| |
| |||||||
Log-Analyse und Auswertung: G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
23.07.2015, 12:41
| #1 |
 |  G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) Hallo erstmal, Ich bekomme seit mehreren Tagen dauerhaft die Meldung, dass G Data bei der Virenprüfung von Webinhalten etwas gefunden hat. Dabei wird mir laut Programm diese Addresse angezeigt: hxxp://i.mgicinjs.info/mgicin/javascript.js Es handelt sich um Junkware wie im Themenname zu sehen. G Data verweigert dem Virus (?) den Zugriff, allerdings erscheint das Pop-Up Fenster mit der Meldung jedes mal sofort wieder, wenn ich es geschlossen habe, selbst wenn kein Browser geöffnet ist. Außerdem kommt es mir so vor als wäre mein Laptop langsamer geworden, seit die Meldungen kommen. Habe in diversen Foren, auch hier, nach Hilfe gesucht und dabei Malwarebytes, Hitman, JRK, Bitdefender und natürlich G Data meinen PC scannen lassen. Die gefundenen Infektionen wurden entfernt, allerdings kommt das Pop-Up von G Data jedesmal wieder. Die Additions.txt musste ich leider anhängen, da mir angezeigt wurde, dass der Post sonst zu viele Zeichen hat.  defogger_disable.txt Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 12:56 on 23/07/2015 (Micha_000)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCU:DAEMON Tools Lite -> Removed
Checking for services/drivers...
-=E.O.F=-
Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015
Ran by Micha_000 (administrator) on ARCUS on 23-07-2015 13:02:15
Running from C:\Users\Micha_000\Downloads
Loaded Profiles: Micha_000 (Available Profiles: Micha_000 & Gast)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
() C:\Windows\ERUNT.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13651672 2013-09-03] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1321688 2013-08-30] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [InstallerLauncher] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-41 (the data entry has 36 more characters).
HKLM-x32\...\Run: [ASUS InstantKey] => C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [13936 2013-08-27] (ASUS)
HKLM-x32\...\Run: [G Data ASM] => C:\Program Files (x86)\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe [434296 2015-02-20] (G Data Software AG)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [ADSKAppManager] => C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe [493960 2014-12-05] (Autodesk Inc.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [181208 2013-01-15] (cyberlink)
HKLM-x32\...\Run: [UpdatePSTShortCut] => C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2013-02-05] (CyberLink Corp.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-04-26] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [193568 2014-10-13] (Geek Software GmbH)
HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFirewallTray.exe [1864312 2015-06-16] (G DATA Software AG)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G DATA\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] (Atheros Communications)
HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Micha_000\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-29] (Akamai Technologies, Inc.)
HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-05-01] (Autodesk, Inc.)
HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [Dropbox Update] => C:\Users\Micha_000\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-30] (Dropbox, Inc.)
HKU\S-1-5-21-995147136-1539619246-4169388671-1002\...\Run: [EADM] => D:\Sims4\Origin\Origin.exe [3632112 2015-07-22] (Electronic Arts)
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1193352 2014-05-01] (Autodesk, Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [177624 2015-01-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [164568 2015-01-10] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GoPro Importer.lnk [2015-07-07]
ShortcutTarget: GoPro Importer.lnk -> C:\Program Files (x86)\GoPro\Tools\Importer\GoPro Importer.exe (GoPro)
Startup: C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-07-04]
ShortcutTarget: Dropbox.lnk -> C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll [2012-09-27] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt64.26.dll [2015-07-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Micha_000\AppData\Roaming\Dropbox\bin\DropboxExt.26.dll [2015-07-07] (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-995147136-1539619246-4169388671-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com
HKU\S-1-5-21-995147136-1539619246-4169388671-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-04-14] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-04-14] (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 129.217.129.42
Tcpip\..\Interfaces\{3A923A30-1465-48E7-A82A-6C30F7F2798B}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{DB78376F-9FC3-424E-B0BE-DE5DA1E5F3ED}: [DhcpNameServer] 129.217.129.42
FireFox:
========
FF ProfilePath: C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default
FF NetworkProxy: "ftp", "proxyuk.stealthy.co"
FF NetworkProxy: "ftp_port", 3128
FF NetworkProxy: "http", "proxyuk.stealthy.co"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "proxyuk.stealthy.co"
FF NetworkProxy: "socks_port", 3128
FF NetworkProxy: "ssl", "proxyuk.stealthy.co"
FF NetworkProxy: "ssl_port", 3128
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\WINDOWS\system32\npDeployJava1.dll [2015-04-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-04-14] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-06-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-06-23] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-995147136-1539619246-4169388671-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Micha_000\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Extension: SaveFrom.net helper - C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default\Extensions\helper@savefrom.net.xpi [2014-11-10]
FF Extension: Adblock Plus - C:\Users\Micha_000\AppData\Roaming\Mozilla\Firefox\Profiles\0me8w9ks.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-03-28]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-05] (Autodesk Inc.)
S2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-08-29] (ASUS)
S2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [File not signed]
S2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider) [File not signed]
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [31192 2014-02-07] (Autodesk, Inc.)
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2558072 2015-06-19] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKService.exe [966776 2015-06-16] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G DATA\InternetSecurity\AVK\AVKWCtlx64.exe [3711712 2015-06-16] (G Data Software AG)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [247768 2013-01-15] (CyberLink)
R3 GDFwSvc; C:\Program Files (x86)\G DATA\InternetSecurity\Firewall\GDFwSvcx64.exe [3202368 2015-06-19] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789624 2015-06-16] (G Data Software AG)
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
S2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-06-23] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-06-23] (Intel Corporation)
S2 mitsijm2015; D:\Autodesk\Inventor 2015\Moldflow\bin\mitsijm.exe [968480 2013-10-12] (Autodesk, Inc.)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)
S3 Origin Client Service; D:\Sims4\Origin\OriginClientService.exe [2004488 2015-07-22] (Electronic Arts)
S2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-07] (Atheros) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70416 2013-09-23] (ASUS Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-04-03] (Disc Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [158720 2015-07-13] (G Data Software AG)
S0 GDElam; C:\Windows\System32\DRIVERS\GDElam.sys [117904 2015-01-08] (G Data Software AG)
R3 GDKBB; C:\WINDOWS\system32\drivers\GDKBB64.sys [27648 2015-07-07] (G Data Software AG)
R3 GDKBFlt; C:\WINDOWS\system32\drivers\GDKBFlt64.sys [20992 2015-07-07] (G Data Software AG)
R1 GDMnIcpt; C:\WINDOWS\system32\drivers\MiniIcpt.sys [230912 2015-07-13] (G Data Software AG)
R3 GDPkIcpt; C:\WINDOWS\system32\drivers\PktIcpt.sys [91648 2015-07-13] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [68608 2015-07-18] (G Data Software AG)
R1 GRD; C:\WINDOWS\system32\drivers\GRD.sys [106272 2015-07-19] (G Data Software)
R1 HookCentre; C:\WINDOWS\system32\drivers\HookCentre.sys [125952 2015-07-13] (G Data Software AG)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2013-08-29] (Windows (R) Win 7 DDK provider)
S3 usbrndis6; C:\Windows\system32\DRIVERS\usb80236.sys [20992 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-23 13:02 - 2015-07-23 13:02 - 00020476 _____ C:\Users\Micha_000\Downloads\FRST.txt
2015-07-23 12:58 - 2015-07-23 13:02 - 00000000 ____D C:\FRST
2015-07-23 12:57 - 2015-07-23 12:57 - 02135552 _____ (Farbar) C:\Users\Micha_000\Downloads\FRST64.exe
2015-07-23 12:56 - 2015-07-23 12:56 - 00050477 _____ C:\Users\Micha_000\Downloads\Defogger.exe
2015-07-23 12:56 - 2015-07-23 12:56 - 00000550 _____ C:\Users\Micha_000\Downloads\defogger_disable.log
2015-07-23 12:56 - 2015-07-23 12:56 - 00000168 _____ C:\Users\Micha_000\defogger_reenable
2015-07-23 12:39 - 2015-07-23 12:39 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Downloads\JRT-751.exe
2015-07-23 07:28 - 2015-07-23 07:28 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-22 23:39 - 2015-07-14 16:14 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-07-22 23:39 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-07-22 23:39 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-07-22 23:39 - 2015-07-14 16:13 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-07-22 23:16 - 2015-07-22 23:16 - 00003518 _____ C:\WINDOWS\System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8
2015-07-22 23:14 - 2015-07-22 23:14 - 00074000 _____ (BitDefender SRL) C:\WINDOWS\system32\bdsandboxuiskin32.dll
2015-07-22 23:13 - 2015-07-22 23:13 - 00000385 _____ C:\WINDOWS\system32\user_gensett.xml
2015-07-22 23:13 - 2015-07-22 23:13 - 00000385 _____ C:\Users\Micha_000\AppData\Roaminguser_gensett.xml
2015-07-22 23:12 - 2015-07-22 23:12 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avchv_01009.Wdf
2015-07-22 23:12 - 2015-07-22 23:12 - 00000000 ____D C:\ProgramData\BDLogging
2015-07-22 23:12 - 2015-01-09 11:44 - 00074000 _____ (BitDefender SRL) C:\WINDOWS\SysWOW64\bdsandboxuiskin32.dll
2015-07-22 23:12 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\capicom.dll
2015-07-22 23:05 - 2015-07-23 12:31 - 00000000 ____D C:\Program Files\Bitdefender
2015-07-22 23:05 - 2015-07-23 12:30 - 00000000 ____D C:\Program Files\Common Files\Bitdefender
2015-07-22 23:05 - 2015-07-22 23:05 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Micha_000\Downloads\SpyHunter-Installer(1).exe
2015-07-22 23:05 - 2015-07-22 23:05 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\QuickScan
2015-07-22 23:05 - 2015-01-09 11:44 - 00084848 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUISkin.dll
2015-07-22 23:05 - 2015-01-09 11:44 - 00033360 _____ (BitDefender SRL) C:\WINDOWS\system32\BDSandBoxUH.dll
2015-07-22 22:55 - 2015-07-22 22:55 - 00000184 _____ C:\Users\Micha_000\Desktop\G DATA Protokoll ID 1777.txt
2015-07-22 22:40 - 2015-07-22 22:40 - 02868840 _____ C:\Users\Micha_000\Downloads\bitdefender_antivirus.exe
2015-07-22 22:29 - 2015-07-22 22:29 - 00001188 _____ C:\WINDOWS\SysWOW64\ServiceConfig.xml
2015-07-22 22:08 - 2015-07-22 23:16 - 00000000 ____D C:\Program Files\Common Files\AV
2015-07-22 22:08 - 2015-07-22 22:08 - 00000000 ____D C:\ProgramData\VIPRE
2015-07-22 21:37 - 2015-07-22 22:44 - 00000000 ____D C:\ProgramData\STOPzilla!
2015-07-22 21:37 - 2015-07-22 21:37 - 00000000 ____D C:\Program Files (x86)\iS3
2015-07-22 21:34 - 2015-07-22 21:34 - 02042328 _____ (iS3, Inc.) C:\Users\Micha_000\Downloads\STOPzillaPRO_Downloader.exe
2015-07-22 21:33 - 2015-07-22 21:33 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Micha_000\Downloads\SpyHunter-Installer.exe
2015-07-22 13:20 - 2015-07-22 13:29 - 00009522 _____ C:\Users\Micha_000\Desktop\Sicherheitseinweisung_Zeit.odt
2015-07-19 20:01 - 2015-07-19 20:01 - 00012872 _____ (SurfRight B.V.) C:\WINDOWS\system32\bootdelete.exe
2015-07-19 19:48 - 2015-07-19 20:02 - 00000000 ____D C:\ProgramData\HitmanPro
2015-07-19 19:40 - 2015-07-19 19:40 - 11032736 _____ (SurfRight B.V.) C:\Users\Micha_000\Downloads\HitmanPro_x64.exe
2015-07-19 19:27 - 2015-07-19 19:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-19 19:20 - 2015-07-19 19:26 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Micha_000\Downloads\mbam-setup-2.1.8.1057.exe
2015-07-19 19:07 - 2015-07-19 19:07 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Micha_000\Downloads\JRT.exe
2015-07-19 18:59 - 2015-07-19 19:02 - 00000000 ____D C:\AdwCleaner
2015-07-19 18:59 - 2015-07-19 18:59 - 02248704 _____ C:\Users\Micha_000\Downloads\adwcleaner_4.208.exe
2015-07-19 18:50 - 2015-07-19 18:50 - 00562784 _____ (Oracle Corporation) C:\Users\Micha_000\Downloads\jxpiinstall.exe
2015-07-19 17:45 - 2015-07-19 17:45 - 00106272 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GRD.sys
2015-07-19 17:45 - 2015-07-19 17:45 - 00018160 _____ (G Data Software) C:\WINDOWS\system32\Drivers\GdPhyMem.sys
2015-07-18 16:08 - 2015-07-18 16:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY
2015-07-18 15:50 - 2015-07-18 15:50 - 00283050 _____ C:\Users\Micha_000\Downloads\RocketLeague-FLT - ThePirateBay.TO.torrent
2015-07-16 21:17 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-07-16 21:17 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2015-07-16 21:16 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\WINDOWS\system32\GeofenceMonitorService.dll
2015-07-16 21:16 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GeofenceMonitorService.dll
2015-07-16 21:15 - 2015-05-11 20:17 - 01201664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2015-07-16 21:15 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-07-16 21:15 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2015-07-16 21:15 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-07-16 21:15 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2015-07-16 21:14 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2015-07-16 21:14 - 2014-11-04 21:25 - 00059712 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdclass.sys
2015-07-16 21:14 - 2014-11-04 21:25 - 00051008 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouclass.sys
2015-07-16 21:14 - 2014-11-04 08:55 - 00026112 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sermouse.sys
2015-07-16 21:14 - 2014-11-04 08:54 - 00108544 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\i8042prt.sys
2015-07-16 21:14 - 2014-11-04 08:54 - 00032256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2015-07-16 21:14 - 2014-11-04 08:54 - 00030208 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2015-07-16 21:13 - 2015-06-30 00:43 - 00026288 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2015-07-16 21:13 - 2015-06-29 17:07 - 01145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-07-16 21:13 - 2015-06-29 17:07 - 01084928 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-07-16 21:13 - 2015-06-29 17:07 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-07-16 21:13 - 2015-06-29 17:07 - 00433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-07-16 21:13 - 2015-06-29 17:07 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-07-16 21:13 - 2015-06-27 01:21 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-07-16 21:13 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-07-16 21:12 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-16 21:12 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-07-16 21:12 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-07-16 21:12 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-07-16 09:43 - 2015-07-09 21:51 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-07-16 09:43 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-07-16 09:43 - 2015-07-09 18:03 - 03701760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-07-16 09:43 - 2015-07-09 17:54 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-07-16 09:43 - 2015-07-09 17:53 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-07-16 09:43 - 2015-07-09 17:50 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-07-16 09:43 - 2015-07-09 17:50 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-07-16 09:43 - 2015-07-09 17:48 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-07-16 09:43 - 2015-07-09 17:46 - 02229248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-07-16 09:43 - 2015-07-09 17:38 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-07-16 09:43 - 2015-07-09 17:37 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-07-16 09:43 - 2015-07-09 17:35 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-07-16 09:43 - 2015-07-09 17:34 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-07-16 09:43 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-07-16 09:43 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-07-16 09:43 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-07-16 09:42 - 2015-06-25 04:31 - 04177920 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-07-16 09:41 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-07-16 09:41 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-07-16 09:41 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2015-07-16 09:40 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2015-07-16 09:40 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-07-16 09:40 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2015-07-16 09:40 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2015-07-16 09:40 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2015-07-16 09:40 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-07-16 09:40 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-07-16 09:40 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-07-16 09:40 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-07-16 09:40 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-07-16 09:39 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2015-07-16 09:39 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-07-16 09:39 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-07-16 09:38 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2015-07-16 09:38 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2015-07-16 09:38 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2015-07-16 09:38 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2015-07-16 09:38 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-07-16 09:38 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-07-16 09:36 - 2015-07-02 00:08 - 05923840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-07-16 09:36 - 2015-07-01 23:14 - 04520448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-07-16 09:34 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-07-16 09:34 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-07-16 09:34 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-07-16 09:34 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-07-16 09:34 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-07-16 09:34 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-07-16 09:34 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-07-16 09:34 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-07-16 09:32 - 2015-06-16 00:39 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-07-16 09:32 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-07-16 09:32 - 2015-06-16 00:26 - 00633856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll
2015-07-16 09:32 - 2015-06-16 00:24 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-07-16 09:32 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2015-07-16 09:32 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2015-07-16 09:32 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-07-16 09:32 - 2015-06-15 23:56 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-07-16 09:32 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-07-16 09:32 - 2015-06-15 23:49 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-07-16 09:32 - 2015-06-15 23:41 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-07-16 09:32 - 2015-06-15 23:38 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-07-16 09:32 - 2015-06-15 23:36 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-07-16 09:32 - 2015-06-15 23:17 - 02880000 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-07-16 09:32 - 2015-06-15 23:16 - 02427392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-07-16 09:32 - 2015-06-15 23:15 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-07-16 09:32 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-07-16 09:32 - 2015-06-15 23:04 - 00478208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll
2015-07-16 09:32 - 2015-06-15 23:03 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-07-16 09:32 - 2015-06-15 22:52 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-07-16 09:32 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2015-07-16 09:32 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2015-07-16 09:32 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-07-16 09:32 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-07-16 09:32 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-07-16 09:32 - 2015-06-15 22:37 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-07-16 09:32 - 2015-06-15 22:32 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-07-16 09:32 - 2015-06-15 22:31 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-07-16 09:32 - 2015-06-15 22:30 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-07-16 09:32 - 2015-06-15 22:30 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-07-16 09:32 - 2015-06-15 22:17 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2015-07-16 09:32 - 2015-06-15 22:07 - 01951232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-07-16 09:32 - 2015-06-15 22:02 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-07-15 21:20 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-07-15 21:20 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-07-15 21:20 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcpl.dll
2015-07-15 21:19 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2015-07-15 21:19 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2015-07-15 21:19 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2015-07-15 21:19 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2015-07-15 21:19 - 2015-05-02 01:33 - 00410739 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-07-15 21:19 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\SysWOW64\locale.nls
2015-07-15 21:19 - 2015-04-28 15:13 - 00513480 _____ C:\WINDOWS\system32\locale.nls
2015-07-15 21:19 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-07-15 21:19 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-07-15 21:18 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2015-07-15 21:18 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2015-07-15 12:08 - 2015-07-23 12:28 - 00003474 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1
2015-07-13 13:21 - 2015-07-18 16:07 - 00007678 _____ C:\WINDOWS\DPINST.LOG
2015-07-12 19:56 - 2015-07-12 19:56 - 00000000 _____ C:\Users\Micha_000\AppData\Local\{D2C6117B-095A-4BAB-B770-7A033EDC2AD3}
2015-07-12 19:53 - 2015-07-23 12:32 - 00003533 _____ C:\WINDOWS\setupact.log
2015-07-12 19:53 - 2015-07-12 19:53 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-07-12 19:52 - 2015-07-23 12:31 - 00011848 _____ C:\WINDOWS\PFRO.log
2015-07-10 14:20 - 2015-07-10 14:20 - 00003694 _____ C:\WINDOWS\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2015-07-09 14:49 - 2015-07-09 14:49 - 00002080 _____ C:\Users\Micha_000\Desktop\Minecraft Launcher - Verknüpfung.lnk
2015-07-07 14:28 - 2015-07-18 16:08 - 00001960 _____ C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk
2015-07-07 14:28 - 2015-07-13 13:21 - 00091648 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\PktIcpt.sys
2015-07-07 14:28 - 2015-07-07 14:28 - 00027648 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDKBB64.sys
2015-07-07 14:28 - 2015-07-07 14:28 - 00020992 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDKBFlt64.sys
2015-07-07 14:27 - 2015-07-23 12:31 - 00000000 ____D C:\WINDOWS\ELAMBKUP
2015-07-07 14:27 - 2015-07-18 16:08 - 00068608 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\gdwfpcd64.sys
2015-07-07 14:27 - 2015-07-13 13:21 - 00230912 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\MiniIcpt.sys
2015-07-07 14:27 - 2015-07-13 13:21 - 00158720 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\GDBehave.sys
2015-07-07 14:27 - 2015-07-13 13:21 - 00125952 _____ (G Data Software AG) C:\WINDOWS\system32\Drivers\HookCentre.sys
2015-07-07 13:59 - 2015-07-07 14:07 - 226997104 _____ (G Data Software AG) C:\Users\Micha_000\Downloads\INT_R_BASE_IS(1).exe
2015-07-07 13:37 - 2015-07-17 10:10 - 00002305 _____ C:\Users\Micha_000\Desktop\Autodesk Inventor 2015 jetzt installieren.lnk
2015-07-07 13:33 - 2015-07-07 13:33 - 00000870 _____ C:\Users\Public\Desktop\Autodesk Vault Basic 2015.lnk
2015-07-07 13:33 - 2015-07-07 13:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk Data Management
2015-07-07 13:26 - 2015-07-07 13:26 - 00001688 _____ C:\Users\Public\Desktop\Autodesk ReCap.lnk
2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk ReCap
2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\ProgramData\FARO
2015-07-07 13:26 - 2015-07-07 13:26 - 00000000 ____D C:\Program Files (x86)\Microsoft WSE
2015-07-07 13:15 - 2015-07-07 13:15 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Autodesk,_Inc
2015-07-07 13:09 - 2015-07-07 13:33 - 00000000 ____D C:\Users\Micha_000\Documents\Inventor
2015-07-07 12:50 - 2015-07-07 12:50 - 00001792 _____ C:\Users\Public\Desktop\Autodesk Inventor Professional 2015.lnk
2015-07-07 12:50 - 2015-07-07 12:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk Inventor 2015
2015-07-07 12:27 - 2015-07-07 12:27 - 00002157 _____ C:\Users\Public\Desktop\Autodesk Design Review 2013.lnk
2015-07-07 12:24 - 2015-07-07 12:24 - 00002223 _____ C:\Users\Public\Desktop\DWG TrueView 2015 - English.lnk
2015-07-07 12:24 - 2015-07-07 12:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DWG TrueView 2015 - English
2015-07-07 11:40 - 2015-07-07 13:41 - 07533018 _____ C:\Users\Micha_000\Downloads\Autodesk_Inventor_2015_R1_German_Win_64bit_wi_de-DE_Setup.exe
2015-07-07 11:40 - 2015-07-07 11:40 - 00337832 _____ (Autodesk Inc.) C:\Users\Micha_000\Downloads\Autodesk_Inventor_2015_R1_German_Win_64bit_wi_de-DE_Setup_webinstall.exe
2015-07-06 23:36 - 2015-07-06 23:36 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft
2015-07-06 23:35 - 2015-07-09 14:58 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\.minecraft
2015-07-06 23:28 - 2015-04-14 12:24 - 00311200 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2015-07-06 23:28 - 2015-04-14 12:24 - 00188832 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2015-07-06 23:28 - 2015-04-14 12:24 - 00188320 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2015-07-06 22:49 - 2015-07-06 22:49 - 00000000 ____D C:\Users\Micha_000\Downloads\Album Wochenende Rapper
2015-07-06 22:44 - 2015-07-06 22:44 - 00000098 _____ C:\Users\Micha_000\Downloads\17a4fefc-a9cf-4e34-8dd5-588aba6f55b7.htm
2015-07-06 22:42 - 2015-07-06 22:46 - 00000000 ____D C:\Users\Micha_000\Downloads\Minecraft 1.8 by TeamExtremeMc.com
2015-07-06 22:38 - 2015-07-16 20:07 - 00000000 ____D C:\Users\Micha_000\Desktop\HiWi_Dokumente
2015-07-06 14:05 - 2015-07-06 14:24 - 60149697 _____ C:\Users\Micha_000\Downloads\WK13AWR.rar.part
2015-07-03 13:36 - 2015-07-03 13:36 - 50502393 _____ C:\Users\Micha_000\Downloads\Weekend - FCKWKND (16BARS.TV PREMIERE).mp4
2015-07-03 11:16 - 2015-07-03 11:16 - 00001121 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-07-03 11:13 - 2015-07-03 11:14 - 00242928 _____ C:\Users\Micha_000\Downloads\Firefox Setup Stub 39.0.exe
2015-06-30 17:12 - 2015-07-23 12:24 - 00001252 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA.job
2015-06-30 17:12 - 2015-07-18 14:23 - 00001200 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core.job
2015-06-30 17:12 - 2015-07-18 14:18 - 00004206 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002UA
2015-06-30 17:12 - 2015-07-18 14:18 - 00003826 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-995147136-1539619246-4169388671-1002Core
2015-06-30 17:12 - 2015-06-30 17:12 - 00122759 _____ C:\Users\Micha_000\Downloads\A0-ME-mit-Hilfen_01.dwt
2015-06-30 17:12 - 2015-06-30 17:12 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Dropbox
2015-06-30 17:12 - 2015-06-30 17:12 - 00000000 ____D C:\ProgramData\Dropbox
2015-06-30 16:04 - 2015-06-30 16:11 - 00000000 ____D C:\Users\Micha_000\Desktop\Nina Urlaub
2015-06-24 13:10 - 2015-06-24 13:10 - 00009336 ____N (G DATA Software AG) C:\WINDOWS\SysWOW64\GdScrSv.de.dll
2015-06-24 12:06 - 2015-06-24 12:06 - 02230392 ____N (G Data Software AG) C:\WINDOWS\SysWOW64\GdScrSv.scr
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-23 13:00 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\sru
2015-07-23 12:56 - 2014-06-10 17:20 - 00000000 ____D C:\Users\Micha_000
2015-07-23 12:51 - 2014-06-10 17:13 - 01081157 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-23 12:46 - 2015-01-05 17:43 - 00000000 ____D C:\Users\Micha_000\Desktop\Studium
2015-07-23 12:45 - 2014-03-28 14:24 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-07-23 12:44 - 2014-03-28 22:04 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-995147136-1539619246-4169388671-1002
2015-07-23 12:40 - 2014-06-30 18:47 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-23 12:34 - 2014-06-10 17:50 - 00000000 ___DO C:\Users\Micha_000\OneDrive
2015-07-23 12:32 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-23 12:31 - 2013-08-22 15:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-07-23 12:28 - 2015-05-26 12:02 - 00003464 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2
2015-07-23 12:22 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2015-07-23 12:21 - 2014-06-30 18:47 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-23 07:29 - 2014-03-29 13:29 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Dropbox
2015-07-22 23:43 - 2013-08-22 16:44 - 00489576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-07-22 23:39 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-07-22 22:53 - 2014-11-02 18:31 - 00000000 ____D C:\ProgramData\Origin
2015-07-22 22:50 - 2014-11-02 18:57 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Origin
2015-07-22 22:50 - 2014-11-02 18:35 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Origin
2015-07-22 21:34 - 2015-03-06 23:21 - 00000000 ____D C:\Users\Micha_000\Downloads\RollerCoaster Tycoon 3 Platinum
2015-07-21 11:53 - 2015-05-20 12:43 - 00000987 _____ C:\Users\Micha_000\Documents\plot.log
2015-07-21 11:53 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-07-19 23:30 - 2014-07-07 09:13 - 00000000 ____D C:\Users\Micha_000\AppData\Local\G DATA
2015-07-19 23:29 - 2014-04-15 17:53 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\BitTorrent
2015-07-19 20:09 - 2014-03-29 13:34 - 00000000 ___RD C:\Users\Micha_000\Dropbox
2015-07-18 16:08 - 2014-04-28 19:37 - 00000000 ____D C:\ProgramData\G Data
2015-07-17 10:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2015-07-17 10:07 - 2015-04-13 16:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-07-17 09:53 - 2015-04-13 16:13 - 00000000 ____D C:\Program Files\Autodesk
2015-07-17 09:53 - 2015-04-13 16:04 - 00000000 ____D C:\Program Files (x86)\Autodesk
2015-07-17 08:51 - 2015-04-13 15:55 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Akamai
2015-07-17 08:44 - 2015-04-19 09:03 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-07-17 08:44 - 2015-03-17 20:44 - 00000000 ___SD C:\WINDOWS\system32\CompatTel
2015-07-17 08:44 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-07-17 08:44 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\WinStore
2015-07-16 14:20 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-07-16 12:53 - 2015-01-01 23:37 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-07-16 12:53 - 2014-04-04 15:28 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-07-16 10:15 - 2014-06-30 18:47 - 00004102 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-16 10:15 - 2014-06-30 18:47 - 00003866 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-15 21:23 - 2014-03-29 22:39 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-14 17:57 - 2014-07-03 10:02 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Adobe
2015-07-14 17:55 - 2014-03-28 14:24 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-07-14 12:41 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-07-14 11:43 - 2014-03-18 12:03 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-14 11:43 - 2014-03-18 11:25 - 00765582 _____ C:\WINDOWS\system32\perfh007.dat
2015-07-14 11:43 - 2014-03-18 11:25 - 00159366 _____ C:\WINDOWS\system32\perfc007.dat
2015-07-13 23:31 - 2015-04-10 16:20 - 00000000 ___SD C:\WINDOWS\SysWOW64\GWX
2015-07-13 23:31 - 2015-04-10 16:20 - 00000000 ___SD C:\WINDOWS\system32\GWX
2015-07-13 23:10 - 2015-03-17 20:52 - 00792568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-07-13 23:10 - 2015-03-17 20:52 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-10 14:27 - 2014-09-04 21:01 - 00000000 ____D C:\Program Files (x86)\Steam
2015-07-10 14:27 - 2014-04-15 18:05 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2015-07-10 14:24 - 2014-06-10 18:09 - 00000000 ___DC C:\WINDOWS\Panther
2015-07-10 14:24 - 2014-06-10 17:34 - 00000000 ____D C:\WINDOWS\Minidump
2015-07-10 14:24 - 2014-03-28 17:09 - 00000000 ____D C:\Users\Micha_000\AppData\Local\CrashDumps
2015-07-10 11:36 - 2015-04-13 15:57 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Autodesk
2015-07-07 14:27 - 2014-07-07 08:47 - 00001755 _____ C:\Users\Micha_000\AppData\Roaming\gdscan.log
2015-07-07 14:25 - 2014-04-28 19:37 - 00000000 ____D C:\Program Files (x86)\G Data
2015-07-07 13:37 - 2015-04-13 16:26 - 00000000 ____D C:\Users\Micha_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-07-07 13:33 - 2015-04-13 16:13 - 00000000 ____D C:\Users\Public\Documents\Autodesk
2015-07-07 13:33 - 2015-04-13 15:57 - 00000000 ____D C:\ProgramData\Autodesk
2015-07-07 13:09 - 2015-04-13 16:20 - 00000000 ____D C:\Users\Micha_000\AppData\Local\Autodesk
2015-07-07 12:49 - 2015-04-13 16:13 - 00000000 ____D C:\Program Files\Common Files\Autodesk Shared
2015-07-07 12:00 - 2014-04-19 14:00 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-07 12:00 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-07-07 11:41 - 2015-04-13 15:54 - 00000000 ____D C:\Autodesk
2015-07-06 23:27 - 2015-04-14 12:24 - 00000000 ____D C:\Program Files\Java
2015-07-03 11:16 - 2015-06-02 19:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-03 11:16 - 2014-03-28 22:08 - 00001133 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-07-03 11:15 - 2014-03-28 22:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-03 08:43 - 2014-03-29 22:39 - 130333168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Files in the root of some directories =======
2014-07-07 08:47 - 2014-07-07 08:47 - 0000000 _____ () C:\Users\Micha_000\AppData\Roaming\gdfw.log
2014-07-07 08:47 - 2015-07-07 14:27 - 0001755 _____ () C:\Users\Micha_000\AppData\Roaming\gdscan.log
2014-07-17 11:38 - 2002-09-10 02:00 - 0351048 _____ () C:\Users\Micha_000\AppData\Roaming\omch.dll
2015-01-11 20:19 - 2015-01-11 20:19 - 0003400 _____ () C:\Users\Micha_000\AppData\Local\recently-used.xbel
2014-03-29 10:40 - 2014-03-29 10:40 - 0007609 _____ () C:\Users\Micha_000\AppData\Local\Resmon.ResmonCfg
2015-07-12 19:56 - 2015-07-12 19:56 - 0000000 _____ () C:\Users\Micha_000\AppData\Local\{D2C6117B-095A-4BAB-B770-7A033EDC2AD3}
2014-06-10 17:12 - 2014-06-10 17:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-04-13 16:18 - 2015-04-13 16:18 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2013-04-26 01:15 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2013-04-26 01:15 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2013-04-26 01:15 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
2013-11-21 20:46 - 2013-11-21 20:46 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2013-11-21 20:42 - 2013-11-21 20:44 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
2013-11-21 20:44 - 2013-11-21 20:45 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log
2013-11-21 20:41 - 2013-11-21 20:42 - 0000110 _____ () C:\ProgramData\{E3739848-5329-48E3-8D28-5BBD6E8BE384}.log
Files to move or delete:
====================
C:\ProgramData\SetStretch.VBS
Some files in TEMP:
====================
C:\Users\Micha_000\AppData\Local\Temp\AcDeltree.exe
C:\Users\Micha_000\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpihefjg.dll
C:\Users\Micha_000\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Micha_000\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Micha_000\AppData\Local\Temp\HitmanPro.exe
C:\Users\Micha_000\AppData\Local\Temp\Quarantine.exe
C:\Users\Micha_000\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Micha_000\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Micha_000\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-07-23 09:02
==================== End of log ============================
Code:
ATTFilter Virenprüfung von Web-Inhalten
Adresse: hxxp://i.mgicinjs.info/mgicin/javascript.js
Junkware (PUP): Script.Adware.DealPly.G (Engine B)
Status: Der Zugriff wurde verweigert.
 Hoffe hier kann mir jemand helfen, im Vorraus schonmal:  PS.: Ich hoffe, ich habe beim Posten keine Forenregelungen verletzt, bin neu hier! |
| Themen zu G Data meldet Junkware (PUP): Script.Adware.DealPly.G (Engine B) |
| akamai, avast, browser, computer, dealply, defender, desktop, explorer, firefox, flash player, ftp, g data, hängen, junkware, mozilla, programm, realtek, registry, rundll, scan, security, services.exe, software, svchost.exe, system, virus, windows, wlan |
Baum-Darstellung