Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Log-Analyse und Auswertung: Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Seite 1 von 2 1 2
Alt 16.07.2015, 12:31   #1
spacebyrd
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Hallo Trojaner-Board-Team,

Nach allen 2- 3 Starts erscheint ein Fenster: Mindspark Toolbar funktioniert nicht mehr, manchmal kommen auch 2 Fenster gleichen Inhalts. Ansonsten macht sich nichts für mich Sichtbares bemerkbar.

Außerdem konnte ich das letzte Mal Adobe Flashplayer nicht aktualisieren. Es erschien ein Fenster mit folgender Meldung:

Zeile: 202
Zeichen: 13
Fehler: Die Eigenschaft „innerHTML“ eines undefinierten oder Nullverweises kann nicht festgelegt werden.
Code: 0
URL.: res://C:\Users\Matthias\Downloads\flashplayer18_ha_install.exe/160
Möchten Sie, dass Scripts auf dieser Seite weiterhin ausgeführt werden?
Ja/nein

Flashplayer-Installation ist danach nicht möglich. Die alte Version hatte ich ich, nachdem sie Fehler zeigte, gelöscht. Jetzt können Websites, die darauf angewiesen sind, nicht mehr geöffnet werden.

Wäre schön, wenn Ihr mir helfen könntet.

Beste Grüße

Matthias

Alt 16.07.2015, 12:31   #2
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________
Alt 20.07.2015, 22:13   #3
spacebyrd
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Hallo Schrauber,

ich hatte schon mal geantwortet, aber da ist mit dem Versenden wohl was schief gegangen. Hier also der 2. Versuch:

1. Adition.txt:


[CODE]Additional
FRST Logfile:
Code:
ATTFilter
scan result of Farbar Recovery Scan Tool (x64) Version:13-07-2015
Ran by Matthias at 2015-07-16 09:44:37
Running from C:\Users\Matthias\Downloads\Software
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-13288270-610616202-679700459-500 - Administrator - Disabled)
Gast (S-1-5-21-13288270-610616202-679700459-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-13288270-610616202-679700459-1002 - Limited - Enabled)
Matthias (S-1-5-21-13288270-610616202-679700459-1000 - Administrator - Enabled) => C:\Users\Matthias

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Trend Micro Maximum Security (Enabled - Up to date) {8242D66F-41BD-4049-C2E6-E578E73B62A0}
AS: Trend Micro Maximum Security (Enabled - Up to date) {3923378B-6787-4FC7-F856-DE0A9CBC281D}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.20 - GIGABYTE)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.007.20033 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{14D58A97-B60E-A858-34D8-95469C02F7EC}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.3.8.2523 - CDBurnerXP)
CorelDRAW 11 - SVG Filter Update (x32 Version: 11.714 - Corel Corporation) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DJ2540FWUpdateAlert (x32 Version: 1.00.0000 - HP) Hidden
Elite Unzip Internet Explorer Toolbar (HKLM-x32\...\EliteUnzip_aabar Uninstall Internet Explorer) (Version:  - Mindspark Interactive Network) <==== ATTENTION
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
HP Deskjet 2540 series - Grundlegende Software für das Gerät (HKLM\...\{6D7FCC52-8DDA-441C-849A-4BB7C7E3BF2E}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
HP Deskjet 2540 series Hilfe (HKLM-x32\...\{B3E5B153-CC4B-40F2-9802-288B0AF2A966}) (Version: 30.0.0 - Hewlett Packard)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Support Solutions Framework (HKLM-x32\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
Internet Speed Tracker Internet Explorer Toolbar (HKLM-x32\...\InternetSpeedTracker_9tbar Uninstall Internet Explorer) (Version:  - Mindspark Interactive Network) <==== ATTENTION
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.0.0.1036 - Marvell)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 39.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0.3 - Mozilla)
MyFreeCodec (HKU\S-1-5-21-13288270-610616202-679700459-1000\...\MyFreeCodec) (Version:  - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
OpenOffice 4.1.1 Language Pack (German) (HKLM-x32\...\{68AF7AB8-E018-40D9-B703-0129274FDBAE}) (Version: 4.11.9775 - Apache Software Foundation)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
RealDownloader (x32 Version: 18.0.1.10 - RealNetworks, Inc.) Hidden
RealDownloader (x32 Version: 18.0.1.9 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.49.927.2011 - Realtek)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6650 - Realtek Semiconductor Corp.)
RealTimes (RealPlayer) (HKLM-x32\...\RealPlayer 18.0) (Version: 18.0.1 - RealNetworks)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.30.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0 - Renesas Electronics Corporation) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
Tftpd32 Service Edition (remove only) (HKLM-x32\...\Tftpd32_SE) (Version:  - )
Trend Micro DirectPass (Version: 1.9.0.1094 - Trend Micro Inc.) Hidden
Trend Micro Maximum Security (HKLM\...\{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}) (Version: 8.0 - Trend Micro Inc.)
Trend Micro Password Manager (HKLM\...\{3075404F-5657-4f31-A064-FEF98661BDD4}) (Version: 1.9.1188 - Trend Micro Inc.)
Trend Micro Titanium (Version: 8.0 - Trend Micro Inc.) Hidden
Unity Web Player (HKU\S-1-5-21-13288270-610616202-679700459-1000\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden
VBA (2701.01) (x32 Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VCRT for DirectPass x64 (Version: 1.0.0.1000 - Trend Micro, Inc.) Hidden
VCRT for DirectPass x86 (x32 Version: 1.0.0.1000 - Trend Micro, Inc.) Hidden
Video Downloader (x32 Version: 1.0.0 - RealNetworks) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

01-06-2015 06:07:52 Windows-Sicherung
09-06-2015 07:58:37 Windows-Sicherung
10-06-2015 06:21:46 Windows Update
27-06-2015 23:21:47 Windows-Sicherung
29-06-2015 08:03:09 Windows-Sicherung
05-07-2015 19:07:18 Windows-Sicherung
11-07-2015 13:09:39 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727
11-07-2015 13:10:25 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727
13-07-2015 06:42:38 Windows-Sicherung
16-07-2015 00:08:52 Windows Update

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {5E6B4B6B-CC20-4BD0-8F59-3C23C2479556} - System32\Tasks\{708881AE-6AB5-4976-8515-1FD4AADC22A0} => pcalua.exe -a C:\Windows\RaidTool\IDEDrvSetup.exe -d C:\Windows\SysWOW64 -c "PCI\VEN_197B&amp;DEV_2363&amp;SUBSYS_B0001458&amp;REV_02\4&amp;238ed369&amp;0&amp;01E1;"
Task: {8E4FBD63-EFC4-4CED-9239-C151ED435DBE} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {A71CE064-A490-4D06-A434-8693DEF99946} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-13288270-610616202-679700459-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)
Task: {DA8F064B-5E07-42FA-BA70-019199B33B47} - System32\Tasks\{4875E213-8632-45B9-BA52-BD97AE9AB2F8} => F:\SETUP.EXE
Task: {F588CF3C-94A6-47A2-A933-F1CE0EE09373} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [2015-06-17] ()
Task: {FFA5D0F6-9842-457C-A408-FF89E2E02C71} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-13288270-610616202-679700459-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
2. Defogger.log:

Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 09:40 on 16/07/2015 (Matthias)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
3. FRST.txt:

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-07-2015
Ran by Matthias (administrator) on MATTHIAS-PC on 16-07-2015 09:56:25
Running from C:\Users\Matthias\Downloads\Software
Loaded Profiles: Matthias (Available Profiles: Matthias)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
(Mindspark) C:\Program Files (x86)\EliteUnzip_aa\bar\2.bin\aabarsvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe
(Mindspark) C:\Program Files (x86)\InternetSpeedTracker_9t\bar\3.bin\9tbarsvc.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtWatchDog.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\TMIDS\PwmSvc.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Mindspark) C:\Program Files (x86)\InternetSpeedTracker_9t\bar\3.bin\APPINTEGRATOR.EXE
(Mindspark) C:\Program Files (x86)\InternetSpeedTracker_9t\bar\3.bin\AppIntegrator64.exe
(Mindspark) C:\Program Files (x86)\EliteUnzip_aa\bar\2.bin\APPINTEGRATOR.EXE
(Mindspark) C:\Program Files (x86)\EliteUnzip_aa\bar\2.bin\AppIntegrator64.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Elite Unzip) C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
() C:\Users\Matthias\Downloads\Software\Defogger.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Platinum] => C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe [1266688 2015-05-04] (Trend Micro Inc.)
HKLM\...\Run: [PwmConsole.exe] => C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe [2047216 2015-06-26] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [246304 2014-07-20] (Trend Micro Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-04-28] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-07-09] (Raptr, Inc)
HKLM-x32\...\Run: [Internet Speed Tracker EPM Support] => C:\Program Files (x86)\InternetSpeedTracker_9t\bar\3.bin\9tmedint.exe [12824 2015-07-11] (Mindspark)
HKLM-x32\...\Run: [Internet Speed Tracker AppIntegrator 32-bit] => C:\Program Files (x86)\InternetSpeedTracker_9t\bar\3.bin\AppIntegrator.exe [230424 2015-07-11] (Mindspark)
HKLM-x32\...\Run: [Internet Speed Tracker AppIntegrator 64-bit] => C:\Program Files (x86)\InternetSpeedTracker_9t\bar\3.bin\AppIntegrator64.exe [265752 2015-07-11] (Mindspark)
HKLM-x32\...\Run: [Elite Unzip EPM Support] => C:\Program Files (x86)\EliteUnzip_aa\bar\2.bin\aamedint.exe [12872 2015-06-05] (Mindspark)
HKLM-x32\...\Run: [Elite Unzip AppIntegrator 32-bit] => C:\Program Files (x86)\EliteUnzip_aa\bar\2.bin\AppIntegrator.exe [229960 2015-06-05] (Mindspark)
HKLM-x32\...\Run: [Elite Unzip AppIntegrator 64-bit] => C:\Program Files (x86)\EliteUnzip_aa\bar\2.bin\AppIntegrator64.exe [264264 2015-06-05] (Mindspark)
HKLM-x32\...\Run: [Corel Graphics Suite 1117] => C:\Program Files (x86)\Corel\Corel Graphics 11\Register\registration.exe /title="Corel Graphics Suite 11" /date=033015 serial=DR11CRG-0311808-JZS
HKLM-x32\...\Run: [Internet Speed Tracker Search Scope Monitor] => "C:\PROGRA~2\INTERN~3\bar\2.bin\9tsrchmn.exe" /m=2 /w /h
HKLM-x32\...\Run: [Elite Unzip Search Scope Monitor] => "C:\PROGRA~2\ELITEU~2\bar\2.bin\aasrchmn.exe" /m=2 /w /h
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [286272 2015-07-09] (RealNetworks, Inc.)
HKLM-x32\...\Run: [RealDownloader] => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [608320 2015-06-17] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-06-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\RunOnce: [Elite Unzip Installer] => C:\Users\Matthias\AppData\Local\Elite Unzip Installer(0010affd).exe [5847512 2015-07-16] (Elite Unzip)
HKU\S-1-5-21-13288270-610616202-679700459-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1566016 2015-04-28] (Samsung)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-07-09]
ShortcutTarget: RealTimes.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 2540 series.lnk [2014-11-11]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 2540 series.lnk -> C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-13288270-610616202-679700459-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-13288270-610616202-679700459-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://portal.kcsservice.de
HKU\S-1-5-21-13288270-610616202-679700459-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com
URLSearchHook: HKU\S-1-5-21-13288270-610616202-679700459-1000 - (No Name) - {b287e6b2-868b-4ac1-acce-c69eb5fd29d1} - C:\Program Files (x86)\InternetSpeedTracker_9t\bar\3.bin\9tSrcAs.dll (Mindspark)
URLSearchHook: HKU\S-1-5-21-13288270-610616202-679700459-1000 - (No Name) - {8358a5f6-e352-4677-8386-9704aa8ad899} - C:\Program Files (x86)\EliteUnzip_aa\bar\2.bin\aaSrcAs.dll (Mindspark)
SearchScopes: HKLM -> DefaultScope {BE102181-DECA-46A8-B5CF-5DD8007AC8FE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {BE102181-DECA-46A8-B5CF-5DD8007AC8FE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {BE102181-DECA-46A8-B5CF-5DD8007AC8FE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {a0892e19-6051-4ae6-9a5f-91542a166b2b} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^BBQ^xdm181^YYA^de&si=downspeedtest&ptb=F19D96BC-7CD4-4AD4-8826-3403688ED777&ind=2015020813&n=781ac70d&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKLM-x32 -> {BE102181-DECA-46A8-B5CF-5DD8007AC8FE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-13288270-610616202-679700459-1000 -> {a0892e19-6051-4ae6-9a5f-91542a166b2b} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^BBQ^xdm181^YYA^de&si=downspeedtest&ptb=F19D96BC-7CD4-4AD4-8826-3403688ED777&ind=2015020813&n=781ac70d&psa=&st=sb&searchfor={searchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2015-06-17] (RealDownloader)
BHO: Trend Micro Password Manager BHO -> {3F019D1C-7EAA-4F25-A765-FBA635BD0AFF} -> C:\Program Files\Trend Micro\TMIDS\PwmIEBHO64.dll [2015-06-26] (Trend Micro Inc.)
BHO: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: TmIEPlugInBHO Class -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg.dll [2014-06-30] (Trend Micro Inc.)
BHO: Trend Micro IE Protection -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe64.dll [2015-05-21] (Trend Micro Inc.)
BHO-x32: Search Assistant BHO -> {1af33c13-6c63-488c-9dea-17b0e7829de5} -> C:\Program Files (x86)\EliteUnzip_aa\bar\2.bin\aaSrcAs.dll [2015-06-05] (Mindspark)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-06-17] (RealDownloader)
BHO-x32: Trend Micro Password Manager BHO -> {3F019D1C-7EAA-4F25-A765-FBA635BD0AFF} -> C:\Program Files\Trend Micro\TMIDS\PwmIEBHO32.dll [2015-06-26] (Trend Micro Inc.)
BHO-x32: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-16] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: TmIEPlugInBHO Class -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg32.dll [2014-06-30] (Trend Micro Inc.)
BHO-x32: Toolbar BHO -> {9e28b297-11d4-4293-aa6f-558658ee66ae} -> C:\Program Files (x86)\InternetSpeedTracker_9t\bar\3.bin\9tbar.dll [2015-07-11] (Mindspark)
BHO-x32: Trend Micro IE Protection -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe32.dll [2015-05-21] (Trend Micro Inc.)
BHO-x32: Search Assistant BHO -> {cc28794a-99d4-4b1b-bccf-b065ce5f9feb} -> C:\Program Files (x86)\InternetSpeedTracker_9t\bar\3.bin\9tSrcAs.dll [2015-07-11] (Mindspark)
BHO-x32: Toolbar BHO -> {da5d70b2-0a92-4b43-b068-a0dd02898c56} -> C:\Program Files (x86)\EliteUnzip_aa\bar\2.bin\aabar.dll [2015-06-05] (Mindspark)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-16] (Oracle Corporation)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll No File
Toolbar: HKLM - Trend Micro Password Manager Symbolleiste - {9B4B91FC-EC4D-4018-9575-96FA5A3C03C5} - C:\Program Files\Trend Micro\TMIDS\PwmIEBHO64.dll [2015-06-26] (Trend Micro Inc.)
Toolbar: HKLM - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Toolbar: HKLM-x32 - Trend Micro Password Manager Symbolleiste - {9B4B91FC-EC4D-4018-9575-96FA5A3C03C5} - C:\Program Files\Trend Micro\TMIDS\PwmIEBHO32.dll [2015-06-26] (Trend Micro Inc.)
Toolbar: HKLM-x32 - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Toolbar: HKLM-x32 - Internet Speed Tracker - {665cb5b7-4c3b-4995-8cec-1f4d5860edc9} - C:\Program Files (x86)\InternetSpeedTracker_9t\bar\3.bin\9tbar.dll [2015-07-11] (Mindspark)
Toolbar: HKLM-x32 - Elite Unzip - {ef55cb9f-2729-4bff-afe5-ee59593b16e8} - C:\Program Files (x86)\EliteUnzip_aa\bar\2.bin\aabar.dll [2015-06-05] (Mindspark)
Toolbar: HKU\S-1-5-21-13288270-610616202-679700459-1000 -> Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll No File
Toolbar: HKU\S-1-5-21-13288270-610616202-679700459-1000 -> No Name - {665CB5B7-4C3B-4995-8CEC-1F4D5860EDC9} -  No File
Toolbar: HKU\S-1-5-21-13288270-610616202-679700459-1000 -> No Name - {EF55CB9F-2729-4BFF-AFE5-EE59593B16E8} -  No File
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe64.dll [2015-05-21] (Trend Micro Inc.)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe32.dll [2015-05-21] (Trend Micro Inc.)
Handler: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg.dll [2014-06-30] (Trend Micro Inc.)
Handler-x32: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg32.dll [2014-06-30] (Trend Micro Inc.)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ProToolbarIMRatingActiveX.dll [2014-07-20] (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll [2014-07-20] (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{7F29EE80-BDE0-4A88-99D4-0779C23EE81F}: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default
FF Homepage: www.t-online.de
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=18.0.1.9 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2015-07-09] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.0.1.9 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2015-07-09] (RealTimes)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-03-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-13288270-610616202-679700459-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Matthias\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Extension: WOT - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-07-13]
FF Extension: Flagfox - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-12-29]
FF Extension: Adblock Plus - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-29]
FF HKLM\...\Firefox\Extensions: [tmbepff@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\firefoxextension [2015-06-28]
FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF HKLM-x32\...\Firefox\Extensions: [tmbepff@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [{BBB77B49-9FF4-4d5c-8FE2-92B1D6CD696C}] - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension
FF Extension: Trend Micro Osprey Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension [2015-06-11]
FF HKLM-x32\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2014-12-04]
FF HKLM-x32\...\Firefox\Extensions: [{8197dd50-b252-4b08-a1be-1277f22357bb}] - C:\Program Files\Trend Micro\TMIDS\PwmFirefoxExt
FF Extension: Trend Micro Password Manager Firefox Extension - C:\Program Files\Trend Micro\TMIDS\PwmFirefoxExt [2014-12-04]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [olmajmomenlhgihenlbjcfbopoghpckg] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [idkknaphebegndgimgdpfnconcickdfn] - No Path Or update_url value
CHR HKLM-x32\...\Chrome\Extension: [olmajmomenlhgihenlbjcfbopoghpckg] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 EliteUnzip_aaService; C:\Program Files (x86)\EliteUnzip_aa\bar\2.bin\aabarsvc.exe [90696 2015-06-05] (Mindspark)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
R2 InternetSpeedTracker_9tService; C:\Program Files (x86)\InternetSpeedTracker_9t\bar\3.bin\9tbarsvc.exe [90648 2015-07-11] (Mindspark)
R2 Platinum Host Service; C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe [1187328 2015-05-04] (Trend Micro Inc.)
R2 PwmSvc; C:\Program Files\Trend Micro\TMIDS\PwmSvc.exe [333856 2015-06-26] (Trend Micro Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2015-06-17] ()
R2 RealTimes Desktop Service; C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1115224 2015-07-09] (RealNetworks, Inc.)
R2 Tftpd32_svc; C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe [167936 2013-11-28] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 kbfilter; C:\Windows\System32\DRIVERS\kbfilter.sys [67408 2015-01-30] (Trend Micro Inc.)
R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [122432 2015-04-24] (Trend Micro Inc.)
R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [307344 2015-04-24] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [50976 2014-07-09] (Trend Micro Inc.)
R3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [106296 2014-07-09] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [93616 2015-04-24] (Trend Micro Inc.)
R3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [407864 2014-07-09] (Trend Micro Inc.)
R2 tmusa; C:\Windows\System32\DRIVERS\tmusa.sys [106296 2014-06-30] (Trend Micro Inc.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-16 09:42 - 2015-07-16 09:56 - 00000000 ____D C:\FRST
2015-07-16 09:40 - 2015-07-16 09:40 - 00000000 _____ C:\Users\Matthias\defogger_reenable
2015-07-16 08:45 - 2015-07-16 08:45 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Oracle
2015-07-16 08:42 - 2015-07-16 08:42 - 05847512 _____ (Elite Unzip) C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe
2015-07-16 08:42 - 2015-07-16 08:42 - 05847512 _____ (Elite Unzip) C:\Users\Matthias\AppData\Local\Elite Unzip Installer(0010affd).exe
2015-07-15 20:15 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 20:15 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 20:15 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 20:15 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 20:15 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 20:15 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 20:15 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 20:15 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 20:15 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 20:15 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 20:15 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 20:15 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 20:15 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 20:15 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 20:15 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 20:15 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 20:15 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 20:15 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 20:15 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 20:15 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 20:15 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 20:15 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 20:15 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 20:15 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-15 20:15 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-07-15 20:15 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 20:15 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 20:14 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 20:14 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 20:14 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 20:14 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 20:14 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 20:14 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 20:14 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 20:14 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 20:14 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 20:14 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 20:14 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 20:14 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 20:14 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 20:14 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 20:14 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 20:14 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 20:14 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 20:14 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 20:14 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 20:14 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 20:14 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 20:14 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 20:14 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 20:14 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 20:14 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 20:14 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 20:14 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 20:14 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 20:14 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 20:14 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 20:14 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 20:14 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 20:14 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 20:14 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 20:14 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 20:14 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 20:14 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 20:14 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 20:14 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 20:14 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 20:14 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 20:14 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 20:14 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 20:14 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 20:13 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 20:13 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 20:13 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 20:13 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 20:13 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 20:13 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 20:13 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 20:13 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 20:13 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 20:13 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 20:13 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 20:13 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 20:13 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 20:13 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 20:13 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 20:13 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 20:13 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 20:13 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 20:13 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 20:13 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 20:13 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 20:13 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 20:13 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 20:13 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 20:13 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 20:13 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 20:13 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 20:13 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 20:13 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 20:13 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 20:13 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 20:13 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 20:13 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-15 20:13 - 2015-06-11 19:57 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-07-15 20:13 - 2015-06-11 19:57 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-07-15 20:13 - 2015-06-11 19:57 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-07-15 20:13 - 2015-06-11 19:56 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-07-15 20:13 - 2015-06-11 19:56 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-07-15 20:13 - 2015-06-11 19:56 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-07-15 20:13 - 2015-06-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-07-15 20:13 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 20:13 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 20:13 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 20:13 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 20:13 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 20:13 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 20:13 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 20:13 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 20:12 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-15 20:12 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-15 20:12 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-15 20:12 - 2015-07-03 20:05 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-15 20:12 - 2015-07-03 20:05 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-15 20:12 - 2015-07-03 20:05 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-15 20:12 - 2015-07-03 20:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-15 20:12 - 2015-07-03 19:56 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-15 20:12 - 2015-07-03 19:56 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-15 20:12 - 2015-07-03 19:56 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-15 20:12 - 2015-07-03 19:55 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-15 20:12 - 2015-07-03 18:52 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-15 20:12 - 2015-07-03 18:42 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-11 13:24 - 2015-07-11 13:24 - 00000000 ____D C:\ProgramData\ATI
2015-07-11 13:23 - 2015-07-11 13:23 - 00053787 _____ C:\Windows\SysWOW64\CCCInstall_201507111323471198.log
2015-07-11 13:23 - 2015-07-11 13:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-07-11 13:00 - 2015-07-11 13:00 - 00000000 ____D C:\Users\Matthias\AppData\Local\IAC
2015-07-10 06:28 - 2015-07-10 06:28 - 01155760 _____ (Adobe Systems Incorporated) C:\Users\Matthias\Downloads\uninstall_flash_player.exe
2015-07-10 06:19 - 2015-07-10 06:19 - 05847536 _____ (Internet Speed Tracker) C:\Users\Matthias\AppData\Local\InternetSpeedTrackerAuto.exe
2015-07-09 14:35 - 2015-07-09 14:35 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\mp3DirectCut
2015-07-09 14:34 - 2015-07-09 14:34 - 00001073 _____ C:\Users\Matthias\Desktop\mp3DirectCut.lnk
2015-07-09 14:34 - 2015-07-09 14:34 - 00000000 ____D C:\Program Files (x86)\mp3DirectCut
2015-07-09 14:23 - 2015-07-09 14:23 - 00000000 ____D C:\Users\Matthias\AppData\Local\{EBF16C2D-102F-4CF3-A037-5017AC73ED54}
2015-07-09 14:23 - 2015-07-09 14:23 - 00000000 ____D C:\Users\Matthias\AppData\Local\{E7269F56-0193-44E8-A35B-D96AAE32686C}
2015-07-09 12:07 - 2015-07-10 05:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-09 12:00 - 2015-07-09 12:00 - 00003436 _____ C:\Windows\System32\Tasks\RealDownloader Update Check
2015-07-09 12:00 - 2015-07-09 12:00 - 00000000 ____D C:\Users\Matthias\AppData\Local\Real
2015-07-09 11:59 - 2015-07-09 11:59 - 00003374 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-13288270-610616202-679700459-1000
2015-07-09 11:59 - 2015-07-09 11:59 - 00003246 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-13288270-610616202-679700459-1000
2015-07-09 11:59 - 2015-07-09 11:59 - 00001264 _____ C:\Users\Public\Desktop\RealTimes (RealPlayer).lnk
2015-07-09 11:59 - 2015-07-09 11:59 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\RealNetworks
2015-07-09 11:59 - 2015-07-09 11:59 - 00000000 ____D C:\ProgramData\RealNetworks
2015-07-09 11:59 - 2015-07-09 11:59 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2015-07-09 11:58 - 2015-07-09 11:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2015-07-09 11:58 - 2015-07-09 11:59 - 00000000 ____D C:\Program Files (x86)\Real
2015-07-09 11:58 - 2015-07-09 11:58 - 00505408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2015-07-09 11:58 - 2015-07-09 11:58 - 00353856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2015-07-09 11:58 - 2015-07-09 11:58 - 00278592 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2015-07-09 11:58 - 2015-07-09 11:58 - 00200256 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2015-07-09 11:57 - 2015-07-09 14:25 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Real
2015-07-09 11:55 - 2015-07-09 12:01 - 00000000 ____D C:\ProgramData\Real
2015-07-07 21:20 - 2015-07-07 21:20 - 00002005 _____ C:\Users\Matthias\AppData\Local\recently-used.xbel
2015-07-07 19:40 - 2015-07-07 19:40 - 00000000 ____D C:\Users\Matthias\Documents\Fax
2015-06-23 04:09 - 2015-06-23 04:09 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2015-06-23 04:09 - 2015-06-23 04:09 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2015-06-23 04:09 - 2015-06-23 04:09 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2015-06-23 04:09 - 2015-06-23 04:09 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2015-06-23 04:08 - 2015-06-23 04:08 - 07927568 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2015-06-23 04:08 - 2015-06-23 04:08 - 07407400 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2015-06-23 04:08 - 2015-06-23 04:08 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2015-06-23 04:05 - 2015-06-23 04:05 - 00297672 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2015-06-23 04:03 - 2015-06-23 04:03 - 21612032 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2015-06-23 03:59 - 2015-06-23 03:59 - 47782912 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2015-06-23 03:59 - 2015-06-23 03:59 - 00235008 _____ C:\Windows\system32\clinfo.exe
2015-06-23 03:58 - 2015-06-23 03:58 - 39712256 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2015-06-23 03:57 - 2015-06-23 03:57 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-06-23 03:57 - 2015-06-23 03:57 - 00059392 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-06-23 03:55 - 2015-06-23 03:55 - 27535872 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll
2015-06-23 03:55 - 2015-06-23 03:55 - 22318592 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll
2015-06-23 03:33 - 2015-06-23 03:33 - 06476288 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2015-06-23 03:33 - 2015-06-23 03:33 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2015-06-23 03:33 - 2015-06-23 03:33 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2015-06-23 03:28 - 2015-06-23 03:28 - 05067264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2015-06-23 03:27 - 2015-06-23 03:27 - 30749184 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2015-06-23 03:25 - 2015-06-23 03:25 - 00093184 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2015-06-23 03:25 - 2015-06-23 03:25 - 00086528 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2015-06-23 03:22 - 2015-06-23 03:22 - 00050688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2015-06-23 03:22 - 2015-06-23 03:22 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2015-06-23 03:21 - 2015-06-23 03:21 - 25296896 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2015-06-23 03:21 - 2015-06-23 03:21 - 00865792 _____ (AMD) C:\Windows\system32\coinst_15.20.dll
2015-06-23 03:20 - 2015-06-23 03:20 - 03437632 _____ C:\Windows\system32\atiumd6a.cap
2015-06-23 03:19 - 2015-06-23 03:19 - 00660224 _____ C:\Windows\SysWOW64\atiapfxx.blb
2015-06-23 03:19 - 2015-06-23 03:19 - 00660224 _____ C:\Windows\system32\atiapfxx.blb
2015-06-23 03:19 - 2015-06-23 03:19 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2015-06-23 03:19 - 2015-06-23 03:19 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2015-06-23 03:19 - 2015-06-23 03:19 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2015-06-23 03:19 - 2015-06-23 03:19 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2015-06-23 03:19 - 2015-06-23 03:19 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2015-06-23 03:18 - 2015-06-23 03:18 - 15716864 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2015-06-23 03:18 - 2015-06-23 03:18 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2015-06-23 03:16 - 2015-06-23 03:16 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2015-06-23 03:14 - 2015-06-23 03:14 - 00670720 _____ (AMD) C:\Windows\system32\atieclxx.exe
2015-06-23 03:14 - 2015-06-23 03:14 - 00245760 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2015-06-23 03:14 - 2015-06-23 03:14 - 00204800 _____ C:\Windows\system32\amdgfxinfo64.dll
2015-06-23 03:14 - 2015-06-23 03:14 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2015-06-23 03:14 - 2015-06-23 03:14 - 00189952 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2015-06-23 03:14 - 2015-06-23 03:14 - 00160256 _____ C:\Windows\system32\atieah64.exe
2015-06-23 03:14 - 2015-06-23 03:14 - 00143872 _____ C:\Windows\SysWOW64\atieah32.exe
2015-06-23 03:14 - 2015-06-23 03:14 - 00029696 _____ (AMD) C:\Windows\system32\atimuixx.dll
2015-06-23 03:11 - 2015-06-23 03:11 - 00926720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2015-06-23 03:11 - 2015-06-23 03:11 - 00926720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2015-06-23 03:10 - 2015-06-23 03:10 - 00663552 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2015-06-23 03:10 - 2015-06-23 03:10 - 00156672 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2015-06-23 03:10 - 2015-06-23 03:10 - 00141824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2015-06-23 03:10 - 2015-06-23 03:10 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2015-06-23 03:10 - 2015-06-23 03:10 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2015-06-23 03:10 - 2015-06-23 03:10 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2015-06-23 03:09 - 2015-06-23 03:09 - 00102912 _____ C:\Windows\system32\hsa-thunk64.dll
2015-06-23 03:09 - 2015-06-23 03:09 - 00102400 _____ C:\Windows\SysWOW64\hsa-thunk.dll
2015-06-23 03:07 - 2015-06-23 03:07 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2015-06-22 09:14 - 2015-06-22 09:14 - 00830518 _____ C:\Windows\system32\amdicdxx.dat

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-16 09:56 - 2014-10-28 17:09 - 00000000 ____D C:\Users\Matthias\Downloads\Software
2015-07-16 09:53 - 2014-11-15 15:24 - 00032095 _____ C:\Windows\setupact.log
2015-07-16 09:40 - 2014-10-28 15:56 - 00000000 ____D C:\Users\Matthias
2015-07-16 08:51 - 2014-10-29 11:25 - 00000000 ____D C:\Users\Matthias\AppData\Local\Adobe
2015-07-16 08:40 - 2014-10-29 10:30 - 00000000 ____D C:\ProgramData\Oracle
2015-07-16 08:40 - 2014-10-29 10:30 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-16 08:39 - 2014-10-29 10:30 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-07-16 08:34 - 2014-10-28 15:54 - 01727489 _____ C:\Windows\WindowsUpdate.log
2015-07-16 08:33 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-16 08:33 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-16 08:29 - 2014-12-26 14:07 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-16 08:25 - 2014-12-12 21:14 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Raptr
2015-07-16 08:25 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-16 08:22 - 2009-07-14 06:45 - 00422576 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-16 08:20 - 2015-04-16 22:59 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-16 08:20 - 2015-04-16 22:59 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-16 08:20 - 2014-11-25 20:35 - 00020420 _____ C:\Windows\PFRO.log
2015-07-16 08:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-16 00:12 - 2014-10-28 18:18 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 19:52 - 2010-11-21 08:50 - 00698694 _____ C:\Windows\system32\perfh007.dat
2015-07-15 19:52 - 2010-11-21 08:50 - 00148834 _____ C:\Windows\system32\perfc007.dat
2015-07-15 19:52 - 2009-07-14 07:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-11 13:27 - 2014-12-12 21:14 - 00000000 ____D C:\Program Files (x86)\Raptr
2015-07-11 13:14 - 2014-10-29 12:42 - 00000000 ____D C:\Program Files\AMD
2015-07-11 13:10 - 2014-10-29 12:40 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-11 13:07 - 2014-10-29 12:36 - 00000000 ____D C:\AMD
2015-07-10 05:59 - 2014-11-09 19:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-09 14:23 - 2014-10-28 15:56 - 00000000 ____D C:\Users\Matthias\AppData\Local\Windows Live
2015-07-09 11:47 - 2014-11-20 09:13 - 00000000 ____D C:\Users\Matthias\Documents\SelfMV
2015-07-07 22:06 - 2015-04-02 12:19 - 00000000 ____D C:\Users\Matthias\.gimp-2.8
2015-07-07 21:20 - 2015-04-02 12:31 - 00000000 ____D C:\Users\Matthias\AppData\Local\gtk-2.0
2015-07-03 08:43 - 2014-10-28 18:18 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-01 13:57 - 2014-11-20 08:48 - 00002020 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2015-07-01 13:46 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-29 11:13 - 2014-11-13 16:33 - 00000000 __SHD C:\Users\Matthias\AppData\Local\EmieBrowserModeList
2015-06-29 11:13 - 2014-10-28 20:03 - 00000000 __SHD C:\Users\Matthias\AppData\Local\EmieUserList
2015-06-29 11:13 - 2014-10-28 20:03 - 00000000 __SHD C:\Users\Matthias\AppData\Local\EmieSiteList
2015-06-23 04:08 - 2014-09-16 00:31 - 11941000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 10087472 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 08890576 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 08786040 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 01440592 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 01191320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 00152056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 00133016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 00120144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2015-06-23 03:14 - 2014-09-16 00:03 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2015-06-23 03:11 - 2014-09-15 23:59 - 01246208 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll

==================== Files in the root of some directories =======

2014-12-04 10:40 - 2015-06-02 21:19 - 0000632 _____ () C:\Users\Matthias\AppData\Roaming\tmcef.log
2015-07-16 08:42 - 2015-07-16 08:42 - 5847512 _____ (Elite Unzip) C:\Users\Matthias\AppData\Local\Elite Unzip Installer(0010affd).exe
2015-07-16 08:42 - 2015-07-16 08:42 - 5847512 _____ (Elite Unzip) C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe
2014-12-04 10:25 - 2014-12-04 10:25 - 0000036 _____ () C:\Users\Matthias\AppData\Local\housecall.guid.cache
2015-07-10 06:19 - 2015-07-10 06:19 - 5847536 _____ (Internet Speed Tracker) C:\Users\Matthias\AppData\Local\InternetSpeedTrackerAuto.exe
2015-07-07 21:20 - 2015-07-07 21:20 - 0002005 _____ () C:\Users\Matthias\AppData\Local\recently-used.xbel
2014-12-04 10:23 - 2014-12-04 10:23 - 0264987 _____ () C:\ProgramData\1417681127.bdinstall.bin
2014-11-11 21:08 - 2014-11-11 21:08 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-10-28 17:45 - 2014-10-28 17:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Matthias\AppData\Local\Temp\jre-8u51-windows-au.exe
C:\Users\Matthias\AppData\Local\Temp\raptrpatch.exe
C:\Users\Matthias\AppData\Local\Temp\raptr_stub.exe
C:\Users\Matthias\AppData\Local\Temp\stubhelper.dll
C:\Users\Matthias\AppData\Local\Temp\tmp5070.exe
C:\Users\Matthias\AppData\Local\Temp\tmpEC22.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-14 18:02

==================== End of log ============================
--- --- ---


4.GMER.log:

Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-07-16 10:20:16
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP6T0L0-a ST31000524AS rev.JC4B 931,51GB
Running: Gmer-19357.exe; Driver: C:\Users\Matthias\AppData\Local\Temp\kwliqkow.sys


---- User code sections - GMER 2.1 ----

.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                 0000000076961401 2 bytes JMP 76b1b21b C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                   0000000076961419 2 bytes JMP 76b1b346 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                 0000000076961431 2 bytes JMP 76b98f29 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                 000000007696144a 2 bytes CALL 76af489d C:\Windows\syswow64\KERNEL32.dll
.text  ...                                                                                                                                                                                                                   * 9
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                    00000000769614dd 2 bytes JMP 76b98822 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                             00000000769614f5 2 bytes JMP 76b989f8 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                    000000007696150d 2 bytes JMP 76b98718 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                             0000000076961525 2 bytes JMP 76b98ae2 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                   000000007696153d 2 bytes JMP 76b0fca8 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                        0000000076961555 2 bytes JMP 76b168ef C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                 000000007696156d 2 bytes JMP 76b98fe3 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                   0000000076961585 2 bytes JMP 76b98b42 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                      000000007696159d 2 bytes JMP 76b986dc C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                   00000000769615b5 2 bytes JMP 76b0fd41 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                 00000000769615cd 2 bytes JMP 76b1b2dc C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                             00000000769616b2 2 bytes JMP 76b98ea4 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe[1904] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                             00000000769616bd 2 bytes JMP 76b98671 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                       0000000076961401 2 bytes JMP 76b1b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                         0000000076961419 2 bytes JMP 76b1b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                       0000000076961431 2 bytes JMP 76b98f29 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                       000000007696144a 2 bytes CALL 76af489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                                                                                                   * 9
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                          00000000769614dd 2 bytes JMP 76b98822 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                   00000000769614f5 2 bytes JMP 76b989f8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                          000000007696150d 2 bytes JMP 76b98718 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                   0000000076961525 2 bytes JMP 76b98ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                         000000007696153d 2 bytes JMP 76b0fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                              0000000076961555 2 bytes JMP 76b168ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                       000000007696156d 2 bytes JMP 76b98fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                         0000000076961585 2 bytes JMP 76b98b42 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                            000000007696159d 2 bytes JMP 76b986dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                         00000000769615b5 2 bytes JMP 76b0fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                       00000000769615cd 2 bytes JMP 76b1b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                   00000000769616b2 2 bytes JMP 76b98ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe[2304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                   00000000769616bd 2 bytes JMP 76b98671 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                       0000000076961401 2 bytes JMP 76b1b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                         0000000076961419 2 bytes JMP 76b1b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                       0000000076961431 2 bytes JMP 76b98f29 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                       000000007696144a 2 bytes CALL 76af489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                                                                                                   * 9
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                          00000000769614dd 2 bytes JMP 76b98822 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                   00000000769614f5 2 bytes JMP 76b989f8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                          000000007696150d 2 bytes JMP 76b98718 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                   0000000076961525 2 bytes JMP 76b98ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                         000000007696153d 2 bytes JMP 76b0fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                              0000000076961555 2 bytes JMP 76b168ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                       000000007696156d 2 bytes JMP 76b98fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                         0000000076961585 2 bytes JMP 76b98b42 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                            000000007696159d 2 bytes JMP 76b986dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                         00000000769615b5 2 bytes JMP 76b0fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                       00000000769615cd 2 bytes JMP 76b1b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                   00000000769616b2 2 bytes JMP 76b98ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe[3848] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                   00000000769616bd 2 bytes JMP 76b98671 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                            0000000076961401 2 bytes JMP 76b1b21b C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                              0000000076961419 2 bytes JMP 76b1b346 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                            0000000076961431 2 bytes JMP 76b98f29 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                            000000007696144a 2 bytes CALL 76af489d C:\Windows\syswow64\KERNEL32.dll
.text  ...                                                                                                                                                                                                                   * 9
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                               00000000769614dd 2 bytes JMP 76b98822 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                        00000000769614f5 2 bytes JMP 76b989f8 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                               000000007696150d 2 bytes JMP 76b98718 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                        0000000076961525 2 bytes JMP 76b98ae2 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                              000000007696153d 2 bytes JMP 76b0fca8 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                   0000000076961555 2 bytes JMP 76b168ef C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                            000000007696156d 2 bytes JMP 76b98fe3 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                              0000000076961585 2 bytes JMP 76b98b42 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                 000000007696159d 2 bytes JMP 76b986dc C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                              00000000769615b5 2 bytes JMP 76b0fd41 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                            00000000769615cd 2 bytes JMP 76b1b2dc C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                        00000000769616b2 2 bytes JMP 76b98ea4 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\Kies.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                        00000000769616bd 2 bytes JMP 76b98671 C:\Windows\syswow64\KERNEL32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                   0000000076961401 2 bytes JMP 76b1b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                     0000000076961419 2 bytes JMP 76b1b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                   0000000076961431 2 bytes JMP 76b98f29 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                   000000007696144a 2 bytes CALL 76af489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                                                                                                   * 9
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                      00000000769614dd 2 bytes JMP 76b98822 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                               00000000769614f5 2 bytes JMP 76b989f8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                      000000007696150d 2 bytes JMP 76b98718 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                               0000000076961525 2 bytes JMP 76b98ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                     000000007696153d 2 bytes JMP 76b0fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                          0000000076961555 2 bytes JMP 76b168ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                   000000007696156d 2 bytes JMP 76b98fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                     0000000076961585 2 bytes JMP 76b98b42 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                        000000007696159d 2 bytes JMP 76b986dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                     00000000769615b5 2 bytes JMP 76b0fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                   00000000769615cd 2 bytes JMP 76b1b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                               00000000769616b2 2 bytes JMP 76b98ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe[4212] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                               00000000769616bd 2 bytes JMP 76b98671 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                      0000000076961401 2 bytes JMP 76b1b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                        0000000076961419 2 bytes JMP 76b1b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                      0000000076961431 2 bytes JMP 76b98f29 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                      000000007696144a 2 bytes CALL 76af489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                                                                                                   * 9
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                         00000000769614dd 2 bytes JMP 76b98822 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                  00000000769614f5 2 bytes JMP 76b989f8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                         000000007696150d 2 bytes JMP 76b98718 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                  0000000076961525 2 bytes JMP 76b98ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                        000000007696153d 2 bytes JMP 76b0fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                             0000000076961555 2 bytes JMP 76b168ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                      000000007696156d 2 bytes JMP 76b98fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                        0000000076961585 2 bytes JMP 76b98b42 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                           000000007696159d 2 bytes JMP 76b986dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                        00000000769615b5 2 bytes JMP 76b0fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                      00000000769615cd 2 bytes JMP 76b1b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                  00000000769616b2 2 bytes JMP 76b98ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe[4432] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                  00000000769616bd 2 bytes JMP 76b98671 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                          0000000076961401 2 bytes JMP 76b1b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                            0000000076961419 2 bytes JMP 76b1b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                          0000000076961431 2 bytes JMP 76b98f29 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                          000000007696144a 2 bytes CALL 76af489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                                                                                                   * 9
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                             00000000769614dd 2 bytes JMP 76b98822 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                      00000000769614f5 2 bytes JMP 76b989f8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                             000000007696150d 2 bytes JMP 76b98718 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                      0000000076961525 2 bytes JMP 76b98ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                            000000007696153d 2 bytes JMP 76b0fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                 0000000076961555 2 bytes JMP 76b168ef C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                          000000007696156d 2 bytes JMP 76b98fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                            0000000076961585 2 bytes JMP 76b98b42 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                               000000007696159d 2 bytes JMP 76b986dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                            00000000769615b5 2 bytes JMP 76b0fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                          00000000769615cd 2 bytes JMP 76b1b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                      00000000769616b2 2 bytes JMP 76b98ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe[5552] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                      00000000769616bd 2 bytes JMP 76b98671 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                      0000000076961401 2 bytes JMP 76b1b21b C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                        0000000076961419 2 bytes JMP 76b1b346 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                      0000000076961431 2 bytes JMP 76b98f29 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                      000000007696144a 2 bytes CALL 76af489d C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                                                                                                                   * 9
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                         00000000769614dd 2 bytes JMP 76b98822 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                  00000000769614f5 2 bytes JMP 76b989f8 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                         000000007696150d 2 bytes JMP 76b98718 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                  0000000076961525 2 bytes JMP 76b98ae2 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                        000000007696153d 2 bytes JMP 76b0fca8 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                             0000000076961555 2 bytes JMP 76b168ef C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                      000000007696156d 2 bytes JMP 76b98fe3 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                        0000000076961585 2 bytes JMP 76b98b42 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                           000000007696159d 2 bytes JMP 76b986dc C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                        00000000769615b5 2 bytes JMP 76b0fd41 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                      00000000769615cd 2 bytes JMP 76b1b2dc C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                  00000000769616b2 2 bytes JMP 76b98ea4 C:\Windows\syswow64\kernel32.dll
.text  C:\Users\Matthias\AppData\Local\EliteUnzipAuto.exe[4644] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                  00000000769616bd 2 bytes JMP 76b98671 C:\Windows\syswow64\kernel32.dll

---- Registry - GMER 2.1 ----

Reg    HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted@C:\Users\Matthias\Downloads\Treiber\AMD Catalyst\x2122 Driver\amd-catalyst-14-9-win7-win8.1-64bit-dd-ccc-whql.exe  1

---- EOF - GMER 2.1 ----
2 Logs von Trend micro security folgen in 2. Antwort.

Gruß Matthias
__________________
Alt 20.07.2015, 22:14   #4
spacebyrd
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Hier die beiden letzten Logs von Trend micro security:

5. Ternt micro security Log vom 9.7.15:

Code:
ATTFilter
Damage Cleanup Engine (DCE)  7.3(Build 1046)

Windows 7(Build 7601: Service Pack 1)


Start time : Do Jul 09 2015 08:09:46



Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\TMRDCT.ptn" (version ) [fail]

Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\tsc.ptn" (version 1456) [success]



Complete time : Do Jul 09 2015 08:10:03

Execute pattern count(3117), Virus found count(0), Virus clean count(0), Clean failed count(0)



Damage Cleanup Engine (DCE)  7.3(Build 1046)

Windows 7(Build 7601: Service Pack 1)


Start time : Do Jul 09 2015 08:10:03



Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\TMRDCT.ptn" (version ) [fail]

Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\tsc.ptn" (version 1456) [success]



Complete time : Do Jul 09 2015 08:10:05

Execute pattern count(14), Virus found count(0), Virus clean count(0), Clean failed count(0)



Damage Cleanup Engine (DCE)  7.3(Build 1046)

Windows 7(Build 7601: Service Pack 1)


Start time : Do Jul 09 2015 19:02:39



Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\TMRDCT.ptn" (version ) [fail]

Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\tsc.ptn" (version 1458) [success]

GenericClean::Pattern:WORM_DOWNAD,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:PE_PATCHEP.A,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:BKDR_TIDIES,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:TROJ_REVETON,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:WORM_GAMARUE,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:BKDR_POISON,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:PE_QUERVAR,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:BKDR_PLUGX,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:LNK_DORKBOT,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:BREX_GENCLEAN,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:VBS_CRIGENT,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:TROJ_LNKCLEAN,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:PE_URSNIF-INF,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:File_SCAN,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:TSC_GENSCAN,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

TSC_GENCLEAN[virus found]

-->delete file("C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll","","") success

GenericClean::Pattern:TSC_GENCLEAN,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 



Complete time : Do Jul 09 2015 19:02:50

Execute pattern count(16), Virus found count(1), Virus clean count(1), Clean failed count(0)



Damage Cleanup Engine (DCE)  7.3(Build 1046)

Windows 7(Build 7601: Service Pack 1)


Start time : Do Jul 09 2015 19:02:50



Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\TMRDCT.ptn" (version ) [fail]

Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\tsc.ptn" (version 1458) [success]

GenericClean::Pattern:WORM_DOWNAD,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:PE_PATCHEP.A,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:BKDR_TIDIES,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:TROJ_REVETON,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:WORM_GAMARUE,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:BKDR_POISON,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:PE_QUERVAR,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:BKDR_PLUGX,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:LNK_DORKBOT,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:BREX_GENCLEAN,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:VBS_CRIGENT,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:TROJ_LNKCLEAN,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:PE_URSNIF-INF,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:File_SCAN,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

GenericClean::Pattern:TSC_GENSCAN,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 

TSC_GENCLEAN[virus found]

GenericClean::Pattern:TSC_GENCLEAN,Virus Name:TROJ_GEN.R02EC0EER15,Virus File Path:\\?\C:\Windows\assembly\NativeImages_v4.0.30319_32\SevenZipSharp\c5caa66805dc4dd7029748b4676e20e6\SevenZipSharp.ni.dll 



Complete time : Do Jul 09 2015 19:02:52

Execute pattern count(16), Virus found count(1), Virus clean count(1), Clean failed count(0)
6. Trend micro security Log vom 16.7.15:

Code:
ATTFilter
Damage Cleanup Engine (DCE)  7.3(Build 1046)

Windows 7(Build 7601: Service Pack 1)


Start time : Do Jul 16 2015 09:44:49



Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\TMRDCT.ptn" (version ) [fail]

Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\tsc.ptn" (version 1458) [success]

GenericClean::Pattern:WORM_DOWNAD,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:PE_PATCHEP.A,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:BKDR_TIDIES,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:TROJ_REVETON,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:WORM_GAMARUE,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:BKDR_POISON,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:PE_QUERVAR,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:BKDR_PLUGX,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:LNK_DORKBOT,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:BREX_GENCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:VBS_CRIGENT,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:TROJ_LNKCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:PE_URSNIF-INF,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:File_SCAN,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:TSC_GENSCAN,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

TSC_GENCLEAN[virus found]

-->delete file("C:\Users\Matthias\Downloads\Software\FRST64.exe","","") success

GenericClean::Pattern:TSC_GENCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 



Complete time : Do Jul 16 2015 09:45:01

Execute pattern count(16), Virus found count(1), Virus clean count(1), Clean failed count(0)



Damage Cleanup Engine (DCE)  7.3(Build 1046)

Windows 7(Build 7601: Service Pack 1)


Start time : Do Jul 16 2015 09:45:02



Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\TMRDCT.ptn" (version ) [fail]

Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\tsc.ptn" (version 1458) [success]

GenericClean::Pattern:WORM_DOWNAD,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:PE_PATCHEP.A,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:BKDR_TIDIES,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:TROJ_REVETON,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:WORM_GAMARUE,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:BKDR_POISON,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:PE_QUERVAR,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:BKDR_PLUGX,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:LNK_DORKBOT,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:BREX_GENCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:VBS_CRIGENT,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:TROJ_LNKCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:PE_URSNIF-INF,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:File_SCAN,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

GenericClean::Pattern:TSC_GENSCAN,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 

TSC_GENCLEAN[virus found]

GenericClean::Pattern:TSC_GENCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:C:\Users\Matthias\Downloads\Software\FRST64.exe 



Complete time : Do Jul 16 2015 09:45:04

Execute pattern count(16), Virus found count(1), Virus clean count(1), Clean failed count(0)



Damage Cleanup Engine (DCE)  7.3(Build 1046)

Windows 7(Build 7601: Service Pack 1)


Start time : Do Jul 16 2015 09:45:04



Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\TMRDCT.ptn" (version ) [fail]

Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\tsc.ptn" (version 1458) [success]

GenericClean::Pattern:WORM_DOWNAD,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:PE_PATCHEP.A,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:BKDR_TIDIES,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:TROJ_REVETON,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:WORM_GAMARUE,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:BKDR_POISON,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:PE_QUERVAR,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:BKDR_PLUGX,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:LNK_DORKBOT,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:BREX_GENCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:VBS_CRIGENT,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:TROJ_LNKCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:PE_URSNIF-INF,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:File_SCAN,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:TSC_GENSCAN,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

TSC_GENCLEAN[virus found]

-->delete file("c:\windows\mod_frst.exe","","") success

GenericClean::Pattern:TSC_GENCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 



Complete time : Do Jul 16 2015 09:45:09

Execute pattern count(16), Virus found count(1), Virus clean count(1), Clean failed count(0)



Damage Cleanup Engine (DCE)  7.3(Build 1046)

Windows 7(Build 7601: Service Pack 1)


Start time : Do Jul 16 2015 09:45:09



Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\TMRDCT.ptn" (version ) [fail]

Load Damage Cleanup Template (DCT) "C:\Program Files\Trend Micro\AMSP\module\10002\3.5.1186\7.3.1046\tsc.ptn" (version 1458) [success]

GenericClean::Pattern:WORM_DOWNAD,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:PE_PATCHEP.A,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:BKDR_TIDIES,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:TROJ_REVETON,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:WORM_GAMARUE,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:BKDR_POISON,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:PE_QUERVAR,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:BKDR_PLUGX,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:LNK_DORKBOT,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:BREX_GENCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:VBS_CRIGENT,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:TROJ_LNKCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:PE_URSNIF-INF,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:File_SCAN,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

GenericClean::Pattern:TSC_GENSCAN,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 

TSC_GENCLEAN[virus found]

GenericClean::Pattern:TSC_GENCLEAN,Virus Name:HEU_AEGISCS986,Virus File Path:c:\windows\mod_frst.exe 



Complete time : Do Jul 16 2015 09:45:10

Execute pattern count(16), Virus found count(1), Virus clean count(1), Clean failed count(0)
Ich hoffe, so war es hilfreicher und führt zum Erfolg.

Beste Grüße

Matthias

Alt 21.07.2015, 17:19   #5
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    Elite Unzip Internet Explorer Toolbar (HKLM-x32\...\EliteUnzip_aabar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATTENTION

    Internet Speed Tracker Internet Explorer Toolbar (HKLM-x32\...\InternetSpeedTracker_9tbar Uninstall Internet Explorer) (Version: - Mindspark Interactive Network) <==== ATTENTION


  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 





Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.


__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 22.07.2015, 20:24   #6
spacebyrd
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Hallo Schrauber,

Danke für deine schnelle Antwort. Ich habe Revo uninstaller beide programme löschen lassen und das Log von combofix angehängt:

Code:
ATTFilter
ComboFix 15-07-20.01 - Matthias 22.07.2015  20:55:34.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.4094.1977 [GMT 2:00]
ausgeführt von:: c:\users\Matthias\Desktop\ComboFix.exe
AV: Trend Micro Maximum Security *Disabled/Updated* {8242D66F-41BD-4049-C2E6-E578E73B62A0}
SP: Trend Micro Maximum Security *Disabled/Updated* {3923378B-6787-4FC7-F856-DE0A9CBC281D}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\1417681127.bdinstall.bin
c:\programdata\ntuser.pol
c:\users\Matthias\AppData\Local\EliteUnzipAuto.exe
c:\users\Matthias\AppData\Local\InternetSpeedTrackerAuto.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-06-22 bis 2015-07-22  ))))))))))))))))))))))))))))))
.
.
2015-07-22 19:03 . 2015-07-22 19:03	--------	d-----w-	c:\users\Default\AppData\Local\temp
2015-07-22 18:48 . 2015-07-11 10:39	1040920	----a-w-	c:\program files (x86)\9tUninstall Internet Speed Tracker.dll
2015-07-22 18:48 . 2015-07-11 10:39	199016	----a-w-	c:\program files (x86)\9tres.dll
2015-07-22 18:47 . 2015-07-16 15:47	1040920	----a-w-	c:\program files (x86)\aaUninstall Elite Unzip.dll
2015-07-22 18:47 . 2015-07-16 15:47	198992	----a-w-	c:\program files (x86)\aares.dll
2015-07-22 18:42 . 2015-07-22 18:42	--------	d-----w-	c:\program files (x86)\VS Revo Group
2015-07-20 20:40 . 2015-07-15 03:19	41984	----a-w-	c:\windows\system32\lpk.dll
2015-07-20 20:40 . 2015-07-15 01:59	372224	----a-w-	c:\windows\system32\atmfd.dll
2015-07-20 20:40 . 2015-07-15 01:52	299008	----a-w-	c:\windows\SysWow64\atmfd.dll
2015-07-20 20:40 . 2015-07-15 03:19	100864	----a-w-	c:\windows\system32\fontsub.dll
2015-07-20 20:40 . 2015-07-15 03:19	14336	----a-w-	c:\windows\system32\dciman32.dll
2015-07-20 20:40 . 2015-07-15 03:19	46080	----a-w-	c:\windows\system32\atmlib.dll
2015-07-20 20:40 . 2015-07-15 02:55	70656	----a-w-	c:\windows\SysWow64\fontsub.dll
2015-07-20 20:40 . 2015-07-15 02:55	10240	----a-w-	c:\windows\SysWow64\dciman32.dll
2015-07-20 20:40 . 2015-07-15 02:55	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2015-07-20 20:40 . 2015-07-15 02:54	25600	----a-w-	c:\windows\SysWow64\lpk.dll
2015-07-16 15:53 . 2015-07-16 15:53	778416	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2015-07-16 15:53 . 2015-07-16 15:53	142512	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-07-16 07:42 . 2015-07-16 07:56	--------	d-----w-	C:\FRST
2015-07-16 06:45 . 2015-07-16 06:45	--------	d-----w-	c:\users\Matthias\AppData\Roaming\Oracle
2015-07-16 06:39 . 2015-07-16 06:39	--------	d-----w-	c:\program files (x86)\Common Files\Java
2015-07-15 18:14 . 2015-06-20 19:57	49664	----a-w-	c:\program files\Internet Explorer\DiagnosticsHub_is.dll
2015-07-15 18:13 . 2015-06-11 17:56	7077376	----a-w-	c:\windows\system32\mstscax.dll
2015-07-15 18:12 . 2015-07-09 17:59	17856	----a-w-	c:\windows\system32\CompatTelRunner.exe
2015-07-15 18:12 . 2015-07-09 17:58	726528	----a-w-	c:\windows\system32\generaltel.dll
2015-07-15 18:12 . 2015-07-09 17:58	765440	----a-w-	c:\windows\system32\invagent.dll
2015-07-15 18:12 . 2015-07-09 17:58	433664	----a-w-	c:\windows\system32\devinv.dll
2015-07-15 18:12 . 2015-07-09 17:58	1085440	----a-w-	c:\windows\system32\appraiser.dll
2015-07-15 18:12 . 2015-07-09 17:58	67584	----a-w-	c:\windows\system32\acmigration.dll
2015-07-15 18:12 . 2015-07-09 17:58	227328	----a-w-	c:\windows\system32\aepdu.dll
2015-07-15 18:12 . 2015-07-09 17:50	1145856	----a-w-	c:\windows\system32\aeinv.dll
2015-07-11 11:24 . 2015-07-11 11:24	--------	d-----w-	c:\programdata\ATI
2015-07-11 11:00 . 2015-07-11 11:00	--------	d-----w-	c:\users\Matthias\AppData\Local\IAC
2015-07-09 12:35 . 2015-07-09 12:35	--------	d-----w-	c:\users\Matthias\AppData\Roaming\mp3DirectCut
2015-07-09 12:34 . 2015-07-09 12:34	--------	d-----w-	c:\program files (x86)\mp3DirectCut
2015-07-09 10:00 . 2015-07-09 10:00	--------	d-----w-	c:\users\Matthias\AppData\Local\Real
2015-07-09 09:59 . 2015-07-09 09:59	--------	d-----w-	c:\program files (x86)\Common Files\xing shared
2015-07-09 09:58 . 2015-07-09 09:58	505408	----a-w-	c:\windows\SysWow64\msvcp71.dll
2015-07-09 09:58 . 2015-07-09 09:58	353856	----a-w-	c:\windows\SysWow64\msvcr71.dll
2015-07-09 09:58 . 2015-07-09 09:59	--------	d-----w-	c:\program files (x86)\Real
2015-06-23 02:09 . 2015-06-23 02:09	78432	----a-w-	c:\windows\system32\atimpc64.dll
2015-06-23 02:09 . 2015-06-23 02:09	78432	----a-w-	c:\windows\system32\amdpcom64.dll
2015-06-23 02:09 . 2015-06-23 02:09	71704	----a-w-	c:\windows\SysWow64\atimpc32.dll
2015-06-23 02:09 . 2015-06-23 02:09	71704	----a-w-	c:\windows\SysWow64\amdpcom32.dll
2015-06-23 02:08 . 2015-06-23 02:08	102616	----a-w-	c:\windows\SysWow64\atiu9pag.dll
2015-06-23 02:08 . 2015-06-23 02:08	7927568	----a-w-	c:\windows\SysWow64\atiumdva.dll
2015-06-23 02:08 . 2015-06-23 02:08	7407400	----a-w-	c:\windows\SysWow64\atiumdag.dll
2015-06-23 02:05 . 2015-06-23 02:05	297672	----a-w-	c:\windows\system32\drivers\amdacpksd.sys
2015-06-23 02:03 . 2015-06-23 02:03	21612032	----a-w-	c:\windows\system32\drivers\atikmdag.sys
2015-06-23 01:59 . 2015-06-23 01:59	235008	----a-w-	c:\windows\system32\clinfo.exe
2015-06-23 01:59 . 2015-06-23 01:59	47782912	----a-w-	c:\windows\system32\amdocl64.dll
2015-06-23 01:58 . 2015-06-23 01:58	39712256	----a-w-	c:\windows\SysWow64\amdocl.dll
2015-06-23 01:57 . 2015-06-23 01:57	65024	----a-w-	c:\windows\system32\OpenCL.dll
2015-06-23 01:57 . 2015-06-23 01:57	59392	----a-w-	c:\windows\SysWow64\OpenCL.dll
2015-06-23 01:55 . 2015-06-23 01:55	27535872	----a-w-	c:\windows\system32\amdocl12cl64.dll
2015-06-23 01:55 . 2015-06-23 01:55	22318592	----a-w-	c:\windows\SysWow64\amdocl12cl.dll
2015-06-23 01:33 . 2015-06-23 01:33	127488	----a-w-	c:\windows\system32\mantle64.dll
2015-06-23 01:33 . 2015-06-23 01:33	113664	----a-w-	c:\windows\SysWow64\mantle32.dll
2015-06-23 01:33 . 2015-06-23 01:33	6476288	----a-w-	c:\windows\system32\amdmantle64.dll
2015-06-23 01:28 . 2015-06-23 01:28	5067264	----a-w-	c:\windows\SysWow64\amdmantle32.dll
2015-06-23 01:27 . 2015-06-23 01:27	30749184	----a-w-	c:\windows\system32\atio6axx.dll
2015-06-23 01:25 . 2015-06-23 01:25	93184	----a-w-	c:\windows\system32\mantleaxl64.dll
2015-06-23 01:25 . 2015-06-23 01:25	86528	----a-w-	c:\windows\SysWow64\mantleaxl32.dll
2015-06-23 01:22 . 2015-06-23 01:22	50688	----a-w-	c:\windows\system32\amdmmcl6.dll
2015-06-23 01:22 . 2015-06-23 01:22	39424	----a-w-	c:\windows\SysWow64\amdmmcl.dll
2015-06-23 01:21 . 2015-06-23 01:21	865792	----a-w-	c:\windows\system32\coinst_15.20.dll
2015-06-23 01:21 . 2015-06-23 01:21	25296896	----a-w-	c:\windows\SysWow64\atioglxx.dll
2015-06-23 01:19 . 2015-06-23 01:19	367104	----a-w-	c:\windows\system32\atiapfxx.exe
2015-06-23 01:19 . 2015-06-23 01:19	62464	----a-w-	c:\windows\system32\aticalrt64.dll
2015-06-23 01:19 . 2015-06-23 01:19	52224	----a-w-	c:\windows\SysWow64\aticalrt.dll
2015-06-23 01:19 . 2015-06-23 01:19	55808	----a-w-	c:\windows\system32\aticalcl64.dll
2015-06-23 01:19 . 2015-06-23 01:19	49152	----a-w-	c:\windows\SysWow64\aticalcl.dll
2015-06-23 01:18 . 2015-06-23 01:18	15716864	----a-w-	c:\windows\system32\aticaldd64.dll
2015-06-23 01:18 . 2015-06-23 01:18	14302208	----a-w-	c:\windows\SysWow64\aticaldd.dll
2015-06-23 01:14 . 2015-06-23 01:14	160256	----a-w-	c:\windows\system32\atieah64.exe
2015-06-23 01:14 . 2015-06-23 01:14	143872	----a-w-	c:\windows\SysWow64\atieah32.exe
2015-06-23 01:14 . 2015-06-23 01:14	204800	----a-w-	c:\windows\system32\amdgfxinfo64.dll
2015-06-23 01:14 . 2015-06-23 01:14	189952	----a-w-	c:\windows\SysWow64\amdgfxinfo32.dll
2015-06-23 01:14 . 2015-06-23 01:14	670720	----a-w-	c:\windows\system32\atieclxx.exe
2015-06-23 01:14 . 2015-06-23 01:14	29696	----a-w-	c:\windows\system32\atimuixx.dll
2015-06-23 01:14 . 2015-06-23 01:14	245760	----a-w-	c:\windows\system32\atiesrxx.exe
2015-06-23 01:14 . 2015-06-23 01:14	190976	----a-w-	c:\windows\system32\atitmm64.dll
2015-06-23 01:11 . 2015-06-23 01:11	926720	----a-w-	c:\windows\SysWow64\atiadlxy.dll
2015-06-23 01:11 . 2015-06-23 01:11	926720	----a-w-	c:\windows\SysWow64\atiadlxx.dll
2015-06-23 01:10 . 2015-06-23 01:10	75264	----a-w-	c:\windows\system32\atig6pxx.dll
2015-06-23 01:10 . 2015-06-23 01:10	69632	----a-w-	c:\windows\SysWow64\atiglpxx.dll
2015-06-23 01:10 . 2015-06-23 01:10	69632	----a-w-	c:\windows\system32\atiglpxx.dll
2015-06-23 01:10 . 2015-06-23 01:10	156672	----a-w-	c:\windows\system32\atig6txx.dll
2015-06-23 01:10 . 2015-06-23 01:10	141824	----a-w-	c:\windows\SysWow64\atigktxx.dll
2015-06-23 01:10 . 2015-06-23 01:10	663552	----a-w-	c:\windows\system32\drivers\atikmpag.sys
2015-06-23 01:09 . 2015-06-23 01:09	102912	----a-w-	c:\windows\system32\hsa-thunk64.dll
2015-06-23 01:09 . 2015-06-23 01:09	102400	----a-w-	c:\windows\SysWow64\hsa-thunk.dll
2015-06-23 01:07 . 2015-06-23 01:07	43520	----a-w-	c:\windows\system32\drivers\ati2erec.dll
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-07-16 06:39 . 2014-10-29 08:30	97888	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2015-07-03 06:43 . 2014-10-28 16:18	130333168	----a-w-	c:\windows\system32\MRT.exe
2015-06-23 02:08 . 2014-09-15 22:31	152056	----a-w-	c:\windows\system32\atiuxp64.dll
2015-06-23 02:08 . 2014-09-15 22:31	133016	----a-w-	c:\windows\SysWow64\atiuxpag.dll
2015-06-23 02:08 . 2014-09-15 22:31	120144	----a-w-	c:\windows\system32\atiu9p64.dll
2015-06-23 02:08 . 2014-09-15 22:31	1440592	----a-w-	c:\windows\system32\aticfx64.dll
2015-06-23 02:08 . 2014-09-15 22:31	1191320	----a-w-	c:\windows\SysWow64\aticfx32.dll
2015-06-23 02:08 . 2014-09-15 22:31	11941000	----a-w-	c:\windows\system32\atidxx64.dll
2015-06-23 02:08 . 2014-09-15 22:31	10087472	----a-w-	c:\windows\SysWow64\atidxx32.dll
2015-06-23 02:08 . 2014-09-15 22:31	8890576	----a-w-	c:\windows\system32\atiumd6a.dll
2015-06-23 02:08 . 2014-09-15 22:31	8786040	----a-w-	c:\windows\system32\atiumd64.dll
2015-06-23 01:14 . 2014-09-15 22:03	442368	----a-w-	c:\windows\system32\atidemgy.dll
2015-06-23 01:11 . 2014-09-15 21:59	1246208	----a-w-	c:\windows\system32\atiadlxx.dll
2015-05-25 18:24 . 2015-06-10 04:17	5569984	----a-w-	c:\windows\system32\ntoskrnl.exe
2015-05-25 18:21 . 2015-06-10 04:17	1728960	----a-w-	c:\windows\system32\ntdll.dll
2015-05-25 18:19 . 2015-06-10 04:17	243712	----a-w-	c:\windows\system32\wow64.dll
2015-05-25 18:19 . 2015-06-10 04:17	362496	----a-w-	c:\windows\system32\wow64win.dll
2015-05-25 18:19 . 2015-06-10 04:17	13312	----a-w-	c:\windows\system32\wow64cpu.dll
2015-05-25 18:19 . 2015-06-10 04:17	215040	----a-w-	c:\windows\system32\winsrv.dll
2015-05-25 18:19 . 2015-06-10 04:17	1255424	----a-w-	c:\windows\system32\diagtrack.dll
2015-05-25 18:19 . 2015-06-10 04:17	879104	----a-w-	c:\windows\system32\tdh.dll
2015-05-25 18:19 . 2015-06-10 04:17	503808	----a-w-	c:\windows\system32\srcore.dll
2015-05-25 18:19 . 2015-06-10 04:17	113664	----a-w-	c:\windows\system32\sechost.dll
2015-05-25 18:19 . 2015-06-10 04:17	50176	----a-w-	c:\windows\system32\srclient.dll
2015-05-25 18:19 . 2015-06-10 04:17	16384	----a-w-	c:\windows\system32\ntvdm64.dll
2015-05-25 18:19 . 2015-06-10 04:17	424960	----a-w-	c:\windows\system32\KernelBase.dll
2015-05-25 18:19 . 2015-06-10 04:17	1162752	----a-w-	c:\windows\system32\kernel32.dll
2015-05-25 18:18 . 2015-06-10 04:17	43520	----a-w-	c:\windows\system32\csrsrv.dll
2015-05-25 18:18 . 2015-06-10 04:17	879104	----a-w-	c:\windows\system32\advapi32.dll
2015-05-25 18:18 . 2015-06-10 04:17	47104	----a-w-	c:\windows\system32\typeperf.exe
2015-05-25 18:18 . 2015-06-10 04:17	404992	----a-w-	c:\windows\system32\tracerpt.exe
2015-05-25 18:18 . 2015-06-10 04:17	112640	----a-w-	c:\windows\system32\smss.exe
2015-05-25 18:18 . 2015-06-10 04:17	296960	----a-w-	c:\windows\system32\rstrui.exe
2015-05-25 18:18 . 2015-06-10 04:17	43008	----a-w-	c:\windows\system32\relog.exe
2015-05-25 18:18 . 2015-06-10 04:17	104448	----a-w-	c:\windows\system32\logman.exe
2015-05-25 18:18 . 2015-06-10 04:17	19456	----a-w-	c:\windows\system32\diskperf.exe
2015-05-25 18:18 . 2015-06-10 04:17	338432	----a-w-	c:\windows\system32\conhost.exe
2015-05-25 18:11 . 2015-06-10 04:17	4608	---ha-w-	c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	4608	---ha-w-	c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	4096	---ha-w-	c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	4096	---ha-w-	c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	4096	---ha-w-	c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	6656	----a-w-	c:\windows\system32\apisetschema.dll
2015-05-25 18:11 . 2015-06-10 04:17	6144	---ha-w-	c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	4096	---ha-w-	c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	5120	---ha-w-	c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-25 18:11 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-25 18:07 . 2015-06-10 04:17	3989440	----a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2015-05-25 18:07 . 2015-06-10 04:17	3934144	----a-w-	c:\windows\SysWow64\ntoskrnl.exe
2015-05-25 18:04 . 2015-06-10 04:17	1310744	----a-w-	c:\windows\SysWow64\ntdll.dll
2015-05-25 18:01 . 2015-06-10 04:17	635392	----a-w-	c:\windows\SysWow64\tdh.dll
2015-05-25 18:01 . 2015-06-10 04:17	43008	----a-w-	c:\windows\SysWow64\srclient.dll
2015-05-25 18:01 . 2015-06-10 04:17	92160	----a-w-	c:\windows\SysWow64\sechost.dll
2015-05-25 18:01 . 2015-06-10 04:17	14336	----a-w-	c:\windows\SysWow64\ntvdm64.dll
2015-05-25 18:01 . 2015-06-10 04:17	641536	----a-w-	c:\windows\SysWow64\advapi32.dll
2015-05-25 18:01 . 2015-06-10 04:17	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2015-05-25 18:00 . 2015-06-10 04:17	40448	----a-w-	c:\windows\SysWow64\typeperf.exe
2015-05-25 18:00 . 2015-06-10 04:17	364544	----a-w-	c:\windows\SysWow64\tracerpt.exe
2015-05-25 18:00 . 2015-06-10 04:17	25600	----a-w-	c:\windows\SysWow64\setup16.exe
2015-05-25 18:00 . 2015-06-10 04:17	37888	----a-w-	c:\windows\SysWow64\relog.exe
2015-05-25 18:00 . 2015-06-10 04:17	82944	----a-w-	c:\windows\SysWow64\logman.exe
2015-05-25 18:00 . 2015-06-10 04:17	17408	----a-w-	c:\windows\SysWow64\diskperf.exe
2015-05-25 17:59 . 2015-06-10 04:17	5120	----a-w-	c:\windows\SysWow64\wow32.dll
2015-05-25 17:59 . 2015-06-10 04:17	274944	----a-w-	c:\windows\SysWow64\KernelBase.dll
2015-05-25 17:55 . 2015-06-10 04:17	5120	---ha-w-	c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	4608	---ha-w-	c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	3584	---ha-w-	c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	3072	---ha-w-	c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
2015-05-25 17:55 . 2015-06-10 04:17	6656	----a-w-	c:\windows\SysWow64\apisetschema.dll
2015-05-25 17:55 . 2015-06-10 04:17	4096	---ha-w-	c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KiesPreload"="c:\program files (x86)\Samsung\Kies\Kies.exe" [2015-04-28 1566016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2013-05-30 96056]
"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2015-04-28 311616]
"Raptr"="c:\program files (x86)\Raptr\raptrstub.exe" [2015-07-09 55568]
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\Update\realsched.exe" [2015-07-09 286272]
"RealDownloader"="c:\program files (x86)\RealNetworks\RealDownloader\downloader2.exe" [2015-06-16 608320]
"StartCCC"="c:\program files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2015-06-22 767176]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2015-06-08 334896]
.
c:\users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Tintenwarnungen überwachen - HP Deskjet 2540 series.lnk - c:\windows\system32\RunDll32.exe "c:\program files\HP\HP Deskjet 2540 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN45R3F6T4061T;CONNECTION=USB;MONITOR=1; [2009-7-14 45568]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
RealTimes.lnk - c:\program files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe [2015-7-9 1132120]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 Amsp;Trend Micro Solution Platform;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe;c:\program files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Tftpd32_svc;Tftpd32 service edition;c:\program files (x86)\Tftpd32_SE\tftpd32_svc.exe;c:\program files (x86)\Tftpd32_SE\tftpd32_svc.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 mv91xx;mv91xx;c:\windows\system32\DRIVERS\mv91xx.sys;c:\windows\SYSNATIVE\DRIVERS\mv91xx.sys [x]
S0 TMEBC;TMEBC;c:\windows\system32\DRIVERS\TMEBC64.sys;c:\windows\SYSNATIVE\DRIVERS\TMEBC64.sys [x]
S1 tmevtmgr;tmevtmgr;c:\windows\system32\DRIVERS\tmevtmgr.sys;c:\windows\SYSNATIVE\DRIVERS\tmevtmgr.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe;c:\program files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [x]
S2 Platinum Host Service;Platinum Host Service;c:\program files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe;c:\program files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe [x]
S2 PwmSvc;Trend Micro Password Manager Zentraler Steuerungsdienst;c:\program files\Trend Micro\TMIDS\PwmSvc.exe;c:\program files\Trend Micro\TMIDS\PwmSvc.exe [x]
S2 RealPlayerUpdateSvc;RealPlayer Update Service;c:\program files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe;c:\program files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [x]
S2 RealTimes Desktop Service;RealTimes Desktop Service;c:\program files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe;c:\program files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [x]
S2 tmusa;Trend Micro Osprey Driver;c:\windows\system32\DRIVERS\tmusa.sys;c:\windows\SYSNATIVE\DRIVERS\tmusa.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 kbfilter;kbfilter;c:\windows\system32\DRIVERS\kbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\kbfilter.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 tmeevw;tmeevw;c:\windows\system32\DRIVERS\tmeevw.sys;c:\windows\SYSNATIVE\DRIVERS\tmeevw.sys [x]
S3 tmnciesc;tmnciesc;c:\windows\system32\DRIVERS\tmnciesc.sys;c:\windows\SYSNATIVE\DRIVERS\tmnciesc.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2015-07-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-16 15:53]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Platinum"="c:\program files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe" [2015-05-04 1266688]
"PwmConsole.exe"="c:\program files\Trend Micro\TMIDS\PwmConsole.exe" [2015-06-26 2047216]
"Trend Micro Client Framework"="c:\program files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe" [2014-07-20 246304]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Nach Microsoft &Excel exportieren - c:\progra~2\MIF5BA~1\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
Handler: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - c:\program files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg32.dll
FF - ProfilePath - c:\users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default\
FF - prefs.js: browser.startup.homepage - www.t-online.de
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-Corel Graphics Suite 1117 - c:\program files (x86)\Corel\Corel Graphics 11\Register\registration.exe
Wow6432Node-HKLM-Run-Internet Speed Tracker Search Scope Monitor - c:\progra~2\INTERN~3\bar\2.bin\9tsrchmn.exe
Wow6432Node-HKLM-Run-Elite Unzip Search Scope Monitor - c:\progra~2\ELITEU~2\bar\2.bin\aasrchmn.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
AddRemove-MyFreeCodec - c:\program files (x86)\MyFree Codec\1.0b beta\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-07-22  21:12:19
ComboFix-quarantined-files.txt  2015-07-22 19:12
.
Vor Suchlauf: 10 Verzeichnis(se), 641.200.197.632 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 642.570.096.640 Bytes frei
.
- - End Of File - - 0E9DADECA4B69E92C3265638811DAEE1
C02F39C50B5CCF697A325E8C46E83639
Ich bin auf die nächsten Schritte gespannt und warte auf Antwort.

Danke und Gruß

Matthias

Alt 23.07.2015, 07:37   #7
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 23.07.2015, 11:22   #8
spacebyrd
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Hallo Schrauber,

Hier meine Logs:

mbam.txt:

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 23.07.2015
Suchlaufzeit: 11:04
Protokolldatei: mbam.txt
Administrator: Ja

Version: 0.0.0.0000
Malware-Datenbank: v2015.07.23.01
Rootkit-Datenbank: v2015.07.22.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Matthias

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 363902
Abgelaufene Zeit: 20 Min., 45 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 3
PUP.Optional.Mindspark.A, HKLM\SOFTWARE\WOW6432NODE\Mindspark, In Quarantäne, [626db034aae0b97deac83155838137c9], 
PUP.Optional.ASK.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A0892E19-6051-4AE6-9A5F-91542A166B2B}, In Quarantäne, [ab24d31148422016fdf9d0bea0646e92], 
PUP.Optional.Ask.A, HKU\S-1-5-21-13288270-610616202-679700459-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{A0892E19-6051-4AE6-9A5F-91542A166B2B}, In Quarantäne, [7e51e1038cfebe78ab7297f684803cc4], 

Registrierungswerte: 4
PUP.Optional.ASK.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{a0892e19-6051-4ae6-9a5f-91542a166b2b}|URL, hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^BBQ^xdm181^YYA^de&si=downspeedtest&ptb=F19D96BC-7CD4-4AD4-8826-3403688ED777&ind=2015020813&n=781ac70d&psa=&st=sb&searchfor={searchTerms}, In Quarantäne, [ab24d31148422016fdf9d0bea0646e92]
PUP.Optional.Ask.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{a0892e19-6051-4ae6-9a5f-91542a166b2b}|DisplayName, Ask Web Search, In Quarantäne, [4e81598bcebc8bab48d6dcb19b694cb4]
PUP.Optional.Ask.A, HKU\S-1-5-21-13288270-610616202-679700459-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{a0892e19-6051-4ae6-9a5f-91542a166b2b}|DisplayName, Ask Web Search, In Quarantäne, [7e51e1038cfebe78ab7297f684803cc4]
PUP.Optional.ASK.A, HKU\S-1-5-21-13288270-610616202-679700459-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{a0892e19-6051-4ae6-9a5f-91542a166b2b}|URL, hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^BBQ^xdm181^YYA^de&si=downspeedtest&ptb=F19D96BC-7CD4-4AD4-8826-3403688ED777&ind=2015020813&n=781ac70d&psa=&st=sb&searchfor={searchTerms}, In Quarantäne, [c30cf3f145454beb6c89b8d658ac07f9]

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 4
PUP.Optional.Mindspark.A, C:\Program Files (x86)\9tres.dll, In Quarantäne, [e5ea2fb53b4ff2444afa3735d82d16ea], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\9tUninstall Internet Speed Tracker.dll, In Quarantäne, [a02f17cdbbcff73f63e13339f510cd33], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\aares.dll, In Quarantäne, [616eae3693f7c76f72d2bbb1ed18b749], 
PUP.Optional.Mindspark.A, C:\Program Files (x86)\aaUninstall Elite Unzip.dll, In Quarantäne, [8a4564803258241263e1c0ace32205fb], 

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
Adw-Cleaner.txt:

Code:
ATTFilter
# AdwCleaner v4.208 - Bericht erstellt 23/07/2015 um 11:32:57
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-07-15.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Matthias - MATTHIAS-PC
# Gestarted von : C:\Users\Matthias\Downloads\Software\AdwCleaner_4.208.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Matthias\AppData\Local\iac
Ordner Gelöscht : C:\Users\Matthias\AppData\Local\Mindspark_Interactive_Net
Ordner Gelöscht : C:\Users\Matthias\AppData\LocalLow\iac

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKCU\Software\Myfree Codec
Schlüssel Gelöscht : HKLM\SOFTWARE\Myfree Codec

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17909


-\\ Mozilla Firefox v39.0 (x86 de)


*************************

AdwCleaner[R0].txt - [1806 Bytes] - [23/07/2015 11:32:01]
AdwCleaner[S0].txt - [1663 Bytes] - [23/07/2015 11:32:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1722  Bytes] ##########
JRT.txt:

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.1 (07.16.2015:1)
OS: Windows 7 Home Premium x64
Ran by Matthias on 23.07.2015 at 11:58:54,78
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Matthias\Appdata\Local\{55861892-D9C1-4EBB-9BDA-73F48FEAB2CF}
Successfully deleted: [Empty Folder] C:\Users\Matthias\Appdata\Local\{E7269F56-0193-44E8-A35B-D96AAE32686C}
Successfully deleted: [Empty Folder] C:\Users\Matthias\Appdata\Local\{EBF16C2D-102F-4CF3-A037-5017AC73ED54}



~~~ FireFox

Emptied folder: C:\Users\Matthias\AppData\Roaming\mozilla\firefox\profiles\8xhb2vdl.default\minidumps [3 files]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 23.07.2015 at 12:06:47,61
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST.txt:

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015
Ran by Matthias (administrator) on MATTHIAS-PC on 23-07-2015 12:10:53
Running from C:\Users\Matthias\Downloads\Software
Loaded Profiles: Matthias (Available Profiles: Matthias)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtWatchDog.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Platinum] => C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe [1266688 2015-05-04] (Trend Micro Inc.)
HKLM\...\Run: [PwmConsole.exe] => C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe [2047216 2015-06-26] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [246304 2014-07-20] (Trend Micro Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-04-28] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-07-09] (Raptr, Inc)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [286272 2015-07-09] (RealNetworks, Inc.)
HKLM-x32\...\Run: [RealDownloader] => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [608320 2015-06-17] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-06-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-13288270-610616202-679700459-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1566016 2015-04-28] (Samsung)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-07-09]
ShortcutTarget: RealTimes.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 2540 series.lnk [2014-11-11]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 2540 series.lnk -> C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-13288270-610616202-679700459-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-13288270-610616202-679700459-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-13288270-610616202-679700459-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com
SearchScopes: HKLM -> {BE102181-DECA-46A8-B5CF-5DD8007AC8FE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {BE102181-DECA-46A8-B5CF-5DD8007AC8FE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2015-06-17] (RealDownloader)
BHO: Trend Micro Password Manager BHO -> {3F019D1C-7EAA-4F25-A765-FBA635BD0AFF} -> C:\Program Files\Trend Micro\TMIDS\PwmIEBHO64.dll [2015-06-26] (Trend Micro Inc.)
BHO: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: TmIEPlugInBHO Class -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg.dll [2014-06-30] (Trend Micro Inc.)
BHO: Trend Micro IE Protection -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe64.dll [2015-05-21] (Trend Micro Inc.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-06-17] (RealDownloader)
BHO-x32: Trend Micro Password Manager BHO -> {3F019D1C-7EAA-4F25-A765-FBA635BD0AFF} -> C:\Program Files\Trend Micro\TMIDS\PwmIEBHO32.dll [2015-06-26] (Trend Micro Inc.)
BHO-x32: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-16] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: TmIEPlugInBHO Class -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg32.dll [2014-06-30] (Trend Micro Inc.)
BHO-x32: Trend Micro IE Protection -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe32.dll [2015-05-21] (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-16] (Oracle Corporation)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll No File
Toolbar: HKLM - Trend Micro Password Manager Symbolleiste - {9B4B91FC-EC4D-4018-9575-96FA5A3C03C5} - C:\Program Files\Trend Micro\TMIDS\PwmIEBHO64.dll [2015-06-26] (Trend Micro Inc.)
Toolbar: HKLM - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Toolbar: HKLM-x32 - Trend Micro Password Manager Symbolleiste - {9B4B91FC-EC4D-4018-9575-96FA5A3C03C5} - C:\Program Files\Trend Micro\TMIDS\PwmIEBHO32.dll [2015-06-26] (Trend Micro Inc.)
Toolbar: HKLM-x32 - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Toolbar: HKU\S-1-5-21-13288270-610616202-679700459-1000 -> Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll No File
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe64.dll [2015-05-21] (Trend Micro Inc.)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe32.dll [2015-05-21] (Trend Micro Inc.)
Handler: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg.dll [2014-06-30] (Trend Micro Inc.)
Handler-x32: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg32.dll [2014-06-30] (Trend Micro Inc.)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ProToolbarIMRatingActiveX.dll [2014-07-20] (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll [2014-07-20] (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{7F29EE80-BDE0-4A88-99D4-0779C23EE81F}: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default
FF Homepage: www.t-online.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_210.dll [2015-07-16] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_210.dll [2015-07-16] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=18.0.1.9 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2015-07-09] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.0.1.9 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2015-07-09] (RealTimes)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-13288270-610616202-679700459-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Matthias\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Extension: WOT - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-07-13]
FF Extension: Flagfox - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-12-29]
FF Extension: Adblock Plus - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-29]
FF HKLM\...\Firefox\Extensions: [tmbepff@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\firefoxextension [2015-06-28]
FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF HKLM-x32\...\Firefox\Extensions: [tmbepff@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [{BBB77B49-9FF4-4d5c-8FE2-92B1D6CD696C}] - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension
FF Extension: Trend Micro Osprey Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension [2015-06-11]
FF HKLM-x32\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2014-12-04]
FF HKLM-x32\...\Firefox\Extensions: [{8197dd50-b252-4b08-a1be-1277f22357bb}] - C:\Program Files\Trend Micro\TMIDS\PwmFirefoxExt
FF Extension: Trend Micro Password Manager Firefox Extension - C:\Program Files\Trend Micro\TMIDS\PwmFirefoxExt [2014-12-04]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [olmajmomenlhgihenlbjcfbopoghpckg] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [idkknaphebegndgimgdpfnconcickdfn] - No Path Or update_url value
CHR HKLM-x32\...\Chrome\Extension: [olmajmomenlhgihenlbjcfbopoghpckg] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 Platinum Host Service; C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe [1187328 2015-05-04] (Trend Micro Inc.)
S2 PwmSvc; C:\Program Files\Trend Micro\TMIDS\PwmSvc.exe [333856 2015-06-26] (Trend Micro Inc.)
S2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2015-06-17] ()
S2 RealTimes Desktop Service; C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1115224 2015-07-09] (RealNetworks, Inc.)
S2 Tftpd32_svc; C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe [167936 2013-11-28] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 kbfilter; C:\Windows\System32\DRIVERS\kbfilter.sys [67408 2015-01-30] (Trend Micro Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2015-07-23] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [122432 2015-04-24] (Trend Micro Inc.)
R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [307344 2015-04-24] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [50976 2014-07-09] (Trend Micro Inc.)
R3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [106296 2014-07-09] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [93616 2015-04-24] (Trend Micro Inc.)
R3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [407864 2014-07-09] (Trend Micro Inc.)
R2 tmusa; C:\Windows\System32\DRIVERS\tmusa.sys [106296 2014-06-30] (Trend Micro Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-23 12:06 - 2015-07-23 12:06 - 00001175 _____ C:\Users\Matthias\Desktop\JRT.txt
2015-07-23 11:31 - 2015-07-23 11:33 - 00000000 ____D C:\AdwCleaner
2015-07-23 11:28 - 2015-07-23 11:28 - 00003306 _____ C:\Users\Matthias\Documents\mbam.txt
2015-07-23 10:24 - 2015-07-23 11:34 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-23 10:23 - 2015-07-23 10:25 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-07-23 10:23 - 2015-07-23 10:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-07-23 10:23 - 2015-07-23 10:25 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-07-23 10:23 - 2015-07-23 10:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-23 10:23 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-23 10:23 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-23 10:23 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-22 21:12 - 2015-07-22 21:12 - 00027337 _____ C:\ComboFix.txt
2015-07-22 20:54 - 2015-07-22 21:12 - 00000000 ____D C:\Qoobox
2015-07-22 20:54 - 2015-07-22 21:09 - 00000000 ____D C:\Windows\erdnt
2015-07-22 20:54 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-07-22 20:54 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-07-22 20:54 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-07-22 20:54 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-07-22 20:54 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-07-22 20:54 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-07-22 20:54 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-07-22 20:54 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-07-22 20:50 - 2015-07-22 20:51 - 05632853 ____R (Swearware) C:\Users\Matthias\Desktop\ComboFix.exe
2015-07-22 20:42 - 2015-07-22 20:42 - 00001282 _____ C:\Users\Matthias\Desktop\Revo Uninstaller.lnk
2015-07-22 20:42 - 2015-07-22 20:42 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-07-20 23:36 - 2015-07-20 23:36 - 00005390 _____ C:\Users\Matthias\AppData\Local\recently-used.xbel
2015-07-20 22:40 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-20 22:40 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-20 22:40 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-20 22:40 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-20 22:40 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-20 22:40 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-20 22:40 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-20 22:40 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-20 22:40 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-20 22:40 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-16 18:02 - 2015-07-16 18:02 - 01187008 _____ (Adobe Systems Incorporated) C:\Users\Matthias\Downloads\flashplayer18_ha_install.exe
2015-07-16 17:53 - 2015-07-23 12:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-16 17:53 - 2015-07-16 17:53 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-16 17:53 - 2015-07-16 17:53 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-16 17:53 - 2015-07-16 17:53 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-16 17:51 - 2015-07-16 17:52 - 18526896 _____ (Adobe Systems Incorporated) C:\Users\Matthias\Downloads\flashplayer18_install_win_pi.exe
2015-07-16 09:42 - 2015-07-23 12:10 - 00000000 ____D C:\FRST
2015-07-16 09:40 - 2015-07-16 09:40 - 00000000 _____ C:\Users\Matthias\defogger_reenable
2015-07-16 08:45 - 2015-07-16 08:45 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Oracle
2015-07-15 20:15 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 20:15 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 20:15 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 20:15 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 20:15 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 20:15 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 20:15 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 20:15 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 20:15 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 20:15 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 20:15 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 20:15 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 20:15 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 20:15 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 20:15 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 20:15 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 20:15 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 20:15 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 20:15 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 20:15 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 20:15 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 20:15 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 20:15 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 20:15 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-15 20:15 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-07-15 20:15 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 20:15 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 20:14 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 20:14 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 20:14 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 20:14 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 20:14 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 20:14 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 20:14 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 20:14 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 20:14 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 20:14 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 20:14 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 20:14 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 20:14 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 20:14 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 20:14 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 20:14 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 20:14 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 20:14 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 20:14 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 20:14 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 20:14 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 20:14 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 20:14 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 20:14 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 20:14 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 20:14 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 20:14 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 20:14 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 20:14 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 20:14 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 20:14 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 20:14 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 20:14 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 20:14 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 20:14 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 20:14 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 20:14 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 20:14 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 20:14 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 20:14 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 20:14 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 20:14 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 20:14 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 20:14 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 20:13 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 20:13 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 20:13 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 20:13 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 20:13 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 20:13 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 20:13 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 20:13 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 20:13 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 20:13 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 20:13 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 20:13 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 20:13 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 20:13 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 20:13 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 20:13 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 20:13 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 20:13 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 20:13 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 20:13 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 20:13 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 20:13 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 20:13 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 20:13 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 20:13 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 20:13 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 20:13 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 20:13 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 20:13 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 20:13 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 20:13 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 20:13 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 20:13 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-15 20:13 - 2015-06-11 19:57 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-07-15 20:13 - 2015-06-11 19:57 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-07-15 20:13 - 2015-06-11 19:57 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-07-15 20:13 - 2015-06-11 19:56 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-07-15 20:13 - 2015-06-11 19:56 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-07-15 20:13 - 2015-06-11 19:56 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-07-15 20:13 - 2015-06-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-07-15 20:13 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 20:13 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 20:13 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 20:13 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 20:13 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 20:13 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 20:13 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 20:13 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 20:12 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-15 20:12 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-15 20:12 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-11 13:24 - 2015-07-11 13:24 - 00000000 ____D C:\ProgramData\ATI
2015-07-11 13:23 - 2015-07-11 13:23 - 00053787 _____ C:\Windows\SysWOW64\CCCInstall_201507111323471198.log
2015-07-11 13:23 - 2015-07-11 13:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-07-10 06:28 - 2015-07-10 06:28 - 01155760 _____ (Adobe Systems Incorporated) C:\Users\Matthias\Downloads\uninstall_flash_player.exe
2015-07-09 14:35 - 2015-07-09 14:35 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\mp3DirectCut
2015-07-09 14:34 - 2015-07-09 14:34 - 00001073 _____ C:\Users\Matthias\Desktop\mp3DirectCut.lnk
2015-07-09 14:34 - 2015-07-09 14:34 - 00000000 ____D C:\Program Files (x86)\mp3DirectCut
2015-07-09 12:07 - 2015-07-10 05:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-09 12:00 - 2015-07-09 12:00 - 00003436 _____ C:\Windows\System32\Tasks\RealDownloader Update Check
2015-07-09 12:00 - 2015-07-09 12:00 - 00000000 ____D C:\Users\Matthias\AppData\Local\Real
2015-07-09 11:59 - 2015-07-09 11:59 - 00003374 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-13288270-610616202-679700459-1000
2015-07-09 11:59 - 2015-07-09 11:59 - 00003246 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-13288270-610616202-679700459-1000
2015-07-09 11:59 - 2015-07-09 11:59 - 00001264 _____ C:\Users\Public\Desktop\RealTimes (RealPlayer).lnk
2015-07-09 11:59 - 2015-07-09 11:59 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\RealNetworks
2015-07-09 11:59 - 2015-07-09 11:59 - 00000000 ____D C:\ProgramData\RealNetworks
2015-07-09 11:59 - 2015-07-09 11:59 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2015-07-09 11:58 - 2015-07-09 11:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2015-07-09 11:58 - 2015-07-09 11:59 - 00000000 ____D C:\Program Files (x86)\Real
2015-07-09 11:58 - 2015-07-09 11:58 - 00505408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2015-07-09 11:58 - 2015-07-09 11:58 - 00353856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2015-07-09 11:58 - 2015-07-09 11:58 - 00278592 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2015-07-09 11:58 - 2015-07-09 11:58 - 00200256 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2015-07-09 11:57 - 2015-07-09 14:25 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Real
2015-07-09 11:55 - 2015-07-09 12:01 - 00000000 ____D C:\ProgramData\Real
2015-07-07 19:40 - 2015-07-07 19:40 - 00000000 ____D C:\Users\Matthias\Documents\Fax
2015-06-23 04:09 - 2015-06-23 04:09 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2015-06-23 04:09 - 2015-06-23 04:09 - 00078432 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2015-06-23 04:09 - 2015-06-23 04:09 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2015-06-23 04:09 - 2015-06-23 04:09 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2015-06-23 04:08 - 2015-06-23 04:08 - 07927568 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdva.dll
2015-06-23 04:08 - 2015-06-23 04:08 - 07407400 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiumdag.dll
2015-06-23 04:08 - 2015-06-23 04:08 - 00102616 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiu9pag.dll
2015-06-23 04:05 - 2015-06-23 04:05 - 00297672 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdacpksd.sys
2015-06-23 04:03 - 2015-06-23 04:03 - 21612032 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2015-06-23 03:59 - 2015-06-23 03:59 - 47782912 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl64.dll
2015-06-23 03:59 - 2015-06-23 03:59 - 00235008 _____ C:\Windows\system32\clinfo.exe
2015-06-23 03:58 - 2015-06-23 03:58 - 39712256 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl.dll
2015-06-23 03:57 - 2015-06-23 03:57 - 00065024 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-06-23 03:57 - 2015-06-23 03:57 - 00059392 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-06-23 03:55 - 2015-06-23 03:55 - 27535872 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl12cl64.dll
2015-06-23 03:55 - 2015-06-23 03:55 - 22318592 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\amdocl12cl.dll
2015-06-23 03:33 - 2015-06-23 03:33 - 06476288 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmantle64.dll
2015-06-23 03:33 - 2015-06-23 03:33 - 00127488 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantle64.dll
2015-06-23 03:33 - 2015-06-23 03:33 - 00113664 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantle32.dll
2015-06-23 03:28 - 2015-06-23 03:28 - 05067264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmantle32.dll
2015-06-23 03:27 - 2015-06-23 03:27 - 30749184 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atio6axx.dll
2015-06-23 03:25 - 2015-06-23 03:25 - 00093184 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\mantleaxl64.dll
2015-06-23 03:25 - 2015-06-23 03:25 - 00086528 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\mantleaxl32.dll
2015-06-23 03:22 - 2015-06-23 03:22 - 00050688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdmmcl6.dll
2015-06-23 03:22 - 2015-06-23 03:22 - 00039424 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdmmcl.dll
2015-06-23 03:21 - 2015-06-23 03:21 - 25296896 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atioglxx.dll
2015-06-23 03:21 - 2015-06-23 03:21 - 00865792 _____ (AMD) C:\Windows\system32\coinst_15.20.dll
2015-06-23 03:20 - 2015-06-23 03:20 - 03437632 _____ C:\Windows\system32\atiumd6a.cap
2015-06-23 03:19 - 2015-06-23 03:19 - 00660224 _____ C:\Windows\SysWOW64\atiapfxx.blb
2015-06-23 03:19 - 2015-06-23 03:19 - 00660224 _____ C:\Windows\system32\atiapfxx.blb
2015-06-23 03:19 - 2015-06-23 03:19 - 00367104 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2015-06-23 03:19 - 2015-06-23 03:19 - 00062464 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt64.dll
2015-06-23 03:19 - 2015-06-23 03:19 - 00055808 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl64.dll
2015-06-23 03:19 - 2015-06-23 03:19 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalrt.dll
2015-06-23 03:19 - 2015-06-23 03:19 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticalcl.dll
2015-06-23 03:18 - 2015-06-23 03:18 - 15716864 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd64.dll
2015-06-23 03:18 - 2015-06-23 03:18 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\SysWOW64\aticaldd.dll
2015-06-23 03:16 - 2015-06-23 03:16 - 03471376 _____ C:\Windows\SysWOW64\atiumdva.cap
2015-06-23 03:14 - 2015-06-23 03:14 - 00670720 _____ (AMD) C:\Windows\system32\atieclxx.exe
2015-06-23 03:14 - 2015-06-23 03:14 - 00245760 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2015-06-23 03:14 - 2015-06-23 03:14 - 00204800 _____ C:\Windows\system32\amdgfxinfo64.dll
2015-06-23 03:14 - 2015-06-23 03:14 - 00190976 _____ (AMD) C:\Windows\system32\atitmm64.dll
2015-06-23 03:14 - 2015-06-23 03:14 - 00189952 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2015-06-23 03:14 - 2015-06-23 03:14 - 00160256 _____ C:\Windows\system32\atieah64.exe
2015-06-23 03:14 - 2015-06-23 03:14 - 00143872 _____ C:\Windows\SysWOW64\atieah32.exe
2015-06-23 03:14 - 2015-06-23 03:14 - 00029696 _____ (AMD) C:\Windows\system32\atimuixx.dll
2015-06-23 03:11 - 2015-06-23 03:11 - 00926720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2015-06-23 03:11 - 2015-06-23 03:11 - 00926720 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxx.dll
2015-06-23 03:10 - 2015-06-23 03:10 - 00663552 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2015-06-23 03:10 - 2015-06-23 03:10 - 00156672 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2015-06-23 03:10 - 2015-06-23 03:10 - 00141824 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2015-06-23 03:10 - 2015-06-23 03:10 - 00075264 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6pxx.dll
2015-06-23 03:10 - 2015-06-23 03:10 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiglpxx.dll
2015-06-23 03:10 - 2015-06-23 03:10 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2015-06-23 03:09 - 2015-06-23 03:09 - 00102912 _____ C:\Windows\system32\hsa-thunk64.dll
2015-06-23 03:09 - 2015-06-23 03:09 - 00102400 _____ C:\Windows\SysWOW64\hsa-thunk.dll
2015-06-23 03:07 - 2015-06-23 03:07 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-23 12:10 - 2014-10-28 17:09 - 00000000 ____D C:\Users\Matthias\Downloads\Software
2015-07-23 11:51 - 2014-11-15 15:24 - 00034447 _____ C:\Windows\setupact.log
2015-07-23 11:42 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-23 11:42 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-23 11:39 - 2014-10-28 15:54 - 01915027 _____ C:\Windows\WindowsUpdate.log
2015-07-23 11:34 - 2014-12-12 21:14 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Raptr
2015-07-23 11:34 - 2014-11-25 20:35 - 00036288 _____ C:\Windows\PFRO.log
2015-07-23 11:34 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-23 11:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Speech
2015-07-22 21:04 - 2009-07-14 04:34 - 00000215 ____N C:\Windows\system.ini
2015-07-22 20:03 - 2009-07-14 06:45 - 00422576 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-20 23:44 - 2015-04-02 12:19 - 00000000 ____D C:\Users\Matthias\.gimp-2.8
2015-07-20 23:37 - 2015-04-02 12:31 - 00000000 ____D C:\Users\Matthias\AppData\Local\gtk-2.0
2015-07-20 22:38 - 2015-05-17 10:08 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-07-16 18:02 - 2014-10-29 11:25 - 00000000 ____D C:\Users\Matthias\AppData\Local\Adobe
2015-07-16 15:36 - 2015-04-04 07:38 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-16 15:36 - 2015-04-04 07:38 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-16 09:40 - 2014-10-28 15:56 - 00000000 ____D C:\Users\Matthias
2015-07-16 08:40 - 2014-10-29 10:30 - 00000000 ____D C:\ProgramData\Oracle
2015-07-16 08:40 - 2014-10-29 10:30 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-16 08:39 - 2014-10-29 10:30 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-07-16 08:29 - 2014-12-26 14:07 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-16 08:20 - 2015-04-16 22:59 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-16 08:20 - 2015-04-16 22:59 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-16 08:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-16 00:12 - 2014-10-28 18:18 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 19:52 - 2010-11-21 08:50 - 00698694 _____ C:\Windows\system32\perfh007.dat
2015-07-15 19:52 - 2010-11-21 08:50 - 00148834 _____ C:\Windows\system32\perfc007.dat
2015-07-15 19:52 - 2009-07-14 07:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-11 13:27 - 2014-12-12 21:14 - 00000000 ____D C:\Program Files (x86)\Raptr
2015-07-11 13:14 - 2014-10-29 12:42 - 00000000 ____D C:\Program Files\AMD
2015-07-11 13:10 - 2014-10-29 12:40 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-11 13:07 - 2014-10-29 12:36 - 00000000 ____D C:\AMD
2015-07-10 05:59 - 2014-11-09 19:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-09 14:23 - 2014-10-28 15:56 - 00000000 ____D C:\Users\Matthias\AppData\Local\Windows Live
2015-07-09 11:47 - 2014-11-20 09:13 - 00000000 ____D C:\Users\Matthias\Documents\SelfMV
2015-07-03 08:43 - 2014-10-28 18:18 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-01 13:57 - 2014-11-20 08:48 - 00002020 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2015-07-01 13:46 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-29 11:13 - 2014-11-13 16:33 - 00000000 __SHD C:\Users\Matthias\AppData\Local\EmieBrowserModeList
2015-06-29 11:13 - 2014-10-28 20:03 - 00000000 __SHD C:\Users\Matthias\AppData\Local\EmieUserList
2015-06-29 11:13 - 2014-10-28 20:03 - 00000000 __SHD C:\Users\Matthias\AppData\Local\EmieSiteList
2015-06-23 04:08 - 2014-09-16 00:31 - 11941000 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx64.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 10087472 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atidxx32.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 08890576 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd6a.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 08786040 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumd64.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 01440592 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 01191320 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 00152056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxp64.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 00133016 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atiuxpag.dll
2015-06-23 04:08 - 2014-09-16 00:31 - 00120144 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9p64.dll
2015-06-23 03:14 - 2014-09-16 00:03 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2015-06-23 03:11 - 2014-09-15 23:59 - 01246208 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll

==================== Files in the root of some directories =======

2014-12-04 10:40 - 2015-06-02 21:19 - 0000632 _____ () C:\Users\Matthias\AppData\Roaming\tmcef.log
2014-12-04 10:25 - 2014-12-04 10:25 - 0000036 _____ () C:\Users\Matthias\AppData\Local\housecall.guid.cache
2015-07-20 23:36 - 2015-07-20 23:36 - 0005390 _____ () C:\Users\Matthias\AppData\Local\recently-used.xbel
2014-11-11 21:08 - 2014-11-11 21:08 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-10-28 17:45 - 2014-10-28 17:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Matthias\AppData\Local\Temp\Quarantine.exe
C:\Users\Matthias\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-14 18:02

==================== End of log ============================
Gruß Matthias

Alt 24.07.2015, 06:39   #9
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 26.07.2015, 06:35   #10
spacebyrd
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Hallo Schrauber,

Hier sind meine Logs:

Esetlog.txt:

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=527e25ef95104141a4bc491737a6846c
# end=init
# utc_time=2015-07-25 06:52:23
# local_time=2015-07-25 08:52:23 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 24968
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=527e25ef95104141a4bc491737a6846c
# end=updated
# utc_time=2015-07-25 06:58:05
# local_time=2015-07-25 08:58:05 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=527e25ef95104141a4bc491737a6846c
# engine=24968
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-07-25 10:30:25
# local_time=2015-07-25 12:30:25 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Trend Micro Maximum Security'
# compatibility_mode=527 16777213 100 100 2347412 31937130 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 22479962 189450075 0 0
# scanned=203647
# found=15
# cleaned=0
# scan_time=12739
sh=773C1082F2500E53043FC6B30816609A677358D9 ft=1 fh=f6f37da765052f3d vn="Variante von Win32/Toolbar.MyWebSearch.Z evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Matthias\AppData\Local\EliteUnzipAuto.exe.vir"
sh=43720BF0DB5A347B6E8A7134EA4E8D610A42CD4E ft=1 fh=b04cab1369404b99 vn="Variante von Win32/Toolbar.MyWebSearch.Z evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Matthias\AppData\Local\InternetSpeedTrackerAuto.exe.vir"
sh=74FE827063A7C48E95E1B0E7426FCDCBF5E77F7E ft=1 fh=51fe085c9efd3e8b vn="Variante von Win32/AdInstaller evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\178LNSWU\EliteUnzip.exe"
sh=40CE8DA4B3E58DEED4B5AC3C092AFF90D40C53AB ft=1 fh=d4dcdeeda4d3024d vn="Variante von Win32/AdInstaller evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Matthias\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JQ5GD1Q0\InternetSpeedTracker.exe"
sh=8FF4E42DC0787E9685069046DFB0C7CD0F5C80C7 ft=1 fh=6f26937daa089920 vn="Win32/RegistryBooster evtl. unerwünschte Anwendung" ac=I fn="D:\Eigene Dateien\Downloads\registrybooster(2).exe"
sh=2EAF97602145758E06D4265E1A2DA3AAAA926DE0 ft=1 fh=d8c05568890d91dc vn="Variante von Win32/RegistryBooster evtl. unerwünschte Anwendung" ac=I fn="D:\Eigene Dateien\Downloads\registrybooster.exe"
sh=EB1B423EC917AD7EFA22AE86F44B0E641F31F208 ft=1 fh=2d627d4d71e19a21 vn="Win32/SoftonicDownloader.A evtl. unerwünschte Anwendung" ac=I fn="D:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_sisoft-sandra.exe"
sh=5C2C209E2DAB462022AD5B36F8AEE3A6C70EDC76 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.MyWebSearch.Z evtl. unerwünschte Anwendung" ac=I fn="D:\MATTHIAS-PC\Backup Set 2015-05-11 060715\Backup Files 2015-06-09 075820\Backup files 1.zip"
sh=7D68B9CD51D0720605E58991F57EECAC054424F5 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.MyWebSearch.Z evtl. unerwünschte Anwendung" ac=I fn="D:\MATTHIAS-PC\Backup Set 2015-05-11 060715\Backup Files 2015-06-09 075820\Backup files 2.zip"
sh=8C032EB8683F0D04D560B2244498705738EDE309 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.MyWebSearch.Z evtl. unerwünschte Anwendung" ac=I fn="D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-06-29 080248\Backup files 1.zip"
sh=2ED9CF963B4140EEE210FA0B23FB1F0EF751A204 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.MyWebSearch.Z evtl. unerwünschte Anwendung" ac=I fn="D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-06-29 080248\Backup files 4.zip"
sh=CDC27B89E02646D816C18E21645EEE4D03363A1F ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.MyWebSearch.Z evtl. unerwünschte Anwendung" ac=I fn="D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-13 064222\Backup files 1.zip"
sh=DBD253F42A74AB8CB5683A8061ABE839D90E62F7 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.MyWebSearch.Z evtl. unerwünschte Anwendung" ac=I fn="D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-13 064222\Backup files 2.zip"
sh=D2EFB55755D81107ED6F5E912263928BB3C69FC3 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.MyWebSearch.Z evtl. unerwünschte Anwendung" ac=I fn="D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-22 201418\Backup files 1.zip"
sh=631B53D673EE695E3E06D2BDFA9CCC6D3E4845D4 ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.MyWebSearch.Z evtl. unerwünschte Anwendung" ac=I fn="D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-22 201418\Backup files 2.zip"
Securitycheck checkup.txt:

Code:
ATTFilter
 Results of screen317's Security Check version 1.004  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Trend Micro Maximum Security   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java 8 Update 51  
 Java version 32-bit out of Date! 
 Adobe Flash Player 19.0.0.115  
 Mozilla Firefox (39.0) 
````````Process Check: objlist.exe by Laurent````````  
 Trend Micro AMSP coreServiceShell.exe  
 Trend Micro UniClient UiFrmWrk uiWatchDog.exe 
 Trend Micro AMSP coreFrameworkHost.exe  
 Trend Micro Titanium plugin Pt\PtSvcHost.exe 
 Trend Micro Titanium plugin Pt\PtWatchDog.exe 
 Trend Micro TMIDS PwmSvc.exe  
 Trend Micro Titanium plugin Pt\PtSessionAgent.exe 
 Trend Micro TMIDS PwmConsole.exe  
 Trend Micro UniClient UiFrmWrk uiSeAgnt.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
Und FRST.txt:

Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-07-2015
durchgeführt von Matthias (Administrator) auf MATTHIAS-PC (25-07-2015 15:21:26)
Gestartet von C:\Users\Matthias\Downloads\Software
Geladene Profile: Matthias (Verfügbare Profile: Matthias)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: IE)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtWatchDog.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\TMIDS\PwmSvc.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Trend Micro Inc.) C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
() C:\Users\Matthias\Desktop\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Platinum] => C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSessionAgent.exe [1266688 2015-05-04] (Trend Micro Inc.)
HKLM\...\Run: [PwmConsole.exe] => C:\Program Files\Trend Micro\TMIDS\PwmConsole.exe [2047216 2015-06-26] (Trend Micro Inc.)
HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [246304 2014-07-20] (Trend Micro Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311616 2015-04-28] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-07-09] (Raptr, Inc)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [286272 2015-07-09] (RealNetworks, Inc.)
HKLM-x32\...\Run: [RealDownloader] => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [608320 2015-06-17] ()
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-06-22] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-13288270-610616202-679700459-1000\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1566016 2015-04-28] (Samsung)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-07-09]
ShortcutTarget: RealTimes.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\Users\Matthias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 2540 series.lnk [2014-11-11]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 2540 series.lnk -> C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ATTENTION

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-13288270-610616202-679700459-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-13288270-610616202-679700459-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-13288270-610616202-679700459-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://syb.msn.com
SearchScopes: HKLM -> {BE102181-DECA-46A8-B5CF-5DD8007AC8FE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {BE102181-DECA-46A8-B5CF-5DD8007AC8FE} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSBTDF&pc=MASB&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2015-06-17] (RealDownloader)
BHO: Trend Micro Password Manager BHO -> {3F019D1C-7EAA-4F25-A765-FBA635BD0AFF} -> C:\Program Files\Trend Micro\TMIDS\PwmIEBHO64.dll [2015-06-26] (Trend Micro Inc.)
BHO: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: TmIEPlugInBHO Class -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg.dll [2014-06-30] (Trend Micro Inc.)
BHO: Trend Micro IE Protection -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe64.dll [2015-05-21] (Trend Micro Inc.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-06-17] (RealDownloader)
BHO-x32: Trend Micro Password Manager BHO -> {3F019D1C-7EAA-4F25-A765-FBA635BD0AFF} -> C:\Program Files\Trend Micro\TMIDS\PwmIEBHO32.dll [2015-06-26] (Trend Micro Inc.)
BHO-x32: Trend Micro Security Toolbar Helper -> {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -> C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-16] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: TmIEPlugInBHO Class -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg32.dll [2014-06-30] (Trend Micro Inc.)
BHO-x32: Trend Micro IE Protection -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe32.dll [2015-05-21] (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-16] (Oracle Corporation)
Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll Keine Datei
Toolbar: HKLM - Trend Micro Password Manager Symbolleiste - {9B4B91FC-EC4D-4018-9575-96FA5A3C03C5} - C:\Program Files\Trend Micro\TMIDS\PwmIEBHO64.dll [2015-06-26] (Trend Micro Inc.)
Toolbar: HKLM - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Toolbar: HKLM-x32 - Trend Micro Password Manager Symbolleiste - {9B4B91FC-EC4D-4018-9575-96FA5A3C03C5} - C:\Program Files\Trend Micro\TMIDS\PwmIEBHO32.dll [2015-06-26] (Trend Micro Inc.)
Toolbar: HKLM-x32 - Trend Micro Toolbar - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Toolbar: HKU\S-1-5-21-13288270-610616202-679700459-1000 -> Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll Keine Datei
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe64.dll [2015-05-21] (Trend Micro Inc.)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\TmBpIe32.dll [2015-05-21] (Trend Micro Inc.)
Handler: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg.dll [2014-06-30] (Trend Micro Inc.)
Handler-x32: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files\Trend Micro\AMSP\module\20013\3.5.1186\2.0.1039\TmopIEPlg32.dll [2014-06-30] (Trend Micro Inc.)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Handler-x32: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll [2014-07-20] (Trend Micro Inc.)
Handler: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\plugin\ToolbarIE64\ProToolbarIMRatingActiveX.dll [2014-07-20] (Trend Micro Inc.)
Handler-x32: tmtbim - {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll [2014-07-20] (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{7F29EE80-BDE0-4A88-99D4-0779C23EE81F}: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default
FF Homepage: www.t-online.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_115.dll [2015-07-25] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_115.dll [2015-07-25] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-16] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=18.0.1.9 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2015-07-09] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.0.1.9 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2015-07-09] (RealTimes)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-13288270-610616202-679700459-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Matthias\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Extension: WOT - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-07-13]
FF Extension: Flagfox - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-12-29]
FF Extension: Adblock Plus - C:\Users\Matthias\AppData\Roaming\Mozilla\Firefox\Profiles\8xhb2vdl.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-29]
FF HKLM\...\Firefox\Extensions: [tmbepff@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\firefoxextension
FF Extension: Trend Micro BEP Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\firefoxextension [2015-06-28]
FF HKLM-x32\...\Firefox\Extensions: [bdwteff@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF HKLM-x32\...\Firefox\Extensions: [tmbepff@trendmicro.com] - C:\Program Files\Trend Micro\AMSP\module\20002\9.1.1022\9.1.1022\firefoxextension
FF HKLM-x32\...\Firefox\Extensions: [{BBB77B49-9FF4-4d5c-8FE2-92B1D6CD696C}] - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension
FF Extension: Trend Micro Osprey Firefox Extension - C:\Program Files\Trend Micro\AMSP\module\20013\FxExt\firefoxextension [2015-06-11]
FF HKLM-x32\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension
FF Extension: Trend Micro Toolbar - C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2014-12-04]
FF HKLM-x32\...\Firefox\Extensions: [{8197dd50-b252-4b08-a1be-1277f22357bb}] - C:\Program Files\Trend Micro\TMIDS\PwmFirefoxExt
FF Extension: Trend Micro Password Manager Firefox Extension - C:\Program Files\Trend Micro\TMIDS\PwmFirefoxExt [2014-12-04]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [olmajmomenlhgihenlbjcfbopoghpckg] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [idkknaphebegndgimgdpfnconcickdfn] - No Path Or update_url value
CHR HKLM-x32\...\Chrome\Extension: [olmajmomenlhgihenlbjcfbopoghpckg] - https://clients2.google.com/service/update2/crx

==================== Services (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 Platinum Host Service; C:\Program Files\Trend Micro\Titanium\plugin\Pt\PtSvcHost.exe [1187328 2015-05-04] (Trend Micro Inc.)
R2 PwmSvc; C:\Program Files\Trend Micro\TMIDS\PwmSvc.exe [333856 2015-06-26] (Trend Micro Inc.)
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2015-06-17] ()
R2 RealTimes Desktop Service; C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe [1115224 2015-07-09] (RealNetworks, Inc.)
R2 Tftpd32_svc; C:\Program Files (x86)\Tftpd32_SE\tftpd32_svc.exe [167936 2013-11-28] () [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 -ad -bt=0 [X]

==================== Drivers (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 kbfilter; C:\Windows\System32\DRIVERS\kbfilter.sys [67408 2015-01-30] (Trend Micro Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R1 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [122432 2015-04-24] (Trend Micro Inc.)
R0 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [307344 2015-04-24] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [50976 2014-07-09] (Trend Micro Inc.)
R3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [106296 2014-07-09] (Trend Micro Inc.)
R1 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [93616 2015-04-24] (Trend Micro Inc.)
R3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [407864 2014-07-09] (Trend Micro Inc.)
R2 tmusa; C:\Windows\System32\DRIVERS\tmusa.sys [106296 2014-06-30] (Trend Micro Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-07-25 15:11 - 2015-07-25 15:11 - 00852662 _____ C:\Users\Matthias\Desktop\SecurityCheck.exe
2015-07-25 08:52 - 2015-07-25 08:52 - 00000000 ____D C:\Program Files (x86)\ESET
2015-07-23 12:06 - 2015-07-23 12:06 - 00001175 _____ C:\Users\Matthias\Desktop\JRT.txt
2015-07-23 11:31 - 2015-07-23 11:33 - 00000000 ____D C:\AdwCleaner
2015-07-23 11:28 - 2015-07-23 11:28 - 00003306 _____ C:\Users\Matthias\Documents\mbam.txt
2015-07-23 10:24 - 2015-07-25 08:43 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-23 10:23 - 2015-07-23 10:25 - 00001120 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-07-23 10:23 - 2015-07-23 10:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-07-23 10:23 - 2015-07-23 10:25 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-07-23 10:23 - 2015-07-23 10:23 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-23 10:23 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-23 10:23 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-07-23 10:23 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-07-22 21:12 - 2015-07-22 21:12 - 00027337 _____ C:\ComboFix.txt
2015-07-22 20:54 - 2015-07-22 21:12 - 00000000 ____D C:\Qoobox
2015-07-22 20:54 - 2015-07-22 21:09 - 00000000 ____D C:\Windows\erdnt
2015-07-22 20:54 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2015-07-22 20:54 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2015-07-22 20:54 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-07-22 20:54 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-07-22 20:54 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-07-22 20:54 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2015-07-22 20:54 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2015-07-22 20:54 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2015-07-22 20:50 - 2015-07-22 20:51 - 05632853 ____R (Swearware) C:\Users\Matthias\Desktop\ComboFix.exe
2015-07-22 20:42 - 2015-07-22 20:42 - 00001282 _____ C:\Users\Matthias\Desktop\Revo Uninstaller.lnk
2015-07-22 20:42 - 2015-07-22 20:42 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-07-20 23:36 - 2015-07-20 23:36 - 00005390 _____ C:\Users\Matthias\AppData\Local\recently-used.xbel
2015-07-20 22:40 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-20 22:40 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-20 22:40 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-20 22:40 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-20 22:40 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-20 22:40 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-20 22:40 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-20 22:40 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-20 22:40 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-20 22:40 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-16 17:53 - 2015-07-25 15:02 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-16 17:53 - 2015-07-25 09:02 - 00778440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-16 17:53 - 2015-07-25 09:02 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-16 17:53 - 2015-07-25 09:02 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-16 09:42 - 2015-07-25 15:21 - 00000000 ____D C:\FRST
2015-07-16 09:40 - 2015-07-16 09:40 - 00000000 _____ C:\Users\Matthias\defogger_reenable
2015-07-16 08:45 - 2015-07-16 08:45 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Oracle
2015-07-15 20:15 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 20:15 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 20:15 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 20:15 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 20:15 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 20:15 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 20:15 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 20:15 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 20:15 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 20:15 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 20:15 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 20:15 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 20:15 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 20:15 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 20:15 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 20:15 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 20:15 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 20:15 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 20:15 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 20:15 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 20:15 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 20:15 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 20:15 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 20:15 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 20:15 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 20:15 - 2015-06-09 20:03 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2015-07-15 20:15 - 2015-06-09 20:03 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2015-07-15 20:15 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 20:15 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 20:14 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 20:14 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 20:14 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 20:14 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 20:14 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 20:14 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 20:14 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 20:14 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 20:14 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 20:14 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 20:14 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 20:14 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 20:14 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 20:14 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 20:14 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 20:14 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 20:14 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 20:14 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 20:14 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 20:14 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 20:14 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 20:14 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 20:14 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 20:14 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 20:14 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 20:14 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 20:14 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 20:14 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 20:14 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 20:14 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 20:14 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 20:14 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 20:14 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 20:14 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 20:14 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 20:14 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 20:14 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 20:14 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 20:14 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 20:14 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 20:14 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 20:14 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 20:14 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 20:14 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 20:13 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 20:13 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 20:13 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 20:13 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 20:13 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 20:13 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 20:13 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 20:13 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 20:13 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 20:13 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 20:13 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 20:13 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 20:13 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 20:13 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 20:13 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 20:13 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 20:13 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 20:13 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 20:13 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 20:13 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 20:13 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 20:13 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 20:13 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 20:13 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 20:13 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 20:13 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 20:13 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 20:13 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 20:13 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 20:13 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 20:13 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 20:13 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 20:13 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 20:13 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 20:13 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-15 20:13 - 2015-06-11 19:57 - 06131200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-07-15 20:13 - 2015-06-11 19:57 - 00856064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2015-07-15 20:13 - 2015-06-11 19:57 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2015-07-15 20:13 - 2015-06-11 19:56 - 07077376 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-07-15 20:13 - 2015-06-11 19:56 - 01057792 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2015-07-15 20:13 - 2015-06-11 19:56 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2015-07-15 20:13 - 2015-06-11 15:15 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2015-07-15 20:13 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 20:13 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 20:13 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 20:13 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 20:13 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 20:13 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 20:13 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 20:13 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 20:12 - 2015-07-09 19:59 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-15 20:12 - 2015-07-09 19:58 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-15 20:12 - 2015-07-09 19:58 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-15 20:12 - 2015-07-09 19:50 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-11 13:24 - 2015-07-11 13:24 - 00000000 ____D C:\ProgramData\ATI
2015-07-11 13:23 - 2015-07-11 13:23 - 00053787 _____ C:\Windows\SysWOW64\CCCInstall_201507111323471198.log
2015-07-11 13:23 - 2015-07-11 13:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-07-10 06:28 - 2015-07-10 06:28 - 01155760 _____ (Adobe Systems Incorporated) C:\Users\Matthias\Downloads\uninstall_flash_player.exe
2015-07-09 14:35 - 2015-07-09 14:35 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\mp3DirectCut
2015-07-09 14:34 - 2015-07-09 14:34 - 00001073 _____ C:\Users\Matthias\Desktop\mp3DirectCut.lnk
2015-07-09 14:34 - 2015-07-09 14:34 - 00000000 ____D C:\Program Files (x86)\mp3DirectCut
2015-07-09 12:07 - 2015-07-10 05:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-09 12:00 - 2015-07-09 12:00 - 00003436 _____ C:\Windows\System32\Tasks\RealDownloader Update Check
2015-07-09 12:00 - 2015-07-09 12:00 - 00000000 ____D C:\Users\Matthias\AppData\Local\Real
2015-07-09 11:59 - 2015-07-09 11:59 - 00003374 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-13288270-610616202-679700459-1000
2015-07-09 11:59 - 2015-07-09 11:59 - 00003246 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-13288270-610616202-679700459-1000
2015-07-09 11:59 - 2015-07-09 11:59 - 00001264 _____ C:\Users\Public\Desktop\RealTimes (RealPlayer).lnk
2015-07-09 11:59 - 2015-07-09 11:59 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\RealNetworks
2015-07-09 11:59 - 2015-07-09 11:59 - 00000000 ____D C:\ProgramData\RealNetworks
2015-07-09 11:59 - 2015-07-09 11:59 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2015-07-09 11:58 - 2015-07-09 11:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2015-07-09 11:58 - 2015-07-09 11:59 - 00000000 ____D C:\Program Files (x86)\Real
2015-07-09 11:58 - 2015-07-09 11:58 - 00505408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2015-07-09 11:58 - 2015-07-09 11:58 - 00353856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2015-07-09 11:58 - 2015-07-09 11:58 - 00278592 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2015-07-09 11:58 - 2015-07-09 11:58 - 00200256 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2015-07-09 11:57 - 2015-07-09 14:25 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Real
2015-07-09 11:55 - 2015-07-09 12:01 - 00000000 ____D C:\ProgramData\Real
2015-07-07 19:40 - 2015-07-07 19:40 - 00000000 ____D C:\Users\Matthias\Documents\Fax

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-07-25 15:20 - 2014-10-28 17:09 - 00000000 ____D C:\Users\Matthias\Downloads\Software
2015-07-25 15:06 - 2014-11-15 15:24 - 00036967 _____ C:\Windows\setupact.log
2015-07-25 14:04 - 2014-10-28 15:54 - 01996006 _____ C:\Windows\WindowsUpdate.log
2015-07-25 13:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-25 08:54 - 2010-11-21 08:50 - 00698694 _____ C:\Windows\system32\perfh007.dat
2015-07-25 08:54 - 2010-11-21 08:50 - 00148834 _____ C:\Windows\system32\perfc007.dat
2015-07-25 08:54 - 2009-07-14 07:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-25 08:52 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-25 08:52 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-25 08:44 - 2014-12-12 21:14 - 00000000 ____D C:\Users\Matthias\AppData\Roaming\Raptr
2015-07-25 08:43 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-23 11:34 - 2014-11-25 20:35 - 00036288 _____ C:\Windows\PFRO.log
2015-07-23 11:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Speech
2015-07-22 21:04 - 2009-07-14 04:34 - 00000215 ____N C:\Windows\system.ini
2015-07-22 20:03 - 2009-07-14 06:45 - 00422576 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-20 23:44 - 2015-04-02 12:19 - 00000000 ____D C:\Users\Matthias\.gimp-2.8
2015-07-20 23:37 - 2015-04-02 12:31 - 00000000 ____D C:\Users\Matthias\AppData\Local\gtk-2.0
2015-07-20 22:38 - 2015-05-17 10:08 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-07-16 18:02 - 2014-10-29 11:25 - 00000000 ____D C:\Users\Matthias\AppData\Local\Adobe
2015-07-16 15:36 - 2015-04-04 07:38 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-16 15:36 - 2015-04-04 07:38 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-16 09:40 - 2014-10-28 15:56 - 00000000 ____D C:\Users\Matthias
2015-07-16 08:40 - 2014-10-29 10:30 - 00000000 ____D C:\ProgramData\Oracle
2015-07-16 08:40 - 2014-10-29 10:30 - 00000000 ____D C:\Program Files (x86)\Java
2015-07-16 08:39 - 2014-10-29 10:30 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-07-16 08:29 - 2014-12-26 14:07 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-16 08:20 - 2015-04-16 22:59 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-16 08:20 - 2015-04-16 22:59 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-16 08:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-16 00:12 - 2014-10-28 18:18 - 00000000 ____D C:\Windows\system32\MRT
2015-07-11 13:27 - 2014-12-12 21:14 - 00000000 ____D C:\Program Files (x86)\Raptr
2015-07-11 13:14 - 2014-10-29 12:42 - 00000000 ____D C:\Program Files\AMD
2015-07-11 13:10 - 2014-10-29 12:40 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-11 13:07 - 2014-10-29 12:36 - 00000000 ____D C:\AMD
2015-07-10 05:59 - 2014-11-09 19:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-09 14:23 - 2014-10-28 15:56 - 00000000 ____D C:\Users\Matthias\AppData\Local\Windows Live
2015-07-09 11:47 - 2014-11-20 09:13 - 00000000 ____D C:\Users\Matthias\Documents\SelfMV
2015-07-03 08:43 - 2014-10-28 18:18 - 130333168 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-07-01 13:57 - 2014-11-20 08:48 - 00002020 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2015-07-01 13:46 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-29 11:13 - 2014-11-13 16:33 - 00000000 __SHD C:\Users\Matthias\AppData\Local\EmieBrowserModeList
2015-06-29 11:13 - 2014-10-28 20:03 - 00000000 __SHD C:\Users\Matthias\AppData\Local\EmieUserList
2015-06-29 11:13 - 2014-10-28 20:03 - 00000000 __SHD C:\Users\Matthias\AppData\Local\EmieSiteList

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-12-04 10:40 - 2015-06-02 21:19 - 0000632 _____ () C:\Users\Matthias\AppData\Roaming\tmcef.log
2014-12-04 10:25 - 2014-12-04 10:25 - 0000036 _____ () C:\Users\Matthias\AppData\Local\housecall.guid.cache
2015-07-20 23:36 - 2015-07-20 23:36 - 0005390 _____ () C:\Users\Matthias\AppData\Local\recently-used.xbel
2014-11-11 21:08 - 2014-11-11 21:08 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-10-28 17:45 - 2014-10-28 17:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Matthias\AppData\Local\Temp\Quarantine.exe
C:\Users\Matthias\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\System32\winlogon.exe => Datei ist digital signiert
C:\Windows\System32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\System32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\System32\services.exe => Datei ist digital signiert
C:\Windows\System32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\System32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\System32\rpcss.dll => Datei ist digital signiert
C:\Windows\System32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-07-25 12:53

==================== Ende von log ============================
Soweit die Logs, den Lauf muss ich noch prüfen. Ansonsten sollte wohl mal defragmentiert werden, oder?

Gruß Matthias

Hallo Schrauber,

Ich habe jetzt nach der Prüfung festgestellt, dass der Adobe Flashplayer zwar installiert ist, aber immer noch abstürzt. Außerdem erkennt der Trend Micro Passwordmanager das Masterpasswort nicht mehr. wenn ich dann auf "zurücksetzen" gehe will er einen Neustart. danach kann ich aber immer noch nicht zurücksetzen. kannst Du mir da helfen, oder soll ich mich an Trend Micro wenden?
Sonst läuft alles, Die Mindspark-Toolbar ist nicht wieder in Erscheinung getreten.

Gruß Matthias

Alt 26.07.2015, 13:23   #11
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
C:\Users\Matthias\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\178LNSWU\EliteUnzip.exe

C:\Users\Matthias\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JQ5GD1Q0\InternetSpeedTracker.exe

D:\Eigene Dateien\Downloads\registrybooster(2).exe

D:\Eigene Dateien\Downloads\registrybooster.exe

D:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_sisoft-sandra.exe

D:\MATTHIAS-PC\Backup Set 2015-05-11 060715\Backup Files 2015-06-09 075820\Backup files 1.zip

D:\MATTHIAS-PC\Backup Set 2015-05-11 060715\Backup Files 2015-06-09 075820\Backup files 2.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-06-29 080248\Backup files 1.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-06-29 080248\Backup files 4.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-13 064222\Backup files 1.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-13 064222\Backup files 2.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-22 201418\Backup files 1.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-22 201418\Backup files 2.zip

Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.




Wegen dem Passwort würde ich den Support von TrendMicro anschreiben, bevor wir da was verschlimmbessern.

In welchem Browser stürzt der Flash Player ab?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 27.07.2015, 20:22   #12
spacebyrd
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Hallo Schrauber,

Hier die Fixlog.txt:

Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:26-07-2015
durchgeführt von Matthias an 2015-07-27 20:19:56 Run:1
Gestartet von C:\Users\Matthias\Downloads\Software\FRST-OlderVersion
Geladene Profile: Matthias (Verfügbare Profile: Matthias)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
C:\Users\Matthias\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\178LNSWU\EliteUnzip.exe

C:\Users\Matthias\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JQ5GD1Q0\InternetSpeedTracker.exe

D:\Eigene Dateien\Downloads\registrybooster(2).exe

D:\Eigene Dateien\Downloads\registrybooster.exe

D:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_sisoft-sandra.exe

D:\MATTHIAS-PC\Backup Set 2015-05-11 060715\Backup Files 2015-06-09 075820\Backup files 1.zip

D:\MATTHIAS-PC\Backup Set 2015-05-11 060715\Backup Files 2015-06-09 075820\Backup files 2.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-06-29 080248\Backup files 1.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-06-29 080248\Backup files 4.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-13 064222\Backup files 1.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-13 064222\Backup files 2.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-22 201418\Backup files 1.zip

D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-22 201418\Backup files 2.zip

Emptytemp:
         
*****************

C:\Users\Matthias\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\178LNSWU\EliteUnzip.exe => erfolgreich verschoben.
C:\Users\Matthias\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JQ5GD1Q0\InternetSpeedTracker.exe => erfolgreich verschoben.
D:\Eigene Dateien\Downloads\registrybooster(2).exe => erfolgreich verschoben.
D:\Eigene Dateien\Downloads\registrybooster.exe => erfolgreich verschoben.
D:\Eigene Dateien\Downloads\SoftonicDownloader_fuer_sisoft-sandra.exe => erfolgreich verschoben.
D:\MATTHIAS-PC\Backup Set 2015-05-11 060715\Backup Files 2015-06-09 075820\Backup files 1.zip => erfolgreich verschoben.
D:\MATTHIAS-PC\Backup Set 2015-05-11 060715\Backup Files 2015-06-09 075820\Backup files 2.zip => erfolgreich verschoben.
D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-06-29 080248\Backup files 1.zip => erfolgreich verschoben.
D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-06-29 080248\Backup files 4.zip => erfolgreich verschoben.
D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-13 064222\Backup files 1.zip => erfolgreich verschoben.
D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-13 064222\Backup files 2.zip => erfolgreich verschoben.
D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-22 201418\Backup files 1.zip => erfolgreich verschoben.
D:\MATTHIAS-PC\Backup Set 2015-06-29 080248\Backup Files 2015-07-22 201418\Backup files 2.zip => erfolgreich verschoben.
EmptyTemp: => 604.4 MB temporäre Dateien entfernt.


Das System musste neu gestartet werden.. 

==== Ende von Fixlog 20:23:24 ====
Nach dem Neustart funktioniert der Flashplayer immer noch nicht. Ich nutze eigentlich nur Firefox, habe aber mal den Explorer gestartet. Dort war kein Flashplayer installiert. Wenn ich das dann versuche, erscheint wieder das von mit am Anfang beschriebene Fenster:

Zeile: 202
Zeichen: 13
Fehler: Die Eigenschaft „innerHTML“ eines undefinierten oder Nullverweises kann nicht festgelegt werden.
Code: 0
URL.: res://C:\Users\Matthias\Downloads\flashplayer18_ha_install.exe/160
Möchten Sie, dass Scripts auf dieser Seite weiterhin ausgeführt werden?
Ja/nein

Die auf Firefox installierte Version hatte ich auf Empfehlung meines Computerbetreuers vor Ort vom Computerbase.de heruntergeladen. Diese habe ich nun gelöscht und durch die aktuelle Version der gleichen Seite ersetzt, leider mit dem gleichen Ergebnis. Auch eine Neuinstallation von Adobe bei Firefox endete mit dem oben gezeigten Fenster.

Gruß Matthias

Alt 28.07.2015, 11:14   #13
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen


Dann bitte die Hardwarebeschleunigung abschalten in Firefox und nochmal testen.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 30.07.2015, 16:22   #14
spacebyrd
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Hallo Schrauber,

Nachdem ich Firefox wieder installiert hatte, ebenso den Flash Player, ist er wieder abgestürzt, trotz deaktivierter Hardwarebeschleunigung. Ich habe dann bei den Addons bei Shockwave den abgesicherten Modus deaktiviert. Danach ging es, ist wahrscheinlichist das aber auf die Dauer nicht so gut, oder?

Gruß Matthias

Alt 31.07.2015, 08:40   #15
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Standard

Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


Ich weiß nicht was genau du meinst. Zeig bitte mal nen Screenshot was Du abgeschaltet hast.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort
Seite 1 von 2 1 2

Themen zu Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht
adobe, adobe flashplayer, ausgeführt, downloads, erscheint, fenster, flashplayer, folge, folgender, funktioniert, funktioniert nicht, gelegt, installieren, konnte, meldung, mindspark toolbar, nicht mehr, nichts, schön, scripts, seite, spark, toolbar, troja, version, websites, windows, windows 7


« WIN 7 - Polizeivirus/Trojaner | Windows 7: Fehlermeldung "ungültiges Bild" beim Aufrufen aller Programme »


Ähnliche Themen: Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht


  1. Adobe flash lässt sich nicht installieren
    Alles rund um Windows - 27.07.2015 (19)
  2. Sandboxie funktionierte nicht mehr und lässt sich jetzt nicht neu installieren. (Windows 7)
    Log-Analyse und Auswertung - 15.10.2014 (5)
  3. Windows 8.1 x64: Adobe Flashplayer lässt sich nicht updaten/installieren/deinstallieren + weiteres Seltsames...
    Plagegeister aller Art und deren Bekämpfung - 25.08.2014 (11)
  4. Avira lässt sich nicht installieren und kein Download funktioniert!
    Plagegeister aller Art und deren Bekämpfung - 17.03.2014 (16)
  5. Adobe Flash Player lässt sich nicht installieren
    Alles rund um Windows - 23.01.2014 (1)
  6. Neuster Adobe Flash Player lässt sich nicht installieren
    Plagegeister aller Art und deren Bekämpfung - 12.01.2014 (3)
  7. Windows 7: Nation Zoom läßt sich nicht entfernen
    Log-Analyse und Auswertung - 21.12.2013 (19)
  8. Adobe Flash Player läßt sich nicht updaten und Rechner ist langsam
    Log-Analyse und Auswertung - 16.10.2013 (3)
  9. Windows 7 neu installieren, Toshiba HDD Recovery vorhanden, funktioniert aber nicht
    Alles rund um Windows - 26.08.2013 (2)
  10. Microsoft NET Framework 1.1 SP1 (KB2416447) läßt sich nicht installieren
    Alles rund um Windows - 19.10.2010 (0)
  11. Windows XP SP3 Firewall läßt sich nicht mehr aktivieren?
    Log-Analyse und Auswertung - 24.04.2010 (5)
  12. Windows XP läßt sich nicht mehr starten
    Alles rund um Windows - 26.09.2009 (15)
  13. windows update läßt sich nicht starten
    Plagegeister aller Art und deren Bekämpfung - 05.06.2008 (1)
  14. Virenprogramm weg und läßt sich nicht mehr installieren
    Antiviren-, Firewall- und andere Schutzprogramme - 18.09.2007 (3)
  15. ZoneAlarm 6 läßt sich nicht installieren.
    Antiviren-, Firewall- und andere Schutzprogramme - 16.01.2006 (11)
  16. Windows 95 läßt sich nicht beenden. HILFE!
    Alles rund um Windows - 14.04.2005 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht - Hallo Trojaner-Board-Team, Nach allen 2- 3 Starts erscheint ein Fenster: Mindspark Toolbar funktioniert nicht mehr, manchmal kommen auch 2 Fenster gleichen Inhalts. Ansonsten macht sich nichts für mich Sichtbares bemerkbar. - Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht...
Archiv
Du betrachtest: Windows 7: Adobe Flashplayer läßt sich nicht installieren; Minsparktoolbar funktioniert nicht auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131