-19 15:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EzGenerator 2014-11-27 17:51 - 2014-08-15 00:20 - 00000000 ____D () C:\Users\PC-Technik\Desktop\fail 2014-11-25 16:50 - 2013-10-13 19:32 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Verkauf 2014-11-22 00:30 - 2013-10-07 11:04 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Skype Files to move or delete: ==================== C:\Users\PC-Technik\Network_Meter_Data.js Some content of TEMP: ==================== C:\Users\PC-Technik\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwu05ve.dll C:\Users\PC-Technik\AppData\Local\Temp\DseShExt-x64.dll C:\Users\PC-Technik\AppData\Local\Temp\DseShExt-x86.dll C:\Users\PC-Technik\AppData\Local\Temp\SDShelEx-win32.dll C:\Users\PC-Technik\AppData\Local\Temp\SDShelEx-x64.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-04-28 23:07 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-12-2014 01 Ran by PC-Technik at 2014-12-21 17:06:04 Running from C:\Users\PC-Technik\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acronis*Disk*Director*12 (HKLM-x32\...\{AE372858-B1BD-49EF-8308-648322846008}) (Version: 12.0.3223 - Acronis) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.1430 - Adobe Systems Incorporated) Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated) Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated) Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.199 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Illustrator CS5 (HKLM-x32\...\{9B97EC91-B3FD-4BFF-88FC-5345A26AC2E7}) (Version: 15.0 - Adobe Systems Incorporated) Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{D586BF67-0A61-4572-BE25-07B40C4CEDA1}) (Version: 13.0 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.) AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 2.00.05 - ASUSTeK Computer Inc.) Akamai NetSession Interface (HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Akamai) (Version: - Akamai Technologies, Inc) AMD Catalyst Install Manager (HKLM\...\{308051DA-0048-7A07-FE8B-9B6EC119A9E8}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.8.0 - Asmedia Technology) ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 3.0.143.296 - ASUS Cloud Corporation) Asus_LCD_ScreenSaver (HKLM-x32\...\Asus_LCD_ScreenSaver) (Version: 1.0.0001 - ASUS) AutoCAD Mechanical 2014 - English (Version: 18.0.105.0 - Autodesk) Hidden AutoCAD Mechanical 2014 - English (Version: 18.0.17.0 - Autodesk) Hidden AutoCAD Mechanical 2014 - English SP1 (HKLM\...\AutoCAD Mechanical 2014 - English SP1) (Version: 1 - Autodesk) AutoCAD Mechanical 2014 Language Pack - English (Version: 18.0.17.0 - Autodesk) Hidden Autodesk 360 (HKLM\...\{52B28CAD-F49D-47BA-9FFE-29C2E85F0D0B}) (Version: 4.8.5.800 - Autodesk) Autodesk App Manager (HKLM-x32\...\{C070121A-C8C5-4D52-9A7D-D240631BD433}) (Version: 1.1.0 - Autodesk) Autodesk AutoCAD Mechanical 2014 - English (HKLM\...\AutoCAD Mechanical 2014 - English) (Version: 18.0.17.0 - Autodesk) Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk) Autodesk Content Service (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Design Review 2013 (HKLM-x32\...\Autodesk Design Review 2013) (Version: 13.0.0.82 - Autodesk, Inc.) Autodesk Design Review 2013 (x32 Version: 13.0.0.82 - Autodesk, Inc.) Hidden Autodesk DWG TrueView 2014 (HKLM\...\DWG TrueView 2014) (Version: 19.1.18.0 - Autodesk) Autodesk Featured Apps (HKLM-x32\...\{F732FEDA-7713-4428-934B-EF83B8DD65D0}) (Version: 1.1.0 - Autodesk) Autodesk Inventor View 2014 - English (HKLM\...\Autodesk Inventor View 2014) (Version: 18.0.16600.0000 - Autodesk) Autodesk Inventor View 2014 (Version: 18.0.16600.0000 - Autodesk) Hidden Autodesk Inventor View 2014 English Language Pack (Version: 18.0.16600.0000 - Autodesk) Hidden Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk) Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk) Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.0.43.13 - Autodesk) Autodesk ReCap (Version: 1.0.43.13 - Autodesk) Hidden Autodesk ReCap Language Pack-English (Version: 1.0.43.13 - Autodesk) Hidden Autodesk Vault Basic 2014 (Client) (HKLM\...\Autodesk Vault Basic 2014 (Client)) (Version: 18.0.86.0 - Autodesk) Autodesk Vault Basic 2014 (Client) (Version: 18.0.86.0 - Autodesk) Hidden Autodesk Vault Basic 2014 (Client) English Language Pack (Version: 18.0.86.0 - Autodesk) Hidden BitTorrent (HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\BitTorrent) (Version: 7.9.2.34026 - BitTorrent Inc.) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Camtasia Studio 7 (HKLM-x32\...\{DE042823-C359-4B87-B66B-308057E8B6AF}) (Version: 7.0.1 - TechSmith Corporation) Camtasia Studio 8 (HKLM-x32\...\{F5C9BE9A-04C3-4A72-8CD0-BB67C722D608}) (Version: 8.1.2.1344 - TechSmith Corporation) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) concept/design Hit-Recorder 6 (HKLM-x32\...\{F0B89B5C-7010-4AA1-8F89-83A45FCFDBE1}_is1) (Version: 6.8.2.0 - concept/design GmbH) concept/design onlineTV 10 (HKLM-x32\...\{DCAB9AAC-1D1C-4B94-99B7-AA7D2617BD64}_is1) (Version: 10.6.0.0 - concept/design GmbH) concept/design Video Jukebox (HKLM-x32\...\{37569A10-CB38-4615-8B32-0BF9FF5D887D}_is1) (Version: 1.3.0.0 - concept/design GmbH) Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{51DD370C-6690-424E-9674-5F14468B323F}) (Version: 15.0.0.487 - Corel Corporation) Corel Graphics - Windows Shell Extension (x32 Version: 15.0.487 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Capture (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Common (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Connect (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Custom Data (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - DE (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Draw (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Filters (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - FontNav (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - IPM (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - PHOTO-PAINT (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Photozoom Plugin (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Redist (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Setup Files (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VBA (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VideoBrowser (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VSTA (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit (Version: 15.0.487 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - WT (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW(R) Graphics Suite X5 (HKLM-x32\...\_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}) (Version: 15.0.0.486 - Corel Corporation) CutStudio (HKLM-x32\...\{AB84E88F-89CA-4002-A6F4-422C2C8CB1F8}) (Version: - ) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0337 - Disc Soft Ltd) DeviceClient Version 81.2.0.38 (HKLM-x32\...\{45D0CE08-14DE-4F94-AE24-6151BBE6FA90}_is1) (Version: 81.2.0.38 - DeviceClient, Inc.) Disk Unlocker (HKLM-x32\...\{FE73C47E-0FF8-47A6-A903-FFA827A4B43D}) (Version: 2.0.8 - ASUS) DivX 4.02 Codec (HKLM-x32\...\DivXCodec) (Version: - ) Dropbox (HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.) DWG TrueView 2014 (Version: 19.1.18.0 - Autodesk) Hidden EaseUS Data Recovery Wizard 5.6.5 (HKLM-x32\...\EaseUS Data Recovery Wizard 5.6.5_is1) (Version: - EaseUS) EaseUS Partition Master 9.2.2 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS) eMule (HKLM-x32\...\eMule) (Version: - ) EzGenerator 4.0 (HKLM-x32\...\EzGenerator) (Version: 4.0 - Image-line) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) Free YouTube Download version 3.2.44.908 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.44.908 - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.12.46.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Hardlock Device Drivers (HKLM-x32\...\Hardlock Device Drivers) (Version: - ) Hemera Photo-Objects 50,000 Volume III (HKLM-x32\...\InstallShield_{1E895714-8499-42AB-A1F0-F6E6455D3E3D}) (Version: 3.0.2 - Hemera Technologies Inc.) Hemera Photo-Objects 50,000 Volume III (x32 Version: 3.0.2 - Hemera Technologies Inc.) Hidden Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{8E87B944-4815-3C5E-947F-5035C9F64362}.KB947789) (Version: 1 - Microsoft Corporation) iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.) IPCamSetup version 3.6 (HKLM-x32\...\{260DA250-E830-4BC3-BFCF-5CB4970FAE89}_is1) (Version: 3.6 - 111) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle) Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation) JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.62.0 - JMicron Technology Corp.) K-Lite Codec Pack 10.1.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.1.5 - ) LifeFrame2 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 2.0.22 - ASUS) Logitech Vid (HKLM-x32\...\{4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}) (Version: 1.10.1009 - Logitech Inc.) Logitech Webcam Software (HKLM\...\{987FE247-4E69-4A2E-A961-D14F901FDBF6}) (Version: 12.10.1113 - Logitech Inc.) Logitech Webcam Software-Treiberpaket (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{aec97477-921a-4289-985a-9e29506625b6}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (HKLM-x32\...\{8E87B944-4815-3C5E-947F-5035C9F64362}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (HKLM-x32\...\{76DAEC83-AF7B-333C-8A53-83D7C7D39199}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation) MixMeister BPM Analyzer 1.0 (HKLM-x32\...\MixMeister BPM Analyzer_is1) (Version: - MixMeister Technology LLC) Mp3tag v2.63 (HKLM-x32\...\Mp3tag) (Version: v2.63 - Florian Heidenreich) MP3Test (HKLM-x32\...\{BE802A6E-7F0D-4333-B45E-80F06C4DC59C}}_is1) (Version: 1.7.0.172 - Markus Stein) MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project) MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MyFreeCodec (HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\MyFreeCodec) (Version: - ) Need for Speed(TM) Hot Pursuit (HKLM-x32\...\{83A606F5-BF6F-42ED-9F33-B9F74297CDED}) (Version: 1.0.0.0 - Electronic Arts) Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia) Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.48.0 - Nokia) Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Hidden O&O DiskRecovery (HKLM\...\{B5C1C153-E74E-47BC-B8BC-AAB09F1587F6}) (Version: 9.0.252 - O&O Software GmbH) O&O DiskStat Professional (HKLM\...\{99D1FFD1-1EFE-4FA0-B225-5815E039BB25}) (Version: 2.0.396 - O&O Software GmbH) O&O PartitionManager Professional (HKLM\...\{5F67177B-77D9-4E19-B98A-514C45C9CF6D}) (Version: 3.0.199 - O&O Software GmbH) Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia) PC Inspector smart recovery (HKLM-x32\...\{C9A87D86-FDFD-418B-BF96-EF09320973B3}) (Version: 4.50 - ) PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6642 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D12314F45EB}) (Version: 1.00.0179 - ) Roland CAMM-1 DRIVER [GX-24] (HKLM-x32\...\{1DDCBC8D-62FD-484E-9CAC-F05D7D51D93B}) (Version: 1.10.0000 - Roland DG Corporation) Roland CAMM-1 DRIVER [GX-640] (HKLM-x32\...\{B0EA703B-4F38-4C44-AAAA-424DFCD776E5}) (Version: 1.10.0000 - Roland DG Corporation) Roland VersaWorks (HKLM-x32\...\{85ABD69B-69DE-4A8F-9DF3-20BCE9038B09}) (Version: 1.1 - Your Company Name) SAM Broadcaster v4 (HKLM-x32\...\SAM3) (Version: v4 - Spacial Audio Solutions, LLC) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.) Screenshot Captor 4.9.1 (HKLM-x32\...\ScreenshotCaptor_is1) (Version: - ) Security Monitor Pro 4.4 (HKLM-x32\...\Security Monitor Pro DotNet_is1) (Version: - Deskshare Inc.) SerialKey Builder (x32 Version: 1.0 - Vicentas) Hidden Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SketchUp Import for AutoCAD 2014 (HKLM-x32\...\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation) Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer) Unity Web Player (HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\UnityWebPlayer) (Version: 2.6.1f3_31223 - Unity Technologies ApS) UnRarIt.Net (HKLM-x32\...\{21C1D723-D756-4C40-B563-F3773E8A2FC8}) (Version: 13.03.10 - Nils Maier) VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN) WinDFT (HKLM-x32\...\{065F384A-5C64-4532-814A-A24BA5374503}) (Version: 1.0.0 - HGST) Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation) Windows Driver Package - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia) WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH) WinSysClean X5 (Version: 15.01 - Ultimate Systems, Inc.) Hidden ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor View 2014\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{25815CC0-43F4-3C75-8C3A-A139D9ADE740}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2014\en-US\dwgviewrficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{5b55a44a-d008-49aa-9234-86fb7709bc0a}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor View 2014\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor View 2014\Bin\RxApprenticeServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor View 2014\Bin\RxInventorUtilities.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2014\en-US\acadficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ==================== Restore Points ========================= 20-12-2014 02:52:37 notfall 20 12 2014 20-12-2014 11:26:48 Windows Update 20-12-2014 13:19:35 Malwarebytes Anti-Rootkit Restore Point 20-12-2014 14:28:58 TuneUp Utilities 2014 wird entfernt 20-12-2014 14:29:41 TuneUp Utilities 2014 (de-DE) wird entfernt 20-12-2014 21:19:46 Removed CM Installer 20-12-2014 23:45:45 TuneUp Utilities 2014 wird installiert 21-12-2014 05:38:36 Tweaking.com - Windows Repair 21-12-2014 06:12:33 Removed CM Installer ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2014-12-21 06:29 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0D2812A5-7864-41EB-BB7A-91B5117B1FCA} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {26EC14CC-DA1B-44F4-87EF-0E67C079D523} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {391B5D68-2459-402E-A0D6-ADD8144DC7B5} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2014-12-01] (Apple Inc.) Task: {470F9E57-CE61-45B2-8152-2CC2E4665F2C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000UA => C:\Users\PC-Technik\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-09-11] (Facebook Inc.) Task: {497C76C2-CE83-494F-9B99-9528CAF1B0CA} - System32\Tasks\{B6DCE3FC-DD6E-4E8A-9977-994011564FAA} => pcalua.exe -a C:\Users\PC-Technik\Downloads\reflash_package.exe -d C:\Users\PC-Technik\Downloads Task: {549B4A3C-F857-44DF-B0E4-AD83227CCB65} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-27] (Google Inc.) Task: {56828667-C1B4-4FFE-B977-3AE2D5AA7B4F} - System32\Tasks\{D2CFB595-06B7-4333-9C5C-FCD576233DF1} => C:\Users\PC-Technik\Downloads\Cocut\Eurosystems Cocut Pro 4x3 v13.1.10 Multilanguage Dongle Cracked-Signmaker\Eurosystems_CoCut_PRO_4X3_v13.1.10_Multilanguage_DONGLE_CRACKED-SiGNMAKER\scp1311\cocut4x3pro.exe Task: {6231839E-BD1F-444F-A053-6DC01370F6FC} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {627A309B-3A7F-4C9E-8D69-91F13DBAD151} - System32\Tasks\AdobeAAMUpdater-1.0-PC-Technik-PC-PC-Technik => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated) Task: {6625D200-8A8D-4698-8771-5184BA8A87D9} - System32\Tasks\Kijv => Rundll32.exe "C:\Windows\SysWOW64\KBDCZA.dll",Foaegckbwy Task: {6B27E16A-5FD4-4F69-AE88-4F6079C60BA3} - System32\Tasks\{57744DD5-6428-48BA-B18F-72309B3F8D8A} => pcalua.exe -a "E:\Graphiken für Cutter\z fonts\SETUP32.EXE" -d "E:\Graphiken für Cutter\z fonts" Task: {7441CFCE-D7C9-45D1-86DF-9C18201D203B} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20] (Adobe Systems Incorporated) Task: {7AC1638D-41E5-424E-BAA0-657399CD5A76} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {811F8DE5-5226-48E6-AA2B-E22B424AAB89} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation) Task: {8FA0AE51-1AE1-4443-9CF2-A03E3737E1F3} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.) Task: {9168EDC7-8BA9-4610-9C68-019287BC4CC4} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe Task: {A81FA06D-30B5-4631-BBEE-A6BBCCAD6BF2} - System32\Tasks\ArcSoft Connect Daemon => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe Task: {ABFB7FF0-57F3-44F0-ABA7-DB8B1529DDE3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation) Task: {B54F6A7C-E7E5-4E3D-8E5D-D35FA8F3F369} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {B760BF35-DD6B-4CD8-B3C3-9F61A9516C2A} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {CA9A330F-EF5F-4BDA-96B4-AB094286B277} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-27] (Google Inc.) Task: {CE178753-D01D-4EC7-BB90-4546ADE5FEE6} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [2011-09-09] () Task: {D826ED54-EF64-435E-B16D-C85D07A7D47D} - System32\Tasks\{608B7513-843E-40F7-AFA4-CB752D468F78} => C:\Users\PC-Technik\Downloads\Cocut\Eurosystems Cocut Pro 4x3 v13.1.10 Multilanguage Dongle Cracked-Signmaker\Eurosystems_CoCut_PRO_4X3_v13.1.10_Multilanguage_DONGLE_CRACKED-SiGNMAKER\scp1311\cocut4x3pro.exe Task: {ED1CB69C-9961-401A-877E-FA74D22CB59B} - System32\Tasks\ASUS\ASUS DigiVRM Help => C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe [2011-04-13] (ASUSTeK Computer Inc.) Task: {F66693FC-1DBB-42F4-846F-A0B41C08F888} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft) Task: {F7D06659-96B7-4BEE-8CD6-AA647242850C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000Core => C:\Users\PC-Technik\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-09-11] (Facebook Inc.) Task: {FDB3AD25-87F3-4089-9D88-BA408545C9FE} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07] (Oracle Corporation) Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000Core.job => C:\Users\PC-Technik\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000UA.job => C:\Users\PC-Technik\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Kijv.job => C:\Windows\SysWOW64\KBDCZA.dll ==================== Loaded Modules (whitelisted) ============= 2013-12-06 16:06 - 2013-12-06 16:06 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll 2013-07-26 05:59 - 2013-07-26 05:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll 2013-07-26 05:59 - 2013-07-26 05:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll 2013-10-06 02:33 - 2012-09-11 15:54 - 00920736 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe 2013-10-06 02:40 - 2010-12-02 09:15 - 00915584 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe 2013-10-05 21:38 - 2013-10-05 21:38 - 00012520 _____ () C:\Users\PC-Technik\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\CoreTempReader.dll 2013-10-05 21:38 - 2013-10-05 21:38 - 00015080 _____ () C:\Users\PC-Technik\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\GetCoreTempInfoNET.dll 2013-10-05 21:38 - 2013-10-05 21:38 - 00014056 _____ () C:\Users\PC-Technik\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\SystemInfo.dll 2013-12-06 16:06 - 2013-12-06 16:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 12:05 - 2014-10-11 12:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-10-06 02:33 - 2014-12-21 16:46 - 00033280 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll 2013-10-06 02:33 - 2012-09-11 15:52 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll 2013-10-05 18:28 - 2009-12-09 20:20 - 00126976 _____ () C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\EnumDevLib.dll 2013-10-05 18:29 - 2011-07-15 11:03 - 00693760 ____R () C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\P2PLib.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2014-10-22 01:22 - 2014-10-22 01:22 - 00750080 _____ () C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2014-12-21 16:49 - 2014-12-21 16:49 - 00043008 _____ () c:\Users\PC-Technik\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwu05ve.dll 2014-10-22 01:22 - 2014-10-22 01:22 - 00047616 _____ () C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\libEGL.dll 2014-10-22 01:22 - 2014-10-22 01:22 - 00863744 _____ () C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll 2014-10-22 01:22 - 2014-10-22 01:22 - 00200704 _____ () C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll 2014-12-11 14:31 - 2014-12-06 02:50 - 01077064 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libglesv2.dll 2014-12-11 14:31 - 2014-12-06 02:50 - 00211272 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\libegl.dll 2011-09-05 08:19 - 2011-09-05 08:19 - 00028672 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AxInterop.ShockwaveFlashObjects.dll 2014-12-11 14:31 - 2014-12-06 02:50 - 09009480 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\pdf.dll 2014-12-11 14:31 - 2014-12-06 02:50 - 01677128 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\ffmpegsumo.dll 2013-10-06 02:50 - 2011-03-04 15:33 - 00053248 ____N () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\HookKey32.dll 2013-10-06 02:50 - 2009-05-21 09:14 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\pngio.dll 2013-10-06 02:34 - 2011-07-12 18:14 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll 2013-10-06 02:34 - 2010-10-05 07:22 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll 2013-10-06 02:35 - 2011-09-26 18:36 - 00869376 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AI Charger+\AIChargerPlus.dll 2013-10-06 02:41 - 2011-03-09 13:55 - 01036800 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Update\Update.dll 2013-10-06 02:34 - 2012-03-21 11:07 - 00972288 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll 2013-10-06 02:46 - 2011-03-11 18:53 - 01257472 _____ () C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll 2013-10-06 02:48 - 2011-01-06 09:38 - 01027072 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll 2013-10-06 02:34 - 2012-05-25 09:33 - 00883712 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll 2013-10-06 02:34 - 2012-05-28 20:27 - 01622528 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll 2013-10-06 02:34 - 2011-09-19 19:18 - 01243136 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll 2013-10-06 02:34 - 2011-07-21 08:06 - 00846848 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll 2013-10-06 02:34 - 2011-10-14 19:03 - 00885248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll 2013-10-06 02:40 - 2010-08-23 09:17 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMLib.dll 2013-10-06 02:34 - 2010-10-05 07:22 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll 2013-10-06 02:34 - 2009-08-12 19:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll 2014-12-11 14:31 - 2014-12-06 02:50 - 14913352 _____ () C:\Program Files (x86)\Google\Chrome\Application\39.0.2171.95\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:07BB519E AlternateDataStreams: C:\ProgramData\TEMP:0A8E2C33 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PEVSystemStart => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\procexp90.Sys => ""="Driver" ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== |
22.12.2014, 16:26 | #5 |
/// the machine /// TB-Ausbilder | Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bit hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
22.12.2014, 17:08 | #6 |
| Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bit So hier das Logfile Code:
ATTFilter ComboFix 14-12-14.01 - PC-Technik 22/12/2014 16:52:06.2.8 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.43.1033.18.12233.7762 [GMT 1:00] ausgeführt von:: c:\users\PC-Technik\Desktop\ComboFix.exe . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\PC-Technik\AppData\Local\Adobe\downloader.dll c:\windows\msvcr71.dll c:\windows\SysWow64\local.txt . ---- Vorheriger Suchlauf ------- . C:\0.bak c:\users\PC-Technik\AppData\Local\Adobe\gccheck.exe c:\users\PC-Technik\AppData\Local\Adobe\gtbcheck.exe c:\users\PC-Technik\AppData\Roaming\Microsoft\Windows\Templates\1028.msi c:\users\PC-Technik\AppData\Roaming\Microsoft\Windows\Templates\1031.msi c:\users\PC-Technik\AppData\Roaming\Microsoft\Windows\Templates\1033.msi c:\users\PC-Technik\AppData\Roaming\Microsoft\Windows\Templates\1036.msi c:\users\PC-Technik\AppData\Roaming\Microsoft\Windows\Templates\1041.msi c:\users\PC-Technik\AppData\Roaming\Microsoft\Windows\Templates\2052.msi c:\windows\SysWow64\3f0a7d5d.dll c:\windows\SysWow64\bd3947b6.dll c:\windows\SysWow64\c2bc29ed.dll c:\windows\SysWow64\UNWISE.EXE . . ((((((((((((((((((((((((((((((((((((((( Treiber/Dienste ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Legacy_NETHFDRV . . ((((((((((((((((((((((( Dateien erstellt von 2014-11-22 bis 2014-12-22 )))))))))))))))))))))))))))))) . . 2014-12-22 16:01 . 2014-12-22 16:01 -------- d-----w- c:\users\DefaultAppPool\AppData\Local\temp 2014-12-22 16:01 . 2014-12-22 16:01 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-12-21 16:04 . 2014-12-21 16:08 -------- d-----w- C:\FRST 2014-12-21 05:33 . 2014-12-21 15:57 -------- d-----w- c:\windows\system32\catroot2 2014-12-21 04:50 . 2014-12-21 05:25 -------- d-----w- c:\windows\SysWow64\wbem\Performance 2014-12-21 04:38 . 2014-12-21 04:38 -------- d-----w- C:\RegBackup 2014-12-20 22:47 . 2014-12-21 08:28 -------- d-----w- c:\program files (x86)\TuneUp Utilities 2014 2014-12-20 20:13 . 2014-12-20 20:13 -------- d-----w- c:\users\PC-Technik\AppData\Roaming\ParetoLogic 2014-12-20 20:13 . 2014-12-20 20:13 -------- d-----w- c:\users\PC-Technik\AppData\Roaming\DriverCure 2014-12-20 20:13 . 2014-12-20 20:19 -------- d-----w- c:\programdata\ParetoLogic 2014-12-20 12:08 . 2014-12-20 13:33 -------- d-----w- c:\programdata\Malwarebytes' Anti-Malware (portable) 2014-12-19 22:00 . 2014-12-19 22:00 -------- d-----w- c:\users\PC-Technik\cminstaller 2014-12-19 02:52 . 2014-12-19 03:12 -------- d-----w- C:\AdwCleaner 2014-12-19 01:57 . 2014-12-19 01:59 -------- d-----w- c:\program files (x86)\toolstarFRPRO 2014-12-19 01:13 . 2014-12-19 02:03 -------- d-----w- c:\program files (x86)\Disk Doctors FAT Data Recovery 2014-12-19 01:12 . 2014-12-19 01:13 -------- d-----w- c:\program files (x86)\Disk Doctors Instant File Recovery 2014-12-18 10:55 . 2014-12-18 10:55 820072 ----a-w- c:\program files\Common Files\System\SysMenu64.dll 2014-12-18 10:55 . 2014-12-18 10:55 649064 ----a-w- c:\program files\Common Files\System\SysMenu.dll 2014-12-18 09:42 . 2014-12-13 05:09 144384 ----a-w- c:\windows\system32\ieUnatt.exe 2014-12-18 09:42 . 2014-12-13 03:33 115712 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2014-12-17 16:55 . 2014-12-17 16:55 -------- d-----w- c:\program files\LSoft Technologies 2014-12-12 21:04 . 2014-12-12 21:25 -------- d-----w- c:\users\PC-Technik\AppData\Roaming\UseNeXT 2014-12-12 14:32 . 2006-03-01 01:10 69632 ----a-w- c:\windows\SysWow64\Crypserv.exe 2014-12-12 14:32 . 2006-01-10 02:47 31846 ----a-w- c:\windows\SysWow64\Ckldrv.sys 2014-12-12 14:32 . 1999-06-18 21:49 165888 ----a-w- c:\windows\Ckconfig.exe 2014-12-12 14:32 . 1996-05-03 17:21 27648 ----a-r- c:\windows\Setup_ck.exe 2014-12-12 14:32 . 1996-05-03 15:36 18432 ----a-w- c:\windows\Setup_ck.dll 2014-12-12 14:32 . 1995-07-04 18:33 11776 ----a-w- c:\windows\Ckrfresh.exe 2014-12-11 03:11 . 2014-12-11 03:12 -------- d-----w- c:\users\PC-Technik\AppData\Roaming\.unrarit 2014-12-11 03:11 . 2014-12-11 03:11 -------- d-----w- c:\users\PC-Technik\AppData\Local\Nils_Maier 2014-12-11 03:11 . 2014-12-11 03:11 -------- d-----w- c:\program files (x86)\Nils Maier 2014-12-11 02:20 . 2014-12-11 02:20 -------- d-----w- c:\windows\system32\appraiser 2014-12-11 02:01 . 2014-07-07 02:06 55808 ----a-w- c:\windows\system32\rrinstaller.exe 2014-12-11 02:01 . 2014-07-07 02:06 24576 ----a-w- c:\windows\system32\mfpmp.exe 2014-12-11 02:01 . 2014-07-07 02:02 2048 ----a-w- c:\windows\system32\mferror.dll 2014-12-11 02:01 . 2014-07-07 01:37 2048 ----a-w- c:\windows\SysWow64\mferror.dll 2014-12-11 02:01 . 2014-10-18 02:05 4121600 ----a-w- c:\windows\system32\mf.dll 2014-12-11 02:01 . 2014-10-18 01:33 3209728 ----a-w- c:\windows\SysWow64\mf.dll 2014-12-11 02:01 . 2014-07-07 02:06 206848 ----a-w- c:\windows\system32\mfps.dll 2014-12-11 02:01 . 2014-07-07 01:40 103424 ----a-w- c:\windows\SysWow64\mfps.dll 2014-12-11 02:01 . 2014-07-07 01:39 50176 ----a-w- c:\windows\SysWow64\rrinstaller.exe 2014-12-11 02:01 . 2014-07-07 01:39 23040 ----a-w- c:\windows\SysWow64\mfpmp.exe 2014-12-10 23:18 . 2014-12-10 23:18 167936 --sha-r- c:\windows\SysWow64\KBDCZA.dll 2014-12-10 08:40 . 2014-12-04 02:50 192000 ----a-w- c:\windows\system32\aepic.dll 2014-12-10 08:40 . 2014-12-04 02:44 1083392 ----a-w- c:\windows\system32\aeinv.dll 2014-12-10 08:40 . 2014-12-01 23:28 1232040 ----a-w- c:\windows\system32\aitstatic.exe 2014-12-10 08:40 . 2014-12-04 02:50 413184 ----a-w- c:\windows\system32\generaltel.dll 2014-12-10 08:40 . 2014-12-04 02:50 741376 ----a-w- c:\windows\system32\invagent.dll 2014-12-10 08:40 . 2014-12-04 02:50 396800 ----a-w- c:\windows\system32\devinv.dll 2014-12-10 08:40 . 2014-12-04 02:50 227328 ----a-w- c:\windows\system32\aepdu.dll 2014-12-03 06:31 . 2014-12-03 06:31 227048 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll 2014-12-01 01:26 . 2014-12-01 01:26 -------- d-----w- c:\users\PC-Technik\AppData\Local\TeamViewer 2014-11-26 08:59 . 2014-11-26 08:59 2984128 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\1031\MSOINTL.DLL 2014-11-25 14:20 . 2014-11-25 14:20 81234104 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSORES.DLL 2014-11-25 14:20 . 2014-11-25 14:20 550072 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOSQM.EXE 2014-11-25 14:20 . 2014-11-25 14:20 26373816 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE15\MSO.DLL 2014-11-25 12:59 . 2014-11-25 12:59 18638520 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE14\MSO.DLL . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-12-22 16:00 . 2013-10-05 21:00 414808 ----a-w- c:\users\PC-Technik\Network_Meter_Data.js 2014-12-20 23:37 . 2013-10-06 14:08 2464704 ----a-w- c:\windows\PE_Rom.dll 2014-12-11 02:09 . 2013-10-05 20:09 112710672 ----a-w- c:\windows\system32\MRT.exe 2014-11-18 19:47 . 2014-11-18 19:47 1247904 ----a-w- c:\windows\SysWow64\FM20.DLL 2014-11-11 13:33 . 2014-11-11 13:33 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2014-11-11 03:08 . 2014-11-18 19:41 241152 ----a-w- c:\windows\system32\pku2u.dll 2014-11-11 03:08 . 2014-11-18 19:41 728064 ----a-w- c:\windows\system32\kerberos.dll 2014-11-11 02:44 . 2014-11-18 19:41 186880 ----a-w- c:\windows\SysWow64\pku2u.dll 2014-11-11 02:44 . 2014-11-18 19:41 550912 ----a-w- c:\windows\SysWow64\kerberos.dll 2014-10-30 11:25 . 2013-10-05 17:58 275080 ------w- c:\windows\system32\MpSigStub.exe 2014-10-25 01:57 . 2014-11-13 00:46 77824 ----a-w- c:\windows\system32\packager.dll 2014-10-25 01:32 . 2014-11-13 00:46 67584 ----a-w- c:\windows\SysWow64\packager.dll 2014-10-18 02:05 . 2014-11-13 00:46 861696 ----a-w- c:\windows\system32\oleaut32.dll 2014-10-18 01:33 . 2014-11-13 00:46 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll 2014-10-14 02:16 . 2014-11-13 00:47 155064 ----a-w- c:\windows\system32\drivers\ksecpkg.sys 2014-10-14 02:13 . 2014-11-13 00:47 683520 ----a-w- c:\windows\system32\termsrv.dll 2014-10-14 02:13 . 2014-11-13 00:46 3241984 ----a-w- c:\windows\system32\msi.dll 2014-10-14 02:12 . 2014-11-13 00:47 1460736 ----a-w- c:\windows\system32\lsasrv.dll 2014-10-14 02:09 . 2014-11-13 00:47 146432 ----a-w- c:\windows\system32\msaudite.dll 2014-10-14 02:07 . 2014-11-13 00:47 681984 ----a-w- c:\windows\system32\adtschema.dll 2014-10-14 01:50 . 2014-11-13 00:47 22016 ----a-w- c:\windows\SysWow64\secur32.dll 2014-10-14 01:50 . 2014-11-13 00:46 2363904 ----a-w- c:\windows\SysWow64\msi.dll 2014-10-14 01:49 . 2014-11-13 00:47 96768 ----a-w- c:\windows\SysWow64\sspicli.dll 2014-10-14 01:47 . 2014-11-13 00:47 146432 ----a-w- c:\windows\SysWow64\msaudite.dll 2014-10-14 01:46 . 2014-11-13 00:47 681984 ----a-w- c:\windows\SysWow64\adtschema.dll 2014-10-10 00:57 . 2014-11-13 00:46 3198976 ----a-w- c:\windows\system32\win32k.sys 2014-10-09 15:45 . 2014-10-09 15:45 119808 ----a-r- c:\users\PC-Technik\AppData\Roaming\Microsoft\Installer\{CCF298AF-9CE1-4B26-B251-486E98A34789}\icons.exe 2014-10-03 02:12 . 2014-11-13 00:47 500224 ----a-w- c:\windows\system32\AUDIOKSE.dll 2014-10-03 02:11 . 2014-11-13 00:47 284672 ----a-w- c:\windows\system32\EncDump.dll 2014-10-03 02:11 . 2014-11-13 00:47 680960 ----a-w- c:\windows\system32\audiosrv.dll 2014-10-03 02:11 . 2014-11-13 00:47 440832 ----a-w- c:\windows\system32\AudioEng.dll 2014-10-03 02:11 . 2014-11-13 00:47 296448 ----a-w- c:\windows\system32\AudioSes.dll 2014-10-03 01:44 . 2014-11-13 00:47 442880 ----a-w- c:\windows\SysWow64\AUDIOKSE.dll 2014-10-03 01:44 . 2014-11-13 00:47 374784 ----a-w- c:\windows\SysWow64\AudioEng.dll 2014-10-03 01:44 . 2014-11-13 00:47 195584 ----a-w- c:\windows\SysWow64\AudioSes.dll 2014-09-25 02:08 . 2014-10-01 10:07 371712 ----a-w- c:\windows\system32\qdvd.dll 2014-09-25 01:40 . 2014-10-01 10:07 519680 ----a-w- c:\windows\SysWow64\qdvd.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2014-11-12 16:16 1729744 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2014-11-12 16:16 1729744 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2014-11-12 16:16 1729744 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584] "iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2014-10-17 43816] "ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2014-11-21 43816] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-08-01 3673696] "Akamai NetSession Interface"="c:\users\PC-Technik\AppData\Local\Akamai\netsession_win.exe" [2014-10-29 4673432] "GoogleChromeAutoLaunch_2A702D7A3A705AC0D83BEF373BEE53C5"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2014-12-06 856904] "iCloudDrive"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe" [2014-10-20 43816] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "d3dim32"="iroq" [X] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-10-11 60712] "JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-09-07 43608] "ASUSWebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe" [2012-08-03 740736] "EaseUS EPM tray"="c:\program files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe" [2013-03-29 2081792] "SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096] "AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-22 402432] "ASUS Camera ScreenSaver"="c:\windows\ASScrProlog.exe" [2013-12-24 37232] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-12-06 766208] "BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "Autodesk Sync"="c:\program files\Autodesk\Autodesk Sync\AdSync.exe" [2014-03-05 1415048] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="c:\windows\System32\SPReview\SPReview.exe" [BU] . c:\users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\PC-Technik\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-12-9 39207112] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "SoftwareSASGeneration"= 3 (0x3) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux4"=wdmaud.drv . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" "AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin "ASUS AiChargerPlus Execute"=c:\program files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe "KiesTrayAgent"=c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 KMService;KMService;c:\windows\system32\srvany.exe;c:\windows\SYSNATIVE\srvany.exe [x] R2 Sentinel64;Sentinel64;c:\windows\System32\Drivers\Sentinel64.sys;c:\windows\SYSNATIVE\Drivers\Sentinel64.sys [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R2 SVKP;SVKP;c:\windows\system32\SVKP.sys;c:\windows\SYSNATIVE\SVKP.sys [x] R3 a8djavs_x64;a8djavs_x64;c:\windows\system32\Drivers\a8djavs_x64.sys;c:\windows\SYSNATIVE\Drivers\a8djavs_x64.sys [x] R3 a8djusb_x64;a8djusb_x64;c:\windows\system32\Drivers\a8djusb_x64.sys;c:\windows\SYSNATIVE\Drivers\a8djusb_x64.sys [x] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x] R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys;c:\windows\SYSNATIVE\epmntdrv.sys [x] R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys;c:\windows\SYSNATIVE\EuGdiDrv.sys [x] R3 FlexNet Licensing Service 64;FlexNet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x] R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x] R3 HtcVCom32;HTC Diagnostic Port;c:\windows\system32\DRIVERS\HtcVComV64.sys;c:\windows\SYSNATIVE\DRIVERS\HtcVComV64.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x] R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsucx64.sys [x] R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192cu.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192cu.sys [x] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x] R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 tsusbhub;tsusbhub;tsusbhub [x] S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x] S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x] S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x] S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x] S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys;SysWow64\drivers\AsUpIO.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x] S1 ElRawDisk;ElRawDisk;c:\windows\system32\drivers\dddskx64.sys;c:\windows\SYSNATIVE\drivers\dddskx64.sys [x] S2 aksdf;aksdf;c:\windows\system32\DRIVERS\aksdf.sys;c:\windows\SYSNATIVE\DRIVERS\aksdf.sys [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x] S2 AODDriver4.2.0;AODDriver4.2.0;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x] S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [x] S2 ASDiskUnlocker;ASDiskUnlocker;c:\program files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe;c:\program files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe [x] S2 asHmComSvc;ASUS HM Com Service;c:\program files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe;c:\program files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [x] S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [x] S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [x] S2 DTSAudioService;DTSAudioService;c:\program files\Realtek\Audio\HDA\DTSAudioService64.exe;c:\program files\Realtek\Audio\HDA\DTSAudioService64.exe [x] S2 LVPrcS64;Process Monitor;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe;c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [x] S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [x] S2 Realtek11nCU;Realtek11nCU;c:\program files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe;c:\program files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [x] S3 AiChargerPlus;AiChargerPlus;SysWow64\drivers\AiChargerPlus.sys;SysWow64\drivers\AiChargerPlus.sys [x] S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x] S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x] S3 ASUSFILTER;ASUSFILTER;SysWow64\drivers\ASUSFILTER.sys;SysWow64\drivers\ASUSFILTER.sys [x] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x] S3 kncbda;KNC BDA DVB-T;c:\windows\system32\DRIVERS\kncbda64.sys;c:\windows\SYSNATIVE\DRIVERS\kncbda64.sys [x] S3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys;c:\windows\SYSNATIVE\DRIVERS\LVPr2M64.sys [x] S3 LVUSBS64;Logitech USB Monitor Filter;c:\windows\system32\DRIVERS\LVUSBS64.sys;c:\windows\SYSNATIVE\DRIVERS\LVUSBS64.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] iissvcs REG_MULTI_SZ w3svc was apphost REG_MULTI_SZ apphostsvc [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}] start [BU] . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-12-11 13:31 1087816 ----a-w- c:\program files (x86)\Google\Chrome\Application\39.0.2171.95\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2014-12-22 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000Core.job - c:\users\PC-Technik\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-09-11 05:48] . 2014-12-22 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000UA.job - c:\users\PC-Technik\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-09-11 05:48] . 2014-12-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-27 16:41] . 2014-12-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-27 16:41] . 2014-12-22 c:\windows\Tasks\Kijv.job - c:\windows\system32\rundll32.exe [2009-07-13 01:14] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2014-11-12 16:19 2334928 ----a-w- c:\progra~1\MICROS~4\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2014-11-12 16:19 2334928 ----a-w- c:\progra~1\MICROS~4\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2014-11-12 16:19 2334928 ----a-w- c:\progra~1\MICROS~4\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B] @="{6D4133E5-0742-4ADC-8A8C-9303440F7190}" [HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}] 2012-08-03 09:39 1506688 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSShellExt64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O] @="{64174815-8D98-4CE6-8646-4C039977D808}" [HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}] 2012-08-03 09:39 1506688 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSShellExt64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_U] @="{1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D}" [HKEY_CLASSES_ROOT\CLSID\{1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D}] 2012-08-03 09:39 1506688 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSShellExt64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-05-15 6470760] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = about:blank uDefault_Search_URL = about:blank mDefault_Search_URL = about:blank mDefault_Page_URL = about:blank mStart Page = about:blank mLocal Page = c:\windows\SysWOW64\blank.htm mSearch Page = about:blank uInternet Settings,ProxyOverride = <local> IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office15\ONBttnIE.dll/105 IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office15\EXCEL.EXE/3000 TCP: DhcpNameServer = 195.34.133.21 212.186.211.21 Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL . - - - - Entfernte verwaiste Registrierungseinträge - - - - . AddRemove-Hardlock Device Drivers - c:\windows\system32\UNWISE.EXE AddRemove-{C4642630-C959-43F8-8A33-846DDB00F5EE} - c:\programdata\{4A0ED38B-8808-4DBB-8238-91492331750F}\SKBInstall.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-1144226690-2465283230-36961558-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{C10FC2E7-2C9C-6E70-9A6C-0E66CE240853}*] @Allowed: (Read) (RestrictedCode) "iahfpjjmbhociegnbk"=hex:6a,61,6b,6d,6d,6f,70,64,62,62,63,67,6f,62,62,6e,65,61, 6f,6c,00,00 "hanfegndgjfhnfjn"=hex:6a,61,6b,6d,6d,6f,70,64,62,62,63,67,6f,62,62,6e,65,61, 6f,6c,00,00 "ialghabgmgggkafplk"=hex:63,61,67,6d,69,61,00,00 . [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System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eit der Fertigstellung: 2014-12-22 17:03:48 ComboFix-quarantined-files.txt 2014-12-22 16:03 . Vor Suchlauf: 429.310.431.232 bytes free Nach Suchlauf: 24 Verzeichnis(se), 428.981.325.824 Bytes frei . - - End Of File - - 68E9E84BAEC0A6AD470AE090AE0EC3D0 A36C5E4F47E84449FF07ED3517B43A31 Ich hoff ich hab es richtig gemacht! |
23.12.2014, 16:59 | #7 |
/// the machine /// TB-Ausbilder | Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bit Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
23.12.2014, 23:04 | #8 |
| Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bit So wiedermal ein fettes Danke!!! Hab Deine Liste abgearbeitet, möchte noch gleich erwähnen das ich jetzt ständig eine Meldung von Malewarebytes bekomme, leg dann einen Screenshot bei! Hier die Logs: Malewarebytes: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 23/12/2014 Suchlauf-Zeit: 22:20:19 Logdatei: mbam.txt Administrator: Ja Version: 2.00.4.1028 Malware Datenbank: v2014.12.23.07 Rootkit Datenbank: v2014.12.23.02 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: PC-Technik Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 416063 Verstrichene Zeit: 7 Min, 48 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente erkannt) Module: 0 (Keine schädliche Elemente erkannt) Registrierungsschlüssel: 0 (Keine schädliche Elemente erkannt) Registrierungswerte: 0 (Keine schädliche Elemente erkannt) Registrierungsdaten: 0 (Keine schädliche Elemente erkannt) Ordner: 0 (Keine schädliche Elemente erkannt) Dateien: 1 PUP.Optional.Conduit, C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Preferences, Gut: (), Schlecht: ( "suggest_url": "hxxp://suggest.seccint.com/CSuggestJson.ashx?prefix={searchTerms}",), Ersetzt,[52f1a1c5611bbc7adf7f5260bf4629d7] Physische Sektoren: 0 (Keine schädliche Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v4.106 - Report created 23/12/2014 at 22:33:45 # Updated 21/12/2014 by Xplode # Database : 2014-12-21.4 [Live] # Operating System : Windows 7 Ultimate Service Pack 1 (64 bits) # Username : PC-Technik - PC-TECHNIK-PC # Running from : C:\Users\PC-Technik\Desktop\AdwCleaner_4.106.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\ParetoLogic Folder Deleted : C:\Users\PC-Technik\AppData\Roaming\DriverCure Folder Deleted : C:\Users\PC-Technik\AppData\Roaming\ParetoLogic File Deleted : C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage File Deleted : C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal File Deleted : C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage File Deleted : C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.audienceinsights.net_0.localstorage-journal File Deleted : C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.olark.com_0.localstorage-journal ***** [ Scheduled Tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKCU\Software\ParetoLogic Key Deleted : HKLM\SOFTWARE\ParetoLogic ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.17496 -\\ Google Chrome v39.0.2171.95 ************************* AdwCleaner[R0].txt - [15978 octets] - [19/12/2014 03:52:47] AdwCleaner[R1].txt - [1882 octets] - [23/12/2014 22:32:02] AdwCleaner[S0].txt - [16313 octets] - [19/12/2014 04:12:13] AdwCleaner[S1].txt - [1778 octets] - [23/12/2014 22:33:45] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1838 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.4.0 (11.29.2014:1) OS: Windows 7 Ultimate x64 Ran by PC-Technik on 23/12/2014 at 22:40:07,23 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec" ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 23/12/2014 at 22:44:51,39 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-12-2014 01 Ran by PC-Technik (administrator) on PC-TECHNIK-PC on 23-12-2014 22:46:02 Running from C:\Users\PC-Technik\Desktop Loaded Profile: PC-Technik (Available profiles: PC-Technik & DefaultAppPool) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Englisch (USA) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft-ISATAP-Adapter\tunnel.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft-ISATAP-Adapter\tunnel.exe (AMD) C:\Windows\System32\atieclxx.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (Autodata Limited) C:\Program Files (x86)\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Akamai Technologies, Inc.) C:\Users\PC-Technik\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\PC-Technik\AppData\Local\Akamai\netsession_win.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe (Dropbox, Inc.) C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (DTS) C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe (Microsoft Corporation) C:\Windows\ehome\ehrecvr.exe (Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Realtek) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe (Realtek Semiconductor Corp.) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6470760 2012-05-15] (Realtek Semiconductor) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.) HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] () HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe [740736 2012-08-03] (ASUS Cloud Corporation) HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe [2081792 2013-03-29] (CHENGDU YIWO Tech Development Co., Ltd) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [d3dim32] => rundll32.exe iroq HKLM-x32\...\Run: [ASUS Camera ScreenSaver] => C:\Windows\ASScrProlog.exe [37232 2013-12-24] () HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [Akamai NetSession Interface] => C:\Users\PC-Technik\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [GoogleChromeAutoLaunch_2A702D7A3A705AC0D83BEF373BEE53C5] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816 2014-10-20] (Apple Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Policies\Explorer: [] HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1415048 2014-03-05] (Autodesk, Inc.) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-10-06] (Microsoft Corporation) Startup: C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled. ProxyServer: [.DEFAULT] => http=127.0.0.1:50621;https=127.0.0.1:50621 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-1144226690-2465283230-36961558-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-1144226690-2465283230-36961558-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin HKU\S-1-5-21-1144226690-2465283230-36961558-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\PC-Technik\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKU\S-1-5-21-1144226690-2465283230-36961558-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\PC-Technik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\webssearches.xml FF HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff FF HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Firefox\Extensions: [freegames197@BestOffers] - C:\Users\PC-Technik\AppData\Roaming\Mozilla\Extensions\freegames197@BestOffers FF Extension: No Name - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff [Not Found] FF Extension: No Name - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha209\ff [Not Found] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.at/ CHR StartupUrls: Default -> "hxxp://www.google.at/" CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-05] CHR Extension: (Google Drive) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-05] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-27] CHR Extension: (YouTube) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-05] CHR Extension: (Google-Suche) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-05] CHR Extension: (Appgenerator - kostenlos Apps erstellen) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\efnmkpompmmellmbhajanpbomlklkcdd [2014-11-17] CHR Extension: (Avira Browserschutz) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-15] CHR Extension: (Facebook Invite All) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\inmmhkeajgflmokoaaoadgkhhmibjbpj [2014-02-20] CHR Extension: (Twoo Notifications) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\mggafhpkgkfebnjfbiefbbbicikgchlf [2013-10-05] CHR Extension: (Tiësto) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmeobddjkkgkglnogihcaejaleikhdh [2013-10-05] CHR Extension: (Google Wallet) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-05] CHR Extension: (Google Mail) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-05] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.) [File not signed] R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-09-11] () R2 ASDiskUnlocker; C:\Program Files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe [258688 2010-12-02] (ASUSTeK Computer Inc.) R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [915584 2010-12-02] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-09-11] (ASUSTeK Computer Inc.) R2 Autodata Limited License Service; C:\Program Files (x86)\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe [72704 2014-04-22] (Autodata Limited) [File not signed] R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [File not signed] R2 DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [210024 2011-05-31] (DTS) S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed] R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) R2 Realtek11nCU; C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek) [File not signed] S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH) R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation) R2 xtu; C:\Program Files (x86)\Microsoft-ISATAP-Adapter\tunnel.exe [32768 2011-10-11] (Microsoft Corporation) [File not signed] S2 Crypkey License; crypserv.exe [X] S2 HPSLPSVC; C:\Users\PC-TEC~1\AppData\Local\Temp\7zS48BC\hpslpsvc64.dll [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 a8djavs_x64; C:\Windows\System32\Drivers\a8djavs_x64.sys [44560 2008-12-09] (Native Instruments GmbH) S3 a8djusb_x64; C:\Windows\System32\Drivers\a8djusb_x64.sys [233488 2008-12-09] (Native Instruments GmbH) R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices) R3 ASFLTDrv.sys; C:\Program Files (x86)\ASUS\Disk Unlocker\ASFLTDrv64.sys [16512 2010-09-16] (ASUSTeK Computer Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-09-11] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-10-11] (Disc Soft Ltd) R1 ElRawDisk; C:\Windows\system32\drivers\dddskx64.sys [26024 2009-02-12] (EldoS Corporation) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [17480 2013-03-07] () [File not signed] S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [13896 2013-03-07] () [File not signed] S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9800 2013-03-07] () [File not signed] S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] () [File not signed] R2 Hardlock; C:\Windows\SysWOW64\drivers\hardlock.sys [670208 2004-11-05] (Aladdin Knowledge Systems Ltd.) [File not signed] S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (QUALCOMM Incorporated) R3 kncbda; C:\Windows\System32\DRIVERS\kncbda64.sys [195712 2012-03-22] (ODSoft multimedia) R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-23] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation) S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [848384 2011-02-11] (Realtek Semiconductor Corporation ) S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2008-07-11] (SafeNet, Inc.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-10-06] (Duplex Secure Ltd.) R1 VDiskBus; C:\Windows\System32\DRIVERS\VDiskBus64.sys [43136 2010-09-21] (ASUSTeK Computer Inc.) U3 a4jqm0ik; C:\Windows\System32\Drivers\a4jqm0ik.sys [0 ] (Advanced Micro Devices) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S1 NetworkX; \SystemRoot\system32\ckldrv.sys [X] S2 SVKP; \??\C:\Windows\system32\SVKP.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-23 22:46 - 2014-12-23 22:46 - 00025541 _____ () C:\Users\PC-Technik\Desktop\FRST.txt 2014-12-23 22:44 - 2014-12-23 22:44 - 00000698 _____ () C:\Users\PC-Technik\Desktop\JRT.txt 2014-12-23 22:39 - 2014-12-23 22:39 - 01707646 _____ (Thisisu) C:\Users\PC-Technik\Desktop\JRT.exe 2014-12-23 22:39 - 2014-12-23 22:39 - 00000000 ____D () C:\Windows\ERUNT 2014-12-23 22:36 - 2014-12-23 22:37 - 00001918 _____ () C:\Users\PC-Technik\Desktop\AdwCleaner[S1].txt 2014-12-23 22:29 - 2014-12-23 22:29 - 02173952 _____ () C:\Users\PC-Technik\Desktop\AdwCleaner_4.106.exe 2014-12-23 22:29 - 2014-12-23 22:29 - 00001425 _____ () C:\Users\PC-Technik\Desktop\mbam.txt 2014-12-23 22:14 - 2014-12-23 22:14 - 00001123 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-12-23 22:14 - 2014-12-23 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-12-23 22:14 - 2014-12-23 22:14 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-12-23 22:14 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-12-23 22:14 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-12-23 22:12 - 2014-12-23 22:13 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\PC-Technik\Desktop\mbam-setup-2.0.4.1028 (1).exe 2014-12-23 21:27 - 2014-12-23 22:03 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part30.rar 2014-12-23 14:45 - 2014-12-23 15:21 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part31.rar 2014-12-23 09:39 - 2014-12-23 10:15 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part32.rar 2014-12-23 04:44 - 2014-12-23 05:20 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part33.rar 2014-12-23 00:45 - 2014-12-23 01:21 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part34.rar 2014-12-22 21:26 - 2014-12-22 22:02 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part35.rar 2014-12-22 18:41 - 2014-09-18 20:59 - 00009792 _____ () C:\Users\PC-Technik\Downloads\cable.otvDataFile 2014-12-22 18:05 - 2014-12-22 18:41 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part36.rar 2014-12-22 17:03 - 2014-12-22 17:03 - 00032305 _____ () C:\ComboFix.txt 2014-12-22 16:49 - 2014-12-22 16:49 - 05601641 ____R (Swearware) C:\Users\PC-Technik\Desktop\ComboFix.exe 2014-12-22 14:11 - 2014-12-22 14:47 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part37.rar 2014-12-22 06:16 - 2014-12-22 06:52 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part38.rar 2014-12-22 05:23 - 2014-12-22 05:23 - 00005366 _____ () C:\Users\PC-Technik\Downloads\webcam.zip 2014-12-22 05:23 - 2014-12-22 05:23 - 00000672 _____ () C:\Users\PC-Technik\Downloads\cable (1).zip 2014-12-22 05:19 - 2014-12-22 05:19 - 00001246 _____ () C:\Users\PC-Technik\Desktop\onlineTV 11.lnk 2014-12-22 05:17 - 2014-12-22 05:17 - 05796824 _____ (concept/design GmbH ) C:\Users\PC-Technik\Downloads\otv1102setup.exe 2014-12-22 02:37 - 2014-12-22 03:13 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part39.rar 2014-12-21 20:34 - 2014-12-21 21:10 - 107955577 _____ () C:\Users\PC-Technik\Downloads\1555.part40.rar 2014-12-21 17:20 - 2014-12-21 17:56 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part29.rar 2014-12-21 17:13 - 2014-12-21 17:13 - 00040138 _____ () C:\Users\PC-Technik\Downloads\Addition.txt 2014-12-21 17:04 - 2014-12-23 22:46 - 00000000 ____D () C:\FRST 2014-12-21 17:03 - 2014-12-21 17:03 - 02122240 _____ (Farbar) C:\Users\PC-Technik\Desktop\FRST64.exe 2014-12-21 05:38 - 2014-12-21 05:38 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-PC-TECHNIK-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat 2014-12-21 05:38 - 2014-12-21 05:38 - 00000000 ____D () C:\RegBackup 2014-12-21 05:02 - 2014-12-21 05:02 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Tweaking.com - Windows Repair 2014-12-21 05:01 - 2014-12-21 05:01 - 07871773 _____ () C:\Users\PC-Technik\Downloads\tweaking.com_windows_repair_aio.zip 2014-12-20 23:48 - 2014-12-21 09:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014 2014-12-20 23:47 - 2014-12-21 09:28 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014 2014-12-20 20:42 - 2014-12-20 20:42 - 15549025 _____ () C:\Users\PC-Technik\Downloads\Microsoft_Fix-it-Paket.zip 2014-12-20 17:37 - 2014-12-20 17:37 - 00347816 _____ (Microsoft Corporation) C:\Users\PC-Technik\Downloads\MicrosoftFixit.WinSecurity.FISC.134252040448177.1.2.Run.exe 2014-12-20 17:35 - 2014-12-20 17:35 - 00347816 _____ (Microsoft Corporation) C:\Users\PC-Technik\Downloads\MicrosoftFixit.malware.FISC.134252040448177.1.1.Run.exe 2014-12-20 17:32 - 2014-12-20 17:32 - 00184704 _____ () C:\Users\PC-Technik\Downloads\qsinstaller (1).exe 2014-12-20 17:28 - 2014-12-20 17:28 - 00184704 _____ () C:\Users\PC-Technik\Downloads\qsinstaller.exe 2014-12-20 14:05 - 2014-12-20 14:05 - 00602112 _____ (OldTimer Tools) C:\Users\PC-Technik\Desktop\OTL.exe 2014-12-20 13:08 - 2014-12-23 22:38 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-12-20 13:08 - 2014-12-20 14:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2014-12-20 13:08 - 2014-12-20 13:20 - 00000000 ____D () C:\Users\PC-Technik\Desktop\mbar 2014-12-20 13:08 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-12-20 13:07 - 2014-12-20 13:07 - 16448208 _____ (Malwarebytes Corp.) C:\Users\PC-Technik\Desktop\mbar-1.08.2.1001.exe 2014-12-20 12:38 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-12-20 12:38 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-12-20 12:38 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-12-20 12:35 - 2014-12-22 17:03 - 00000000 ____D () C:\Qoobox 2014-12-20 12:35 - 2014-12-20 12:55 - 00000000 ____D () C:\Windows\erdnt 2014-12-20 12:32 - 2014-12-20 12:32 - 00002634 _____ () C:\Users\PC-Technik\Downloads\Winmgmt.reg 2014-12-20 11:59 - 2014-12-20 12:35 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part28.rar 2014-12-20 11:29 - 2014-12-20 12:37 - 00001945 _____ () C:\Windows\epplauncher.mif 2014-12-20 03:17 - 2014-12-20 13:08 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-12-20 03:14 - 2014-12-20 03:14 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\PC-Technik\Downloads\mbam-setup-2.0.4.1028.exe 2014-12-20 00:18 - 2014-12-20 00:18 - 12290974 _____ (ImageWriter Developers ) C:\Users\PC-Technik\Downloads\Win32DiskImager-0.9.5-install.exe 2014-12-20 00:10 - 2014-12-20 00:15 - 220806959 _____ () C:\Users\PC-Technik\Downloads\cm-11-20141112-SNAPSHOT-M12-mondrianwifi.zip 2014-12-20 00:09 - 2014-12-20 00:14 - 245457499 _____ () C:\Users\PC-Technik\Downloads\cm-11-20141112-SNAPSHOT-M12-pollux_windy.zip 2014-12-19 23:00 - 2014-12-19 23:00 - 02056192 _____ () C:\Users\PC-Technik\Downloads\CMInstaller.msi 2014-12-19 16:47 - 2014-12-19 16:47 - 06078240 _____ () C:\Users\PC-Technik\Downloads\67751-29219.apk 2014-12-19 16:36 - 2014-12-19 17:12 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part24.rar 2014-12-19 03:52 - 2014-12-23 22:33 - 00000000 ____D () C:\AdwCleaner 2014-12-19 03:52 - 2014-12-19 03:52 - 02166272 _____ () C:\Users\PC-Technik\Downloads\adwcleaner_4.105.exe 2014-12-19 02:57 - 2014-12-19 02:59 - 00000000 ____D () C:\Program Files (x86)\toolstarFRPRO 2014-12-19 02:13 - 2014-12-19 03:03 - 00000000 ____D () C:\Program Files (x86)\Disk Doctors FAT Data Recovery 2014-12-19 02:12 - 2014-12-19 02:13 - 00000000 ____D () C:\Program Files (x86)\Disk Doctors Instant File Recovery 2014-12-19 02:07 - 2014-12-19 02:08 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Data recoverys 2014-12-18 23:49 - 2014-12-19 00:24 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part27.rar 2014-12-18 19:20 - 2014-12-18 19:56 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part23.rar 2014-12-18 13:01 - 2014-12-18 13:37 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part20.rar 2014-12-18 10:42 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-12-18 10:42 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-12-18 02:09 - 2014-12-18 02:45 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part19.rar 2014-12-17 17:55 - 2014-12-17 17:55 - 00000000 ____D () C:\Program Files\LSoft Technologies 2014-12-17 17:51 - 2014-12-17 17:52 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Haus 2014-12-17 16:39 - 2014-12-17 16:39 - 00000255 _____ () C:\Users\PC-Technik\Downloads\houseindustryremix (1).m3u 2014-12-17 16:13 - 2014-12-17 16:13 - 00000255 _____ () C:\Users\PC-Technik\Downloads\houseindustryremix.m3u 2014-12-17 15:03 - 2014-12-17 15:39 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part18.rar 2014-12-17 04:15 - 2014-12-17 04:51 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part17.rar 2014-12-17 01:11 - 2014-12-17 01:47 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part16.rar 2014-12-16 20:12 - 2014-12-16 20:48 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part15.rar 2014-12-16 16:26 - 2014-12-16 17:02 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part14.rar 2014-12-16 13:21 - 2014-12-16 13:53 - 536070392 _____ () C:\Users\PC-Technik\Downloads\Airplane.Repo.-.Die.Inkasso-Piloten.S02E02.Die.Helikopter.Flugschule.rar 2014-12-16 13:13 - 2014-12-16 13:49 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part13.rar 2014-12-16 03:51 - 2014-12-16 04:27 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part12.rar 2014-12-16 00:38 - 2014-12-16 01:14 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part11.rar 2014-12-15 19:58 - 2014-12-15 20:34 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part10.rar 2014-12-15 15:48 - 2014-12-15 16:24 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part09.rar 2014-12-15 12:47 - 2014-12-15 13:23 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part08.rar 2014-12-15 03:40 - 2014-12-15 04:16 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part07.rar 2014-12-14 18:56 - 2014-12-14 19:32 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part06.rar 2014-12-14 01:36 - 2014-12-14 02:12 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part04.rar 2014-12-13 22:35 - 2014-12-13 23:10 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part05.rar 2014-12-13 21:27 - 2014-12-13 21:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2014-12-13 15:33 - 2014-12-13 16:09 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part03.rar 2014-12-13 04:24 - 2014-12-13 05:00 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part02.rar 2014-12-12 23:32 - 2014-12-13 00:07 - 110100480 _____ () C:\Users\PC-Technik\Downloads\1555.part01.rar 2014-12-12 23:16 - 2014-12-16 17:14 - 00000000 ____D () C:\Users\PC-Technik\Documents\Usenet.nl 2014-12-12 23:16 - 2014-12-12 23:16 - 07457256 _____ ( ) C:\Users\PC-Technik\Downloads\UsenetNLSetup_1.30.exe 2014-12-12 22:04 - 2014-12-12 22:25 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\UseNeXT 2014-12-12 22:04 - 2014-12-12 22:22 - 00000000 ____D () C:\Users\PC-Technik\Documents\UseNeXT 2014-12-12 22:02 - 2014-12-12 22:02 - 05270008 _____ (Tangysoft Ltd. ) C:\Users\PC-Technik\Downloads\UseNeXT_freetrial_421828w.exe 2014-12-12 15:32 - 2014-12-19 02:13 - 00000267 _____ () C:\Windows\Crypkey.ini 2014-12-12 15:32 - 2006-03-01 02:10 - 00069632 _____ (CrypKey (Canada) Ltd.) C:\Windows\SysWOW64\Crypserv.exe 2014-12-12 15:32 - 2006-01-10 03:47 - 00031846 _____ () C:\Windows\SysWOW64\Ckldrv.sys 2014-12-12 15:32 - 1999-06-18 22:49 - 00165888 _____ (Kenonic Controls) C:\Windows\Ckconfig.exe 2014-12-12 15:32 - 1996-05-03 18:21 - 00027648 ____R () C:\Windows\Setup_ck.exe 2014-12-12 15:32 - 1996-05-03 16:36 - 00018432 _____ () C:\Windows\Setup_ck.dll 2014-12-12 15:32 - 1995-07-04 19:33 - 00011776 _____ () C:\Windows\Ckrfresh.exe 2014-12-12 15:31 - 2014-12-19 02:11 - 00000000 ____D () C:\Program Files (x86)\Disk Doctors Instant File Recovery2 2014-12-11 04:58 - 2014-12-11 05:47 - 39067974 _____ () C:\Users\PC-Technik\Desktop\1.1million word list1.txt 2014-12-11 04:41 - 2014-12-11 04:41 - 01187372 _____ () C:\Users\PC-Technik\Downloads\wordlist-ao-20101027.txt.xz 2014-12-11 04:40 - 2014-12-11 04:40 - 00692513 _____ () C:\Users\PC-Technik\Downloads\EOWL-v1.1.2.zip 2014-12-11 04:34 - 2014-12-11 04:35 - 10389619 _____ () C:\Users\PC-Technik\Desktop\1.1million word list.txt 2014-12-11 04:16 - 2014-12-11 04:16 - 01487872 _____ () C:\Users\PC-Technik\Downloads\UnRarIt-13.03.10 (1).msi 2014-12-11 04:13 - 2014-12-11 04:13 - 00000000 ____D () C:\Users\PC-Technik\Downloads\BruteForce_0.9.1 2014-12-11 04:11 - 2014-12-11 04:17 - 00003037 _____ () C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UnRarIt.Net.lnk 2014-12-11 04:11 - 2014-12-11 04:12 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\.unrarit 2014-12-11 04:11 - 2014-12-11 04:11 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\Nils_Maier 2014-12-11 04:11 - 2014-12-11 04:11 - 00000000 ____D () C:\Program Files (x86)\Nils Maier 2014-12-11 04:10 - 2014-12-11 04:10 - 01487872 _____ () C:\Users\PC-Technik\Downloads\UnRarIt-13.03.10.msi 2014-12-11 04:00 - 2014-12-11 04:00 - 02169813 _____ () C:\Users\PC-Technik\Downloads\BruteForce_0.9.1.zip 2014-12-11 03:46 - 2014-12-11 03:46 - 05745152 _____ () C:\Users\PC-Technik\Downloads\archpr_setup_en.msi 2014-12-11 03:44 - 2014-12-11 03:44 - 01020928 _____ () C:\Users\PC-Technik\Downloads\Advanced Archive Password Recovery 4.54.exe 2014-12-11 03:30 - 2014-12-11 03:30 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Car DVD 2014-12-11 03:20 - 2014-12-11 03:20 - 00000000 ____D () C:\Windows\system32\appraiser 2014-12-11 03:16 - 2014-12-11 03:16 - 05745152 _____ () C:\Users\PC-Technik\Downloads\archpr_5455setup_en.msi 2014-12-11 03:01 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-12-11 03:01 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-12-11 03:01 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-12-11 03:01 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2014-12-11 03:01 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2014-12-11 03:01 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2014-12-11 03:01 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2014-12-11 03:01 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2014-12-11 03:01 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2014-12-11 03:01 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2014-12-11 00:18 - 2014-12-23 22:40 - 00000320 _____ () C:\Windows\Tasks\Kijv.job 2014-12-11 00:18 - 2014-12-11 00:18 - 00167936 __RSH () C:\Windows\SysWOW64\KBDCZA.dll 2014-12-11 00:18 - 2014-12-11 00:18 - 00002600 _____ () C:\Windows\System32\Tasks\Kijv 2014-12-10 23:18 - 2014-12-10 23:18 - 00160037 _____ () C:\Users\Public\Documents\DD_IFR_Scan_Info# Wed, 10-Dec-2014.dds 2014-12-10 21:50 - 2014-12-10 21:50 - 00632298 _____ () C:\Users\PC-Technik\Downloads\web_sitemap_03180ea3_046.xml.gz 2014-12-10 09:40 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-12-10 09:40 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-12-10 09:40 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2014-12-10 09:39 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-12-10 09:39 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-12-10 09:39 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-12-10 09:39 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-12-10 09:39 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-12-10 09:39 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-12-10 09:39 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-12-10 09:39 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-12-10 09:39 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-12-10 09:39 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-12-10 09:39 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-12-10 09:39 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-12-10 09:39 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-12-10 09:39 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-12-10 09:39 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-12-10 09:39 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-12-10 09:39 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-10 09:39 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-12-10 09:39 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-12-10 09:39 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-12-10 09:39 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-10 09:39 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-12-10 09:39 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-12-10 09:39 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-12-10 09:39 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-12-10 09:39 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-12-10 09:39 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-12-10 09:39 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-12-10 09:39 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-12-10 09:39 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-12-10 09:39 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-12-10 09:39 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-12-10 09:39 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-12-10 09:39 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-12-10 09:39 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-12-10 09:39 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-12-10 09:39 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-12-10 09:39 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-12-10 09:39 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-12-10 09:39 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-12-10 09:39 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-12-10 09:39 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-12-10 09:39 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-12-10 09:39 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-12-10 09:39 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-12-10 09:39 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-12-10 09:39 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-12-10 09:39 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-12-10 09:39 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-12-10 09:39 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-12-10 09:39 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-12-10 09:39 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-12-10 09:39 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-12-10 09:39 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-12-10 09:39 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-10 09:39 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-12-10 09:39 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-12-10 09:39 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-12-10 09:39 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-12-10 09:39 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2014-12-10 09:39 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2014-12-10 09:39 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-12-10 09:39 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-10 09:39 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2014-12-10 09:39 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2014-12-10 09:39 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2014-12-10 09:39 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2014-12-10 09:39 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2014-12-10 09:39 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2014-12-10 09:39 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2014-12-10 09:39 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe 2014-12-07 02:16 - 2014-12-07 02:16 - 00011761 _____ () C:\Users\PC-Technik\Downloads\the_2k12.zip 2014-12-07 01:56 - 2014-12-11 03:31 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Red Rose HP Neu 2014-12-05 01:20 - 2014-12-05 01:23 - 00009216 ___SH () C:\Users\PC-Technik\Documents\Thumbs.db 2014-12-04 15:06 - 2014-12-04 15:06 - 00000230 _____ () C:\Users\PC-Technik\Downloads\houseindustry (4).m3u 2014-12-03 19:58 - 2014-12-11 03:19 - 00001494 _____ () C:\Users\PC-Technik\Desktop\links.txt 2014-12-01 04:36 - 2014-12-11 03:33 - 00000000 ____D () C:\Users\PC-Technik\Desktop\QR Codes 2014-12-01 02:26 - 2014-12-01 02:26 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\TeamViewer 2014-11-25 18:01 - 2014-11-27 14:55 - 02923520 _____ () C:\Users\PC-Technik\Desktop\Bauträger Anbot.msg 2014-11-25 02:11 - 2014-11-25 02:13 - 00000000 ____D () C:\Users\PC-Technik\Downloads\cache 2014-11-24 23:41 - 2014-11-24 23:41 - 00000230 _____ () C:\Users\PC-Technik\Downloads\houseindustry (3).m3u 2014-11-24 19:14 - 2014-11-24 19:16 - 377555464 _____ () C:\Users\PC-Technik\Downloads\Toni Andi Lewi-HD.mp4 2014-11-24 19:14 - 2014-11-24 19:15 - 122726550 _____ () C:\Users\PC-Technik\Downloads\Toni Andi Lewi-SD.mp4 ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-23 22:45 - 2009-07-14 05:45 - 00017360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-23 22:45 - 2009-07-14 05:45 - 00017360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-23 22:42 - 2013-10-05 18:13 - 01687167 _____ () C:\Windows\WindowsUpdate.log 2014-12-23 22:40 - 2013-10-05 21:42 - 00756352 _____ () C:\Windows\system32\perfh007.dat 2014-12-23 22:40 - 2013-10-05 21:42 - 00170398 _____ () C:\Windows\system32\perfc007.dat 2014-12-23 22:40 - 2009-07-14 06:13 - 01798624 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-12-23 22:38 - 2013-12-10 20:23 - 00000000 ___RD () C:\Users\PC-Technik\Dropbox 2014-12-23 22:38 - 2013-12-10 20:19 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Dropbox 2014-12-23 22:36 - 2014-01-27 17:41 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-12-23 22:35 - 2014-10-01 19:19 - 00000000 ___RD () C:\Users\PC-Technik\iCloudDrive 2014-12-23 22:35 - 2013-10-05 19:09 - 01072360 _____ () C:\Windows\PFRO.log 2014-12-23 22:35 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-23 22:35 - 2009-07-14 05:51 - 00001563 _____ () C:\Windows\setupact.log 2014-12-23 22:30 - 2014-01-27 17:41 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-12-23 22:28 - 2014-04-02 12:05 - 00000000 ____D () C:\Users\DefaultAppPool 2014-12-23 22:00 - 2013-10-05 22:00 - 00415859 _____ () C:\Users\PC-Technik\Network_Meter_Data.js 2014-12-23 19:53 - 2014-09-11 06:48 - 00000948 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000UA.job 2014-12-23 18:53 - 2013-10-05 21:43 - 00000030 _____ () C:\Users\PC-Technik\AppData\Roaming\Network Meter_Usage.ini 2014-12-23 18:53 - 2013-10-05 20:51 - 00000000 ____D () C:\Users\PC-Technik\Documents\Outlook-Dateien 2014-12-23 18:19 - 2013-10-06 01:39 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\B9F30EF3-249A-4758-9030-64EE56A48147.aplzod 2014-12-23 07:53 - 2014-09-11 06:48 - 00000926 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000Core.job 2014-12-23 02:00 - 2013-10-05 18:59 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\Adobe 2014-12-22 17:34 - 2014-09-05 17:23 - 00000000 ____D () C:\Users\PC-Technik\Downloads\transfer 2014-12-22 17:03 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-12-22 17:01 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-12-22 05:19 - 2013-12-12 00:13 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\concept design 2014-12-22 05:19 - 2013-12-12 00:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\concept design 2014-12-22 05:19 - 2013-12-12 00:13 - 00000000 ____D () C:\Program Files (x86)\concept design 2014-12-22 05:19 - 2013-10-05 21:54 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\concept design 2014-12-22 01:33 - 2013-10-13 19:32 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Verkauf 2014-12-21 20:25 - 2013-11-18 19:31 - 00000058 _____ () C:\Users\PC-Technik\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat 2014-12-21 17:07 - 2014-01-18 08:32 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\CrashDumps 2014-12-21 16:48 - 2009-07-14 05:45 - 05247104 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-12-21 16:47 - 2013-10-05 21:26 - 00187600 _____ () C:\Users\PC-Technik\AppData\Local\GDIPFONTCACHEV1.DAT 2014-12-21 16:45 - 2009-07-14 08:46 - 00000000 ____D () C:\Windows\CSC 2014-12-21 09:28 - 2013-10-24 00:14 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Admin 2014-12-21 09:28 - 2013-10-06 02:15 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\Akamai 2014-12-21 09:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-12-21 06:29 - 2009-07-14 03:34 - 00000870 _____ () C:\Windows\win.ini 2014-12-21 05:54 - 2009-07-14 03:34 - 00000855 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_557 2014-12-21 00:37 - 2013-10-06 15:08 - 02464704 _____ () C:\Windows\PE_Rom.dll 2014-12-21 00:37 - 2013-10-06 15:08 - 00000000 _____ () C:\Windows\Path.idx 2014-12-21 00:31 - 2013-10-05 18:23 - 00000000 ____D () C:\Users\PC-Technik 2014-12-20 23:58 - 2013-10-05 18:38 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-12-20 13:21 - 2009-07-14 05:45 - 00000000 ____D () C:\Windows\Setup 2014-12-20 12:51 - 2009-07-14 03:34 - 00000027 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_400 2014-12-20 12:49 - 2009-07-14 03:34 - 25427968 _____ () C:\Windows\system32\config\system.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 128188416 _____ () C:\Windows\system32\config\software.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2014-12-20 03:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Resources 2014-12-20 03:42 - 2014-09-29 09:08 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-12-20 02:55 - 2014-01-27 20:26 - 00001908 _____ () C:\Windows\diagwrn.xml 2014-12-20 02:55 - 2014-01-27 20:26 - 00001908 _____ () C:\Windows\diagerr.xml 2014-12-20 02:53 - 2009-07-14 05:51 - 00000000 _____ () C:\Windows\setuperr.log 2014-12-20 02:48 - 2014-09-29 09:08 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2014-12-20 02:36 - 2013-10-06 13:01 - 00000000 ____D () C:\ProgramData\Package Cache 2014-12-19 04:49 - 2014-11-15 14:58 - 00000992 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk 2014-12-19 04:49 - 2013-10-05 18:53 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2014-12-19 04:19 - 2013-10-06 01:29 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2014-12-19 04:12 - 2014-01-27 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-12-19 04:12 - 2013-10-05 18:24 - 00001026 _____ () C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-12-19 03:43 - 2013-10-05 23:27 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2014-12-19 03:26 - 2014-04-17 14:03 - 00000000 ____D () C:\Users\PC-Technik\Downloads\sonstiges 2014-12-19 03:20 - 2013-12-10 20:19 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-12-19 03:02 - 2014-04-22 18:19 - 00000000 ____D () C:\Program Files (x86)\accordiva 2014-12-19 03:01 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-12-19 03:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-12-19 02:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-12-19 00:26 - 2014-04-02 01:23 - 00000000 ____D () C:\ProgramData\TEMP 2014-12-18 21:46 - 2014-11-14 02:25 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Videos Auto 2014-12-17 17:51 - 2014-09-16 20:33 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Events 2014-12-17 17:48 - 2014-11-18 20:29 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Pinky HP 2014-12-17 17:12 - 2013-12-08 21:26 - 00000000 ____D () C:\Users\PC-Technik\Desktop\ARNO 2014-12-17 05:53 - 2014-07-11 17:20 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\13542 2014-12-16 23:14 - 2014-09-06 13:57 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Mp3tag 2014-12-15 10:03 - 2013-10-05 19:05 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-12-13 03:00 - 2013-10-05 21:50 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-12-11 03:33 - 2014-11-10 19:10 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Welcome to House Industry Radio video 2014-12-11 03:33 - 2014-09-15 11:36 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Sagay Promotion 2014-12-11 03:20 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-12-11 03:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-12-11 03:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat 2014-12-11 03:19 - 2013-10-21 23:05 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\BitTorrent 2014-12-11 03:17 - 2014-05-14 20:59 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-12-11 03:09 - 2013-10-05 21:09 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-12-11 03:09 - 2013-10-05 21:09 - 00000000 ____D () C:\Windows\system32\MRT 2014-12-11 02:03 - 2014-05-14 18:20 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Musik 2014-12-05 17:28 - 2013-10-05 20:36 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Software 2014-12-05 16:48 - 2013-11-01 21:14 - 00000000 ____D () C:\Users\PC-Technik\Downloads\EZ Generator 2014-11-28 00:03 - 2014-11-19 15:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EzGenerator 2014-11-27 17:51 - 2014-08-15 00:20 - 00000000 ____D () C:\Users\PC-Technik\Desktop\fail Files to move or delete: ==================== C:\Users\PC-Technik\Network_Meter_Data.js Some content of TEMP: ==================== C:\Users\PC-Technik\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpoez9uw.dll C:\Users\PC-Technik\AppData\Local\Temp\Quarantine.exe C:\Users\PC-Technik\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-04-28 23:07 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-12-2014 01 Ran by PC-Technik at 2014-12-23 22:46:48 Running from C:\Users\PC-Technik\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Acronis*Disk*Director*12 (HKLM-x32\...\{AE372858-B1BD-49EF-8308-648322846008}) (Version: 12.0.3223 - Acronis) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.1430 - Adobe Systems Incorporated) Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated) Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated) Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.199 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Illustrator CS5 (HKLM-x32\...\{9B97EC91-B3FD-4BFF-88FC-5345A26AC2E7}) (Version: 15.0 - Adobe Systems Incorporated) Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated) Adobe Photoshop CS6 (HKLM-x32\...\{D586BF67-0A61-4572-BE25-07B40C4CEDA1}) (Version: 13.0 - Adobe Systems Incorporated) Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.) AI Suite II (HKLM-x32\...\{34D3688E-A737-44C5-9E2A-FF73618728E1}) (Version: 2.00.05 - ASUSTeK Computer Inc.) Akamai NetSession Interface (HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Akamai) (Version: - Akamai Technologies, Inc) AMD Catalyst Install Manager (HKLM\...\{308051DA-0048-7A07-FE8B-9B6EC119A9E8}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.14.8.0 - Asmedia Technology) ASUS WebStorage (HKLM-x32\...\ASUS WebStorage) (Version: 3.0.143.296 - ASUS Cloud Corporation) Asus_LCD_ScreenSaver (HKLM-x32\...\Asus_LCD_ScreenSaver) (Version: 1.0.0001 - ASUS) AutoCAD Mechanical 2014 - English (Version: 18.0.105.0 - Autodesk) Hidden AutoCAD Mechanical 2014 - English (Version: 18.0.17.0 - Autodesk) Hidden AutoCAD Mechanical 2014 - English SP1 (HKLM\...\AutoCAD Mechanical 2014 - English SP1) (Version: 1 - Autodesk) AutoCAD Mechanical 2014 Language Pack - English (Version: 18.0.17.0 - Autodesk) Hidden Autodesk 360 (HKLM\...\{52B28CAD-F49D-47BA-9FFE-29C2E85F0D0B}) (Version: 4.8.5.800 - Autodesk) Autodesk App Manager (HKLM-x32\...\{C070121A-C8C5-4D52-9A7D-D240631BD433}) (Version: 1.1.0 - Autodesk) Autodesk AutoCAD Mechanical 2014 - English (HKLM\...\AutoCAD Mechanical 2014 - English) (Version: 18.0.17.0 - Autodesk) Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk) Autodesk Content Service (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Content Service Language Pack (x32 Version: 3.1.3.0 - Autodesk) Hidden Autodesk Design Review 2013 (HKLM-x32\...\Autodesk Design Review 2013) (Version: 13.0.0.82 - Autodesk, Inc.) Autodesk Design Review 2013 (x32 Version: 13.0.0.82 - Autodesk, Inc.) Hidden Autodesk DWG TrueView 2014 (HKLM\...\DWG TrueView 2014) (Version: 19.1.18.0 - Autodesk) Autodesk Featured Apps (HKLM-x32\...\{F732FEDA-7713-4428-934B-EF83B8DD65D0}) (Version: 1.1.0 - Autodesk) Autodesk Inventor View 2014 - English (HKLM\...\Autodesk Inventor View 2014) (Version: 18.0.16600.0000 - Autodesk) Autodesk Inventor View 2014 (Version: 18.0.16600.0000 - Autodesk) Hidden Autodesk Inventor View 2014 English Language Pack (Version: 18.0.16600.0000 - Autodesk) Hidden Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk) Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk) Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.0.43.13 - Autodesk) Autodesk ReCap (Version: 1.0.43.13 - Autodesk) Hidden Autodesk ReCap Language Pack-English (Version: 1.0.43.13 - Autodesk) Hidden Autodesk Vault Basic 2014 (Client) (HKLM\...\Autodesk Vault Basic 2014 (Client)) (Version: 18.0.86.0 - Autodesk) Autodesk Vault Basic 2014 (Client) (Version: 18.0.86.0 - Autodesk) Hidden Autodesk Vault Basic 2014 (Client) English Language Pack (Version: 18.0.86.0 - Autodesk) Hidden BitTorrent (HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\BitTorrent) (Version: 7.9.2.34026 - BitTorrent Inc.) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Camtasia Studio 7 (HKLM-x32\...\{DE042823-C359-4B87-B66B-308057E8B6AF}) (Version: 7.0.1 - TechSmith Corporation) Camtasia Studio 8 (HKLM-x32\...\{F5C9BE9A-04C3-4A72-8CD0-BB67C722D608}) (Version: 8.1.2.1344 - TechSmith Corporation) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) concept/design Hit-Recorder 6 (HKLM-x32\...\{F0B89B5C-7010-4AA1-8F89-83A45FCFDBE1}_is1) (Version: 6.8.2.0 - concept/design GmbH) concept/design onlineTV 11 (HKLM-x32\...\{8A4C3184-DA2F-4553-BF61-83F5690C3048}_is1) (Version: 11.0.0.0 - concept/design GmbH) concept/design Video Jukebox (HKLM-x32\...\{37569A10-CB38-4615-8B32-0BF9FF5D887D}_is1) (Version: 1.3.0.0 - concept/design GmbH) Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{51DD370C-6690-424E-9674-5F14468B323F}) (Version: 15.0.0.487 - Corel Corporation) Corel Graphics - Windows Shell Extension (x32 Version: 15.0.487 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Capture (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Common (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Connect (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Custom Data (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - DE (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Draw (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Filters (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - FontNav (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - IPM (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - PHOTO-PAINT (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Photozoom Plugin (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Redist (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Setup Files (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VBA (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VideoBrowser (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - VSTA (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit (Version: 15.0.487 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 - WT (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite X5 (x32 Version: 15.0 - Corel Corporation) Hidden CorelDRAW(R) Graphics Suite X5 (HKLM-x32\...\_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}) (Version: 15.0.0.486 - Corel Corporation) CutStudio (HKLM-x32\...\{AB84E88F-89CA-4002-A6F4-422C2C8CB1F8}) (Version: - ) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0337 - Disc Soft Ltd) DeviceClient Version 81.2.0.38 (HKLM-x32\...\{45D0CE08-14DE-4F94-AE24-6151BBE6FA90}_is1) (Version: 81.2.0.38 - DeviceClient, Inc.) Disk Unlocker (HKLM-x32\...\{FE73C47E-0FF8-47A6-A903-FFA827A4B43D}) (Version: 2.0.8 - ASUS) DivX 4.02 Codec (HKLM-x32\...\DivXCodec) (Version: - ) Dropbox (HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Dropbox) (Version: 3.0.3 - Dropbox, Inc.) DWG TrueView 2014 (Version: 19.1.18.0 - Autodesk) Hidden EaseUS Data Recovery Wizard 5.6.5 (HKLM-x32\...\EaseUS Data Recovery Wizard 5.6.5_is1) (Version: - EaseUS) EaseUS Partition Master 9.2.2 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS) eMule (HKLM-x32\...\eMule) (Version: - ) EzGenerator 4.0 (HKLM-x32\...\EzGenerator) (Version: 4.0 - Image-line) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) Free YouTube Download version 3.2.44.908 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.44.908 - DVDVideoSoft Ltd.) Free YouTube to MP3 Converter version 3.12.46.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Hardlock Device Drivers (HKLM-x32\...\Hardlock Device Drivers) (Version: - ) Hemera Photo-Objects 50,000 Volume III (HKLM-x32\...\InstallShield_{1E895714-8499-42AB-A1F0-F6E6455D3E3D}) (Version: 3.0.2 - Hemera Technologies Inc.) Hemera Photo-Objects 50,000 Volume III (x32 Version: 3.0.2 - Hemera Technologies Inc.) Hidden Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{8E87B944-4815-3C5E-947F-5035C9F64362}.KB947789) (Version: 1 - Microsoft Corporation) iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.) IPCamSetup version 3.6 (HKLM-x32\...\{260DA250-E830-4BC3-BFCF-5CB4970FAE89}_is1) (Version: 3.6 - 111) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Java 7 Update 40 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417040FF}) (Version: 7.0.400 - Oracle) Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation) JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.62.0 - JMicron Technology Corp.) K-Lite Codec Pack 10.1.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.1.5 - ) LifeFrame2 (HKLM-x32\...\{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}) (Version: 2.0.22 - ASUS) Logitech Vid (HKLM-x32\...\{4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}) (Version: 1.10.1009 - Logitech Inc.) Logitech Webcam Software (HKLM\...\{987FE247-4E69-4A2E-A961-D14F901FDBF6}) (Version: 12.10.1113 - Logitech Inc.) Logitech Webcam Software-Treiberpaket (HKLM\...\lvdrivers_12.10) (Version: 12.10.1110 - Logitech Inc.) Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{aec97477-921a-4289-985a-9e29506625b6}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (HKLM-x32\...\{8E87B944-4815-3C5E-947F-5035C9F64362}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (HKLM-x32\...\{76DAEC83-AF7B-333C-8A53-83D7C7D39199}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation) MixMeister BPM Analyzer 1.0 (HKLM-x32\...\MixMeister BPM Analyzer_is1) (Version: - MixMeister Technology LLC) Mp3tag v2.63 (HKLM-x32\...\Mp3tag) (Version: v2.63 - Florian Heidenreich) MP3Test (HKLM-x32\...\{BE802A6E-7F0D-4333-B45E-80F06C4DC59C}}_is1) (Version: 1.7.0.172 - Markus Stein) MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project) MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MyFreeCodec (HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\MyFreeCodec) (Version: - ) Need for Speed(TM) Hot Pursuit (HKLM-x32\...\{83A606F5-BF6F-42ED-9F33-B9F74297CDED}) (Version: 1.0.0.0 - Electronic Arts) Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia) Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.48.0 - Nokia) Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Hidden O&O DiskRecovery (HKLM\...\{B5C1C153-E74E-47BC-B8BC-AAB09F1587F6}) (Version: 9.0.252 - O&O Software GmbH) O&O DiskStat Professional (HKLM\...\{99D1FFD1-1EFE-4FA0-B225-5815E039BB25}) (Version: 2.0.396 - O&O Software GmbH) O&O PartitionManager Professional (HKLM\...\{5F67177B-77D9-4E19-B98A-514C45C9CF6D}) (Version: 3.0.199 - O&O Software GmbH) Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4569.1506 - Microsoft Corporation) Hidden PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia) PC Inspector smart recovery (HKLM-x32\...\{C9A87D86-FDFD-418B-BF96-EF09320973B3}) (Version: 4.50 - ) PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6642 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D12314F45EB}) (Version: 1.00.0179 - ) Roland CAMM-1 DRIVER [GX-24] (HKLM-x32\...\{1DDCBC8D-62FD-484E-9CAC-F05D7D51D93B}) (Version: 1.10.0000 - Roland DG Corporation) Roland CAMM-1 DRIVER [GX-640] (HKLM-x32\...\{B0EA703B-4F38-4C44-AAAA-424DFCD776E5}) (Version: 1.10.0000 - Roland DG Corporation) Roland VersaWorks (HKLM-x32\...\{85ABD69B-69DE-4A8F-9DF3-20BCE9038B09}) (Version: 1.1 - Your Company Name) SAM Broadcaster v4 (HKLM-x32\...\SAM3) (Version: v4 - Spacial Audio Solutions, LLC) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.2.14014_6 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.) Samsung Kies3 (x32 Version: 3.2.14083.9 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.45.0 - SAMSUNG Electronics Co., Ltd.) Screenshot Captor 4.9.1 (HKLM-x32\...\ScreenshotCaptor_is1) (Version: - ) Security Monitor Pro 4.4 (HKLM-x32\...\Security Monitor Pro DotNet_is1) (Version: - Deskshare Inc.) SerialKey Builder (x32 Version: 1.0 - Vicentas) Hidden Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SketchUp Import for AutoCAD 2014 (HKLM-x32\...\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation) Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer) Unity Web Player (HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\UnityWebPlayer) (Version: 2.6.1f3_31223 - Unity Technologies ApS) UnRarIt.Net (HKLM-x32\...\{21C1D723-D756-4C40-B563-F3773E8A2FC8}) (Version: 13.03.10 - Nils Maier) VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN) WinDFT (HKLM-x32\...\{065F384A-5C64-4532-814A-A24BA5374503}) (Version: 1.0.0 - HGST) Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation) Windows Driver Package - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia) WinRAR 5.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.00.0 - win.rar GmbH) WinSysClean X5 (Version: 15.01 - Ultimate Systems, Inc.) Hidden ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{083f5ae0-2b0a-11dd-bd0b-0800200c9a66}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor View 2014\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{25815CC0-43F4-3C75-8C3A-A139D9ADE740}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2014\en-US\dwgviewrficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{5b55a44a-d008-49aa-9234-86fb7709bc0a}\InprocServer32 -> C:\Windows\system32\mscoree.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor View 2014\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor View 2014\Bin\RxApprenticeServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor View 2014\Bin\RxInventorUtilities.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2014\en-US\acadficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1144226690-2465283230-36961558-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) ==================== Restore Points ========================= 21-12-2014 05:38:36 Tweaking.com - Windows Repair 21-12-2014 06:12:33 Removed CM Installer ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2014-12-22 17:01 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0D2812A5-7864-41EB-BB7A-91B5117B1FCA} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {26EC14CC-DA1B-44F4-87EF-0E67C079D523} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {391B5D68-2459-402E-A0D6-ADD8144DC7B5} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2014-12-01] (Apple Inc.) Task: {470F9E57-CE61-45B2-8152-2CC2E4665F2C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000UA => C:\Users\PC-Technik\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-09-11] (Facebook Inc.) Task: {497C76C2-CE83-494F-9B99-9528CAF1B0CA} - System32\Tasks\{B6DCE3FC-DD6E-4E8A-9977-994011564FAA} => pcalua.exe -a C:\Users\PC-Technik\Downloads\reflash_package.exe -d C:\Users\PC-Technik\Downloads Task: {549B4A3C-F857-44DF-B0E4-AD83227CCB65} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-27] (Google Inc.) Task: {56828667-C1B4-4FFE-B977-3AE2D5AA7B4F} - System32\Tasks\{D2CFB595-06B7-4333-9C5C-FCD576233DF1} => C:\Users\PC-Technik\Downloads\Cocut\Eurosystems Cocut Pro 4x3 v13.1.10 Multilanguage Dongle Cracked-Signmaker\Eurosystems_CoCut_PRO_4X3_v13.1.10_Multilanguage_DONGLE_CRACKED-SiGNMAKER\scp1311\cocut4x3pro.exe Task: {6231839E-BD1F-444F-A053-6DC01370F6FC} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation) Task: {627A309B-3A7F-4C9E-8D69-91F13DBAD151} - System32\Tasks\AdobeAAMUpdater-1.0-PC-Technik-PC-PC-Technik => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated) Task: {6625D200-8A8D-4698-8771-5184BA8A87D9} - System32\Tasks\Kijv => Rundll32.exe "C:\Windows\SysWOW64\KBDCZA.dll",Foaegckbwy Task: {6B27E16A-5FD4-4F69-AE88-4F6079C60BA3} - System32\Tasks\{57744DD5-6428-48BA-B18F-72309B3F8D8A} => pcalua.exe -a "E:\Graphiken für Cutter\z fonts\SETUP32.EXE" -d "E:\Graphiken für Cutter\z fonts" Task: {7441CFCE-D7C9-45D1-86DF-9C18201D203B} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20] (Adobe Systems Incorporated) Task: {7AC1638D-41E5-424E-BAA0-657399CD5A76} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc Task: {811F8DE5-5226-48E6-AA2B-E22B424AAB89} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation) Task: {8FA0AE51-1AE1-4443-9CF2-A03E3737E1F3} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.) Task: {9168EDC7-8BA9-4610-9C68-019287BC4CC4} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe Task: {A81FA06D-30B5-4631-BBEE-A6BBCCAD6BF2} - System32\Tasks\ArcSoft Connect Daemon => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe Task: {ABFB7FF0-57F3-44F0-ABA7-DB8B1529DDE3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-22] (Microsoft Corporation) Task: {B54F6A7C-E7E5-4E3D-8E5D-D35FA8F3F369} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {B760BF35-DD6B-4CD8-B3C3-9F61A9516C2A} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation) Task: {CA9A330F-EF5F-4BDA-96B4-AB094286B277} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-27] (Google Inc.) Task: {CE178753-D01D-4EC7-BB90-4546ADE5FEE6} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [2011-09-09] () Task: {D826ED54-EF64-435E-B16D-C85D07A7D47D} - System32\Tasks\{608B7513-843E-40F7-AFA4-CB752D468F78} => C:\Users\PC-Technik\Downloads\Cocut\Eurosystems Cocut Pro 4x3 v13.1.10 Multilanguage Dongle Cracked-Signmaker\Eurosystems_CoCut_PRO_4X3_v13.1.10_Multilanguage_DONGLE_CRACKED-SiGNMAKER\scp1311\cocut4x3pro.exe Task: {ED1CB69C-9961-401A-877E-FA74D22CB59B} - System32\Tasks\ASUS\ASUS DigiVRM Help => C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe [2011-04-13] (ASUSTeK Computer Inc.) Task: {F66693FC-1DBB-42F4-846F-A0B41C08F888} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft) Task: {F7D06659-96B7-4BEE-8CD6-AA647242850C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000Core => C:\Users\PC-Technik\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-09-11] (Facebook Inc.) Task: {FDB3AD25-87F3-4089-9D88-BA408545C9FE} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07] (Oracle Corporation) Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000Core.job => C:\Users\PC-Technik\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000UA.job => C:\Users\PC-Technik\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Kijv.job => C:\Windows\SysWOW64\KBDCZA.dll ==================== Loaded Modules (whitelisted) ============= 2013-12-06 16:06 - 2013-12-06 16:06 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll 2013-07-26 05:59 - 2013-07-26 05:59 - 00814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll 2013-07-26 05:59 - 2013-07-26 05:59 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll 2013-10-06 02:33 - 2012-09-11 15:54 - 00920736 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe 2013-10-06 02:40 - 2010-12-02 09:15 - 00915584 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe 2013-10-05 21:38 - 2013-10-05 21:38 - 00012520 _____ () C:\Users\PC-Technik\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\CoreTempReader.dll 2013-10-05 21:38 - 2013-10-05 21:38 - 00015080 _____ () C:\Users\PC-Technik\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\GetCoreTempInfoNET.dll 2013-10-05 21:38 - 2013-10-05 21:38 - 00014056 _____ () C:\Users\PC-Technik\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V4.7.3.gadget\SystemInfo.dll 2013-12-06 16:06 - 2013-12-06 16:06 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 12:05 - 2014-10-11 12:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2013-10-06 02:33 - 2014-12-23 22:35 - 00033280 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\PEbiosinterface32.dll 2013-10-06 02:33 - 2012-09-11 15:52 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.00.19\ATKEX.dll 2014-10-22 01:22 - 2014-10-22 01:22 - 00750080 _____ () C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2014-12-23 22:37 - 2014-12-23 22:37 - 00043008 _____ () c:\Users\PC-Technik\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpoez9uw.dll 2014-10-22 01:22 - 2014-10-22 01:22 - 00047616 _____ () C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\libEGL.dll 2014-10-22 01:22 - 2014-10-22 01:22 - 00863744 _____ () C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll 2014-10-22 01:22 - 2014-10-22 01:22 - 00200704 _____ () C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll 2011-09-05 08:19 - 2011-09-05 08:19 - 00028672 _____ () C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AxInterop.ShockwaveFlashObjects.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2013-10-05 18:28 - 2009-12-09 20:20 - 00126976 _____ () C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\EnumDevLib.dll 2013-10-05 18:29 - 2011-07-15 11:03 - 00693760 ____R () C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\P2PLib.dll 2013-10-06 02:50 - 2011-03-04 15:33 - 00053248 ____N () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\HookKey32.dll 2013-10-06 02:50 - 2009-05-21 09:14 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\pngio.dll 2013-10-06 02:34 - 2011-07-12 18:14 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll 2013-10-06 02:34 - 2010-10-05 07:22 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll 2013-10-06 02:35 - 2011-09-26 18:36 - 00869376 _____ () C:\Program Files (x86)\ASUS\AI Suite II\AI Charger+\AIChargerPlus.dll 2013-10-06 02:41 - 2011-03-09 13:55 - 01036800 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ASUS Update\Update.dll 2013-10-06 02:34 - 2012-03-21 11:07 - 00972288 _____ () C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll 2013-10-06 02:46 - 2011-03-11 18:53 - 01257472 _____ () C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll 2013-10-06 02:48 - 2011-01-06 09:38 - 01027072 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll 2013-10-06 02:34 - 2012-05-25 09:33 - 00883712 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll 2013-10-06 02:34 - 2012-05-28 20:27 - 01622528 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll 2013-10-06 02:34 - 2011-09-19 19:18 - 01243136 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll 2013-10-06 02:34 - 2011-07-21 08:06 - 00846848 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll 2013-10-06 02:34 - 2011-10-14 19:03 - 00885248 _____ () C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll 2013-10-06 02:40 - 2010-08-23 09:17 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMLib.dll 2013-10-06 02:34 - 2010-10-05 07:22 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll 2013-10-06 02:34 - 2009-08-12 19:15 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:07BB519E AlternateDataStreams: C:\ProgramData\TEMP:0A8E2C33 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-1144226690-2465283230-36961558-500 - Administrator - Disabled) Guest (S-1-5-21-1144226690-2465283230-36961558-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1144226690-2465283230-36961558-1002 - Limited - Enabled) PC-Technik (S-1-5-21-1144226690-2465283230-36961558-1000 - Administrator - Enabled) => C:\Users\PC-Technik ==================== Faulty Device Manager Devices ============= Name: Sentinel64 Description: Sentinel64 Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: Sentinel64 Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2014-12-23 22:38:38.346 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-12-23 21:23:27.448 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-12-23 19:01:55.562 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-12-22 17:00:49.723 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-12-22 17:00:49.553 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-12-22 17:00:49.363 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-12-22 17:00:49.193 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-12-21 17:17:17.632 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-12-21 17:03:56.708 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-12-21 16:53:09.939 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\sxs.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Processor: AMD FX(tm)-8120 Eight-Core Processor Percentage of memory in use: 26% Total physical RAM: 12233.32 MB Available physical RAM: 8961.37 MB Total Pagefile: 24464.82 MB Available Pagefile: 21165.39 MB Total Virtual: 8192 MB Available Virtual: 8191.86 MB ==================== Drives ================================ Drive c: (Lokaler Datenträger 1) (Fixed) (Total:876.03 GB) (Free:411.55 GB) NTFS Drive e: (Erweiterung 1. Platte) (Fixed) (Total:1171.87 GB) (Free:767.74 GB) NTFS Drive f: (P14_8164) (CDROM) (Total:0.26 GB) (Free:0 GB) CDFS Drive g: (Lokaler Datenträger 2) (Fixed) (Total:2048 GB) (Free:1621.72 GB) NTFS Drive i: (20130411_225731) (CDROM) (Total:3.03 GB) (Free:0 GB) CDFS Drive k: (Erweiterung 2. Platte Sicherung) (Fixed) (Total:746.52 GB) (Free:151.98 GB) NTFS Drive n: (DR_DISK) (Removable) (Total:0.12 GB) (Free:0.12 GB) FAT ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: D22730FC) Partition 1: (Not Active) - (Size=2048 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 2794.5 GB) (Disk ID: D22730EB) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=876 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=1171.9 GB) - (Type=OF Extended) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 746.5 GB) (Disk ID: 4DA3ADA7) Partition 1: (Not Active) - (Size=746.5 GB) - (Type=07 NTFS) ======================================================== Disk: 3 (MBR Code: Windows 7 or 8) (Size: 746.5 GB) (Disk ID: 4DA3ADAA) Partition 1: (Not Active) - (Size=746.5 GB) - (Type=07 NTFS) ======================================================== Disk: 6 (Size: 7.4 GB) (Disk ID: 6FBB9801) ==================== End Of Log ============================
__________________ We love music House Industry Radio www.house-industry.at www.house-industry.at/radio |
24.12.2014, 18:25 | #9 |
/// the machine /// TB-Ausbilder | Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bit Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKU\S-1-5-21-1144226690-2465283230-36961558-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled. ProxyServer: [.DEFAULT] => http=127.0.0.1:50621;https=127.0.0.1:50621 Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21 R2 xtu; C:\Program Files (x86)\Microsoft-ISATAP-Adapter\tunnel.exe [32768 2011-10-11] (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Microsoft-ISATAP-Adapter Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
26.12.2014, 17:41 | #10 |
| Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bit Hallo Schrauber, sorry das es solang gedauert hat, aber hatte ein wenig Weihnachtsstress, deswegen ein Hammer Danke das Du Dich auch noch am 24. die Mühe gemacht hast! Leider hab ich immer noch die selben Probs, aber der Eset hat ganz schön viel gefunden, aber da ist auch einiges dabei was ich noch brauche! Können wir eventuell nach begutachtung die logfiles hier wieder löschen?!? So dann mal los: Fixlog: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-12-2014 01 Ran by PC-Technik at 2014-12-26 02:20:52 Run:3 Running from C:\Users\PC-Technik\Desktop Loaded Profile: PC-Technik (Available profiles: PC-Technik & DefaultAppPool) Boot Mode: Normal ============================================== Content of fixlist: ***************** HKU\S-1-5-21-1144226690-2465283230-36961558-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled. ProxyServer: [.DEFAULT] => http=127.0.0.1:50621;https=127.0.0.1:50621 Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21 R2 xtu; C:\Program Files (x86)\Microsoft-ISATAP-Adapter\tunnel.exe [32768 2011-10-11] (Microsoft Corporation) [File not signed] C:\Program Files (x86)\Microsoft-ISATAP-Adapter ***************** HKU\S-1-5-21-1144226690-2465283230-36961558-1000\SOFTWARE\Policies\Microsoft\Internet Explorer => Key not found. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully. HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer => value deleted successfully. xtu => Service not found. "C:\Program Files (x86)\Microsoft-ISATAP-Adapter" => File/Directory not found. Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=3490407b2c54444c92edccda065afb19 # engine=21707 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-12-26 04:15:20 # local_time=2014-12-26 05:15:20 (+0100, Mitteleuropäische Zeit) # country="Austria" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 26077696 171240370 0 0 # scanned=1632135 # found=86 # cleaned=0 # scan_time=53372 sh=570EB9952C88AF1EBF1B6E444948897310CCDC6B ft=1 fh=8dd053864897c267 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\New_UpdateMoboGenie.exe.vir" sh=246DDBC3A2C223A6B9072637D93DC2A2832D097A ft=1 fh=c71c0011b04f613a vn="Win32/Toolbar.Babylon.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\DSearchLink\DSearchLink.exe.vir" sh=EF31EB60063B2EBB28C60A72523B172FA452E534 ft=1 fh=71f72496837df38f vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\ytd video downloader\ytd_installer.exe.vir" sh=3571F0FECC4226E53A1C4B595AA88CB82521C9C0 ft=0 fh=0000000000000000 vn="Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie2.1.35.zip.vir" sh=460FAB593C52A20FF1C135BCB9045359E8D08DA4 ft=1 fh=7d490d691a4e705b vn="Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DaemonProcess.exe.vir" sh=A0FD1396ED2D7B79BDFB9AF24FD98AC701632E07 ft=1 fh=32cb4b5a2245d585 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\Mobogenie.exe.vir" sh=B3E9B985A45EF896577466209FC1FDEDB066EB70 ft=0 fh=0000000000000000 vn="Variante von Android/Mobserv.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\MUServer.apk.vir" sh=570EB9952C88AF1EBF1B6E444948897310CCDC6B ft=1 fh=8dd053864897c267 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\New_UpdateMoboGenie.exe.vir" sh=A416ACC21756868987F275190BD1033BF74E180C ft=1 fh=d3699c00a2c5c199 vn="Variante von Win32/Adware.Synatix.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\wwerwerwe\asdasdasd\protegere.exe.vir" sh=C4420C6E94B8CAACCB3811384280D8A93CB0A37D ft=1 fh=25f111c507a31a21 vn="Win32/Toolbar.Conduit.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\wwerwerwe\asdasdasd\sp-downloader.exe.vir" sh=CA422851421ADC99403249CC7203DEDCA0B4B3F3 ft=1 fh=7524831eeb94e3ff vn="Win32/RiskWare.Astori.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Roaming\InetStat\inetstat.exe.vir" sh=87F48726F8E18FF2563E271D2C8F3D0443877B57 ft=1 fh=2464888f42f5ea4c vn="Variante von Win32/SBWatchman.D evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\Common Files\System\SysMenu.dll" sh=E487F0542DBF979783D5520B7F78CCD1E575AF9B ft=1 fh=e1e9c2b6754cd867 vn="Variante von Win32/SBWatchman.D evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files\Common Files\System\SysMenu64.dll" sh=92A9DE25386F4072D2BEDDE25E297486730024FE ft=1 fh=cb61a9148016db04 vn="Win32/AdWare.1ClickDownload.AT Anwendung" ac=I fn="C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\File System\006\t\00\00000000" sh=6F4D326622778B92595914E26ADC7CFA373C3766 ft=1 fh=aac26cb6d91224e3 vn="Win32/AdWare.1ClickDownload.AW Anwendung" ac=I fn="C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\File System\010\t\00\00000000" sh=CC9E67A9F2E1C96CA6BD55C70A721E516ABAFE4A ft=1 fh=5c9d4d294dba47e9 vn="Variante von Win32/Speedchecker.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DD6HEA0F\pcspeedup[1].exe" sh=2E01FBCBCEFCE34BCAD741CBAC502922D4493856 ft=1 fh=7951715bf1835f63 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DD6HEA0F\setup[1].exe" sh=03760F4B3DD8DA524FD00A911005BF367D0410C7 ft=1 fh=000c299aa444f07d vn="Variante von Win32/SpeedBit.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DD6HEA0F\ytdieobrdc_obrdc_setup[1].exe" sh=DDD7E789E67132CF6C5D8169B2F46E3498FCA60F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\AppData\Roaming\RNDLXDJG" sh=DDD7E789E67132CF6C5D8169B2F46E3498FCA60F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\AppData\Roaming\SOETRDG" sh=DDD7E789E67132CF6C5D8169B2F46E3498FCA60F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\AppData\Roaming\VJLOR" sh=6ECC3167B1D292338C0C79029A833F1A1F5B8FE5 ft=1 fh=feb73dcb36c42c06 vn="Win32/Toggle evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\Desktop\Events\Down Town Beats 2014\installer_flash_banner_creator_1_50_Deutsch_Deutsch.exe" sh=CF424AF612B34CE3285BCF7B9F26B2D7FF2B20D4 ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.BQND Trojaner" ac=I fn="C:\Users\PC-Technik\Documents\Usenet.nl\Filemaster\Driver Genius Driverpack\Driver Checker 2.7.5.zip" sh=A8889A0A87A8543F400384329DA9DBE7C69AFA61 ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.BQND Trojaner" ac=I fn="C:\Users\PC-Technik\Documents\Usenet.nl\Filemaster\Driver Genius Driverpack\Driver Genius Pro 11.0.0.1112.zip" sh=E1A5E96BC0D81EED9F1E8EFB2E7CF60AE6243729 ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.BQND Trojaner" ac=I fn="C:\Users\PC-Technik\Documents\Usenet.nl\Filemaster\Driver Genius Driverpack\Driver Genius Pro v11.0.0.1128.zip" sh=C61048EA855C609C23590F775D0CD28235F7701E ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.BQND Trojaner" ac=I fn="C:\Users\PC-Technik\Documents\Usenet.nl\Filemaster\Driver Genius Driverpack\Driver Genius Professional 11 0 0 1128.zip" sh=39A89F792E4719DCAF19E1F8FA3D994882634532 ft=0 fh=0000000000000000 vn="Win32/OutBrowse.BK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\Downloads\Data recoverys\disk-doctors-instant-file-recovery-101_crack.zip" sh=FAD58660C9FB74B166741FBEB715D54704E9E8B4 ft=0 fh=0000000000000000 vn="Win32/BHO.AFWT Trojaner" ac=I fn="C:\Users\PC-Technik\Downloads\Data recoverys\Disk.Doctors.Digital.Media.Recovery.Software.Ver1.0.0-Incl.KeyGen.2010.English.rar" sh=3BEDAB103DF84D2B63AD5A4B26A749C9D9B7C6C2 ft=0 fh=0000000000000000 vn="Variante von Win32/Kryptik.CSSL Trojaner" ac=I fn="C:\Users\PC-Technik\Downloads\Data recoverys\Disk_Doctors_Instant_File_Recovery_1_0_1_keygen.zip" sh=003ECF4E742DE560EB6385A9B9AD23004681CDA7 ft=1 fh=2c598c2a0d861a86 vn="Win32/OutBrowse.BK evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\Downloads\Data recoverys\disk-doctors-instant-file-recovery-101_crack\setup.exe" sh=D1B412FAC0C8B56D8E0F43D2A44FE0F261EE8393 ft=1 fh=6f6aebab1c3fc788 vn="Win32/BHO.AFWT Trojaner" ac=I fn="C:\Users\PC-Technik\Downloads\Data recoverys\Disk.Doctors.Digital.Media.Recovery.Software.Ver1.0.0-Incl.KeyGen.2010.English\Setup.exe" sh=28214E41A124E4BBE2B94FFF27CCAD0A9E9E0E81 ft=1 fh=a6f38c947f47b544 vn="Variante von Win32/Kryptik.CSSL Trojaner" ac=I fn="C:\Users\PC-Technik\Downloads\Data recoverys\Disk_Doctors_Instant_File_Recovery_1_0_1_keygen\Disk_Doctors_Instant_File_Recovery_1_0_1_keygen.exe" sh=A7342C41DC184F2FC461852D15E0D8FA34F91AB0 ft=0 fh=0000000000000000 vn="Variante von Win32/Injector.BRLP Trojaner" ac=I fn="C:\Users\PC-Technik\Downloads\eMule\softwaren\Disk Doctors Email Recovery (DBX) 1.0.2.rar" sh=CF65CC41CF82756F06B1F5A96EC3089B4FC17935 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\PC-Technik\Downloads\eMule\softwaren\Disk Doctors Windows Data Recovery Ntfs Key Reloaded.zip" sh=EC96C7976C46C4D864F56DD521B931178875A6DF ft=1 fh=ede4a3f75c0ddb78 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\PC-Technik\Downloads\eMule\softwaren\Disk Doctors Windows Data Recovery Ntfs Key Reloaded\Setup.exe" sh=7CB1E408114E84DF14156EEDB07FF05A0207C67F ft=0 fh=0000000000000000 vn="Variante von Win32/Kryptik.LEK Trojaner" ac=I fn="C:\Users\PC-Technik\Downloads\eMule\Temp\056.part" sh=CF5935DB99BC26A425BAB9174CC9FBD53BD62AF6 ft=1 fh=e5950def9f95d5b0 vn="Win32/bmMedia.EW evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\Downloads\EZ Generator\Activate.ezgenerator.4.crack.crack._99sfJ.exe" sh=F84673E4676E7023EE54BF236D729A763D545684 ft=1 fh=e5ef4b3cf70c1b76 vn="Variante von Win32/ExpressDownloader.I evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\Downloads\Software\Activation_Ezgenerator_4_downloader.exe" sh=E0C5E31B4A4DAA88C64BB4CA1E304C4D70481F1F ft=1 fh=626d7421e12db363 vn="Variante von Win32/CNETInstaller.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\Downloads\Software\cbsidlm-cbsi145-MixMeister_BPM_Analyzer-ORG_DE-10290906.exe" sh=EABFA9BE4DE7C86186245A90CDF6148CB28E331E ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\Users\PC-Technik\Downloads\Software\Installer (Right Click and select extract).zip" sh=1088D1E3E02C6AD4BFBB7B6787C44B78569316C7 ft=1 fh=bd79cb1474c3d9cb vn="Variante von MSIL/FakeTool.MK Trojaner" ac=I fn="C:\Users\PC-Technik\Downloads\Software\Megapolis Hack Tool.exe" sh=810ADBAFBC0AE82620313E6E63059B06177BBF5E ft=0 fh=0000000000000000 vn="Variante von MSIL/FakeTool.MK Trojaner" ac=I fn="C:\Users\PC-Technik\Downloads\Software\Megapolis Hack Tool.rar" sh=52BCD8EB2BB6ADB193707F7B548BB101A07C2B7A ft=1 fh=6f0827e8eac0cd60 vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\Downloads\Software\YTD46Setup.exe" sh=58B0875190CE40E0802C65BE6AC33C079710E89C ft=1 fh=c71c0011e8464a4f vn="Variante von Win32/InstallCore.JW evtl. unerwünschte Anwendung" ac=I fn="C:\Users\PC-Technik\Downloads\sonstiges\COMPUTER_BILD-Download-Manager_fuer_setup_flash_banner_maker.exe" sh=A2C1D259313CF4999ACD169E4AC34E33188981E7 ft=1 fh=693079709815ba94 vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll" sh=053845F06BFA7190886B4ACA09A54D028F31DE5C ft=0 fh=0000000000000000 vn="Variante von Win32/Agent.PBI Trojaner" ac=I fn="E:\Graphiken für Cutter\z Neuer Ordner\Aridi Vector EPS Clipart Collection all 38 Original Volumes.zip" sh=E750C443A83F9B135B499E7917C5A93120384BB3 ft=1 fh=4eedbac881d1fc72 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="G:\Autosoftwaren\DTLite4491-0356.exe" sh=5AC43A936009624BB601FAC63425AFA3821192D8 ft=0 fh=0000000000000000 vn="Win32/Kapucen.B Wurm" ac=I fn="G:\Autosoftwaren\Autodata\( 2010) autodata 2010+crack.zip" sh=E3140B95FF4249676671E842AF5549E8C4DDFDD7 ft=0 fh=0000000000000000 vn="Win32/Kapucen.B Wurm" ac=I fn="G:\Autosoftwaren\Autodata\Autodata 2010 3.25 Multi + Crack updated-fixed 12-2013.rar" sh=F12ACEB0E8CCF7D4E1F81028D208FEB28918EE86 ft=1 fh=1ec56b6debb1d99e vn="Win32/Kapucen.B Wurm" ac=I fn="G:\Autosoftwaren\Autodata\Autodata 2010 3.25 Multi + Crack updated-fixed 12-2013\setup.exe" sh=8BA80D675B5D918C3A3FC73D68E722A7B21242D9 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\Autosoftwaren\Autodata\neu\Autodata 2010 3.25 3.25 CRACKMultilanguage.rar" sh=0725E41EA4549F4E56F07CC2B014EE7F4D8EE526 ft=0 fh=0000000000000000 vn="Win32/VB.NVS Wurm" ac=I fn="G:\Autosoftwaren\Autodata\neu\AutoData v3.40.zip" sh=B255932C89DF1AF5B23569D8319FA186843EE433 ft=1 fh=bb3842ecf4e249bf vn="Win32/VB.NVS Wurm" ac=I fn="G:\Autosoftwaren\Autodata\neu\Install.exe" sh=9EA0DEBE0508E854F201D1C3EC9140C414E3483B ft=1 fh=c23fba3ecd80bbcb vn="Mehrere Bedrohungen" ac=I fn="G:\Autosoftwaren\Autodata\neu\Autodata 2010 3.25 3.25 CRACKMultilanguage\Setup.exe" sh=3604418ADF86D1E175EBEB4EF68CBBB14230DFFF ft=1 fh=2a4750e5e9b3dd87 vn="Variante von Win32/Hoax.ArchSMS.AGB Anwendung" ac=I fn="G:\Autosoftwaren\Soft\CarPort 1.0.4.exe" sh=471FA37704C3E0444855C350B3E115CA7DBEB65F ft=0 fh=0000000000000000 vn="Variante von Win32/Hoax.ArchSMS.AGB Anwendung" ac=I fn="G:\Autosoftwaren\Soft\CarPort 1.0.4.rar" sh=47781A22250C9EC281D23683ADC8BA8EDD3D065E ft=0 fh=0000000000000000 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="G:\Autosoftwaren\Soft\DTLite4491-0356.rar" sh=D8DD1FF6206E63E6C2726963245E54A6D7E5BB84 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.CVS Trojaner" ac=I fn="G:\GetNZB Downloads\Driver Genius 14.0.0.323 Final.rar 1 17\Driver Genius 14.0.0.323 Final.rar" sh=0F502B007AEC4AD4E0B12ABECB4E38EB290E9864 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.CGK Trojaner" ac=I fn="G:\GetNZB Downloads\Driver Genius 14.0.0.323 Final.rar 1 3\Driver Genius 14.0.0.323 Final.rar" sh=88E6DCD90D178D16286EADBA6D7F338E1E87369B ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.CVS Trojaner" ac=I fn="G:\GetNZB Downloads\Driver Genius Professional 14.0.323 Build 6050Crac\Driver Genius Professional 14.0.323 Build 6050 Final+Crack.rar" sh=E9C40DC4771BF53D8B832C8AF2604211BB0ED049 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.CVS Trojaner" ac=I fn="G:\GetNZB Downloads\Driver Genius Professional 14.0.323 Build 6050Crac\Driver Genius Professional 14.0.323 Build 6050+Crack.rar" sh=1356A6819B17ACCA962804CF3F5DCE74EBE0E3A5 ft=0 fh=0000000000000000 vn="Win32/Injector.OMQ Trojaner" ac=I fn="G:\Software\ADOBE PHOTOSHOP CS5 EXT. + SERIALS.rar" sh=471FA37704C3E0444855C350B3E115CA7DBEB65F ft=0 fh=0000000000000000 vn="Variante von Win32/Hoax.ArchSMS.AGB Anwendung" ac=I fn="G:\Software\CarPort 1.0.4.rar" sh=1867142971E46CEFBDC91D1C32BDDB89B9CC2FCB ft=1 fh=bed49cb1acf2aab9 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="G:\Software\DTLite4471-0333.exe" sh=0C914EC1109757234758EEAFEAC0E29BC1CC3AF3 ft=1 fh=b5f6dd2dfab95d53 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="G:\Software\DTLite4471-0337.exe" sh=E750C443A83F9B135B499E7917C5A93120384BB3 ft=1 fh=4eedbac881d1fc72 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="G:\Software\DTLite4491-0356.exe" sh=47781A22250C9EC281D23683ADC8BA8EDD3D065E ft=0 fh=0000000000000000 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="G:\Software\DTLite4491-0356.rar" sh=EE885B31431DB753B207610FC351C6B337F1EFE4 ft=1 fh=167581cccd9b1ea9 vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="G:\Software\Easeus Partition Master - CHIP-Downloader.exe" sh=4DB8DADB7A815B4A3DCF8D09E2FD0943472A36CC ft=1 fh=a2a70e5f869ed20c vn="Variante von Win32/OpenInstall evtl. unerwünschte Anwendung" ac=I fn="G:\Software\GPUMeterVersion24.exe" sh=60082997D8C2C9F42CA285F5886FA01A97E38FC9 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\Software\Online TV 8 Worldwide with Serial.rar" sh=BCF43267B4416C6DDEFAAD5AE0A63E3F682C5BB0 ft=1 fh=905be375e5c80006 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="G:\Software\PDFCreator-1_6_2_setup.exe" sh=426ADAB7071BD72AB9DA20E03A2677F683BE51F3 ft=1 fh=d2e1cd9c0fe28d5c vn="NSIS/TrojanDownloader.Adload.N Trojaner" ac=I fn="G:\Software\Adobe\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}-setup.exe" sh=7322E675F318B8367EB743F25DD58DBB680E39D8 ft=1 fh=57a8cab2f7cb8c47 vn="NSIS/TrojanDownloader.Adload.N Trojaner" ac=I fn="G:\Software\Adobe\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}-setup\run-setup.exe" sh=E0C5E31B4A4DAA88C64BB4CA1E304C4D70481F1F ft=1 fh=626d7421e12db363 vn="Variante von Win32/CNETInstaller.B evtl. unerwünschte Anwendung" ac=I fn="K:\Downloads\cbsidlm-cbsi145-MixMeister_BPM_Analyzer-ORG_DE-10290906.exe" sh=04B686A7204268A9EEDD219FB82B23C98DA245CE ft=1 fh=9073beccb73ec820 vn="Variante von Win32/SoftonicDownloader.F evtl. unerwünschte Anwendung" ac=I fn="K:\Downloads\SoftonicDownloader_fuer_camtasia-studio.exe" sh=CAFD1B87219A7EF39AEF702172E5EADA50F8EB65 ft=1 fh=d828e75b27617b9a vn="Variante von Win32/SoftonicDownloader.F evtl. unerwünschte Anwendung" ac=I fn="K:\Downloads\SoftonicDownloader_fuer_internettv.exe" sh=C999F2524A968CA6C2E0BD7FB7848080F5052546 ft=1 fh=42079c696cb41260 vn="Win32/Toolbar.Inbox.H evtl. unerwünschte Anwendung" ac=I fn="K:\Downloads\TVSetup.exe" sh=B254BC3ED948CE37FB5C629251F29D19E8F6FA79 ft=1 fh=d2e1cd9c0fe28d5c vn="NSIS/TrojanDownloader.Adload.N Trojaner" ac=I fn="K:\Downloads\Adobe\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}-setup.exe" sh=7322E675F318B8367EB743F25DD58DBB680E39D8 ft=1 fh=57a8cab2f7cb8c47 vn="NSIS/TrojanDownloader.Adload.N Trojaner" ac=I fn="K:\Downloads\Adobe\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}-setup\run-setup.exe" sh=7F59247F61D33F8A9F785170EFB1EDDA8A3D435E ft=0 fh=0000000000000000 vn="Variante von Generik.FSQNCHT Trojaner" ac=I fn="K:\Downloads\Cut Programme\Eurosystems_CoCut_PRO_4X3_v13.1.10_Multilanguage_DONGLE_CRACKED-SiGNMAKER.rar" sh=DC994F72EA7E18DE67140C0AFA8876B8679AC8F3 ft=0 fh=0000000000000000 vn="Win32/Kapucen.B Wurm" ac=I fn="K:\Downloads\Cut Programme\Signcut 2002 Pro Coreldraw Signmaking Cutter & Plotter Plugin Like Flexisign For Vector Graphics 12 Updated-Fixed 10-2006(1).rar" sh=7F59247F61D33F8A9F785170EFB1EDDA8A3D435E ft=0 fh=0000000000000000 vn="Variante von Generik.FSQNCHT Trojaner" ac=I fn="K:\Downloads\Cut Programme\Cocut\Eurosystems Cocut Pro 4x3 v13.1.10 Multilanguage Dongle Cracked-Signmaker.rar" sh=C51B4CECB27365FE8C53E1C2D5E75ABAE64637CF ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.Crpak.Gen evtl. unerwünschte Anwendung" ac=I fn="K:\Downloads\Cut Programme\Cocut\Eurosystems Eurocut Basic v6.1.0.5.zip" sh=C0EED9D09D91D69D76A7CD6416A905BC200F9643 ft=0 fh=0000000000000000 vn="Variante von Win32/Packed.Crpak.Gen evtl. unerwünschte Anwendung" ac=I fn="K:\Downloads\Cut Programme\Cocut\Eurosystems Eurocut Pro v6.1.0.3.zip" sh=D65594510A3D8752FA439A75E9B0EEFFB060628D ft=0 fh=0000000000000000 vn="Win32/TrojanDropper.Binder.NBH Trojaner" ac=I fn="K:\Downloads\eMule\Incoming\Software\! Franzis Quick Online TV 8 Worldwide_All versions_Multicrack_crack_keygen_serial_2013 working.zip" sh=52BCD8EB2BB6ADB193707F7B548BB101A07C2B7A ft=1 fh=6f0827e8eac0cd60 vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="K:\Downloads\Software\YTD46Setup.exe" Code:
ATTFilter C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\New_UpdateMoboGenie.exe.vir Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung C:\AdwCleaner\Quarantine\C\ProgramData\DSearchLink\DSearchLink.exe.vir Win32/Toolbar.Babylon.Y evtl. unerwünschte Anwendung C:\AdwCleaner\Quarantine\C\ProgramData\ytd video downloader\ytd_installer.exe.vir Variante von Win32/Toolbar.Widgi.B evtl. unerwünschte Anwendung C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie2.1.35.zip.vir Win32/Mobogenie.A evtl. unerwünschte Anwendung C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DaemonProcess.exe.vir Win32/Mobogenie.A evtl. unerwünschte Anwendung C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\Mobogenie.exe.vir Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\MUServer.apk.vir Variante von Android/Mobserv.A evtl. unerwünschte Anwendung C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\New_UpdateMoboGenie.exe.vir Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\wwerwerwe\asdasdasd\protegere.exe.vir Variante von Win32/Adware.Synatix.A Anwendung C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Local\wwerwerwe\asdasdasd\sp-downloader.exe.vir Win32/Toolbar.Conduit.R evtl. unerwünschte Anwendung C:\AdwCleaner\Quarantine\C\Users\PC-Technik\AppData\Roaming\InetStat\inetstat.exe.vir Win32/RiskWare.Astori.A Anwendung C:\Program Files\Common Files\System\SysMenu.dll Variante von Win32/SBWatchman.D evtl. unerwünschte Anwendung C:\Program Files\Common Files\System\SysMenu64.dll Variante von Win32/SBWatchman.D evtl. unerwünschte Anwendung C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\File System\006\t\00\00000000 Win32/AdWare.1ClickDownload.AT Anwendung C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\File System\010\t\00\00000000 Win32/AdWare.1ClickDownload.AW Anwendung C:\Users\PC-Technik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DD6HEA0F\pcspeedup[1].exe Variante von Win32/Speedchecker.B evtl. unerwünschte Anwendung C:\Users\PC-Technik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DD6HEA0F\setup[1].exe Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung C:\Users\PC-Technik\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DD6HEA0F\ytdieobrdc_obrdc_setup[1].exe Variante von Win32/SpeedBit.D evtl. unerwünschte Anwendung C:\Users\PC-Technik\AppData\Roaming\RNDLXDJG JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung C:\Users\PC-Technik\AppData\Roaming\SOETRDG JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung C:\Users\PC-Technik\AppData\Roaming\VJLOR JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung C:\Users\PC-Technik\Desktop\Events\Down Town Beats 2014\installer_flash_banner_creator_1_50_Deutsch_Deutsch.exe Win32/Toggle evtl. unerwünschte Anwendung C:\Users\PC-Technik\Documents\Usenet.nl\Filemaster\Driver Genius Driverpack\Driver Checker 2.7.5.zip Variante von Win32/Injector.BQND Trojaner C:\Users\PC-Technik\Documents\Usenet.nl\Filemaster\Driver Genius Driverpack\Driver Genius Pro 11.0.0.1112.zip Variante von Win32/Injector.BQND Trojaner C:\Users\PC-Technik\Documents\Usenet.nl\Filemaster\Driver Genius Driverpack\Driver Genius Pro v11.0.0.1128.zip Variante von Win32/Injector.BQND Trojaner C:\Users\PC-Technik\Documents\Usenet.nl\Filemaster\Driver Genius Driverpack\Driver Genius Professional 11 0 0 1128.zip Variante von Win32/Injector.BQND Trojaner C:\Users\PC-Technik\Downloads\Data recoverys\disk-doctors-instant-file-recovery-101_crack.zip Win32/OutBrowse.BK evtl. unerwünschte Anwendung C:\Users\PC-Technik\Downloads\Data recoverys\Disk.Doctors.Digital.Media.Recovery.Software.Ver1.0.0-Incl.KeyGen.2010.English.rar Win32/BHO.AFWT Trojaner C:\Users\PC-Technik\Downloads\Data recoverys\Disk_Doctors_Instant_File_Recovery_1_0_1_keygen.zip Variante von Win32/Kryptik.CSSL Trojaner C:\Users\PC-Technik\Downloads\Data recoverys\disk-doctors-instant-file-recovery-101_crack\setup.exe Win32/OutBrowse.BK evtl. unerwünschte Anwendung C:\Users\PC-Technik\Downloads\Data recoverys\Disk.Doctors.Digital.Media.Recovery.Software.Ver1.0.0-Incl.KeyGen.2010.English\Setup.exe Win32/BHO.AFWT Trojaner C:\Users\PC-Technik\Downloads\Data recoverys\Disk_Doctors_Instant_File_Recovery_1_0_1_keygen\Disk_Doctors_Instant_File_Recovery_1_0_1_keygen.exe Variante von Win32/Kryptik.CSSL Trojaner C:\Users\PC-Technik\Downloads\eMule\softwaren\Disk Doctors Email Recovery (DBX) 1.0.2.rar Variante von Win32/Injector.BRLP Trojaner C:\Users\PC-Technik\Downloads\eMule\softwaren\Disk Doctors Windows Data Recovery Ntfs Key Reloaded.zip Mehrere Bedrohungen C:\Users\PC-Technik\Downloads\eMule\softwaren\Disk Doctors Windows Data Recovery Ntfs Key Reloaded\Setup.exe Mehrere Bedrohungen C:\Users\PC-Technik\Downloads\eMule\Temp\056.part Variante von Win32/Kryptik.LEK Trojaner C:\Users\PC-Technik\Downloads\EZ Generator\Activate.ezgenerator.4.crack.crack._99sfJ.exe Win32/bmMedia.EW evtl. unerwünschte Anwendung C:\Users\PC-Technik\Downloads\Software\Activation_Ezgenerator_4_downloader.exe Variante von Win32/ExpressDownloader.I evtl. unerwünschte Anwendung C:\Users\PC-Technik\Downloads\Software\cbsidlm-cbsi145-MixMeister_BPM_Analyzer-ORG_DE-10290906.exe Variante von Win32/CNETInstaller.B evtl. unerwünschte Anwendung C:\Users\PC-Technik\Downloads\Software\Installer (Right Click and select extract).zip Mehrere Bedrohungen C:\Users\PC-Technik\Downloads\Software\Megapolis Hack Tool.exe Variante von MSIL/FakeTool.MK Trojaner C:\Users\PC-Technik\Downloads\Software\Megapolis Hack Tool.rar Variante von MSIL/FakeTool.MK Trojaner C:\Users\PC-Technik\Downloads\Software\YTD46Setup.exe Variante von Win32/Toolbar.Widgi.B evtl. unerwünschte Anwendung C:\Users\PC-Technik\Downloads\sonstiges\COMPUTER_BILD-Download-Manager_fuer_setup_flash_banner_maker.exe Variante von Win32/InstallCore.JW evtl. unerwünschte Anwendung C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll Variante von Win32/Toolbar.Linkury.G evtl. unerwünschte Anwendung E:\Graphiken für Cutter\z Neuer Ordner\Aridi Vector EPS Clipart Collection all 38 Original Volumes.zip Variante von Win32/Agent.PBI Trojaner G:\Autosoftwaren\DTLite4491-0356.exe Win32/DownWare.L evtl. unerwünschte Anwendung G:\Autosoftwaren\Autodata\( 2010) autodata 2010+crack.zip Win32/Kapucen.B Wurm G:\Autosoftwaren\Autodata\Autodata 2010 3.25 Multi + Crack updated-fixed 12-2013.rar Win32/Kapucen.B Wurm G:\Autosoftwaren\Autodata\Autodata 2010 3.25 Multi + Crack updated-fixed 12-2013\setup.exe Win32/Kapucen.B Wurm G:\Autosoftwaren\Autodata\neu\Autodata 2010 3.25 3.25 CRACKMultilanguage.rar Mehrere Bedrohungen G:\Autosoftwaren\Autodata\neu\AutoData v3.40.zip Win32/VB.NVS Wurm G:\Autosoftwaren\Autodata\neu\Install.exe Win32/VB.NVS Wurm G:\Autosoftwaren\Autodata\neu\Autodata 2010 3.25 3.25 CRACKMultilanguage\Setup.exe Mehrere Bedrohungen G:\Autosoftwaren\Soft\CarPort 1.0.4.exe Variante von Win32/Hoax.ArchSMS.AGB Anwendung G:\Autosoftwaren\Soft\CarPort 1.0.4.rar Variante von Win32/Hoax.ArchSMS.AGB Anwendung G:\Autosoftwaren\Soft\DTLite4491-0356.rar Win32/DownWare.L evtl. unerwünschte Anwendung G:\GetNZB Downloads\Driver Genius 14.0.0.323 Final.rar 1 17\Driver Genius 14.0.0.323 Final.rar Variante von MSIL/Injector.CVS Trojaner G:\GetNZB Downloads\Driver Genius 14.0.0.323 Final.rar 1 3\Driver Genius 14.0.0.323 Final.rar Variante von MSIL/Injector.CGK Trojaner G:\GetNZB Downloads\Driver Genius Professional 14.0.323 Build 6050Crac\Driver Genius Professional 14.0.323 Build 6050 Final+Crack.rar Variante von MSIL/Injector.CVS Trojaner G:\GetNZB Downloads\Driver Genius Professional 14.0.323 Build 6050Crac\Driver Genius Professional 14.0.323 Build 6050+Crack.rar Variante von MSIL/Injector.CVS Trojaner G:\Software\ADOBE PHOTOSHOP CS5 EXT. + SERIALS.rar Win32/Injector.OMQ Trojaner G:\Software\CarPort 1.0.4.rar Variante von Win32/Hoax.ArchSMS.AGB Anwendung G:\Software\DTLite4471-0333.exe Win32/DownWare.L evtl. unerwünschte Anwendung G:\Software\DTLite4471-0337.exe Win32/DownWare.L evtl. unerwünschte Anwendung G:\Software\DTLite4491-0356.exe Win32/DownWare.L evtl. unerwünschte Anwendung G:\Software\DTLite4491-0356.rar Win32/DownWare.L evtl. unerwünschte Anwendung G:\Software\Easeus Partition Master - CHIP-Downloader.exe Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung G:\Software\GPUMeterVersion24.exe Variante von Win32/OpenInstall evtl. unerwünschte Anwendung G:\Software\Online TV 8 Worldwide with Serial.rar Mehrere Bedrohungen G:\Software\PDFCreator-1_6_2_setup.exe Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung G:\Software\Adobe\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}-setup.exe NSIS/TrojanDownloader.Adload.N Trojaner G:\Software\Adobe\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}-setup\run-setup.exe NSIS/TrojanDownloader.Adload.N Trojaner K:\Downloads\cbsidlm-cbsi145-MixMeister_BPM_Analyzer-ORG_DE-10290906.exe Variante von Win32/CNETInstaller.B evtl. unerwünschte Anwendung K:\Downloads\SoftonicDownloader_fuer_camtasia-studio.exe Variante von Win32/SoftonicDownloader.F evtl. unerwünschte Anwendung K:\Downloads\SoftonicDownloader_fuer_internettv.exe Variante von Win32/SoftonicDownloader.F evtl. unerwünschte Anwendung K:\Downloads\TVSetup.exe Win32/Toolbar.Inbox.H evtl. unerwünschte Anwendung K:\Downloads\Adobe\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}-setup.exe NSIS/TrojanDownloader.Adload.N Trojaner K:\Downloads\Adobe\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}\Adobe Illustrator CS6 16.0.0 (32-64 bit) -{lordofOtheRing}-setup\run-setup.exe NSIS/TrojanDownloader.Adload.N Trojaner K:\Downloads\Cut Programme\Eurosystems_CoCut_PRO_4X3_v13.1.10_Multilanguage_DONGLE_CRACKED-SiGNMAKER.rar Variante von Generik.FSQNCHT Trojaner K:\Downloads\Cut Programme\Signcut 2002 Pro Coreldraw Signmaking Cutter & Plotter Plugin Like Flexisign For Vector Graphics 12 Updated-Fixed 10-2006(1).rar Win32/Kapucen.B Wurm K:\Downloads\Cut Programme\Cocut\Eurosystems Cocut Pro 4x3 v13.1.10 Multilanguage Dongle Cracked-Signmaker.rar Variante von Generik.FSQNCHT Trojaner K:\Downloads\Cut Programme\Cocut\Eurosystems Eurocut Basic v6.1.0.5.zip Variante von Win32/Packed.Crpak.Gen evtl. unerwünschte Anwendung K:\Downloads\Cut Programme\Cocut\Eurosystems Eurocut Pro v6.1.0.3.zip Variante von Win32/Packed.Crpak.Gen evtl. unerwünschte Anwendung K:\Downloads\eMule\Incoming\Software\! Franzis Quick Online TV 8 Worldwide_All versions_Multicrack_crack_keygen_serial_2013 working.zip Win32/TrojanDropper.Binder.NBH Trojaner K:\Downloads\Software\YTD46Setup.exe Variante von Win32/Toolbar.Widgi.B evtl. unerwünschte Anwendung Code:
ATTFilter UNSUPPORTED OPERATING SYSTEM! ABORTED! FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-12-2014 Ran by PC-Technik (administrator) on PC-TECHNIK-PC on 26-12-2014 17:31:39 Running from C:\Users\PC-Technik\Desktop Loaded Profile: PC-Technik (Available profiles: PC-Technik & DefaultAppPool) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Englisch (USA) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe () C:\Program Files (x86)\Microsoft-ISATAP-Adapter\tunnel.exe (AMD) C:\Windows\System32\atieclxx.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe () C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (Autodata Limited) C:\Program Files (x86)\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe (Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Akamai Technologies, Inc.) C:\Users\PC-Technik\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\PC-Technik\AppData\Local\Akamai\netsession_win.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe (Dropbox, Inc.) C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (DTS) C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe (Microsoft Corporation) C:\Windows\ehome\ehrecvr.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Realtek) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe (Realtek Semiconductor Corp.) C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (DonationCoder) C:\Program Files (x86)\ScreenshotCaptor\ScreenshotCaptor.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6470760 2012-05-15] (Realtek Semiconductor) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.) HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] () HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe [740736 2012-08-03] (ASUS Cloud Corporation) HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.2\bin\EpmNews.exe [2081792 2013-03-29] (CHENGDU YIWO Tech Development Co., Ltd) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated) HKLM-x32\...\Run: [d3dim32] => rundll32.exe iroq HKLM-x32\...\Run: [ASUS Camera ScreenSaver] => C:\Windows\ASScrProlog.exe [37232 2013-12-24] () HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2014-10-17] (Apple Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2014-11-21] (Apple Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673696 2013-08-01] (Disc Soft Ltd) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [Akamai NetSession Interface] => C:\Users\PC-Technik\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [GoogleChromeAutoLaunch_2A702D7A3A705AC0D83BEF373BEE53C5] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [856904 2014-12-06] (Google Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [43816 2014-10-20] (Apple Inc.) HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Policies\Explorer: [] HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1415048 2014-03-05] (Autodesk, Inc.) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-10-06] (Microsoft Corporation) Startup: C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\PC-Technik\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll (Autodesk, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-1144226690-2465283230-36961558-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-1144226690-2465283230-36961558-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin HKU\S-1-5-21-1144226690-2465283230-36961558-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\PC-Technik\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKU\S-1-5-21-1144226690-2465283230-36961558-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\PC-Technik\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\webssearches.xml FF HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff FF HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Firefox\Extensions: [freegames197@BestOffers] - C:\Users\PC-Technik\AppData\Roaming\Mozilla\Extensions\freegames197@BestOffers FF Extension: No Name - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff [Not Found] FF Extension: No Name - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha209\ff [Not Found] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.at/ CHR StartupUrls: Default -> "hxxp://www.google.at/" CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-10-05] CHR Extension: (Google Drive) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-05] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-27] CHR Extension: (YouTube) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-05] CHR Extension: (Google-Suche) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-05] CHR Extension: (Appgenerator - kostenlos Apps erstellen) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\efnmkpompmmellmbhajanpbomlklkcdd [2014-11-17] CHR Extension: (Avira Browserschutz) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-15] CHR Extension: (Facebook Invite All) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\inmmhkeajgflmokoaaoadgkhhmibjbpj [2014-02-20] CHR Extension: (Twoo Notifications) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\mggafhpkgkfebnjfbiefbbbicikgchlf [2013-10-05] CHR Extension: (Tiësto) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmeobddjkkgkglnogihcaejaleikhdh [2013-10-05] CHR Extension: (Google Wallet) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-05] CHR Extension: (Google Mail) - C:\Users\PC-Technik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-05] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.) [File not signed] R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-09-11] () R2 ASDiskUnlocker; C:\Program Files (x86)\ASUS\Disk Unlocker\ASPFSVS64.exe [258688 2010-12-02] (ASUSTeK Computer Inc.) R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe [915584 2010-12-02] () R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-09-11] (ASUSTeK Computer Inc.) R2 Autodata Limited License Service; C:\Program Files (x86)\Common Files\Autodata Limited Shared\Service\ADCDLicSvc.exe [72704 2014-04-22] (Autodata Limited) [File not signed] R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [File not signed] R2 DTSAudioService; C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe [210024 2011-05-31] (DTS) S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed] S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) R2 Realtek11nCU; C:\Program Files (x86)\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek) [File not signed] S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed] R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH) R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation) S2 Crypkey License; crypserv.exe [X] S2 HPSLPSVC; C:\Users\PC-TEC~1\AppData\Local\Temp\7zS48BC\hpslpsvc64.dll [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 a8djavs_x64; C:\Windows\System32\Drivers\a8djavs_x64.sys [44560 2008-12-09] (Native Instruments GmbH) S3 a8djusb_x64; C:\Windows\System32\Drivers\a8djusb_x64.sys [233488 2008-12-09] (Native Instruments GmbH) R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.) R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices) R3 ASFLTDrv.sys; C:\Program Files (x86)\ASUS\Disk Unlocker\ASFLTDrv64.sys [16512 2010-09-16] (ASUSTeK Computer Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-09-11] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-10-11] (Disc Soft Ltd) R1 ElRawDisk; C:\Windows\system32\drivers\dddskx64.sys [26024 2009-02-12] (EldoS Corporation) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [17480 2013-03-07] () [File not signed] S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [13896 2013-03-07] () [File not signed] S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9800 2013-03-07] () [File not signed] S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [9160 2013-03-07] () [File not signed] R2 Hardlock; C:\Windows\SysWOW64\drivers\hardlock.sys [670208 2004-11-05] (Aladdin Knowledge Systems Ltd.) [File not signed] S3 HtcVCom32; C:\Windows\System32\DRIVERS\HtcVComV64.sys [121800 2010-03-08] (QUALCOMM Incorporated) R3 kncbda; C:\Windows\System32\DRIVERS\kncbda64.sys [195712 2012-03-22] (ODSoft multimedia) R3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] () S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation) S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [848384 2011-02-11] (Realtek Semiconductor Corporation ) S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2008-07-11] (SafeNet, Inc.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-10-06] (Duplex Secure Ltd.) R1 VDiskBus; C:\Windows\System32\DRIVERS\VDiskBus64.sys [43136 2010-09-21] (ASUSTeK Computer Inc.) U3 a4jqm0ik; C:\Windows\System32\Drivers\a4jqm0ik.sys [0 ] (Advanced Micro Devices) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S1 NetworkX; \SystemRoot\system32\ckldrv.sys [X] S2 SVKP; \??\C:\Windows\system32\SVKP.sys [X] S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-26 17:31 - 2014-12-26 17:31 - 00000000 ____D () C:\Users\PC-Technik\Desktop\FRST-OlderVersion 2014-12-26 17:28 - 2014-12-26 17:28 - 00011277 _____ () C:\Users\PC-Technik\Desktop\Esetbedrohungen.txt 2014-12-26 02:23 - 2014-12-26 02:23 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-12-26 02:22 - 2014-12-26 02:22 - 02347384 _____ (ESET) C:\Users\PC-Technik\Desktop\esetsmartinstaller_deu.exe 2014-12-24 22:46 - 2014-12-24 22:47 - 00000000 ____D () C:\Users\PC-Technik\Downloads\recovery tools 2014-12-23 22:53 - 2014-12-23 22:53 - 00000058 _____ () C:\Windows\SysWOW64\DonationCoder_ScreenshotCaptor_InstallInfo.dat 2014-12-23 22:46 - 2014-12-26 17:31 - 00026330 _____ () C:\Users\PC-Technik\Desktop\FRST.txt 2014-12-23 22:46 - 2014-12-23 22:47 - 00045657 _____ () C:\Users\PC-Technik\Desktop\Addition.txt 2014-12-23 22:44 - 2014-12-23 22:44 - 00000698 _____ () C:\Users\PC-Technik\Desktop\JRT.txt 2014-12-23 22:39 - 2014-12-23 22:39 - 01707646 _____ (Thisisu) C:\Users\PC-Technik\Desktop\JRT.exe 2014-12-23 22:39 - 2014-12-23 22:39 - 00000000 ____D () C:\Windows\ERUNT 2014-12-23 22:36 - 2014-12-23 22:37 - 00001918 _____ () C:\Users\PC-Technik\Desktop\AdwCleaner[S1].txt 2014-12-23 22:29 - 2014-12-23 22:29 - 02173952 _____ () C:\Users\PC-Technik\Desktop\AdwCleaner_4.106.exe 2014-12-23 22:29 - 2014-12-23 22:29 - 00001425 _____ () C:\Users\PC-Technik\Desktop\mbam.txt 2014-12-23 22:14 - 2014-12-23 22:14 - 00001123 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-12-23 22:14 - 2014-12-23 22:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-12-23 22:14 - 2014-12-23 22:14 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-12-23 22:14 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-12-23 22:14 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-12-23 22:12 - 2014-12-23 22:13 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\PC-Technik\Desktop\mbam-setup-2.0.4.1028 (1).exe 2014-12-22 18:41 - 2014-09-18 20:59 - 00009792 _____ () C:\Users\PC-Technik\Downloads\cable.otvDataFile 2014-12-22 17:03 - 2014-12-22 17:03 - 00032305 _____ () C:\ComboFix.txt 2014-12-22 16:49 - 2014-12-22 16:49 - 05601641 ____R (Swearware) C:\Users\PC-Technik\Desktop\ComboFix.exe 2014-12-22 05:23 - 2014-12-22 05:23 - 00005366 _____ () C:\Users\PC-Technik\Downloads\webcam.zip 2014-12-22 05:23 - 2014-12-22 05:23 - 00000672 _____ () C:\Users\PC-Technik\Downloads\cable (1).zip 2014-12-22 05:19 - 2014-12-22 05:19 - 00001246 _____ () C:\Users\PC-Technik\Desktop\onlineTV 11.lnk 2014-12-22 05:17 - 2014-12-22 05:17 - 05796824 _____ (concept/design GmbH ) C:\Users\PC-Technik\Downloads\otv1102setup.exe 2014-12-21 17:13 - 2014-12-21 17:13 - 00040138 _____ () C:\Users\PC-Technik\Downloads\Addition.txt 2014-12-21 17:04 - 2014-12-26 17:31 - 00000000 ____D () C:\FRST 2014-12-21 17:03 - 2014-12-26 17:31 - 02122752 _____ (Farbar) C:\Users\PC-Technik\Desktop\FRST64.exe 2014-12-21 05:38 - 2014-12-21 05:38 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-PC-TECHNIK-PC-Microsoft-Windows-7-Ultimate-(64-bit).dat 2014-12-21 05:38 - 2014-12-21 05:38 - 00000000 ____D () C:\RegBackup 2014-12-21 05:02 - 2014-12-21 05:02 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Tweaking.com - Windows Repair 2014-12-21 05:01 - 2014-12-21 05:01 - 07871773 _____ () C:\Users\PC-Technik\Downloads\tweaking.com_windows_repair_aio.zip 2014-12-20 23:48 - 2014-12-21 09:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014 2014-12-20 23:47 - 2014-12-21 09:28 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2014 2014-12-20 20:42 - 2014-12-20 20:42 - 15549025 _____ () C:\Users\PC-Technik\Downloads\Microsoft_Fix-it-Paket.zip 2014-12-20 17:37 - 2014-12-20 17:37 - 00347816 _____ (Microsoft Corporation) C:\Users\PC-Technik\Downloads\MicrosoftFixit.WinSecurity.FISC.134252040448177.1.2.Run.exe 2014-12-20 17:35 - 2014-12-20 17:35 - 00347816 _____ (Microsoft Corporation) C:\Users\PC-Technik\Downloads\MicrosoftFixit.malware.FISC.134252040448177.1.1.Run.exe 2014-12-20 17:32 - 2014-12-20 17:32 - 00184704 _____ () C:\Users\PC-Technik\Downloads\qsinstaller (1).exe 2014-12-20 17:28 - 2014-12-20 17:28 - 00184704 _____ () C:\Users\PC-Technik\Downloads\qsinstaller.exe 2014-12-20 14:05 - 2014-12-20 14:05 - 00602112 _____ (OldTimer Tools) C:\Users\PC-Technik\Desktop\OTL.exe 2014-12-20 13:08 - 2014-12-26 02:19 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-12-20 13:08 - 2014-12-20 14:33 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2014-12-20 13:08 - 2014-12-20 13:20 - 00000000 ____D () C:\Users\PC-Technik\Desktop\mbar 2014-12-20 13:08 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-12-20 13:07 - 2014-12-20 13:07 - 16448208 _____ (Malwarebytes Corp.) C:\Users\PC-Technik\Desktop\mbar-1.08.2.1001.exe 2014-12-20 12:38 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-12-20 12:38 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-12-20 12:38 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-12-20 12:38 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-12-20 12:35 - 2014-12-22 17:03 - 00000000 ____D () C:\Qoobox 2014-12-20 12:35 - 2014-12-20 12:55 - 00000000 ____D () C:\Windows\erdnt 2014-12-20 12:32 - 2014-12-20 12:32 - 00002634 _____ () C:\Users\PC-Technik\Downloads\Winmgmt.reg 2014-12-20 11:29 - 2014-12-20 12:37 - 00001945 _____ () C:\Windows\epplauncher.mif 2014-12-20 03:17 - 2014-12-20 13:08 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-12-20 03:14 - 2014-12-20 03:14 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\PC-Technik\Downloads\mbam-setup-2.0.4.1028.exe 2014-12-20 00:18 - 2014-12-20 00:18 - 12290974 _____ (ImageWriter Developers ) C:\Users\PC-Technik\Downloads\Win32DiskImager-0.9.5-install.exe 2014-12-20 00:10 - 2014-12-20 00:15 - 220806959 _____ () C:\Users\PC-Technik\Downloads\cm-11-20141112-SNAPSHOT-M12-mondrianwifi.zip 2014-12-20 00:09 - 2014-12-20 00:14 - 245457499 _____ () C:\Users\PC-Technik\Downloads\cm-11-20141112-SNAPSHOT-M12-pollux_windy.zip 2014-12-19 23:00 - 2014-12-19 23:00 - 02056192 _____ () C:\Users\PC-Technik\Downloads\CMInstaller.msi 2014-12-19 16:47 - 2014-12-19 16:47 - 06078240 _____ () C:\Users\PC-Technik\Downloads\67751-29219.apk 2014-12-19 03:52 - 2014-12-23 22:33 - 00000000 ____D () C:\AdwCleaner 2014-12-19 03:52 - 2014-12-19 03:52 - 02166272 _____ () C:\Users\PC-Technik\Downloads\adwcleaner_4.105.exe 2014-12-19 02:57 - 2014-12-19 02:59 - 00000000 ____D () C:\Program Files (x86)\toolstarFRPRO 2014-12-19 02:13 - 2014-12-19 03:03 - 00000000 ____D () C:\Program Files (x86)\Disk Doctors FAT Data Recovery 2014-12-19 02:12 - 2014-12-19 02:13 - 00000000 ____D () C:\Program Files (x86)\Disk Doctors Instant File Recovery 2014-12-19 02:07 - 2014-12-19 02:08 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Data recoverys 2014-12-18 10:42 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-12-18 10:42 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-12-17 17:55 - 2014-12-17 17:55 - 00000000 ____D () C:\Program Files\LSoft Technologies 2014-12-17 17:51 - 2014-12-17 17:52 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Haus 2014-12-17 16:39 - 2014-12-17 16:39 - 00000255 _____ () C:\Users\PC-Technik\Downloads\houseindustryremix (1).m3u 2014-12-17 16:13 - 2014-12-17 16:13 - 00000255 _____ () C:\Users\PC-Technik\Downloads\houseindustryremix.m3u 2014-12-16 13:21 - 2014-12-16 13:53 - 536070392 _____ () C:\Users\PC-Technik\Downloads\Airplane.Repo.-.Die.Inkasso-Piloten.S02E02.Die.Helikopter.Flugschule.rar 2014-12-13 21:27 - 2014-12-13 21:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud 2014-12-12 23:16 - 2014-12-16 17:14 - 00000000 ____D () C:\Users\PC-Technik\Documents\Usenet.nl 2014-12-12 23:16 - 2014-12-12 23:16 - 07457256 _____ ( ) C:\Users\PC-Technik\Downloads\UsenetNLSetup_1.30.exe 2014-12-12 22:04 - 2014-12-12 22:25 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\UseNeXT 2014-12-12 22:04 - 2014-12-12 22:22 - 00000000 ____D () C:\Users\PC-Technik\Documents\UseNeXT 2014-12-12 22:02 - 2014-12-12 22:02 - 05270008 _____ (Tangysoft Ltd. ) C:\Users\PC-Technik\Downloads\UseNeXT_freetrial_421828w.exe 2014-12-12 15:32 - 2014-12-19 02:13 - 00000267 _____ () C:\Windows\Crypkey.ini 2014-12-12 15:32 - 2006-03-01 02:10 - 00069632 _____ (CrypKey (Canada) Ltd.) C:\Windows\SysWOW64\Crypserv.exe 2014-12-12 15:32 - 2006-01-10 03:47 - 00031846 _____ () C:\Windows\SysWOW64\Ckldrv.sys 2014-12-12 15:32 - 1999-06-18 22:49 - 00165888 _____ (Kenonic Controls) C:\Windows\Ckconfig.exe 2014-12-12 15:32 - 1996-05-03 18:21 - 00027648 ____R () C:\Windows\Setup_ck.exe 2014-12-12 15:32 - 1996-05-03 16:36 - 00018432 _____ () C:\Windows\Setup_ck.dll 2014-12-12 15:32 - 1995-07-04 19:33 - 00011776 _____ () C:\Windows\Ckrfresh.exe 2014-12-12 15:31 - 2014-12-19 02:11 - 00000000 ____D () C:\Program Files (x86)\Disk Doctors Instant File Recovery2 2014-12-11 04:58 - 2014-12-11 05:47 - 39067974 _____ () C:\Users\PC-Technik\Desktop\1.1million word list1.txt 2014-12-11 04:41 - 2014-12-11 04:41 - 01187372 _____ () C:\Users\PC-Technik\Downloads\wordlist-ao-20101027.txt.xz 2014-12-11 04:40 - 2014-12-11 04:40 - 00692513 _____ () C:\Users\PC-Technik\Downloads\EOWL-v1.1.2.zip 2014-12-11 04:34 - 2014-12-11 04:35 - 10389619 _____ () C:\Users\PC-Technik\Desktop\1.1million word list.txt 2014-12-11 04:16 - 2014-12-11 04:16 - 01487872 _____ () C:\Users\PC-Technik\Downloads\UnRarIt-13.03.10 (1).msi 2014-12-11 04:13 - 2014-12-11 04:13 - 00000000 ____D () C:\Users\PC-Technik\Downloads\BruteForce_0.9.1 2014-12-11 04:11 - 2014-12-11 04:17 - 00003037 _____ () C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UnRarIt.Net.lnk 2014-12-11 04:11 - 2014-12-11 04:12 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\.unrarit 2014-12-11 04:11 - 2014-12-11 04:11 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\Nils_Maier 2014-12-11 04:11 - 2014-12-11 04:11 - 00000000 ____D () C:\Program Files (x86)\Nils Maier 2014-12-11 04:10 - 2014-12-11 04:10 - 01487872 _____ () C:\Users\PC-Technik\Downloads\UnRarIt-13.03.10.msi 2014-12-11 04:00 - 2014-12-11 04:00 - 02169813 _____ () C:\Users\PC-Technik\Downloads\BruteForce_0.9.1.zip 2014-12-11 03:46 - 2014-12-11 03:46 - 05745152 _____ () C:\Users\PC-Technik\Downloads\archpr_setup_en.msi 2014-12-11 03:44 - 2014-12-11 03:44 - 01020928 _____ () C:\Users\PC-Technik\Downloads\Advanced Archive Password Recovery 4.54.exe 2014-12-11 03:30 - 2014-12-11 03:30 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Car DVD 2014-12-11 03:20 - 2014-12-11 03:20 - 00000000 ____D () C:\Windows\system32\appraiser 2014-12-11 03:16 - 2014-12-11 03:16 - 05745152 _____ () C:\Users\PC-Technik\Downloads\archpr_5455setup_en.msi 2014-12-11 03:01 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2014-12-11 03:01 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll 2014-12-11 03:01 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2014-12-11 03:01 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2014-12-11 03:01 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2014-12-11 03:01 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2014-12-11 03:01 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll 2014-12-11 03:01 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe 2014-12-11 03:01 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe 2014-12-11 03:01 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll 2014-12-11 00:18 - 2014-12-23 22:40 - 00000320 _____ () C:\Windows\Tasks\Kijv.job 2014-12-11 00:18 - 2014-12-11 00:18 - 00167936 __RSH () C:\Windows\SysWOW64\KBDCZA.dll 2014-12-11 00:18 - 2014-12-11 00:18 - 00002600 _____ () C:\Windows\System32\Tasks\Kijv 2014-12-10 23:18 - 2014-12-10 23:18 - 00160037 _____ () C:\Users\Public\Documents\DD_IFR_Scan_Info# Wed, 10-Dec-2014.dds 2014-12-10 21:50 - 2014-12-10 21:50 - 00632298 _____ () C:\Users\PC-Technik\Downloads\web_sitemap_03180ea3_046.xml.gz 2014-12-10 09:40 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-12-10 09:40 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-12-10 09:40 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-12-10 09:40 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2014-12-10 09:39 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-12-10 09:39 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-12-10 09:39 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-12-10 09:39 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-12-10 09:39 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-12-10 09:39 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-12-10 09:39 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-12-10 09:39 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-12-10 09:39 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-12-10 09:39 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-12-10 09:39 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-12-10 09:39 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-12-10 09:39 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-12-10 09:39 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-12-10 09:39 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-12-10 09:39 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-12-10 09:39 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-12-10 09:39 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-12-10 09:39 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-12-10 09:39 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-12-10 09:39 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-12-10 09:39 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-12-10 09:39 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-12-10 09:39 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-12-10 09:39 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-12-10 09:39 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-12-10 09:39 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-12-10 09:39 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-12-10 09:39 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-12-10 09:39 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-12-10 09:39 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-12-10 09:39 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-12-10 09:39 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-12-10 09:39 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-12-10 09:39 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-12-10 09:39 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-12-10 09:39 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-12-10 09:39 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-12-10 09:39 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-12-10 09:39 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-12-10 09:39 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-12-10 09:39 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-12-10 09:39 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-12-10 09:39 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-12-10 09:39 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-12-10 09:39 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-12-10 09:39 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-12-10 09:39 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-12-10 09:39 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-12-10 09:39 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-12-10 09:39 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-12-10 09:39 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-12-10 09:39 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-12-10 09:39 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-12-10 09:39 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-12-10 09:39 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-12-10 09:39 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2014-12-10 09:39 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-12-10 09:39 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-12-10 09:39 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe 2014-12-10 09:39 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe 2014-12-10 09:39 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll 2014-12-10 09:39 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll 2014-12-10 09:39 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll 2014-12-10 09:39 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll 2014-12-10 09:39 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe 2014-12-10 09:39 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll 2014-12-10 09:39 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll 2014-12-10 09:39 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll 2014-12-10 09:39 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll 2014-12-10 09:39 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe 2014-12-07 02:16 - 2014-12-07 02:16 - 00011761 _____ () C:\Users\PC-Technik\Downloads\the_2k12.zip 2014-12-07 01:56 - 2014-12-11 03:31 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Red Rose HP Neu 2014-12-05 01:20 - 2014-12-05 01:23 - 00009216 ___SH () C:\Users\PC-Technik\Documents\Thumbs.db 2014-12-04 15:06 - 2014-12-04 15:06 - 00000230 _____ () C:\Users\PC-Technik\Downloads\houseindustry (4).m3u 2014-12-03 19:58 - 2014-12-11 03:19 - 00001494 _____ () C:\Users\PC-Technik\Desktop\links.txt 2014-12-01 04:36 - 2014-12-11 03:33 - 00000000 ____D () C:\Users\PC-Technik\Desktop\QR Codes 2014-12-01 02:26 - 2014-12-01 02:26 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\TeamViewer ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-12-26 17:30 - 2014-01-27 17:41 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-12-26 17:29 - 2013-10-05 20:51 - 00000000 ____D () C:\Users\PC-Technik\Documents\Outlook-Dateien 2014-12-26 17:00 - 2013-10-05 22:00 - 00418237 _____ () C:\Users\PC-Technik\Network_Meter_Data.js 2014-12-26 16:54 - 2013-10-06 01:39 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\B9F30EF3-249A-4758-9030-64EE56A48147.aplzod 2014-12-26 16:53 - 2014-09-11 06:48 - 00000948 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000UA.job 2014-12-26 07:53 - 2014-09-11 06:48 - 00000926 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1144226690-2465283230-36961558-1000Core.job 2014-12-26 06:44 - 2014-01-27 17:41 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-12-26 03:00 - 2013-10-05 18:13 - 01745316 _____ () C:\Windows\WindowsUpdate.log 2014-12-26 02:00 - 2013-10-05 18:59 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\Adobe 2014-12-25 20:54 - 2013-10-11 19:04 - 01800578 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-12-25 20:54 - 2013-10-05 21:42 - 00760028 _____ () C:\Windows\system32\perfh007.dat 2014-12-25 20:54 - 2013-10-05 21:42 - 00171518 _____ () C:\Windows\system32\perfc007.dat 2014-12-24 10:38 - 2013-10-05 18:53 - 00000000 ____D () C:\Program Files (x86)\TeamViewer 2014-12-23 23:01 - 2014-03-18 22:39 - 00000040 _____ () C:\Windows\iltwain.ini 2014-12-23 22:53 - 2013-11-18 19:31 - 00000058 _____ () C:\Users\PC-Technik\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat 2014-12-23 22:53 - 2013-11-18 19:31 - 00000000 ____D () C:\Program Files (x86)\ScreenshotCaptor 2014-12-23 22:45 - 2009-07-14 05:45 - 00017360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-12-23 22:45 - 2009-07-14 05:45 - 00017360 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-12-23 22:40 - 2009-07-14 06:13 - 01798624 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-12-23 22:38 - 2013-12-10 20:23 - 00000000 ___RD () C:\Users\PC-Technik\Dropbox 2014-12-23 22:38 - 2013-12-10 20:19 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Dropbox 2014-12-23 22:35 - 2014-10-01 19:19 - 00000000 ___RD () C:\Users\PC-Technik\iCloudDrive 2014-12-23 22:35 - 2013-10-05 19:09 - 01072360 _____ () C:\Windows\PFRO.log 2014-12-23 22:35 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-12-23 22:35 - 2009-07-14 05:51 - 00001563 _____ () C:\Windows\setupact.log 2014-12-23 22:28 - 2014-04-02 12:05 - 00000000 ____D () C:\Users\DefaultAppPool 2014-12-23 18:53 - 2013-10-05 21:43 - 00000030 _____ () C:\Users\PC-Technik\AppData\Roaming\Network Meter_Usage.ini 2014-12-22 17:34 - 2014-09-05 17:23 - 00000000 ____D () C:\Users\PC-Technik\Downloads\transfer 2014-12-22 17:03 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-12-22 17:01 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-12-22 05:19 - 2013-12-12 00:13 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\concept design 2014-12-22 05:19 - 2013-12-12 00:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\concept design 2014-12-22 05:19 - 2013-12-12 00:13 - 00000000 ____D () C:\Program Files (x86)\concept design 2014-12-22 05:19 - 2013-10-05 21:54 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\concept design 2014-12-22 01:33 - 2013-10-13 19:32 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Verkauf 2014-12-21 17:07 - 2014-01-18 08:32 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\CrashDumps 2014-12-21 16:48 - 2009-07-14 05:45 - 05247104 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-12-21 16:47 - 2013-10-05 21:26 - 00187600 _____ () C:\Users\PC-Technik\AppData\Local\GDIPFONTCACHEV1.DAT 2014-12-21 16:45 - 2009-07-14 08:46 - 00000000 ____D () C:\Windows\CSC 2014-12-21 09:28 - 2013-10-24 00:14 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Admin 2014-12-21 09:28 - 2013-10-06 02:15 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\Akamai 2014-12-21 09:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-12-21 06:29 - 2009-07-14 03:34 - 00000870 _____ () C:\Windows\win.ini 2014-12-21 05:54 - 2009-07-14 03:34 - 00000855 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_557 2014-12-21 00:37 - 2013-10-06 15:08 - 02464704 _____ () C:\Windows\PE_Rom.dll 2014-12-21 00:37 - 2013-10-06 15:08 - 00000000 _____ () C:\Windows\Path.idx 2014-12-21 00:31 - 2013-10-05 18:23 - 00000000 ____D () C:\Users\PC-Technik 2014-12-20 23:58 - 2013-10-05 18:38 - 00000000 __SHD () C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2014-12-20 13:21 - 2009-07-14 05:45 - 00000000 ____D () C:\Windows\Setup 2014-12-20 12:51 - 2009-07-14 03:34 - 00000027 _____ () C:\Windows\system32\Drivers\etc\hosts_bak_400 2014-12-20 12:49 - 2009-07-14 03:34 - 25427968 _____ () C:\Windows\system32\config\system.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 128188416 _____ () C:\Windows\system32\config\software.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 00524288 _____ () C:\Windows\system32\config\default.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2014-12-20 12:49 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2014-12-20 03:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Resources 2014-12-20 03:42 - 2014-09-29 09:08 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-12-20 02:55 - 2014-01-27 20:26 - 00001908 _____ () C:\Windows\diagwrn.xml 2014-12-20 02:55 - 2014-01-27 20:26 - 00001908 _____ () C:\Windows\diagerr.xml 2014-12-20 02:53 - 2009-07-14 05:51 - 00000000 _____ () C:\Windows\setuperr.log 2014-12-20 02:48 - 2014-09-29 09:08 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2014-12-20 02:36 - 2013-10-06 13:01 - 00000000 ____D () C:\ProgramData\Package Cache 2014-12-19 04:49 - 2014-11-15 14:58 - 00000992 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk 2014-12-19 04:19 - 2013-10-06 01:29 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2014-12-19 04:12 - 2014-01-27 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-12-19 04:12 - 2013-10-05 18:24 - 00001026 _____ () C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-12-19 03:43 - 2013-10-05 23:27 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm 2014-12-19 03:26 - 2014-04-17 14:03 - 00000000 ____D () C:\Users\PC-Technik\Downloads\sonstiges 2014-12-19 03:20 - 2013-12-10 20:19 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-12-19 03:02 - 2014-04-22 18:19 - 00000000 ____D () C:\Program Files (x86)\accordiva 2014-12-19 03:01 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-12-19 03:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-12-19 02:53 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-12-19 00:26 - 2014-04-02 01:23 - 00000000 ____D () C:\ProgramData\TEMP 2014-12-18 21:46 - 2014-11-14 02:25 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Videos Auto 2014-12-17 17:51 - 2014-09-16 20:33 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Events 2014-12-17 17:48 - 2014-11-18 20:29 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Pinky HP 2014-12-17 17:12 - 2013-12-08 21:26 - 00000000 ____D () C:\Users\PC-Technik\Desktop\ARNO 2014-12-17 05:53 - 2014-07-11 17:20 - 00000000 ____D () C:\Users\PC-Technik\AppData\Local\13542 2014-12-16 23:14 - 2014-09-06 13:57 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\Mp3tag 2014-12-15 10:03 - 2013-10-05 19:05 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-12-13 03:00 - 2013-10-05 21:50 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-12-11 03:33 - 2014-11-10 19:10 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Welcome to House Industry Radio video 2014-12-11 03:33 - 2014-09-15 11:36 - 00000000 ____D () C:\Users\PC-Technik\Desktop\Sagay Promotion 2014-12-11 03:20 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-12-11 03:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-12-11 03:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat 2014-12-11 03:19 - 2013-10-21 23:05 - 00000000 ____D () C:\Users\PC-Technik\AppData\Roaming\BitTorrent 2014-12-11 03:17 - 2014-05-14 20:59 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 2014-12-11 03:09 - 2013-10-05 21:09 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-12-11 03:09 - 2013-10-05 21:09 - 00000000 ____D () C:\Windows\system32\MRT 2014-12-11 02:03 - 2014-05-14 18:20 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Musik 2014-12-05 17:28 - 2013-10-05 20:36 - 00000000 ____D () C:\Users\PC-Technik\Downloads\Software 2014-12-05 16:48 - 2013-11-01 21:14 - 00000000 ____D () C:\Users\PC-Technik\Downloads\EZ Generator 2014-11-28 00:03 - 2014-11-19 15:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EzGenerator 2014-11-27 17:51 - 2014-08-15 00:20 - 00000000 ____D () C:\Users\PC-Technik\Desktop\fail 2014-11-27 14:55 - 2014-11-25 18:01 - 02923520 _____ () C:\Users\PC-Technik\Desktop\Bauträger Anbot.msg Files to move or delete: ==================== C:\Users\PC-Technik\Network_Meter_Data.js Some content of TEMP: ==================== C:\Users\PC-Technik\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpoez9uw.dll C:\Users\PC-Technik\AppData\Local\Temp\Quarantine.exe C:\Users\PC-Technik\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-04-28 23:07 ==================== End Of Log ============================ --- --- --- Wie gesagt hab immernoch kein Sicherheitscenter! Lg Dany
__________________ We love music House Industry Radio www.house-industry.at www.house-industry.at/radio |
27.12.2014, 18:32 | #11 |
/// the machine /// TB-Ausbilder | Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bit Bei den ganzen Cracks und Usenet-Dreck müsste ich dich jetzt eigentlich formatieren schicken. 100% selbst schuld...... Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Program Files\Common Files\System C:\Users\PC-Technik\AppData\Roaming\RNDLXDJG C:\Users\PC-Technik\AppData\Roaming\SOETRDG C:\Users\PC-Technik\AppData\Roaming\VJLOR HKLM-x32\...\Run: [d3dim32] => rundll32.exe iroq HKU\S-1-5-21-1144226690-2465283230-36961558-1000\...\Policies\Explorer: [] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path S2 KMService; C:\Windows\SysWOW64\srvany.exe [8192 2003-04-18] () [File not signed] C:\Windows\SysWOW64\srvany.exe Hosts: Emptytemp: Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Jeder Fund von ESET, dieser ganze Usenet Dreck und die Cracks, werden gelöscht. Office scheint auch geklaut, Adobe, Das Disk Programm. Das wird alles deinstalliert, oder es gibt keinen weiteren Support.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Sicherheitscenter ist deaktiviert und lässt sich auch nicht starten win7 ultimate 64bit |
antivir, aufsetzen, avira, avira antivir, chkdsk, deaktiviert, gen, google, hijack, hijackthis, langsam, leute, microsoft, neu, nicht mehr, problem, regedit, sicherheitscenter, software, spybot, starten, verlieren, win, win7, windows, windows7 |