|
Win7 Problem beim Starten von C:\PROGRA~3\aco2d.dat Beim Start von Win7 wird ein Fenster mit folgendem Test geöffnet. Probleme beim Stat von C:\PROGRA~3\aco2d.dat Das angegebene Modul wurde nicht gefunden. Wenn das Fenster geschlossen wird scheint alles einwandfrei zu funktionieren bzw. findet Kapersky Antivirus kein Problem. Könnt es sich hier um einen Trojaner handeln? |
hi, Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
|
FRST Logfile: FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-07-2013--- --- --- ich habe das flasche Log File geschickt - hier das richtige Ran by Speckmayr Trixi (administrator) on 25-07-2013 14:00:18 Running from C:\Users\Speckmayr Trixi\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Eastman Kodak Company) C:\Program Files (x86)\Kodak\KODAK Share Button App\Listener.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-6 Engine\SixEngine.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\ProgramData\BrowserProtect\2.6.1040.25\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe (Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe () C:\ProgramData\BrowserProtect\2.6.1040.25\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe (DeviceVM, Inc.) C:\ASUS.SYS\config\DVMExportService.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe () C:\Windows\system32\dmwu.exe () C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe (VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\system32\msiexec.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe ((C) Michael Schiel) C:\Program Files (x86)\TrayBackup\traybackup.exe (Microsoft Corporation) C:\Users\Speckmayr Trixi\Encarta 2007 - Enzyklopaedie DVD\EDICT.EXE (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (PowerISO Computing, Inc.) C:\Program Files (x86)\POWERISO\PWRISOVM.EXE (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (mquadr.at software engineering and consulting GmbH, web: mquadr.at :: Self-Service Connectivity Software for Internet Access Providers, mail: office@mquadr.at) C:\Program Files (x86)\A1\A1 Diagnose\A1Diagnose.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe () C:\Windows\SysWOW64\jmdp\stij.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3089688 2013-06-27] (Logitech, Inc.) HKLM\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5675184 2013-05-10] (VIA) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] C:\$Recycle.Bin\S-1-5-18\$0ac8a865ff039bb022131499227ce2c0\n. ATTENTION! ====> ZeroAccess? HKCU\...\Run: [TrayBackup] - C:\Program Files (x86)\TrayBackup\traybackup.exe [354304 2009-01-12] ((C) Michael Schiel) HKCU\...\Run: [E07DXLRD_40017688] - C:\Users\Speckmayr Trixi\Encarta 2007 - Enzyklopaedie DVD\EDICT.EXE [351000 2006-06-13] (Microsoft Corporation) HKCU\...\Run: [KGShareApp] - C:\Program Files (x86)\Kodak\KODAK Share Button App\KGShare_App.exe [394752 2012-02-03] (Eastman Kodak Company) HKCU\...\Winlogon: [Shell] explorer.exe, <==== ATTENTION MountPoints2: {335a3c9f-0906-11e0-b87b-9d3a5bec9a55} - K:\LaunchU3.exe -a HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5675184 2013-05-10] (VIA) HKLM-x32\...\Run: [CLMLServer] - "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [103720 2009-06-03] (CyberLink) HKLM-x32\...\Run: [UpdateP2GoShortCut] - "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [UpdatePDRShortCut] - "C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\7.0" [222504 2008-01-04] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl9] - "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [87336 2009-04-27] (CyberLink Corp.) HKLM-x32\...\Run: [PDVD9LanguageShortcut] - "C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [50472 2009-04-27] (CyberLink Corp.) HKLM-x32\...\Run: [UpdatePPShortCut] - "C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerProducer" UpdateWithCreateOnce "Software\CyberLink\PowerProducer\5.0" [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [UpdatePSTShortCut] - "C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" [210216 2009-06-19] (CyberLink Corp.) HKLM-x32\...\Run: [NUSB3MON] - "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [115048 2011-09-16] (Renesas Electronics Corporation) HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] () HKLM-x32\...\Run: [PWRISOVM.EXE] - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2010-04-12] (PowerISO Computing, Inc.) HKLM-x32\...\Run: [SweetIM] - C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-05-29] (SweetIM Technologies Ltd.) HKLM-x32\...\Run: [Sweetpacks Communicator] - C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [231768 2012-08-15] (SweetIM Technologies Ltd.) HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [A1Diagnose] - C:\Program Files (x86)\A1\A1 Diagnose\A1Diagnose.exe /auto [20678872 2012-08-03] (mquadr.at software engineering and consulting GmbH, web: mquadr.at :: Self-Service Connectivity Software for Internet Access Providers, mail: office@mquadr.at) HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-05-31] (Apple Inc.) HKLM-x32\...\Run: [AVP] - "C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe" [356968 2012-12-20] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [Driver Genius] - [x] HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642656 2013-03-28] (Advanced Micro Devices, Inc.) AppInit_DLLs-x32: c:\progra~3\browse~1\261040~1.25\{c16c1~1\browse~1.dll [2202728 2012-12-25] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk ShortcutTarget: msconfig.lnk -> C:\PROGRA~3\aco2d.dat (No File) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={3AB2A4EE-FA57-11E1-8FAB-485B3961C602} SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={3AB2A4EE-FA57-11E1-8FAB-485B3961C602} SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - URL hxxp://at.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_at&p={searchTerms} SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=117423&tt=5212_2&babsrc=SP_ss&mntrId=18d078e6000000000000485b3961c602 SearchScopes: HKCU - {26D2674D-39BA-4E13-A24F-99099058F26D} URL = hxxp://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms} SearchScopes: HKCU - {76B64890-ADC3-46B1-B3B3-951AF90B9CF2} URL = SearchScopes: HKCU - {88142ECB-FEAE-46A2-99C6-98FF6304B6A5} URL = SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={3AB2A4EE-FA57-11E1-8FAB-485B3961C602} BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Claro LTD Helper Object - {000F18F2-09EB-4A59-82B2-5AE4184C39C3} - C:\Program Files (x86)\Claro LTD\claro\1.8.8.5\bh\claro.dll (Montera Technologeis LTD) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM-x32 - Claro LTD Toolbar - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} - C:\Program Files (x86)\Claro LTD\claro\1.8.8.5\claroTlbr.dll (Montera Technologeis LTD) Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: HKLM-x32 {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} https://safe.tele2.com/inc/AccountHelper.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: linkscanner - No CLSID Value - Handler-x32: linkscanner - No CLSID Value - Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx CHR HKLM-x32\...\Chrome\Extension: [dcillohgikpecbmgioknapdpcjofaafl] - C:\Users\Speckmayr Trixi\AppData\Roaming\Claro\claro.crx CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files (x86)\Yontoo\YontooLayers.crx CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx CHR HKLM-x32\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\BrowserProtect\2.6.1040.25\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx ==================== Services (Whitelisted) ================= R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [90112 2009-08-19] (ASUSTeK Computer Inc.) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO) R2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1040.25\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2547816 2012-12-25] () R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch) R2 DvmMDES; C:\ASUS.SYS\config\DVMExportService.exe [319488 2009-07-17] (DeviceVM, Inc.) R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1447728 2013-05-21] () R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [247152 2009-01-21] () S2 SYSHOST32; C:\Windows\Installer\{31BFA27E-4CBD-3A60-B8F9-3C6398983E4D}\syshost.exe [0 2012-08-28] () R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-11] (VIA Technologies, Inc.) ==================== Drivers (Whitelisted) ==================== R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] () R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] () R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-07-15] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-15] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-07-15] (Kaspersky Lab ZAO) R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [15416 2009-07-16] () S0 mv91xx; system32\DRIVERS\mv91xx.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-25 13:51 - 2013-07-25 13:51 - 00001248 _____ C:\Users\Public\Desktop\HD VDeck.lnk 2013-07-25 13:51 - 2013-07-25 13:51 - 00000000 ____D C:\Windows\system32\SRSLabs 2013-07-25 13:51 - 2013-07-25 13:51 - 00000000 ____D C:\Program Files\VIA 2013-07-25 13:47 - 2013-04-10 11:09 - 00849992 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2013-07-25 13:47 - 2013-04-10 11:09 - 00108104 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2013-07-25 13:47 - 2013-04-10 11:09 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\2C0A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0C0A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0C04 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0816 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0804 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0424 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041F 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041E 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041D 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041B 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0419 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0416 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0415 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0414 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0413 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0412 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0411 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0410 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040E 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040D 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040C 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040B 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0409 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0408 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0406 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0405 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0404 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0401 2013-07-25 13:45 - 2012-06-05 13:45 - 00237968 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtHDMIVX.sys 2013-07-25 13:45 - 2012-05-17 11:29 - 07163744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64H.dll 2013-07-25 13:45 - 2012-05-17 11:29 - 00433504 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64H.dll 2013-07-25 13:45 - 2012-05-17 11:29 - 00141152 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64H.dll 2013-07-25 13:45 - 2012-05-17 11:29 - 00123744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64H.dll 2013-07-25 13:45 - 2012-05-17 11:29 - 00074592 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64H.dll 2013-07-25 13:45 - 2011-12-02 14:20 - 03746408 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkHDM64.dll 2013-07-25 13:45 - 2011-09-27 14:04 - 02526824 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RHDMEx64.dll 2013-07-25 13:45 - 2011-07-06 13:27 - 00092264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RHCoInst64.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00372056 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64H.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RH3DHT64.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RH3DAA64.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64H.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00097624 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64H.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64H.dll 2013-07-25 13:44 - 2013-07-25 13:44 - 00013142 _____ C:\Windows\LDPINST.LOG 2013-07-25 13:44 - 2013-07-25 13:44 - 00000383 _____ C:\Windows\LkmdfCoInst.log 2013-07-25 13:44 - 2013-07-25 13:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\Logishrd 2013-07-25 13:43 - 2013-07-25 13:43 - 00000000 ____D C:\Program Files\Logitech 2013-07-25 13:42 - 2013-07-25 13:42 - 00000000 ____D C:\ProgramData\ATI 2013-07-25 13:42 - 2013-07-25 13:42 - 00000000 ____D C:\ProgramData\AMD 2013-07-25 13:41 - 2013-07-25 13:41 - 00000000 ____D C:\Program Files (x86)\AMD AVT 2013-07-25 13:38 - 2013-07-25 13:38 - 00000000 ____D C:\AMD 2013-07-25 13:35 - 2010-09-07 17:40 - 01976920 _____ (JMicron Technology Corp.) C:\Windows\SysWOW64\xRaidSetup.exe 2013-07-25 13:35 - 2010-09-07 17:40 - 00162392 _____ (JMicron Technology Corp.) C:\Windows\SysWOW64\xRaidAPI.dll 2013-07-25 13:35 - 2009-07-14 03:15 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Difx5ab4.rra 2013-07-25 13:34 - 2013-07-25 13:34 - 00000000 ____D C:\ProgramData\AmUStor 2013-07-25 13:34 - 2013-07-25 13:34 - 00000000 ____D C:\Program Files (x86)\AmIcoSingLun 2013-07-25 13:33 - 2013-07-25 13:33 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Marvell 2013-07-25 13:33 - 2013-07-25 13:33 - 00000000 ____D C:\Intel 2013-07-25 13:25 - 2013-07-25 13:33 - 00000000 ____D C:\ProgramData\DriverGenius 2013-07-25 13:25 - 2013-07-25 13:25 - 00001253 _____ C:\Users\Speckmayr Trixi\Desktop\Driver Genius.lnk 2013-07-25 13:25 - 2013-07-25 13:25 - 00000000 ____D C:\Program Files (x86)\Driver-Soft 2013-07-25 13:22 - 2013-07-25 13:22 - 00000000 ____D C:\FRST 2013-07-25 13:22 - 2013-07-25 13:21 - 01779761 _____ (Farbar) C:\Users\Speckmayr Trixi\Desktop\FRST64.exe 2013-07-25 13:21 - 2013-07-25 13:21 - 01779761 _____ (Farbar) C:\Users\Speckmayr Trixi\Downloads\FRST64.exe 2013-07-25 07:07 - 2013-07-25 07:07 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2C890CB3-C7AD-43FD-A5C5-0031E2C1792D} 2013-07-24 07:23 - 2013-07-24 07:24 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4C69635-28D1-4114-81CE-44C8FCAF3AE1} 2013-07-23 19:17 - 2013-07-23 19:17 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2C57BF94-9AF2-491B-A811-D3F6D2F88074} 2013-07-23 06:48 - 2013-07-23 06:48 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{C855C438-6F24-4304-9552-FAF8292DCA1C} 2013-07-22 06:57 - 2013-07-22 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{697818A9-56CA-4EB3-A404-0C995A124AC2} 2013-07-22 06:44 - 2013-07-22 06:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F1F7F08E-CEA9-493E-BCD1-B5439015F555} 2013-07-21 14:59 - 2013-07-21 14:59 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{FE32B7DE-C473-4CBA-9CFF-681B765006C0} 2013-07-20 11:03 - 2013-07-20 11:03 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{3A9F6825-0B0C-40D6-B4CA-EC8F9CEA9F64} 2013-07-19 21:47 - 2013-07-19 21:47 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B58213DB-71E3-49DE-8F34-78D52CA1518D} 2013-07-19 08:08 - 2013-07-19 08:08 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{D1D5CE6B-F356-4719-84F9-FCD82BB45CBC} 2013-07-19 07:03 - 2013-07-19 07:03 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{37C9E399-D1F2-432C-9316-8AA0F9E59BE1} 2013-07-18 12:16 - 2013-07-18 12:16 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2687BD0F-6087-4066-948A-C1EF28467AAE} 2013-07-17 22:51 - 2013-07-17 22:52 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{327CFD04-0333-494F-A457-56C02C7C86B9} 2013-07-17 08:01 - 2013-07-17 08:01 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E84B9AEC-5F1E-4CDA-857E-52CA3F50A8E4} 2013-07-16 18:54 - 2013-07-16 18:54 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{90C3EF3E-3778-43F6-9086-B677AA13C5F6} 2013-07-16 06:42 - 2013-07-16 06:42 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F41A9DAB-512C-4963-BD02-E871CA0E3E30} 2013-07-15 16:57 - 2013-07-15 16:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7B5A2D0B-AEF7-4F5C-A239-E6C7E9FB3199} 2013-07-14 21:46 - 2013-07-14 21:46 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{69F2261B-5E84-4C17-B3EF-124348260F7C} 2013-07-14 07:46 - 2013-07-14 07:46 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BA9DA50F-E1D7-43F1-858C-1254970EF20D} 2013-07-13 10:47 - 2013-07-13 10:47 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{551079D0-C76E-4978-9D4F-B364D2183635} 2013-07-12 17:32 - 2013-07-12 17:32 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{526F34F3-3C7A-4625-91B0-F69EC0B726CD} 2013-07-12 14:11 - 2013-07-12 14:11 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{1798CBBA-75CA-4671-85BE-60E23D5663EF} 2013-07-12 12:49 - 2013-07-12 12:49 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E5D7A06A-1620-435C-B4EE-B759CEB7D2D2} 2013-07-12 12:07 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-12 12:07 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-12 12:07 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-12 12:07 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-12 12:07 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-12 12:07 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-12 12:07 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-12 12:07 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-12 12:07 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-12 08:24 - 2013-07-12 08:24 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4FA571D-BCD1-4561-A514-F836682EDC97} 2013-07-12 06:43 - 2013-07-12 06:43 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BE6CE389-8081-4C2B-8E23-A95923A648BA} 2013-07-12 00:37 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-07-12 00:37 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-07-12 00:37 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-07-12 00:37 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-12 00:37 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-12 00:37 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-07-12 00:37 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-07-11 17:23 - 2013-07-11 17:23 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{9CC4E4B0-A324-4B61-9FE8-DBC595C46A01} 2013-07-11 06:56 - 2013-07-11 06:56 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{685A5CDA-AD40-4C5F-9819-442D9F94C937} 2013-07-10 12:43 - 2013-07-10 12:43 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{108845CD-9618-481D-8AA3-64C596DBE5E0} 2013-07-09 19:57 - 2013-07-09 19:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BE9A8CE6-89FF-45F6-802D-89C442EB796D} 2013-07-09 07:37 - 2013-07-09 07:38 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7F281C06-BDDB-4632-B1A8-A3CAE2E727F7} 2013-07-08 07:04 - 2013-07-08 07:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{C0437018-3F45-46F7-80B6-43136B95264B} 2013-07-06 17:34 - 2013-07-06 17:34 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4EB5D00-F9CC-43BA-BA57-EF1878989B9E} 2013-07-06 08:04 - 2013-07-06 08:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{9AF78A92-DD61-48E0-B509-C44DCE1B33E4} 2013-07-05 06:41 - 2013-07-05 06:41 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{46C3275E-F866-42E1-8B7B-37690BCE8B30} 2013-07-04 06:38 - 2013-07-04 06:38 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B7C0AB54-D2EA-4849-8BE5-19BC4C7D8052} 2013-07-04 06:35 - 2013-07-04 06:35 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{23163873-93B8-404E-9FA6-B23F3AA94100} 2013-07-03 19:25 - 2013-07-03 19:25 - 00002262 _____ C:\Users\Speckmayr Trixi\Desktop\Sicherer Zahlungsverkehr.lnk 2013-07-03 19:25 - 2013-07-03 19:24 - 00001124 _____ C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk 2013-07-03 19:24 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll 2013-07-03 19:24 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys 2013-07-03 19:24 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys 2013-07-03 19:23 - 2013-07-15 14:08 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-07-03 19:23 - 2013-07-15 14:08 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-07-03 19:23 - 2013-07-03 19:23 - 00000000 ____D C:\Windows\ELAMBKUP 2013-07-03 19:23 - 2013-07-03 19:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-07-03 19:15 - 2013-07-03 19:15 - 00000000 ___SD C:\Users\Speckmayr Trixi\Documents\Passwords Database 2013-07-03 06:57 - 2013-07-03 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{987A3EF6-BCFB-4954-9311-A44B0BC4D280} 2013-07-02 21:04 - 2013-07-02 21:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F82FBA77-AA77-413A-AF62-A65ACEF27D57} 2013-07-02 06:57 - 2013-07-02 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{DC997D08-8548-4D7C-87E7-0B6D112549CB} 2013-07-01 18:42 - 2013-07-01 18:42 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2B2DFB8F-C51A-4558-B23B-0F8DE7EAF487} 2013-06-30 19:41 - 2013-06-30 19:41 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{CA30CD1E-F4EF-41AE-8231-4933A6F44529} 2013-06-30 12:58 - 2013-06-30 12:58 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{D3784A27-36F3-4C54-9693-3A29ED74E9EF} 2013-06-30 11:06 - 2013-06-30 11:06 - 00262144 _____ C:\Windows\system32\config\elam 2013-06-30 11:02 - 2013-07-23 06:13 - 00007216 _____ C:\Windows\PFRO.log 2013-06-30 10:14 - 2013-07-25 13:55 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-06-30 09:30 - 2013-06-30 09:30 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-06-30 09:30 - 2013-06-30 09:30 - 00000000 _____ C:\autoexec.bat 2013-06-30 09:29 - 2013-06-30 09:54 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP 2013-06-29 17:40 - 2013-07-25 13:53 - 00006404 _____ C:\Windows\setupact.log 2013-06-29 17:40 - 2013-06-29 17:40 - 00000000 _____ C:\Windows\setuperr.log 2013-06-29 10:35 - 2013-06-30 10:52 - 95023320 ____T C:\ProgramData\d2oca.pad 2013-06-29 10:35 - 2013-06-30 10:51 - 00000000 _____ C:\ProgramData\as98213.txt 2013-06-29 10:35 - 2013-06-29 10:35 - 00044544 _____ (Microsoft Corporation) C:\ProgramData\rundll32.exe 2013-06-29 10:35 - 2013-06-29 10:35 - 00000151 _____ C:\ProgramData\d2oca.reg 2013-06-29 10:35 - 2013-06-29 10:35 - 00000055 _____ C:\ProgramData\d2oca.bat 2013-06-29 10:00 - 2013-06-29 10:00 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{0AEC6568-FA09-4A5A-AD25-F66A33C40874} 2013-06-28 21:09 - 2013-06-28 21:09 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F53F1BB8-8BB8-4426-8E25-5BB70FFDEC22} 2013-06-28 06:40 - 2013-06-28 06:40 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{63BC48EA-AFF1-46B1-A281-2624EA42E6E5} 2013-06-27 06:44 - 2013-06-27 06:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{ACE278D7-AE91-4948-B24C-94B1C855E117} 2013-06-27 06:40 - 2013-06-27 06:40 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{5666A69D-A6CB-4721-98FD-602BFEC83C70} 2013-06-26 09:13 - 2013-06-26 09:13 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{424AA57F-B634-4506-853D-BB40173524F5} 2013-06-25 10:26 - 2013-06-25 10:26 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B68BF099-7DFC-44B2-B52D-782C34C7D84D} 2013-06-25 07:08 - 2013-06-25 07:08 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7C0061C6-DEA8-4ED7-ADBA-C1867032688D} ==================== One Month Modified Files and Folders ======= 2013-07-25 13:58 - 2013-01-30 13:08 - 01447599 _____ C:\Windows\WindowsUpdate.log 2013-07-25 13:58 - 2009-07-14 19:58 - 00654150 _____ C:\Windows\system32\perfh007.dat 2013-07-25 13:58 - 2009-07-14 19:58 - 00130022 _____ C:\Windows\system32\perfc007.dat 2013-07-25 13:58 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2013-07-25 13:55 - 2013-06-30 10:14 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-07-25 13:54 - 2012-12-31 09:56 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\A1TA 2013-07-25 13:54 - 2010-10-07 17:06 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2013-07-25 13:53 - 2013-06-29 17:40 - 00006404 _____ C:\Windows\setupact.log 2013-07-25 13:53 - 2013-05-31 20:46 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job 2013-07-25 13:53 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-07-25 13:52 - 2010-09-01 13:11 - 00000177 ____H C:\dvmexp.idx 2013-07-25 13:52 - 2009-07-14 06:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-25 13:52 - 2009-07-14 06:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-25 13:51 - 2013-07-25 13:51 - 00001248 _____ C:\Users\Public\Desktop\HD VDeck.lnk 2013-07-25 13:51 - 2013-07-25 13:51 - 00000000 ____D C:\Windows\system32\SRSLabs 2013-07-25 13:51 - 2013-07-25 13:51 - 00000000 ____D C:\Program Files\VIA 2013-07-25 13:47 - 2010-09-01 13:00 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\2C0A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0C0A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0C04 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0816 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0804 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0424 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041F 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041E 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041D 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041B 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0419 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0416 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0415 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0414 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0413 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0412 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0411 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0410 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040E 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040D 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040C 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040B 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0409 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0408 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0406 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0405 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0404 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0401 2013-07-25 13:46 - 2010-10-07 21:42 - 00000000 ____D C:\ProgramData\Downloaded Installations 2013-07-25 13:46 - 2009-07-14 19:58 - 00000000 ____D C:\Windows\system32\0407 2013-07-25 13:45 - 2010-10-07 17:06 - 00000000 ___RD C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-07-25 13:45 - 2010-09-01 12:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-07-25 13:44 - 2013-07-25 13:44 - 00013142 _____ C:\Windows\LDPINST.LOG 2013-07-25 13:44 - 2013-07-25 13:44 - 00000383 _____ C:\Windows\LkmdfCoInst.log 2013-07-25 13:44 - 2013-07-25 13:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\Logishrd 2013-07-25 13:44 - 2010-10-07 21:51 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2013-07-25 13:44 - 2010-10-07 21:50 - 00000000 ____D C:\Program Files\Common Files\LogiShrd 2013-07-25 13:43 - 2013-07-25 13:43 - 00000000 ____D C:\Program Files\Logitech 2013-07-25 13:43 - 2010-10-07 21:50 - 00000000 ____D C:\ProgramData\Logishrd 2013-07-25 13:42 - 2013-07-25 13:42 - 00000000 ____D C:\ProgramData\ATI 2013-07-25 13:42 - 2013-07-25 13:42 - 00000000 ____D C:\ProgramData\AMD 2013-07-25 13:41 - 2013-07-25 13:41 - 00000000 ____D C:\Program Files (x86)\AMD AVT 2013-07-25 13:41 - 2010-09-01 13:02 - 00000000 ____D C:\Program Files\ATI Technologies 2013-07-25 13:41 - 2010-09-01 13:02 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-07-25 13:38 - 2013-07-25 13:38 - 00000000 ____D C:\AMD 2013-07-25 13:36 - 2013-04-11 12:16 - 00003994 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{4A8F2511-85DC-466D-A92F-31ECD06D45CD} 2013-07-25 13:35 - 2010-10-07 21:45 - 00000000 ____D C:\Windows\RaidTool 2013-07-25 13:34 - 2013-07-25 13:34 - 00000000 ____D C:\ProgramData\AmUStor 2013-07-25 13:34 - 2013-07-25 13:34 - 00000000 ____D C:\Program Files (x86)\AmIcoSingLun 2013-07-25 13:34 - 2012-04-09 07:23 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-25 13:33 - 2013-07-25 13:33 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Marvell 2013-07-25 13:33 - 2013-07-25 13:33 - 00000000 ____D C:\Intel 2013-07-25 13:33 - 2013-07-25 13:25 - 00000000 ____D C:\ProgramData\DriverGenius 2013-07-25 13:33 - 2010-10-07 21:48 - 00000000 ____D C:\Program Files (x86)\Marvell 2013-07-25 13:32 - 2011-09-24 18:45 - 00051200 ___SH C:\Users\Speckmayr Trixi\Documents\Thumbs.db 2013-07-25 13:25 - 2013-07-25 13:25 - 00001253 _____ C:\Users\Speckmayr Trixi\Desktop\Driver Genius.lnk 2013-07-25 13:25 - 2013-07-25 13:25 - 00000000 ____D C:\Program Files (x86)\Driver-Soft 2013-07-25 13:22 - 2013-07-25 13:22 - 00000000 ____D C:\FRST 2013-07-25 13:21 - 2013-07-25 13:22 - 01779761 _____ (Farbar) C:\Users\Speckmayr Trixi\Desktop\FRST64.exe 2013-07-25 13:21 - 2013-07-25 13:21 - 01779761 _____ (Farbar) C:\Users\Speckmayr Trixi\Downloads\FRST64.exe 2013-07-25 07:07 - 2013-07-25 07:07 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2C890CB3-C7AD-43FD-A5C5-0031E2C1792D} 2013-07-24 17:54 - 2010-10-10 19:37 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\UseNeXT 2013-07-24 17:47 - 2010-10-10 19:37 - 00000000 ____D C:\Users\Speckmayr Trixi\Documents\UseNeXT 2013-07-24 07:24 - 2013-07-24 07:23 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4C69635-28D1-4114-81CE-44C8FCAF3AE1} 2013-07-23 19:17 - 2013-07-23 19:17 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2C57BF94-9AF2-491B-A811-D3F6D2F88074} 2013-07-23 06:48 - 2013-07-23 06:48 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{C855C438-6F24-4304-9552-FAF8292DCA1C} 2013-07-23 06:13 - 2013-06-30 11:02 - 00007216 _____ C:\Windows\PFRO.log 2013-07-23 06:13 - 2012-08-30 20:31 - 00000000 ____D C:\Program Files\Google 2013-07-23 06:13 - 2012-08-30 20:29 - 00000000 ____D C:\Program Files (x86)\Google 2013-07-22 06:57 - 2013-07-22 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{697818A9-56CA-4EB3-A404-0C995A124AC2} 2013-07-22 06:44 - 2013-07-22 06:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F1F7F08E-CEA9-493E-BCD1-B5439015F555} 2013-07-21 14:59 - 2013-07-21 14:59 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{FE32B7DE-C473-4CBA-9CFF-681B765006C0} 2013-07-21 08:59 - 2012-08-30 20:29 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\Google 2013-07-21 08:58 - 2010-10-12 19:51 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\Adobe 2013-07-21 08:57 - 2012-04-09 07:23 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-07-21 08:57 - 2012-04-09 07:23 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-07-21 08:57 - 2011-06-10 07:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-07-20 11:03 - 2013-07-20 11:03 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{3A9F6825-0B0C-40D6-B4CA-EC8F9CEA9F64} 2013-07-19 21:47 - 2013-07-19 21:47 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B58213DB-71E3-49DE-8F34-78D52CA1518D} 2013-07-19 08:08 - 2013-07-19 08:08 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{D1D5CE6B-F356-4719-84F9-FCD82BB45CBC} 2013-07-19 07:03 - 2013-07-19 07:03 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{37C9E399-D1F2-432C-9316-8AA0F9E59BE1} 2013-07-18 12:16 - 2013-07-18 12:16 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2687BD0F-6087-4066-948A-C1EF28467AAE} 2013-07-18 11:03 - 2011-03-09 07:30 - 00000631 _____ C:\Users\Speckmayr Trixi\Desktop\Viessmann ETEK Online.url 2013-07-18 10:32 - 2012-04-22 19:01 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\.minecraft 2013-07-17 22:52 - 2013-07-17 22:51 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{327CFD04-0333-494F-A457-56C02C7C86B9} 2013-07-17 15:05 - 2010-12-26 10:14 - 00000000 ____D C:\Users\Speckmayr Trixi\Desktop\Eigene Spiele 2013-07-17 08:01 - 2013-07-17 08:01 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E84B9AEC-5F1E-4CDA-857E-52CA3F50A8E4} 2013-07-16 18:54 - 2013-07-16 18:54 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{90C3EF3E-3778-43F6-9086-B677AA13C5F6} 2013-07-16 06:42 - 2013-07-16 06:42 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F41A9DAB-512C-4963-BD02-E871CA0E3E30} 2013-07-15 16:57 - 2013-07-15 16:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7B5A2D0B-AEF7-4F5C-A239-E6C7E9FB3199} 2013-07-15 14:08 - 2013-07-03 19:23 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-07-15 14:08 - 2013-07-03 19:23 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-07-15 14:08 - 2012-10-18 14:50 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys 2013-07-15 14:08 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys 2013-07-14 21:46 - 2013-07-14 21:46 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{69F2261B-5E84-4C17-B3EF-124348260F7C} 2013-07-14 09:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing 2013-07-14 07:46 - 2013-07-14 07:46 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BA9DA50F-E1D7-43F1-858C-1254970EF20D} 2013-07-13 10:47 - 2013-07-13 10:47 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{551079D0-C76E-4978-9D4F-B364D2183635} 2013-07-12 17:32 - 2013-07-12 17:32 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{526F34F3-3C7A-4625-91B0-F69EC0B726CD} 2013-07-12 14:11 - 2013-07-12 14:11 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{1798CBBA-75CA-4671-85BE-60E23D5663EF} 2013-07-12 12:49 - 2013-07-12 12:49 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E5D7A06A-1620-435C-B4EE-B759CEB7D2D2} 2013-07-12 12:32 - 2010-09-01 13:33 - 00000000 ____D C:\Windows\Panther 2013-07-12 12:31 - 2009-07-14 06:45 - 00447896 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-12 12:30 - 2012-05-22 17:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-07-12 12:30 - 2012-05-22 17:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-07-12 12:29 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-12 12:29 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-07-12 12:29 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-07-12 12:13 - 2010-10-07 18:39 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-07-12 12:08 - 2010-09-01 13:51 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-07-12 08:24 - 2013-07-12 08:24 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4FA571D-BCD1-4561-A514-F836682EDC97} 2013-07-12 06:43 - 2013-07-12 06:43 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BE6CE389-8081-4C2B-8E23-A95923A648BA} 2013-07-11 17:23 - 2013-07-11 17:23 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{9CC4E4B0-A324-4B61-9FE8-DBC595C46A01} 2013-07-11 06:56 - 2013-07-11 06:56 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{685A5CDA-AD40-4C5F-9819-442D9F94C937} 2013-07-10 12:43 - 2013-07-10 12:43 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{108845CD-9618-481D-8AA3-64C596DBE5E0} 2013-07-09 19:57 - 2013-07-09 19:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BE9A8CE6-89FF-45F6-802D-89C442EB796D} 2013-07-09 07:38 - 2013-07-09 07:37 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7F281C06-BDDB-4632-B1A8-A3CAE2E727F7} 2013-07-08 07:04 - 2013-07-08 07:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{C0437018-3F45-46F7-80B6-43136B95264B} 2013-07-06 17:34 - 2013-07-06 17:34 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4EB5D00-F9CC-43BA-BA57-EF1878989B9E} 2013-07-06 08:04 - 2013-07-06 08:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{9AF78A92-DD61-48E0-B509-C44DCE1B33E4} 2013-07-05 06:41 - 2013-07-05 06:41 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{46C3275E-F866-42E1-8B7B-37690BCE8B30} 2013-07-04 06:38 - 2013-07-04 06:38 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B7C0AB54-D2EA-4849-8BE5-19BC4C7D8052} 2013-07-04 06:35 - 2013-07-04 06:35 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{23163873-93B8-404E-9FA6-B23F3AA94100} 2013-07-03 19:45 - 2011-08-23 17:05 - 00000000 ____D C:\Program Files (x86)\Nokia 2013-07-03 19:43 - 2012-12-14 18:14 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\Apple Computer 2013-07-03 19:43 - 2010-10-07 21:09 - 00000000 ____D C:\ProgramData\MFAData 2013-07-03 19:25 - 2013-07-03 19:25 - 00002262 _____ C:\Users\Speckmayr Trixi\Desktop\Sicherer Zahlungsverkehr.lnk 2013-07-03 19:24 - 2013-07-03 19:25 - 00001124 _____ C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk 2013-07-03 19:23 - 2013-07-03 19:23 - 00000000 ____D C:\Windows\ELAMBKUP 2013-07-03 19:23 - 2013-07-03 19:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-07-03 19:15 - 2013-07-03 19:15 - 00000000 ___SD C:\Users\Speckmayr Trixi\Documents\Passwords Database 2013-07-03 06:57 - 2013-07-03 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{987A3EF6-BCFB-4954-9311-A44B0BC4D280} 2013-07-02 21:04 - 2013-07-02 21:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F82FBA77-AA77-413A-AF62-A65ACEF27D57} 2013-07-02 06:57 - 2013-07-02 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{DC997D08-8548-4D7C-87E7-0B6D112549CB} 2013-07-01 18:42 - 2013-07-01 18:42 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2B2DFB8F-C51A-4558-B23B-0F8DE7EAF487} 2013-07-01 07:12 - 2011-09-24 17:08 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\Nokia Ovi Suite 2013-07-01 07:12 - 2011-09-05 17:41 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\NokiaAccount 2013-06-30 19:41 - 2013-06-30 19:41 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{CA30CD1E-F4EF-41AE-8231-4933A6F44529} 2013-06-30 12:58 - 2013-06-30 12:58 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{D3784A27-36F3-4C54-9693-3A29ED74E9EF} 2013-06-30 12:23 - 2010-10-07 17:06 - 00000000 ____D C:\Users\Speckmayr Trixi 2013-06-30 11:23 - 2013-03-10 11:24 - 00140288 ___SH C:\Users\Speckmayr Trixi\Desktop\Thumbs.db 2013-06-30 11:06 - 2013-06-30 11:06 - 00262144 _____ C:\Windows\system32\config\elam 2013-06-30 11:02 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-06-30 10:52 - 2013-06-29 10:35 - 95023320 ____T C:\ProgramData\d2oca.pad 2013-06-30 10:51 - 2013-06-29 10:35 - 00000000 _____ C:\ProgramData\as98213.txt 2013-06-30 09:54 - 2013-06-30 09:29 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP 2013-06-30 09:54 - 2013-06-06 09:37 - 00000000 ____D C:\Windows\SysWOW64\jmdp 2013-06-30 09:54 - 2013-06-06 08:32 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-06-30 09:54 - 2010-09-01 13:11 - 00000000 ___HD C:\dvmexp 2013-06-30 09:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-06-30 09:30 - 2013-06-30 09:30 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-06-30 09:30 - 2013-06-30 09:30 - 00000000 _____ C:\autoexec.bat 2013-06-29 17:40 - 2013-06-29 17:40 - 00000000 _____ C:\Windows\setuperr.log 2013-06-29 10:35 - 2013-06-29 10:35 - 00044544 _____ (Microsoft Corporation) C:\ProgramData\rundll32.exe 2013-06-29 10:35 - 2013-06-29 10:35 - 00000151 _____ C:\ProgramData\d2oca.reg 2013-06-29 10:35 - 2013-06-29 10:35 - 00000055 _____ C:\ProgramData\d2oca.bat 2013-06-29 10:00 - 2013-06-29 10:00 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{0AEC6568-FA09-4A5A-AD25-F66A33C40874} 2013-06-28 21:09 - 2013-06-28 21:09 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F53F1BB8-8BB8-4426-8E25-5BB70FFDEC22} 2013-06-28 06:40 - 2013-06-28 06:40 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{63BC48EA-AFF1-46B1-A281-2624EA42E6E5} 2013-06-27 06:44 - 2013-06-27 06:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{ACE278D7-AE91-4948-B24C-94B1C855E117} 2013-06-27 06:40 - 2013-06-27 06:40 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{5666A69D-A6CB-4721-98FD-602BFEC83C70} 2013-06-26 09:13 - 2013-06-26 09:13 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{424AA57F-B634-4506-853D-BB40173524F5} 2013-06-25 10:26 - 2013-06-25 10:26 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B68BF099-7DFC-44B2-B52D-782C34C7D84D} 2013-06-25 07:08 - 2013-06-25 07:08 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7C0061C6-DEA8-4ED7-ADBA-C1867032688D} ZeroAccess: C:\$Recycle.Bin\S-1-5-21-127706961-3467140109-1717688444-1000\$0ac8a865ff039bb022131499227ce2c0 ZeroAccess: C:\$Recycle.Bin\S-1-5-18\$0ac8a865ff039bb022131499227ce2c0 Files to move or delete: ==================== C:\ProgramData\rundll32.exe C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk C:\ProgramData\d2oca.bat C:\ProgramData\d2oca.pad C:\ProgramData\d2oca.reg C:\ProgramData\ntuser.dat ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-23 06:44 ==================== End Of Log ============================ |
ich habe das flasche Log File geschickt - hier das richtige Ran by Speckmayr Trixi (administrator) on 25-07-2013 14:00:18 Running from C:\Users\Speckmayr Trixi\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Eastman Kodak Company) C:\Program Files (x86)\Kodak\KODAK Share Button App\Listener.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-6 Engine\SixEngine.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\ProgramData\BrowserProtect\2.6.1040.25\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe (Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe (Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe () C:\ProgramData\BrowserProtect\2.6.1040.25\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe (DeviceVM, Inc.) C:\ASUS.SYS\config\DVMExportService.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe () C:\Windows\system32\dmwu.exe () C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe (VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\system32\msiexec.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe ((C) Michael Schiel) C:\Program Files (x86)\TrayBackup\traybackup.exe (Microsoft Corporation) C:\Users\Speckmayr Trixi\Encarta 2007 - Enzyklopaedie DVD\EDICT.EXE (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (PowerISO Computing, Inc.) C:\Program Files (x86)\POWERISO\PWRISOVM.EXE (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (mquadr.at software engineering and consulting GmbH, web: mquadr.at :: Self-Service Connectivity Software for Internet Access Providers, mail: office@mquadr.at) C:\Program Files (x86)\A1\A1 Diagnose\A1Diagnose.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe (Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe () C:\Windows\SysWOW64\jmdp\stij.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [3089688 2013-06-27] (Logitech, Inc.) HKLM\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5675184 2013-05-10] (VIA) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] C:\$Recycle.Bin\S-1-5-18\$0ac8a865ff039bb022131499227ce2c0\n. ATTENTION! ====> ZeroAccess? HKCU\...\Run: [TrayBackup] - C:\Program Files (x86)\TrayBackup\traybackup.exe [354304 2009-01-12] ((C) Michael Schiel) HKCU\...\Run: [E07DXLRD_40017688] - C:\Users\Speckmayr Trixi\Encarta 2007 - Enzyklopaedie DVD\EDICT.EXE [351000 2006-06-13] (Microsoft Corporation) HKCU\...\Run: [KGShareApp] - C:\Program Files (x86)\Kodak\KODAK Share Button App\KGShare_App.exe [394752 2012-02-03] (Eastman Kodak Company) HKCU\...\Winlogon: [Shell] explorer.exe, <==== ATTENTION MountPoints2: {335a3c9f-0906-11e0-b87b-9d3a5bec9a55} - K:\LaunchU3.exe -a HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5675184 2013-05-10] (VIA) HKLM-x32\...\Run: [CLMLServer] - "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [103720 2009-06-03] (CyberLink) HKLM-x32\...\Run: [UpdateP2GoShortCut] - "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [UpdatePDRShortCut] - "C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\7.0" [222504 2008-01-04] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl9] - "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [87336 2009-04-27] (CyberLink Corp.) HKLM-x32\...\Run: [PDVD9LanguageShortcut] - "C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [50472 2009-04-27] (CyberLink Corp.) HKLM-x32\...\Run: [UpdatePPShortCut] - "C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerProducer" UpdateWithCreateOnce "Software\CyberLink\PowerProducer\5.0" [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [UpdatePSTShortCut] - "C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" [210216 2009-06-19] (CyberLink Corp.) HKLM-x32\...\Run: [NUSB3MON] - "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [115048 2011-09-16] (Renesas Electronics Corporation) HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] () HKLM-x32\...\Run: [PWRISOVM.EXE] - C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2010-04-12] (PowerISO Computing, Inc.) HKLM-x32\...\Run: [SweetIM] - C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-05-29] (SweetIM Technologies Ltd.) HKLM-x32\...\Run: [Sweetpacks Communicator] - C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [231768 2012-08-15] (SweetIM Technologies Ltd.) HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [A1Diagnose] - C:\Program Files (x86)\A1\A1 Diagnose\A1Diagnose.exe /auto [20678872 2012-08-03] (mquadr.at software engineering and consulting GmbH, web: mquadr.at :: Self-Service Connectivity Software for Internet Access Providers, mail: office@mquadr.at) HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe" [152392 2013-05-31] (Apple Inc.) HKLM-x32\...\Run: [AVP] - "C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe" [356968 2012-12-20] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [Driver Genius] - [x] HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642656 2013-03-28] (Advanced Micro Devices, Inc.) AppInit_DLLs-x32: c:\progra~3\browse~1\261040~1.25\{c16c1~1\browse~1.dll [2202728 2012-12-25] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk ShortcutTarget: msconfig.lnk -> C:\PROGRA~3\aco2d.dat (No File) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={3AB2A4EE-FA57-11E1-8FAB-485B3961C602} SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={3AB2A4EE-FA57-11E1-8FAB-485B3961C602} SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - URL hxxp://at.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_at&p={searchTerms} SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.claro-search.com/?q={searchTerms}&affID=117423&tt=5212_2&babsrc=SP_ss&mntrId=18d078e6000000000000485b3961c602 SearchScopes: HKCU - {26D2674D-39BA-4E13-A24F-99099058F26D} URL = hxxp://at.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms} SearchScopes: HKCU - {76B64890-ADC3-46B1-B3B3-951AF90B9CF2} URL = SearchScopes: HKCU - {88142ECB-FEAE-46A2-99C6-98FF6304B6A5} URL = SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&st=6&barid={3AB2A4EE-FA57-11E1-8FAB-485B3961C602} BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Claro LTD Helper Object - {000F18F2-09EB-4A59-82B2-5AE4184C39C3} - C:\Program Files (x86)\Claro LTD\claro\1.8.8.5\bh\claro.dll (Montera Technologeis LTD) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll (Logitech, Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM-x32 - Claro LTD Toolbar - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} - C:\Program Files (x86)\Claro LTD\claro\1.8.8.5\claroTlbr.dll (Montera Technologeis LTD) Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: HKLM-x32 {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} https://safe.tele2.com/inc/AccountHelper.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: linkscanner - No CLSID Value - Handler-x32: linkscanner - No CLSID Value - Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx CHR HKLM-x32\...\Chrome\Extension: [dcillohgikpecbmgioknapdpcjofaafl] - C:\Users\Speckmayr Trixi\AppData\Roaming\Claro\claro.crx CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files (x86)\Yontoo\YontooLayers.crx CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx CHR HKLM-x32\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\BrowserProtect\2.6.1040.25\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx ==================== Services (Whitelisted) ================= R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [90112 2009-08-19] (ASUSTeK Computer Inc.) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO) R2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1040.25\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2547816 2012-12-25] () R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch) R2 DvmMDES; C:\ASUS.SYS\config\DVMExportService.exe [319488 2009-07-17] (DeviceVM, Inc.) R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [1447728 2013-05-21] () R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe [247152 2009-01-21] () S2 SYSHOST32; C:\Windows\Installer\{31BFA27E-4CBD-3A60-B8F9-3C6398983E4D}\syshost.exe [0 2012-08-28] () R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-11] (VIA Technologies, Inc.) ==================== Drivers (Whitelisted) ==================== R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] () R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] () R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-07-15] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-07-15] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-07-15] (Kaspersky Lab ZAO) R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [15416 2009-07-16] () S0 mv91xx; system32\DRIVERS\mv91xx.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-25 13:51 - 2013-07-25 13:51 - 00001248 _____ C:\Users\Public\Desktop\HD VDeck.lnk 2013-07-25 13:51 - 2013-07-25 13:51 - 00000000 ____D C:\Windows\system32\SRSLabs 2013-07-25 13:51 - 2013-07-25 13:51 - 00000000 ____D C:\Program Files\VIA 2013-07-25 13:47 - 2013-04-10 11:09 - 00849992 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2013-07-25 13:47 - 2013-04-10 11:09 - 00108104 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2013-07-25 13:47 - 2013-04-10 11:09 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\2C0A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0C0A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0C04 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0816 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0804 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0424 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041F 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041E 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041D 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041B 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0419 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0416 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0415 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0414 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0413 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0412 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0411 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0410 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040E 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040D 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040C 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040B 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0409 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0408 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0406 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0405 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0404 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0401 2013-07-25 13:45 - 2012-06-05 13:45 - 00237968 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtHDMIVX.sys 2013-07-25 13:45 - 2012-05-17 11:29 - 07163744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64H.dll 2013-07-25 13:45 - 2012-05-17 11:29 - 00433504 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64H.dll 2013-07-25 13:45 - 2012-05-17 11:29 - 00141152 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64H.dll 2013-07-25 13:45 - 2012-05-17 11:29 - 00123744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64H.dll 2013-07-25 13:45 - 2012-05-17 11:29 - 00074592 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64H.dll 2013-07-25 13:45 - 2011-12-02 14:20 - 03746408 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkHDM64.dll 2013-07-25 13:45 - 2011-09-27 14:04 - 02526824 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RHDMEx64.dll 2013-07-25 13:45 - 2011-07-06 13:27 - 00092264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RHCoInst64.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00372056 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64H.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RH3DHT64.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RH3DAA64.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64H.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00097624 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64H.dll 2013-07-25 13:45 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64H.dll 2013-07-25 13:44 - 2013-07-25 13:44 - 00013142 _____ C:\Windows\LDPINST.LOG 2013-07-25 13:44 - 2013-07-25 13:44 - 00000383 _____ C:\Windows\LkmdfCoInst.log 2013-07-25 13:44 - 2013-07-25 13:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\Logishrd 2013-07-25 13:43 - 2013-07-25 13:43 - 00000000 ____D C:\Program Files\Logitech 2013-07-25 13:42 - 2013-07-25 13:42 - 00000000 ____D C:\ProgramData\ATI 2013-07-25 13:42 - 2013-07-25 13:42 - 00000000 ____D C:\ProgramData\AMD 2013-07-25 13:41 - 2013-07-25 13:41 - 00000000 ____D C:\Program Files (x86)\AMD AVT 2013-07-25 13:38 - 2013-07-25 13:38 - 00000000 ____D C:\AMD 2013-07-25 13:35 - 2010-09-07 17:40 - 01976920 _____ (JMicron Technology Corp.) C:\Windows\SysWOW64\xRaidSetup.exe 2013-07-25 13:35 - 2010-09-07 17:40 - 00162392 _____ (JMicron Technology Corp.) C:\Windows\SysWOW64\xRaidAPI.dll 2013-07-25 13:35 - 2009-07-14 03:15 - 00315904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Difx5ab4.rra 2013-07-25 13:34 - 2013-07-25 13:34 - 00000000 ____D C:\ProgramData\AmUStor 2013-07-25 13:34 - 2013-07-25 13:34 - 00000000 ____D C:\Program Files (x86)\AmIcoSingLun 2013-07-25 13:33 - 2013-07-25 13:33 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Marvell 2013-07-25 13:33 - 2013-07-25 13:33 - 00000000 ____D C:\Intel 2013-07-25 13:25 - 2013-07-25 13:33 - 00000000 ____D C:\ProgramData\DriverGenius 2013-07-25 13:25 - 2013-07-25 13:25 - 00001253 _____ C:\Users\Speckmayr Trixi\Desktop\Driver Genius.lnk 2013-07-25 13:25 - 2013-07-25 13:25 - 00000000 ____D C:\Program Files (x86)\Driver-Soft 2013-07-25 13:22 - 2013-07-25 13:22 - 00000000 ____D C:\FRST 2013-07-25 13:22 - 2013-07-25 13:21 - 01779761 _____ (Farbar) C:\Users\Speckmayr Trixi\Desktop\FRST64.exe 2013-07-25 13:21 - 2013-07-25 13:21 - 01779761 _____ (Farbar) C:\Users\Speckmayr Trixi\Downloads\FRST64.exe 2013-07-25 07:07 - 2013-07-25 07:07 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2C890CB3-C7AD-43FD-A5C5-0031E2C1792D} 2013-07-24 07:23 - 2013-07-24 07:24 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4C69635-28D1-4114-81CE-44C8FCAF3AE1} 2013-07-23 19:17 - 2013-07-23 19:17 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2C57BF94-9AF2-491B-A811-D3F6D2F88074} 2013-07-23 06:48 - 2013-07-23 06:48 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{C855C438-6F24-4304-9552-FAF8292DCA1C} 2013-07-22 06:57 - 2013-07-22 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{697818A9-56CA-4EB3-A404-0C995A124AC2} 2013-07-22 06:44 - 2013-07-22 06:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F1F7F08E-CEA9-493E-BCD1-B5439015F555} 2013-07-21 14:59 - 2013-07-21 14:59 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{FE32B7DE-C473-4CBA-9CFF-681B765006C0} 2013-07-20 11:03 - 2013-07-20 11:03 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{3A9F6825-0B0C-40D6-B4CA-EC8F9CEA9F64} 2013-07-19 21:47 - 2013-07-19 21:47 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B58213DB-71E3-49DE-8F34-78D52CA1518D} 2013-07-19 08:08 - 2013-07-19 08:08 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{D1D5CE6B-F356-4719-84F9-FCD82BB45CBC} 2013-07-19 07:03 - 2013-07-19 07:03 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{37C9E399-D1F2-432C-9316-8AA0F9E59BE1} 2013-07-18 12:16 - 2013-07-18 12:16 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2687BD0F-6087-4066-948A-C1EF28467AAE} 2013-07-17 22:51 - 2013-07-17 22:52 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{327CFD04-0333-494F-A457-56C02C7C86B9} 2013-07-17 08:01 - 2013-07-17 08:01 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E84B9AEC-5F1E-4CDA-857E-52CA3F50A8E4} 2013-07-16 18:54 - 2013-07-16 18:54 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{90C3EF3E-3778-43F6-9086-B677AA13C5F6} 2013-07-16 06:42 - 2013-07-16 06:42 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F41A9DAB-512C-4963-BD02-E871CA0E3E30} 2013-07-15 16:57 - 2013-07-15 16:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7B5A2D0B-AEF7-4F5C-A239-E6C7E9FB3199} 2013-07-14 21:46 - 2013-07-14 21:46 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{69F2261B-5E84-4C17-B3EF-124348260F7C} 2013-07-14 07:46 - 2013-07-14 07:46 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BA9DA50F-E1D7-43F1-858C-1254970EF20D} 2013-07-13 10:47 - 2013-07-13 10:47 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{551079D0-C76E-4978-9D4F-B364D2183635} 2013-07-12 17:32 - 2013-07-12 17:32 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{526F34F3-3C7A-4625-91B0-F69EC0B726CD} 2013-07-12 14:11 - 2013-07-12 14:11 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{1798CBBA-75CA-4671-85BE-60E23D5663EF} 2013-07-12 12:49 - 2013-07-12 12:49 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E5D7A06A-1620-435C-B4EE-B759CEB7D2D2} 2013-07-12 12:07 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-12 12:07 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-07-12 12:07 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-07-12 12:07 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-12 12:07 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-12 12:07 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-12 12:07 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-07-12 12:07 - 2013-06-12 01:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-07-12 12:07 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-07-12 12:07 - 2013-06-12 00:50 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-07-12 12:07 - 2013-06-07 05:22 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-07-12 12:07 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-07-12 08:24 - 2013-07-12 08:24 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4FA571D-BCD1-4561-A514-F836682EDC97} 2013-07-12 06:43 - 2013-07-12 06:43 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BE6CE389-8081-4C2B-8E23-A95923A648BA} 2013-07-12 00:37 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-07-12 00:37 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-07-12 00:37 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-07-12 00:37 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-12 00:37 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-12 00:37 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-07-12 00:37 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-07-11 17:23 - 2013-07-11 17:23 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{9CC4E4B0-A324-4B61-9FE8-DBC595C46A01} 2013-07-11 06:56 - 2013-07-11 06:56 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{685A5CDA-AD40-4C5F-9819-442D9F94C937} 2013-07-10 12:43 - 2013-07-10 12:43 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{108845CD-9618-481D-8AA3-64C596DBE5E0} 2013-07-09 19:57 - 2013-07-09 19:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BE9A8CE6-89FF-45F6-802D-89C442EB796D} 2013-07-09 07:37 - 2013-07-09 07:38 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7F281C06-BDDB-4632-B1A8-A3CAE2E727F7} 2013-07-08 07:04 - 2013-07-08 07:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{C0437018-3F45-46F7-80B6-43136B95264B} 2013-07-06 17:34 - 2013-07-06 17:34 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4EB5D00-F9CC-43BA-BA57-EF1878989B9E} 2013-07-06 08:04 - 2013-07-06 08:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{9AF78A92-DD61-48E0-B509-C44DCE1B33E4} 2013-07-05 06:41 - 2013-07-05 06:41 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{46C3275E-F866-42E1-8B7B-37690BCE8B30} 2013-07-04 06:38 - 2013-07-04 06:38 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B7C0AB54-D2EA-4849-8BE5-19BC4C7D8052} 2013-07-04 06:35 - 2013-07-04 06:35 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{23163873-93B8-404E-9FA6-B23F3AA94100} 2013-07-03 19:25 - 2013-07-03 19:25 - 00002262 _____ C:\Users\Speckmayr Trixi\Desktop\Sicherer Zahlungsverkehr.lnk 2013-07-03 19:25 - 2013-07-03 19:24 - 00001124 _____ C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk 2013-07-03 19:24 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll 2013-07-03 19:24 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys 2013-07-03 19:24 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys 2013-07-03 19:23 - 2013-07-15 14:08 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-07-03 19:23 - 2013-07-15 14:08 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-07-03 19:23 - 2013-07-03 19:23 - 00000000 ____D C:\Windows\ELAMBKUP 2013-07-03 19:23 - 2013-07-03 19:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-07-03 19:15 - 2013-07-03 19:15 - 00000000 ___SD C:\Users\Speckmayr Trixi\Documents\Passwords Database 2013-07-03 06:57 - 2013-07-03 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{987A3EF6-BCFB-4954-9311-A44B0BC4D280} 2013-07-02 21:04 - 2013-07-02 21:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F82FBA77-AA77-413A-AF62-A65ACEF27D57} 2013-07-02 06:57 - 2013-07-02 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{DC997D08-8548-4D7C-87E7-0B6D112549CB} 2013-07-01 18:42 - 2013-07-01 18:42 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2B2DFB8F-C51A-4558-B23B-0F8DE7EAF487} 2013-06-30 19:41 - 2013-06-30 19:41 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{CA30CD1E-F4EF-41AE-8231-4933A6F44529} 2013-06-30 12:58 - 2013-06-30 12:58 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{D3784A27-36F3-4C54-9693-3A29ED74E9EF} 2013-06-30 11:06 - 2013-06-30 11:06 - 00262144 _____ C:\Windows\system32\config\elam 2013-06-30 11:02 - 2013-07-23 06:13 - 00007216 _____ C:\Windows\PFRO.log 2013-06-30 10:14 - 2013-07-25 13:55 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-06-30 09:30 - 2013-06-30 09:30 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-06-30 09:30 - 2013-06-30 09:30 - 00000000 _____ C:\autoexec.bat 2013-06-30 09:29 - 2013-06-30 09:54 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP 2013-06-29 17:40 - 2013-07-25 13:53 - 00006404 _____ C:\Windows\setupact.log 2013-06-29 17:40 - 2013-06-29 17:40 - 00000000 _____ C:\Windows\setuperr.log 2013-06-29 10:35 - 2013-06-30 10:52 - 95023320 ____T C:\ProgramData\d2oca.pad 2013-06-29 10:35 - 2013-06-30 10:51 - 00000000 _____ C:\ProgramData\as98213.txt 2013-06-29 10:35 - 2013-06-29 10:35 - 00044544 _____ (Microsoft Corporation) C:\ProgramData\rundll32.exe 2013-06-29 10:35 - 2013-06-29 10:35 - 00000151 _____ C:\ProgramData\d2oca.reg 2013-06-29 10:35 - 2013-06-29 10:35 - 00000055 _____ C:\ProgramData\d2oca.bat 2013-06-29 10:00 - 2013-06-29 10:00 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{0AEC6568-FA09-4A5A-AD25-F66A33C40874} 2013-06-28 21:09 - 2013-06-28 21:09 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F53F1BB8-8BB8-4426-8E25-5BB70FFDEC22} 2013-06-28 06:40 - 2013-06-28 06:40 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{63BC48EA-AFF1-46B1-A281-2624EA42E6E5} 2013-06-27 06:44 - 2013-06-27 06:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{ACE278D7-AE91-4948-B24C-94B1C855E117} 2013-06-27 06:40 - 2013-06-27 06:40 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{5666A69D-A6CB-4721-98FD-602BFEC83C70} 2013-06-26 09:13 - 2013-06-26 09:13 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{424AA57F-B634-4506-853D-BB40173524F5} 2013-06-25 10:26 - 2013-06-25 10:26 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B68BF099-7DFC-44B2-B52D-782C34C7D84D} 2013-06-25 07:08 - 2013-06-25 07:08 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7C0061C6-DEA8-4ED7-ADBA-C1867032688D} ==================== One Month Modified Files and Folders ======= 2013-07-25 13:58 - 2013-01-30 13:08 - 01447599 _____ C:\Windows\WindowsUpdate.log 2013-07-25 13:58 - 2009-07-14 19:58 - 00654150 _____ C:\Windows\system32\perfh007.dat 2013-07-25 13:58 - 2009-07-14 19:58 - 00130022 _____ C:\Windows\system32\perfc007.dat 2013-07-25 13:58 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI 2013-07-25 13:55 - 2013-06-30 10:14 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-07-25 13:54 - 2012-12-31 09:56 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\A1TA 2013-07-25 13:54 - 2010-10-07 17:06 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite 2013-07-25 13:53 - 2013-06-29 17:40 - 00006404 _____ C:\Windows\setupact.log 2013-07-25 13:53 - 2013-05-31 20:46 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job 2013-07-25 13:53 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-07-25 13:52 - 2010-09-01 13:11 - 00000177 ____H C:\dvmexp.idx 2013-07-25 13:52 - 2009-07-14 06:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-25 13:52 - 2009-07-14 06:45 - 00015152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-25 13:51 - 2013-07-25 13:51 - 00001248 _____ C:\Users\Public\Desktop\HD VDeck.lnk 2013-07-25 13:51 - 2013-07-25 13:51 - 00000000 ____D C:\Windows\system32\SRSLabs 2013-07-25 13:51 - 2013-07-25 13:51 - 00000000 ____D C:\Program Files\VIA 2013-07-25 13:47 - 2010-09-01 13:00 - 00000000 ____D C:\Program Files (x86)\Realtek 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\2C0A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0C0A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0C04 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0816 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0804 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0424 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041F 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041E 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041D 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\041B 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0419 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0416 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0415 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0414 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0413 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0412 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0411 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0410 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040E 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040D 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040C 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040B 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\040A 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0409 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0408 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0406 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0405 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0404 2013-07-25 13:46 - 2013-07-25 13:46 - 00000000 ____D C:\Windows\system32\0401 2013-07-25 13:46 - 2010-10-07 21:42 - 00000000 ____D C:\ProgramData\Downloaded Installations 2013-07-25 13:46 - 2009-07-14 19:58 - 00000000 ____D C:\Windows\system32\0407 2013-07-25 13:45 - 2010-10-07 17:06 - 00000000 ___RD C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-07-25 13:45 - 2010-09-01 12:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-07-25 13:44 - 2013-07-25 13:44 - 00013142 _____ C:\Windows\LDPINST.LOG 2013-07-25 13:44 - 2013-07-25 13:44 - 00000383 _____ C:\Windows\LkmdfCoInst.log 2013-07-25 13:44 - 2013-07-25 13:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\Logishrd 2013-07-25 13:44 - 2010-10-07 21:51 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2013-07-25 13:44 - 2010-10-07 21:50 - 00000000 ____D C:\Program Files\Common Files\LogiShrd 2013-07-25 13:43 - 2013-07-25 13:43 - 00000000 ____D C:\Program Files\Logitech 2013-07-25 13:43 - 2010-10-07 21:50 - 00000000 ____D C:\ProgramData\Logishrd 2013-07-25 13:42 - 2013-07-25 13:42 - 00000000 ____D C:\ProgramData\ATI 2013-07-25 13:42 - 2013-07-25 13:42 - 00000000 ____D C:\ProgramData\AMD 2013-07-25 13:41 - 2013-07-25 13:41 - 00000000 ____D C:\Program Files (x86)\AMD AVT 2013-07-25 13:41 - 2010-09-01 13:02 - 00000000 ____D C:\Program Files\ATI Technologies 2013-07-25 13:41 - 2010-09-01 13:02 - 00000000 ____D C:\Program Files (x86)\ATI Technologies 2013-07-25 13:38 - 2013-07-25 13:38 - 00000000 ____D C:\AMD 2013-07-25 13:36 - 2013-04-11 12:16 - 00003994 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{4A8F2511-85DC-466D-A92F-31ECD06D45CD} 2013-07-25 13:35 - 2010-10-07 21:45 - 00000000 ____D C:\Windows\RaidTool 2013-07-25 13:34 - 2013-07-25 13:34 - 00000000 ____D C:\ProgramData\AmUStor 2013-07-25 13:34 - 2013-07-25 13:34 - 00000000 ____D C:\Program Files (x86)\AmIcoSingLun 2013-07-25 13:34 - 2012-04-09 07:23 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-25 13:33 - 2013-07-25 13:33 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Marvell 2013-07-25 13:33 - 2013-07-25 13:33 - 00000000 ____D C:\Intel 2013-07-25 13:33 - 2013-07-25 13:25 - 00000000 ____D C:\ProgramData\DriverGenius 2013-07-25 13:33 - 2010-10-07 21:48 - 00000000 ____D C:\Program Files (x86)\Marvell 2013-07-25 13:32 - 2011-09-24 18:45 - 00051200 ___SH C:\Users\Speckmayr Trixi\Documents\Thumbs.db 2013-07-25 13:25 - 2013-07-25 13:25 - 00001253 _____ C:\Users\Speckmayr Trixi\Desktop\Driver Genius.lnk 2013-07-25 13:25 - 2013-07-25 13:25 - 00000000 ____D C:\Program Files (x86)\Driver-Soft 2013-07-25 13:22 - 2013-07-25 13:22 - 00000000 ____D C:\FRST 2013-07-25 13:21 - 2013-07-25 13:22 - 01779761 _____ (Farbar) C:\Users\Speckmayr Trixi\Desktop\FRST64.exe 2013-07-25 13:21 - 2013-07-25 13:21 - 01779761 _____ (Farbar) C:\Users\Speckmayr Trixi\Downloads\FRST64.exe 2013-07-25 07:07 - 2013-07-25 07:07 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2C890CB3-C7AD-43FD-A5C5-0031E2C1792D} 2013-07-24 17:54 - 2010-10-10 19:37 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\UseNeXT 2013-07-24 17:47 - 2010-10-10 19:37 - 00000000 ____D C:\Users\Speckmayr Trixi\Documents\UseNeXT 2013-07-24 07:24 - 2013-07-24 07:23 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4C69635-28D1-4114-81CE-44C8FCAF3AE1} 2013-07-23 19:17 - 2013-07-23 19:17 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2C57BF94-9AF2-491B-A811-D3F6D2F88074} 2013-07-23 06:48 - 2013-07-23 06:48 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{C855C438-6F24-4304-9552-FAF8292DCA1C} 2013-07-23 06:13 - 2013-06-30 11:02 - 00007216 _____ C:\Windows\PFRO.log 2013-07-23 06:13 - 2012-08-30 20:31 - 00000000 ____D C:\Program Files\Google 2013-07-23 06:13 - 2012-08-30 20:29 - 00000000 ____D C:\Program Files (x86)\Google 2013-07-22 06:57 - 2013-07-22 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{697818A9-56CA-4EB3-A404-0C995A124AC2} 2013-07-22 06:44 - 2013-07-22 06:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F1F7F08E-CEA9-493E-BCD1-B5439015F555} 2013-07-21 14:59 - 2013-07-21 14:59 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{FE32B7DE-C473-4CBA-9CFF-681B765006C0} 2013-07-21 08:59 - 2012-08-30 20:29 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\Google 2013-07-21 08:58 - 2010-10-12 19:51 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\Adobe 2013-07-21 08:57 - 2012-04-09 07:23 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-07-21 08:57 - 2012-04-09 07:23 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-07-21 08:57 - 2011-06-10 07:06 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-07-20 11:03 - 2013-07-20 11:03 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{3A9F6825-0B0C-40D6-B4CA-EC8F9CEA9F64} 2013-07-19 21:47 - 2013-07-19 21:47 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B58213DB-71E3-49DE-8F34-78D52CA1518D} 2013-07-19 08:08 - 2013-07-19 08:08 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{D1D5CE6B-F356-4719-84F9-FCD82BB45CBC} 2013-07-19 07:03 - 2013-07-19 07:03 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{37C9E399-D1F2-432C-9316-8AA0F9E59BE1} 2013-07-18 12:16 - 2013-07-18 12:16 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2687BD0F-6087-4066-948A-C1EF28467AAE} 2013-07-18 11:03 - 2011-03-09 07:30 - 00000631 _____ C:\Users\Speckmayr Trixi\Desktop\Viessmann ETEK Online.url 2013-07-18 10:32 - 2012-04-22 19:01 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\.minecraft 2013-07-17 22:52 - 2013-07-17 22:51 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{327CFD04-0333-494F-A457-56C02C7C86B9} 2013-07-17 15:05 - 2010-12-26 10:14 - 00000000 ____D C:\Users\Speckmayr Trixi\Desktop\Eigene Spiele 2013-07-17 08:01 - 2013-07-17 08:01 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E84B9AEC-5F1E-4CDA-857E-52CA3F50A8E4} 2013-07-16 18:54 - 2013-07-16 18:54 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{90C3EF3E-3778-43F6-9086-B677AA13C5F6} 2013-07-16 06:42 - 2013-07-16 06:42 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F41A9DAB-512C-4963-BD02-E871CA0E3E30} 2013-07-15 16:57 - 2013-07-15 16:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7B5A2D0B-AEF7-4F5C-A239-E6C7E9FB3199} 2013-07-15 14:08 - 2013-07-03 19:23 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2013-07-15 14:08 - 2013-07-03 19:23 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2013-07-15 14:08 - 2012-10-18 14:50 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys 2013-07-15 14:08 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys 2013-07-14 21:46 - 2013-07-14 21:46 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{69F2261B-5E84-4C17-B3EF-124348260F7C} 2013-07-14 09:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing 2013-07-14 07:46 - 2013-07-14 07:46 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BA9DA50F-E1D7-43F1-858C-1254970EF20D} 2013-07-13 10:47 - 2013-07-13 10:47 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{551079D0-C76E-4978-9D4F-B364D2183635} 2013-07-12 17:32 - 2013-07-12 17:32 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{526F34F3-3C7A-4625-91B0-F69EC0B726CD} 2013-07-12 14:11 - 2013-07-12 14:11 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{1798CBBA-75CA-4671-85BE-60E23D5663EF} 2013-07-12 12:49 - 2013-07-12 12:49 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E5D7A06A-1620-435C-B4EE-B759CEB7D2D2} 2013-07-12 12:32 - 2010-09-01 13:33 - 00000000 ____D C:\Windows\Panther 2013-07-12 12:31 - 2009-07-14 06:45 - 00447896 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-12 12:30 - 2012-05-22 17:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-07-12 12:30 - 2012-05-22 17:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-07-12 12:29 - 2009-07-14 20:18 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-12 12:29 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2013-07-12 12:29 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2013-07-12 12:13 - 2010-10-07 18:39 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-07-12 12:08 - 2010-09-01 13:51 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-07-12 08:24 - 2013-07-12 08:24 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4FA571D-BCD1-4561-A514-F836682EDC97} 2013-07-12 06:43 - 2013-07-12 06:43 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BE6CE389-8081-4C2B-8E23-A95923A648BA} 2013-07-11 17:23 - 2013-07-11 17:23 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{9CC4E4B0-A324-4B61-9FE8-DBC595C46A01} 2013-07-11 06:56 - 2013-07-11 06:56 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{685A5CDA-AD40-4C5F-9819-442D9F94C937} 2013-07-10 12:43 - 2013-07-10 12:43 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{108845CD-9618-481D-8AA3-64C596DBE5E0} 2013-07-09 19:57 - 2013-07-09 19:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{BE9A8CE6-89FF-45F6-802D-89C442EB796D} 2013-07-09 07:38 - 2013-07-09 07:37 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7F281C06-BDDB-4632-B1A8-A3CAE2E727F7} 2013-07-08 07:04 - 2013-07-08 07:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{C0437018-3F45-46F7-80B6-43136B95264B} 2013-07-06 17:34 - 2013-07-06 17:34 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{E4EB5D00-F9CC-43BA-BA57-EF1878989B9E} 2013-07-06 08:04 - 2013-07-06 08:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{9AF78A92-DD61-48E0-B509-C44DCE1B33E4} 2013-07-05 06:41 - 2013-07-05 06:41 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{46C3275E-F866-42E1-8B7B-37690BCE8B30} 2013-07-04 06:38 - 2013-07-04 06:38 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B7C0AB54-D2EA-4849-8BE5-19BC4C7D8052} 2013-07-04 06:35 - 2013-07-04 06:35 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{23163873-93B8-404E-9FA6-B23F3AA94100} 2013-07-03 19:45 - 2011-08-23 17:05 - 00000000 ____D C:\Program Files (x86)\Nokia 2013-07-03 19:43 - 2012-12-14 18:14 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\Apple Computer 2013-07-03 19:43 - 2010-10-07 21:09 - 00000000 ____D C:\ProgramData\MFAData 2013-07-03 19:25 - 2013-07-03 19:25 - 00002262 _____ C:\Users\Speckmayr Trixi\Desktop\Sicherer Zahlungsverkehr.lnk 2013-07-03 19:24 - 2013-07-03 19:25 - 00001124 _____ C:\Users\Public\Desktop\Kaspersky PURE 3.0.lnk 2013-07-03 19:23 - 2013-07-03 19:23 - 00000000 ____D C:\Windows\ELAMBKUP 2013-07-03 19:23 - 2013-07-03 19:23 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2013-07-03 19:15 - 2013-07-03 19:15 - 00000000 ___SD C:\Users\Speckmayr Trixi\Documents\Passwords Database 2013-07-03 06:57 - 2013-07-03 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{987A3EF6-BCFB-4954-9311-A44B0BC4D280} 2013-07-02 21:04 - 2013-07-02 21:04 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F82FBA77-AA77-413A-AF62-A65ACEF27D57} 2013-07-02 06:57 - 2013-07-02 06:57 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{DC997D08-8548-4D7C-87E7-0B6D112549CB} 2013-07-01 18:42 - 2013-07-01 18:42 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{2B2DFB8F-C51A-4558-B23B-0F8DE7EAF487} 2013-07-01 07:12 - 2011-09-24 17:08 - 00000000 ____D C:\Users\Speckmayr Trixi\AppData\Roaming\Nokia Ovi Suite 2013-07-01 07:12 - 2011-09-05 17:41 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\NokiaAccount 2013-06-30 19:41 - 2013-06-30 19:41 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{CA30CD1E-F4EF-41AE-8231-4933A6F44529} 2013-06-30 12:58 - 2013-06-30 12:58 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{D3784A27-36F3-4C54-9693-3A29ED74E9EF} 2013-06-30 12:23 - 2010-10-07 17:06 - 00000000 ____D C:\Users\Speckmayr Trixi 2013-06-30 11:23 - 2013-03-10 11:24 - 00140288 ___SH C:\Users\Speckmayr Trixi\Desktop\Thumbs.db 2013-06-30 11:06 - 2013-06-30 11:06 - 00262144 _____ C:\Windows\system32\config\elam 2013-06-30 11:02 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-06-30 10:52 - 2013-06-29 10:35 - 95023320 ____T C:\ProgramData\d2oca.pad 2013-06-30 10:51 - 2013-06-29 10:35 - 00000000 _____ C:\ProgramData\as98213.txt 2013-06-30 09:54 - 2013-06-30 09:29 - 00000000 ____D C:\Windows\BCD5545077AC4347B24F654B1189F8D4.TMP 2013-06-30 09:54 - 2013-06-06 09:37 - 00000000 ____D C:\Windows\SysWOW64\jmdp 2013-06-30 09:54 - 2013-06-06 08:32 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-06-30 09:54 - 2010-09-01 13:11 - 00000000 ___HD C:\dvmexp 2013-06-30 09:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-06-30 09:30 - 2013-06-30 09:30 - 00000000 ____D C:\Program Files\Enigma Software Group 2013-06-30 09:30 - 2013-06-30 09:30 - 00000000 _____ C:\autoexec.bat 2013-06-29 17:40 - 2013-06-29 17:40 - 00000000 _____ C:\Windows\setuperr.log 2013-06-29 10:35 - 2013-06-29 10:35 - 00044544 _____ (Microsoft Corporation) C:\ProgramData\rundll32.exe 2013-06-29 10:35 - 2013-06-29 10:35 - 00000151 _____ C:\ProgramData\d2oca.reg 2013-06-29 10:35 - 2013-06-29 10:35 - 00000055 _____ C:\ProgramData\d2oca.bat 2013-06-29 10:00 - 2013-06-29 10:00 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{0AEC6568-FA09-4A5A-AD25-F66A33C40874} 2013-06-28 21:09 - 2013-06-28 21:09 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{F53F1BB8-8BB8-4426-8E25-5BB70FFDEC22} 2013-06-28 06:40 - 2013-06-28 06:40 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{63BC48EA-AFF1-46B1-A281-2624EA42E6E5} 2013-06-27 06:44 - 2013-06-27 06:44 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{ACE278D7-AE91-4948-B24C-94B1C855E117} 2013-06-27 06:40 - 2013-06-27 06:40 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{5666A69D-A6CB-4721-98FD-602BFEC83C70} 2013-06-26 09:13 - 2013-06-26 09:13 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{424AA57F-B634-4506-853D-BB40173524F5} 2013-06-25 10:26 - 2013-06-25 10:26 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{B68BF099-7DFC-44B2-B52D-782C34C7D84D} 2013-06-25 07:08 - 2013-06-25 07:08 - 00000000 ____D C:\Users\SPECKM~1\AppData\Local\{7C0061C6-DEA8-4ED7-ADBA-C1867032688D} ZeroAccess: C:\$Recycle.Bin\S-1-5-21-127706961-3467140109-1717688444-1000\$0ac8a865ff039bb022131499227ce2c0 ZeroAccess: C:\$Recycle.Bin\S-1-5-18\$0ac8a865ff039bb022131499227ce2c0 Files to move or delete: ==================== C:\ProgramData\rundll32.exe C:\Users\Speckmayr Trixi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\msconfig.lnk C:\ProgramData\d2oca.bat C:\ProgramData\d2oca.pad C:\ProgramData\d2oca.reg C:\ProgramData\ntuser.dat ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-23 06:44 ==================== End Of Log ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-07-2013 Ran by Speckmayr Trixi at 2013-07-25 14:00:41 Running from C:\Users\Speckmayr Trixi\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 64 Bit HP CIO Components Installer (Version: 7.2.8) 8500A909_eDocs (x32 Version: 1.00.0000) 8500A909_Help (x32 Version: 1.00.0000) 8500A909a (x32 Version: 50.0.165.000) A1 Servicecenter (x32 Version: 1.2.0.28) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7) Adobe Shockwave Player 11.6 (x32 Version: 11.6.8.638) Alcor Micro USB Card Reader (x32 Version: 3.10.142.72249) AMD Accelerated Video Transcoding (Version: 12.10.100.30328) AMD Catalyst Install Manager (Version: 8.0.911.0) AMD Drag and Drop Transcoding (Version: 2.00.0000) AMD Media Foundation Decoders (Version: 1.0.80328.2204) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) ASIO4ALL (x32) Bonjour (Version: 3.0.0.10) BPD_DSWizards (x32 Version: 1.00.0000) bpd_scan (x32 Version: 3.00.0000) BPDSoftware (x32 Version: 50.0.165.000) BPDSoftware_Ini (x32 Version: 1.00.0000) BrowserProtect (x32) BufferChm (x32 Version: 130.0.331.000) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center (x32 Version: 2013.0328.2218.38225) Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225) Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225) Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225) CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225) CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225) CCC Help Czech (x32 Version: 2013.0328.2217.38225) CCC Help Danish (x32 Version: 2013.0328.2217.38225) CCC Help Dutch (x32 Version: 2013.0328.2217.38225) CCC Help English (x32 Version: 2013.0328.2217.38225) CCC Help Finnish (x32 Version: 2013.0328.2217.38225) CCC Help French (x32 Version: 2013.0328.2217.38225) CCC Help German (x32 Version: 2013.0328.2217.38225) CCC Help Greek (x32 Version: 2013.0328.2217.38225) CCC Help Hungarian (x32 Version: 2013.0328.2217.38225) CCC Help Italian (x32 Version: 2013.0328.2217.38225) CCC Help Japanese (x32 Version: 2013.0328.2217.38225) CCC Help Korean (x32 Version: 2013.0328.2217.38225) CCC Help Norwegian (x32 Version: 2013.0328.2217.38225) CCC Help Polish (x32 Version: 2013.0328.2217.38225) CCC Help Portuguese (x32 Version: 2013.0328.2217.38225) CCC Help Russian (x32 Version: 2013.0328.2217.38225) CCC Help Spanish (x32 Version: 2013.0328.2217.38225) CCC Help Swedish (x32 Version: 2013.0328.2217.38225) CCC Help Thai (x32 Version: 2013.0328.2217.38225) CCC Help Turkish (x32 Version: 2013.0328.2217.38225) ccc-utility64 (Version: 2013.0328.2218.38225) Claro Chrome Toolbar (x32 Version: 1.0.0.2) Claro toolbar (x32 Version: 1.8.8.5) CyberLink DVD Suite (x32 Version: 7.0.1526) CyberLink PhotoNow (x32 Version: 1.1.5615) CyberLink Power2Go (x32 Version: 6.1.3018) CyberLink PowerBackup (x32 Version: 2.5.4511) CyberLink PowerDirector (x32 Version: 7.0.2921) CyberLink PowerDVD 9 (x32 Version: 9.0.1719) CyberLink PowerDVD Copy (x32 Version: 1.0.5611) CyberLink PowerProducer (x32 Version: 5.0.2.1815) D3DX10 (x32 Version: 15.4.2368.0902) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32) Destinations (x32 Version: 140.0.77.000) DeviceDiscovery (x32 Version: 130.0.465.000) DocMgr (x32 Version: 130.0.000.000) DocProc (x32 Version: 13.0.0.0) dows-Treiberpaket - Eastman Kodak KODAK Digital Camera (01/29/2010 1.4.1.0) (Version: 01/29/2010 1.4.1.0) Driver Genius (x32 Version: 12.0) DVD Shrink 3.2 deutsch (DeCSS-frei) (x32) Encarta Suchleiste (64-bits) (Version: 1.0.0) EPU-6 Engine (x32 Version: 1.02.04) eReg (x32 Version: 1.20.138.34) Express Gate (x32 Version: 1.4.10.17) Fairway 1 (x32 Version: 1.0.0.0) Farm Frenzy - Viking Heroes (x32) Farm Frenzy 3 - Madagascar 1.0.0.0 (x32) Farm Frenzy Gone Fishing (x32) Fax (x32 Version: 130.0.418.000) GPBaseService2 (x32 Version: 130.0.371.000) HappyFoto-Designer 4.5 (x32) HEROLD Telefonbuch CD network (x32) HP Customer Participation Program 13.0 (Version: 13.0) HP Document Manager 2.0 (Version: 2.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Smart Web Printing 4.51 (Version: 4.51) HP Solution Center 13.0 (Version: 13.0) HP Update (x32 Version: 4.000.011.006) HPDiagnosticAlert (x32 Version: 1.00.0000) HPProductAssistant (x32 Version: 130.0.371.000) HPSSupply (x32 Version: 130.0.371.000) IB Updater Service (x32 Version: 3.0.5.4) ImagXpress (x32 Version: 7.0.74.0) iTunes (Version: 11.0.4.4) Java 7 Update 9 (x32 Version: 7.0.90) Java Auto Updater (x32 Version: 2.1.9.0) Java(TM) 6 Update 32 (x32 Version: 6.0.320) JMicron JMB36X Driver (x32 Version: 1.17.65.11) Junk Mail filter update (x32 Version: 15.4.3502.0922) Kaspersky PURE 3.0 (x32 Version: 13.0.2.558) KODAK Share-Tastenanwendung (x32 Version: 4.01.0000.0000) Logitech SetPoint 6.60 (Version: 6.60.170) MarketResearch (x32 Version: 130.0.374.000) marvell 91xx driver (x32 Version: 1.2.0.1035) MediaShow (x32 Version: 3.0.5907) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Encarta 2007 - Enzyklopädie (x32 Version: 2007) Microsoft Office 2010 Service Pack 1 (SP1) (x32) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Home and Student 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000) Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 8.0.50727.42) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (x32 Version: 9.0.21022.218) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) MPM (x32 Version: 1.00.0000) MSVC80_x64_v2 (Version: 1.0.3.0) MSVC80_x86_v2 (x32 Version: 1.0.3.0) MSVC90_x64 (Version: 1.0.1.2) MSVC90_x86 (x32 Version: 1.0.1.2) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0) neroxml (x32 Version: 1.0.0) Network64 (Version: 130.0.579.000) Network64 (Version: 140.0.221.000) OCR Software by I.R.I.S. 13.0 (Version: 13.0) Officejet Pro 8500 A909 Series (Version: 13.0) PC Connectivity Solution (x32 Version: 11.4.21.0) Platform (x32 Version: 1.34) PowerISO (x32 Version: 4.7) ProductContext (x32 Version: 50.0.165.000) Ravensburger tiptoi (x32) Realtek Ethernet Controller Driver (x32 Version: 7.72.410.2013) Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6650) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.39.0) Scan (x32 Version: 140.0.80.000) Shop for HP Supplies (Version: 13.0) SmartWebPrinting (x32 Version: 130.0.457.000) SolutionCenter (x32 Version: 130.0.373.000) Status (x32 Version: 130.0.469.000) SweetIM for Messenger 3.7 (x32 Version: 3.7.0005) swMSM (x32 Version: 12.0.0.1) Toolbox (x32 Version: 130.0.648.000) Toxic Biohazard (x32) TrayApp (x32 Version: 130.0.422.000) Unity Web Player (HKCU Version: ) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft Office 2010 (KB2494150) (x32) Update for Microsoft Office 2010 (KB2553065) (x32) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2566458) (x32) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32) Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32) Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32) Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32) Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32) Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32) Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32) Update Manager for SweetPacks 1.1 (x32 Version: 1.1.0008) UseNeXT by Tangysoft (x32) VIA Plattform-Geräte-Manager (x32 Version: 1.34) Visual Studio 2008 x64 Redistributables (x32 Version: 10.0.0.2) Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1) VLC media player 2.0.3 (x32 Version: 2.0.3) WebReg (x32 Version: 130.0.132.017) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Messenger (x32 Version: 15.4.3538.0513) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live Sync (x32 Version: 14.0.8117.416) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0) XnView 1.98.1 (x32 Version: 1.98.1) ==================== Restore Points ========================= |
Hi,  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. |
Code: ComboFix 13-07-25.02 - Speckmayr Trixi 26.07.2013 10:48:02.1.4 - x64 |
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte. |
Code: # AdwCleaner v2.306 - Datei am 26/07/2013 um 18:37:40 erstelltFRST Logfile: FRST Logfile: FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-07-2013--- --- --- --- --- --- Code: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-07-2013 |
Code: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
Code: Successfully deleted: [Empty Folder] C:\Users\Speckmayr Trixi\appdata\local\{77AD0FEF-BD7A-4F50-87DA-770EA37A072C} |
Code: Successfully deleted: [Empty Folder] C:\Users\Speckmayr Trixi\appdata\local\{C4C646C5-3B31-4518-918B-BCDB3163BD25} |
Sorry für die Verspätung, liege flach mit Grippe und Fieber. Noch nen Onlinescan und wir sind durch. ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST Log bitte. noch Probleme? :) |
Code: Results of screen317's Security Check version 0.99.71 Code: ESETSmartInstaller@High as downloader log:FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-07-2013 03--- --- --- --- --- --- --- --- --- Code: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-07-2013 03Danke!! |
Java und Adobe updaten. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code: C:\ProgramData\d2oca.regSpeichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig :) Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann. |
Meine Antwort bekommst du in ca. 1 Woche - bin ab heute auf Urlaub. Danke! |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 02:43 Uhr. |
Copyright ©2000-2025, Trojaner-Board
