Trojaner-Board
Seite 1 von 3 1 23
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Windows 7: Sicherheitswarnung vom Telekom-Abuse-Team und Malwarebyte-Funde (https://www.trojaner-board.de/140602-windows-7-sicherheitswarnung-telekom-abuse-team-malwarebyte-funde.html)

mummb 28.08.2013 16:12
Windows 7: Sicherheitswarnung vom Telekom-Abuse-Team und Malwarebyte-Funde
 
Hallo,

wir erhielten heute vom Telekom Abuse-Team eine Sicherheitswarnung, dass von unserer IP-Adresse Spam verschickt wurde und das darüber Spamtraps angeschrieben wurden. Darum wird eine Infizierung vermutet.

Alle erwähnten Fälle waren am vergangenen Montag in der Zeit als wir Besuch von meinem Chef aus Argentinien hatten und er über unser WLAN im Internet war. Ich hatte dann eigentlich in der ganzen Zeit am Montag nachmittag Problem mit dem Internet, konnte nicht auf alle Seiten zugreifen, aber ich habe das nicht mit dem Anmelden meines Chefs in Verbindung gebracht.

Ich habe AVIRA Provessional Security installiert, aber als heute die Mail von der Telekom kam habe ich Malwarebytes durchlaufen lassen und prompt Funde gehabt. Hier das Logfile:
Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.08.28.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16660
Admin :: MEYER-PC [Administrator]

28.08.2013 11:55:57
MBAM-log-2013-08-28 (13-22-39).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 537652
Laufzeit: 1 Stunde(n), 20 Minute(n), 17 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 12
C:\Program Files (x86)\Jetztspielen.de\AztecTribe\mism.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Jetztspielen.de\Building The Great Wall Of China\mism.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Jetztspielen.de\Meridian Age of Invention\mism.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Jetztspielen.de\Outta this Kingdom\mism.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Jetztspielen.de\Rescue Team 3\mism.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Jetztspielen.de\Royal Envoy\mism.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\Jetztspielen.de\Viking Brothers\mism.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OSWYQNHN\ism[2].exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\Admin\AppData\Local\Temp\ct2661025\ism.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\Meyer\AppData\Local\Temp\_h_b_fvH.exe.part (PUP.Optional.InstallCore) -> Keine Aktion durchgeführt.
C:\Users\Meyer\Documents\Downloads\SoftonicDownloader_fuer_librecad.exe (PUP.Optional.Softonic) -> Keine Aktion durchgeführt.
C:\Users\Meyer\Documents\Spiele\ZipOpenerSetup.exe (PUP.Optional.InstallCore) -> Keine Aktion durchgeführt.

(Ende)
Auch auf den Laptops meiner Kinder - die haben die Free Avira Version auf ihren Rechnern - habe ich Malwarebytes laufen lassen und auch dort waren Funde, auf einem 'PUM.Disabled. SecurityCentre' auf den anderen 'PUP.Optional.InstallBrain'. Wenn möglich würde ich mich aber erstmal auf meinen Rechner konzentrieren und würde Euch dann anschließend wegen der beiden Laptops anschreiben. Oder infiziere ich mich dann gleich wieder, sobald die Kinder das gleiche Netzwerk nutzen?

Ich weiß auch nicht, ob die Funde, die Malwarebytes hat, etwas mit den Mails von der Telekom zu tun haben. In meiner Unwissenheit habe ich ja noch die Hoffnung, dass der Laptop meines Chefs 'Schuld' an den Spams ist und wir mit seiner Abreise auch das Problem los sind...

Könnt Ihr mir helfen, das zu klären bzw. meinen/unsere Rechner wieder zu säubern?

Ich hoffe, ich falle unter Eure Ausnahmeregelung. Ich nutze unseren Computer insofern 'geschäftlich', als ich auf Minijobbasis von zuhause aus arbeite.

Hier sind die Logfiles von FRST

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by Admin (administrator) on 28-08-2013 14:53:09
Running from C:\Users\Admin\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(iAnywhere Solutions, Inc.) C:\Program Files (x86)\Sybase\SQL Anywhere 9\win32\dbsrv9.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_x64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avira Operations GmbH & Co. KG) C:\program files (x86)\avira\antivir desktop\avscan.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_x64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Crystal Dew World) C:\Program Files (x86)\CrystalDiskInfo\DiskInfo.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
() C:\Users\Admin\Downloads\Defogger.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] - C:\Program Files\Classic Shell\ClassicStartMenu.exe [160256 2012-10-28] (IvoSoft)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [403888 2012-08-23] (Acronis)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [524288 2008-08-11] ()
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6049096 2012-08-23] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LexwareInfoService] - C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Taskmgr.lnk
ShortcutTarget: Taskmgr.lnk -> C:\Windows\System32\taskmgr.exe (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.alawarspiele.de
SearchScopes: HKCU - {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=20&locale=de_DE&gct=kwd&qsrc=2869
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yol5rs76.default
FF Homepage: https://bay150.mail.live.com/default.aspx?id=64855
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==================== Services (Whitelisted) =================

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [371768 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 Lexware_Professional_Datenbank; C:\Program Files (x86)\Sybase\SQL Anywhere 9\win32\dbsrv9.exe [83248 2011-06-29] (iAnywhere Solutions, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1227800 2013-04-18] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [659992 2013-04-18] (Secunia)
R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2143072 2012-05-29] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-28] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-28] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-28] (Avira Operations GmbH & Co. KG)
R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [79872 2009-06-10] (AVM GmbH)
R2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [54072 2007-10-22] (Samsung Electronics)
R2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [54072 2007-10-22] (Samsung Electronics)
R3 FUS2BASE; C:\Windows\System32\DRIVERS\fus2base.sys [696832 2009-06-10] (AVM Berlin)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-04-18] (Secunia)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-01-09] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2011-11-08] (TuneUp Software)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [166024 2013-01-09] (Acronis)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-28 14:45 - 2013-08-28 14:45 - 00020321 _____ C:\Users\Admin\Downloads\Addition.txt
2013-08-28 14:43 - 2013-08-28 14:43 - 00000000 ____D C:\FRST
2013-08-28 14:41 - 2013-08-28 14:41 - 00000472 _____ C:\Users\Admin\Downloads\defogger_disable.log
2013-08-28 14:41 - 2013-08-28 14:41 - 00000000 _____ C:\Users\Admin\defogger_reenable
2013-08-28 14:22 - 2013-08-28 14:23 - 01579080 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2013-08-28 14:16 - 2013-08-28 14:16 - 00050477 _____ C:\Users\Admin\Downloads\Defogger.exe
2013-08-28 13:26 - 2013-08-28 13:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\TeamViewer
2013-08-28 11:42 - 2013-08-28 11:42 - 00001117 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-28 11:42 - 2013-08-28 11:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-28 11:42 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-28 11:41 - 2013-08-28 11:41 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Admin\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-26 14:40 - 2013-08-26 14:43 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Mozilla
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Apple Computer
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Local\Mozilla
2013-08-22 15:31 - 2013-08-22 15:31 - 00027648 _____ C:\Users\Meyer\Documents\Kopie von Zimmereinteilung.xls
2013-08-21 22:14 - 2013-08-21 22:14 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\Users\Admin\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\ProgramData\WeatherLord
2013-08-19 16:58 - 2013-08-19 16:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-18 16:10 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-18 16:10 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-18 16:10 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-18 16:10 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-18 16:10 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-18 16:10 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-18 16:10 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-18 16:10 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-18 16:10 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-18 16:10 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-18 16:10 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-18 16:10 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-18 16:01 - 2013-08-18 16:05 - 00000000 ____D C:\Windows\system32\MRT
2013-08-18 15:51 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-18 15:51 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-18 15:48 - 2013-08-18 15:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Apple Computer
2013-08-18 15:30 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-18 15:30 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-18 15:30 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-18 15:30 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-18 15:30 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-18 15:30 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-18 15:30 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-18 15:30 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-18 15:30 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-18 15:30 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-18 15:30 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-18 00:09 - 2013-08-18 00:09 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple
2013-08-17 23:54 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-17 23:54 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-17 23:54 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-17 23:54 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-17 23:54 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-17 23:54 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-17 23:54 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-17 23:54 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-17 22:12 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-17 22:12 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-17 22:11 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-17 22:11 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-17 22:11 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-17 22:06 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-17 21:47 - 2013-08-17 21:50 - 00903449 _____ C:\Users\Meyer\Downloads\jxpiinstall.exe
2013-07-31 21:45 - 2013-07-31 21:45 - 00000000 ____D C:\Users\MGC\AppData\Roaming\Apple Computer
2013-07-31 11:31 - 2013-07-31 11:32 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\Apple Computer
2013-07-31 11:31 - 2013-07-31 11:31 - 00001791 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-31 11:31 - 2013-07-31 11:31 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple Computer
2013-07-31 11:31 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\Apple Computer
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iTunes
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iPod
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Users\Admin\AppData\Local\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Bonjour
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-07-31 11:25 - 2013-07-31 11:27 - 00000000 ____D C:\ProgramData\Apple
2013-07-31 10:00 - 2013-07-31 11:20 - 00000000 ____D C:\Users\Meyer\Downloads\Apple
2013-07-31 09:56 - 2013-07-31 11:32 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\DiskAid
2013-07-31 09:56 - 2013-07-31 09:56 - 00001043 _____ C:\Users\Public\Desktop\DiskAid.lnk
2013-07-31 09:56 - 2013-07-31 09:56 - 00000000 ____D C:\Program Files (x86)\DigiDNA

==================== One Month Modified Files and Folders =======

2013-08-28 14:45 - 2013-08-28 14:45 - 00020321 _____ C:\Users\Admin\Downloads\Addition.txt
2013-08-28 14:43 - 2013-08-28 14:43 - 00000000 ____D C:\FRST
2013-08-28 14:41 - 2013-08-28 14:41 - 00000472 _____ C:\Users\Admin\Downloads\defogger_disable.log
2013-08-28 14:41 - 2013-08-28 14:41 - 00000000 _____ C:\Users\Admin\defogger_reenable
2013-08-28 14:41 - 2013-01-09 09:45 - 00000000 ____D C:\Users\Admin
2013-08-28 14:39 - 2012-11-21 13:35 - 00000000 ____D C:\Windows\Panther
2013-08-28 14:27 - 2009-07-14 06:45 - 00015136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-28 14:27 - 2009-07-14 06:45 - 00015136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-28 14:23 - 2013-08-28 14:22 - 01579080 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2013-08-28 14:16 - 2013-08-28 14:16 - 00050477 _____ C:\Users\Admin\Downloads\Defogger.exe
2013-08-28 14:01 - 2012-11-21 20:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-28 14:00 - 2012-11-22 01:00 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{DEFEEBAB-E89C-4DFD-9611-91D4E5A9AABC}
2013-08-28 13:29 - 2012-11-21 13:38 - 02080306 ____N C:\Windows\WindowsUpdate.log
2013-08-28 13:26 - 2013-08-28 13:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\TeamViewer
2013-08-28 13:25 - 2012-11-27 11:48 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-08-28 13:25 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-28 13:23 - 2013-01-16 16:30 - 00000000 ____D C:\Users\Meyer\Documents\Spiele
2013-08-28 11:42 - 2013-08-28 11:42 - 00001117 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-28 11:42 - 2013-08-28 11:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-28 11:41 - 2013-08-28 11:41 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Admin\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-28 11:29 - 2013-01-16 16:36 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jetztspielen.de
2013-08-28 11:27 - 2012-11-27 19:37 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\Skype
2013-08-28 11:27 - 2012-11-22 13:31 - 00000000 ____D C:\ProgramData\Lexware
2013-08-27 16:06 - 2005-04-01 09:38 - 00000000 ____D C:\Users\Meyer\Documents\Stunden
2013-08-27 15:10 - 2012-11-27 15:03 - 00000000 ____D C:\Program Files (x86)\StarMoney 8.0 S-Edition
2013-08-26 22:12 - 2013-01-16 16:36 - 00000000 ____D C:\ProgramData\AlawarWrapper
2013-08-26 14:58 - 2009-07-14 19:58 - 00709156 _____ C:\Windows\system32\perfh007.dat
2013-08-26 14:58 - 2009-07-14 19:58 - 00153592 _____ C:\Windows\system32\perfc007.dat
2013-08-26 14:58 - 2009-07-14 07:13 - 01647128 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-26 14:51 - 2012-11-27 10:11 - 00000000 ____D C:\Users\Meyer\AppData\Local\CrashDumps
2013-08-26 14:43 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Mozilla
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Apple Computer
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Local\Mozilla
2013-08-26 14:40 - 2013-07-05 23:01 - 00002851 _____ C:\Users\Benni\Desktop\CyberLink PowerDirector.lnk
2013-08-25 17:16 - 2013-01-07 11:12 - 00000000 ____D C:\Users\Meyer\Documents\Appener Weg
2013-08-25 12:07 - 2013-06-21 12:35 - 00012539 _____ C:\Users\Meyer\Documents\Gewicht.xlsx
2013-08-24 18:17 - 2013-05-23 19:18 - 00000000 _____ C:\END
2013-08-24 17:32 - 2012-11-23 00:20 - 00045056 _____ C:\Users\Meyer\Documents\Geschenke.xls
2013-08-24 13:25 - 2012-11-21 19:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-23 19:15 - 2013-01-29 11:01 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\AlawarEntertainment
2013-08-23 19:12 - 2013-02-04 19:42 - 00000000 ____D C:\Users\Admin\AppData\Roaming\AlawarEntertainment
2013-08-23 18:21 - 2012-11-28 11:55 - 00011218 _____ C:\Users\Meyer\AppData\Roaming\SmarThruOptions.xml
2013-08-22 15:31 - 2013-08-22 15:31 - 00027648 _____ C:\Users\Meyer\Documents\Kopie von Zimmereinteilung.xls
2013-08-21 22:14 - 2013-08-21 22:14 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\Users\Admin\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\ProgramData\WeatherLord
2013-08-21 08:53 - 2013-05-23 15:18 - 00000000 ____D C:\ProgramData\AlawarEntertainment
2013-08-19 16:58 - 2013-08-19 16:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-19 08:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-08-19 08:26 - 2013-02-22 00:49 - 00001083 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-18 16:06 - 2012-11-22 09:56 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-18 16:05 - 2013-08-18 16:01 - 00000000 ____D C:\Windows\system32\MRT
2013-08-18 16:01 - 2012-11-21 18:01 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-18 15:48 - 2013-08-18 15:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Apple Computer
2013-08-18 04:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-18 00:09 - 2013-08-18 00:09 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple
2013-08-17 21:50 - 2013-08-17 21:47 - 00903449 _____ C:\Users\Meyer\Downloads\jxpiinstall.exe
2013-08-01 16:27 - 2013-03-26 20:27 - 00011316 _____ C:\Users\Meyer\Documents\Kleidung.xlsx
2013-07-31 21:47 - 2012-12-31 00:27 - 00010900 _____ C:\Users\MGC\AppData\Roaming\SmarThruOptions.xml
2013-07-31 21:45 - 2013-07-31 21:45 - 00000000 ____D C:\Users\MGC\AppData\Roaming\Apple Computer
2013-07-31 21:45 - 2013-07-05 23:01 - 00002851 _____ C:\Users\MGC\Desktop\CyberLink PowerDirector.lnk
2013-07-31 21:45 - 2013-01-14 11:00 - 00118992 _____ C:\Users\MGC\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-31 11:32 - 2013-07-31 11:31 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\Apple Computer
2013-07-31 11:32 - 2013-07-31 09:56 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\DiskAid
2013-07-31 11:31 - 2013-07-31 11:31 - 00001791 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-31 11:31 - 2013-07-31 11:31 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple Computer
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\Apple Computer
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iTunes
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iPod
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Users\Admin\AppData\Local\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-07-31 11:27 - 2013-07-31 11:25 - 00000000 ____D C:\ProgramData\Apple
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Bonjour
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-07-31 11:20 - 2013-07-31 10:00 - 00000000 ____D C:\Users\Meyer\Downloads\Apple
2013-07-31 09:56 - 2013-07-31 09:56 - 00001043 _____ C:\Users\Public\Desktop\DiskAid.lnk
2013-07-31 09:56 - 2013-07-31 09:56 - 00000000 ____D C:\Program Files (x86)\DigiDNA
2013-07-30 22:26 - 2013-01-24 14:33 - 00018432 ___SH C:\Users\Meyer\Documents\Thumbs.db
2013-07-29 15:27 - 2006-05-01 22:11 - 00000000 ____D C:\Users\Meyer\Documents\Urlaub

Files to move or delete:
====================
C:\Users\Meyer\AppData\Local\Temp\{AC76BA86-7AD7-1033-7B44-AB0000000001}\FixTransforms.exe
C:\Users\Meyer\AppData\Local\Temp\{16AA8FB8-4A98-4757-B7A5-0FF22C0A6E33}_0\dbdata.dll
C:\Users\Meyer\AppData\Local\Temp\MozUpdater-2\updater.exe
C:\Users\Meyer\AppData\Local\Temp\MozUpdater-1\updater.exe
C:\Users\Meyer\AppData\Local\Temp\MozUpdater\updater.exe
C:\Users\Meyer\AppData\Local\Temp\MozUpdater\bgupdate-4\updater.exe
C:\Users\Meyer\AppData\Local\Temp\MozUpdater\bgupdate-3\updater.exe
C:\Users\Meyer\AppData\Local\Temp\MozUpdater\bgupdate-2\updater.exe
C:\Users\Meyer\AppData\Local\Temp\MozUpdater\bgupdate-1\updater.exe
C:\Users\Meyer\AppData\Local\Temp\MozUpdater\bgupdate\updater.exe
C:\Users\Meyer\AppData\Local\Temp\60377607-a0fb-49b0-adba-9c435d276367f33687\jre-7u11-windows-i586.exe
C:\Users\Meyer\AppData\Local\Temp\60377607-a0fb-49b0-adba-9c435d272929267f33687\jre-7u11-windows-x64.exe
C:\Users\MGC\AppData\Local\Temp\MozUpdater\updater.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 00:18

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-08-2013
Ran by Admin at 2013-08-28 14:45:28
Running from C:\Users\Admin\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

 
2007 Microsoft Office system (x32 Version: 12.0.6612.1000)
Adobe Digital Editions 2.0 (x32 Version: 2.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Adobe Reader XI (11.0.03) (x32 Version: 11.0.03)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.3.133)
Allgemeine Runtime Files (x86) (Version: 1.0.3.5)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Avira Professional Security (x32 Version: 13.0.0.3737)
Bonjour (Version: 3.0.0.10)
Classic Shell (Version: 3.6.2)
CrystalDiskInfo 5.0.0 (x32 Version: 5.0.0)
CyberLink PhotoNow (x32 Version: 1.1.6622)
CyberLink PowerDirector (x32 Version: 8.0.2107)
D3DX10 (x32 Version: 15.4.2368.0902)
DirectX 9.0c Extra Files (x86, x64) (Version: 1.10.06.0)
DirectX for Managed Code (Version: 1.0.0.0)
DiskAid 5.47 (x32 Version: 5.47)
eaner (Version: 3.24)
Fotogalerie (x32 Version: 16.4.3505.0912)
Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2555)
iTunes (Version: 11.0.4.4)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Lexware buchhalter 2013 (x32 Version: 18.03.00.0015)
Lexware Elster (x32 Version: 13.00.00.0027)
Lexware Info Service (x32 Version: 2.90.00.0009)
Lexware online banking (x32 Version: 20.00.00.0059)
Lexware professional 2012 (x32 Version: 12.00.00.0114)
Lexware professional Datenbank 2012 (x32 Version: 12.00.00.0109)
Lexware warenwirtschaft pro 2012 (x32 Version: 12.03.00.0167)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 1.1 (x32)
Microsoft .NET Framework 1.1 Security Update (KB2656353) (x32)
Microsoft .NET Framework 1.1 Security Update (KB2656370) (x32)
Microsoft .NET Framework 1.1 Security Update (KB979906) (x32)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Professional Hybrid 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version: 2.0.50728)
Movie Maker (x32 Version: 16.4.3505.0912)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
PDFCreator (x32 Version: 1.5.1)
Photo Gallery (x32 Version: 16.4.3505.0912)
Picasa 3 (x32 Version: 3.9)
Readiris Pro 10 (x32)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6482)
Rossmann Fotowelt Software 4.12.1 (x32 Version: 4.12.1)
Samsung CLX-3170 Series (x32)
Secunia PSI (3.0.0.7009) (x32 Version: 3.0.0.7009)
SketchUp 8 (x32 Version: 3.0.16944)
Skype™ 6.3 (x32 Version: 6.3.107)
SmarThru 4 (x32)
SmarThru PC Fax (x32)
StarMoney (x32 Version: 1.0)
StarMoney (x32 Version: 2.0)
StarMoney (x32 Version: 3.0.5.8)
StarMoney 6.0 S-Edition (x32 Version: 6.0)
StarMoney 7.0  (x32 Version: 7.0)
StarMoney 8.0 S-Edition (x32 Version: 8.0)
swMSM (x32 Version: 12.0.0.1)
SyncBack (x32)
TeamViewer 7 (x32 Version: 7.0.17271)
True Image 2013 (x32 Version: 16.0.5551)
TuneUp Utilities 2012 (x32 Version: 12.0.3600.73)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.73)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2768023) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817642) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
USB Video/Audio Device Driver (x32 Version: 1.00.0000)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Zylom Games Player Plugin (x32)

==================== Restore Points  =========================

25-07-2013 14:19:42 Geplanter Prüfpunkt
31-07-2013 09:27:40 Installed iTunes
18-08-2013 01:00:21 Windows Update
18-08-2013 13:57:07 Windows Update
19-08-2013 06:55:13 Installed Lexware online banking.
26-08-2013 21:29:50 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00345663-C56D-4953-A6BB-0660E688454F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation)
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation)
Task: {0BF11443-4500-44C7-94EE-D68577DDE364} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => C:\Windows\System32\dfdts.dll [2009-07-14] (Microsoft Corporation)
Task: {179F56FB-8E1C-4F8C-8699-9F4EA77D847F} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12] (Oracle Corporation)
Task: {1F7D3815-EA9D-4AD4-914D-99991C4E7D33} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {2F07EC7E-FDE9-4F3D-B6E1-1BF9BBE0AF98} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-10-24] (Piriform Ltd)
Task: {363052BA-3D7F-457E-ACAB-1CDEA20CB751} - System32\Tasks\WPD\SqmUpload_S-1-5-21-949305769-977194968-3624873923-1006 => C:\Windows\System32\portabledeviceapi.dll [2010-11-20] (Microsoft Corporation)
Task: {40336FA2-5507-4076-89CB-30B25669412B} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files (x86)\TuneUp Utilities 2012\OneClick.exe [2012-05-29] (TuneUp Software)
Task: {54F41372-D58B-4B16-8BFA-740EC2D0E0A2} - System32\Tasks\Google Updater and Installer => C:\Users\Meyer\AppData\Local\Google\Update\GoogleUpdate.exe No File
Task: {69579E2A-595D-4589-AAD2-39DB145397BC} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {6B29DCA5-9490-407E-A3BF-A61DA5A66E2A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-17] (Adobe Systems Incorporated)
Task: {79E8AF0A-FAA4-4E12-A319-10947D3B9D27} - System32\Tasks\Lexware-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [2011-07-31] (Haufe-Lexware GmbH & Co. KG)
Task: {7D52E7F7-A9AF-40E9-84C1-A01B5FF0E6BF} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-20] (Microsoft Corporation)
Task: {853E7221-581E-4F7A-A02C-2D3B76E889A5} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {89C689D9-0A9A-4C0E-9E06-2ABE6F7DA718} - System32\Tasks\CrystalDiskInfo => C:\Program Files (x86)\CrystalDiskInfo\DiskInfo.exe [2012-06-15] (Crystal Dew World)
Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\System32\srrstr.dll [2010-11-20] (Microsoft Corporation)
Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\System32\aepdu.dll [2010-11-20] (Microsoft Corporation)
Task: {BB548BA2-451F-481F-91E7-C325E85DA96A} - System32\Tasks\WPD\SqmUpload_S-1-5-21-949305769-977194968-3624873923-1000 => C:\Windows\System32\portabledeviceapi.dll [2010-11-20] (Microsoft Corporation)
Task: {C4B8497B-FD7D-4866-93E5-8B737BBE3B3D} - System32\Tasks\User_Feed_Synchronization-{DEFEEBAB-E89C-4DFD-9611-91D4E5A9AABC} => C:\Windows\system32\msfeedssync.exe [2013-03-15] (Microsoft Corporation)
Task: {D37BAA88-CBF2-472B-8A64-F4F625D83284} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => C:\Windows\System32\acproxy.dll [2009-07-14] (Microsoft Corporation)
Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => C:\Windows\System32\bfe.dll [2010-11-20] (Microsoft Corporation)
Task: {F8B4AA82-F107-4791-97D4-3B8350A31608} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\Users\Meyer\Documents\Thumbs.db:encryptable


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/28/2013 11:18:07 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12402

Error: (08/28/2013 11:18:07 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12402

Error: (08/28/2013 11:18:07 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/28/2013 11:18:06 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11388

Error: (08/28/2013 11:18:06 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11388

Error: (08/28/2013 11:18:06 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/28/2013 11:18:04 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8331

Error: (08/28/2013 11:18:04 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8331

Error: (08/28/2013 11:18:04 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/28/2013 10:21:38 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 34358487


System errors:
=============
Error: (08/28/2013 01:25:39 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (08/28/2013 01:25:39 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Windows\system32\Drivers\SSPORT.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (08/28/2013 11:32:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (08/28/2013 11:32:18 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Windows\system32\Drivers\SSPORT.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (08/28/2013 11:19:19 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (08/26/2013 11:29:49 PM) (Source: Ntfs) (User: )
Description: Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen Sie auf dem Volume "Computer" den Befehl "chkdsk" aus.

Error: (08/26/2013 02:54:34 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (08/26/2013 02:54:34 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Windows\system32\Drivers\SSPORT.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (08/26/2013 02:38:54 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 51.

Error: (08/25/2013 00:00:29 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst PlugPlay erreicht.


Microsoft Office Sessions:
=========================
Error: (08/22/2013 07:24:18 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 212544 seconds with 2520 seconds of active time.  This session ended with a crash.

Error: (06/10/2013 04:06:01 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1973 seconds with 60 seconds of active time.  This session ended with a crash.

Error: (05/10/2013 08:16:28 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 247397 seconds with 11880 seconds of active time.  This session ended with a crash.

Error: (02/21/2013 07:32:54 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 21678 seconds with 300 seconds of active time.  This session ended with a crash.

Error: (02/01/2013 01:19:41 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 44157 seconds with 300 seconds of active time.  This session ended with a crash.

Error: (01/08/2013 08:39:09 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6665.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info ===========================

Percentage of memory in use: 71%
Total physical RAM: 2013.24 MB
Available physical RAM: 583.46 MB
Total Pagefile: 4026.48 MB
Available Pagefile: 1415.83 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Computer) (Fixed) (Total:298.02 GB) (Free:116.18 GB) NTFS
Drive e: (Backup) (Fixed) (Total:465.76 GB) (Free:235.55 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 1A154C6D)
Partition 1: (Active) - (Size=71 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 466 GB) (Disk ID: 0002F512)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================
und gmer
[code]
GMER Logfile:
Code:
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-08-28 17:14:13
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-2 ST3320418AS rev.CC66 298,09GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Admin\AppData\Local\Temp\pwdoypog.sys


---- Threads - GMER 2.1 ----

Thread  [432:3908]                                              00000000779dfbf0
Thread  [432:6536]                                              00000000779dfbf0
Thread  C:\Windows\system32\svchost.exe [1156:1392]              000007fefb328274
Thread  C:\Windows\system32\svchost.exe [1156:3396]              000007fefb328274
Thread  C:\Windows\system32\svchost.exe [1156:3224]              000007fefb328274
Thread  C:\Windows\System32\spoolsv.exe [1540:2928]              000007fef80910c8
Thread  C:\Windows\System32\spoolsv.exe [1540:2964]              000007fef8016144
Thread  C:\Windows\System32\spoolsv.exe [1540:2984]              000007fef95d5fd0
Thread  C:\Windows\System32\spoolsv.exe [1540:2996]              000007fef95c3438
Thread  C:\Windows\System32\spoolsv.exe [1540:3004]              000007fef95d63ec
Thread  C:\Windows\System32\spoolsv.exe [1540:3024]              000007fef8145e5c
Thread  C:\Windows\System32\spoolsv.exe [1540:3028]              000007fef81c5074
Thread  C:\Windows\System32\spoolsv.exe [1540:3140]              000007fef8232288
Thread  C:\Windows\System32\spoolsv.exe [1540:3184]              000007fef80e8760
Thread  C:\Windows\system32\svchost.exe [2328:2392]              000007fef95d5fd0
Thread  C:\Windows\system32\svchost.exe [2328:2396]              000007fef95c3438
Thread  C:\Windows\system32\svchost.exe [2328:2400]              000007fef95d63ec
Thread  C:\Windows\system32\svchost.exe [2328:2404]              000007fefbad2a7c
Thread  C:\Windows\system32\taskhost.exe [2868:4028]              000007fef4082740
Thread  C:\Windows\system32\taskhost.exe [2868:2128]              000007fefac81010
Thread  C:\Windows\system32\taskhost.exe [2868:3116]              000007fef5041f38
Thread  C:\Windows\system32\taskhost.exe [2868:4964]              000007fef6a25170
Thread  C:\Windows\Explorer.EXE [4092:3256]                      000007fef3032154
Thread  C:\Windows\Explorer.EXE [4092:4340]                      000007fef1c62b20
Thread  C:\Windows\Explorer.EXE [4092:4496]                      000007fefb876204
Thread  C:\Windows\Explorer.EXE [4092:5032]                      000007fef43a2118
Thread  C:\Windows\Explorer.EXE [4092:3344]                      000007feea532f9c
Thread  C:\Windows\Explorer.EXE [4092:2876]                      000007fefac81010
Thread  C:\Windows\Explorer.EXE [4092:5148]                      000007feff81c648
Thread  C:\Program Files\Windows Sidebar\sidebar.exe [1384:4240]  000007fef1e8f5a0
Thread  C:\Program Files\Windows Sidebar\sidebar.exe [1384:4052]  000007fef1e69fe4
Thread  C:\Program Files\Windows Sidebar\sidebar.exe [1384:3164]  000007fef1e698ac
Thread  C:\Program Files\Windows Sidebar\sidebar.exe [1384:3364]  000007feec152040
Thread  C:\Program Files\Windows Sidebar\sidebar.exe [1384:3856]  000007feec152040
Thread  C:\Program Files\Windows Sidebar\sidebar.exe [1384:2776]  000007feec152040
Thread  C:\Program Files\Windows Sidebar\sidebar.exe [1384:2124]  000007feec152040
Thread  C:\Windows\system32\taskhost.exe [5988:3968]              000007fef4082740
Thread  C:\Windows\system32\taskhost.exe [5988:5700]              000007fef5041f38
Thread  C:\Windows\system32\taskhost.exe [5988:4248]              000007fefac81010

---- EOF - GMER 2.1 ----
Bleibt der Defogger weiterhin 'disabled' ?

Schon mal vielen Dank im Voraus

schrauber 28.08.2013 16:29
hi,
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

mummb 28.08.2013 17:22
Hallo,

Danke für deine schnelle Antwort, was mache ich mit dem defogger (enable/disable ?)

hier ist die Datei
Code:
Combofix Logfile:

       
Code:

       
ComboFix 13-08-28.02 - Admin 28.08.2013  17:54:29.1.2 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.2013.646 [GMT 2:00]
ausgeführt von:: c:\users\Admin\Downloads\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\IsUn0407.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-07-28 bis 2013-08-28  ))))))))))))))))))))))))))))))
.
.
2013-08-28 16:02 . 2013-08-28 16:02        --------        d-----w-        c:\users\Meyer\AppData\Local\temp
2013-08-28 16:02 . 2013-08-28 16:02        --------        d-----w-        c:\users\MGC\AppData\Local\temp
2013-08-28 16:02 . 2013-08-28 16:02        --------        d-----w-        c:\users\Default\AppData\Local\temp
2013-08-28 16:02 . 2013-08-28 16:02        --------        d-----w-        c:\users\Benni\AppData\Local\temp
2013-08-28 12:58 . 2013-08-28 12:58        --------        d-----w-        c:\users\Admin\AppData\Local\Diagnostics
2013-08-28 12:43 . 2013-08-28 12:43        --------        d-----w-        C:\FRST
2013-08-28 11:26 . 2013-08-28 11:26        --------        d-----w-        c:\users\Admin\AppData\Roaming\TeamViewer
2013-08-28 09:42 . 2013-08-28 09:42        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2013-08-28 09:42 . 2013-04-04 12:50        25928        ----a-w-        c:\windows\system32\drivers\mbam.sys
2013-08-26 22:04 . 2013-08-26 22:04        893552        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2013-08-26 22:04 . 2013-08-26 22:04        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2013-08-26 12:40 . 2013-08-26 12:40        --------        d-----w-        c:\users\Benni\AppData\Local\Mozilla
2013-08-26 12:40 . 2013-08-26 12:40        --------        d-----w-        c:\users\Benni\AppData\Roaming\Apple Computer
2013-08-21 20:14 . 2013-08-21 20:14        --------        d-----w-        c:\users\Meyer\AppData\Roaming\WeatherLord
2013-08-21 17:09 . 2013-08-21 17:09        --------        d-----w-        c:\users\Admin\AppData\Roaming\WeatherLord
2013-08-21 17:09 . 2013-08-21 17:09        --------        d-----w-        c:\programdata\WeatherLord
2013-08-18 14:01 . 2013-08-18 14:05        --------        d-----w-        c:\windows\system32\MRT
2013-08-18 13:51 . 2013-07-25 09:25        1888768        ----a-w-        c:\windows\system32\WMVDECOD.DLL
2013-08-18 13:51 . 2013-07-25 08:57        1620992        ----a-w-        c:\windows\SysWow64\WMVDECOD.DLL
2013-08-18 13:48 . 2013-08-18 13:48        --------        d-----w-        c:\users\Admin\AppData\Roaming\Apple Computer
2013-08-18 13:30 . 2013-07-09 05:03        3913664        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe
2013-08-18 13:30 . 2013-07-09 06:03        5550528        ----a-w-        c:\windows\system32\ntoskrnl.exe
2013-08-18 13:30 . 2013-07-09 05:03        3968960        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe
2013-08-18 13:30 . 2013-07-09 05:54        1732032        ----a-w-        c:\windows\system32\ntdll.dll
2013-08-18 13:30 . 2013-07-09 05:53        243712        ----a-w-        c:\windows\system32\wow64.dll
2013-08-18 13:30 . 2013-07-09 04:53        1292192        ----a-w-        c:\windows\SysWow64\ntdll.dll
2013-08-18 13:30 . 2013-07-09 04:52        5120        ----a-w-        c:\windows\SysWow64\wow32.dll
2013-08-18 13:30 . 2013-07-09 02:49        25600        ----a-w-        c:\windows\SysWow64\setup16.exe
2013-08-18 13:30 . 2013-07-09 02:49        7680        ----a-w-        c:\windows\SysWow64\instnm.exe
2013-08-18 13:30 . 2013-07-09 02:49        14336        ----a-w-        c:\windows\SysWow64\ntvdm64.dll
2013-08-18 13:30 . 2013-07-09 02:49        2048        ----a-w-        c:\windows\SysWow64\user.exe
2013-08-18 00:31 . 2013-08-18 00:31        1236816        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2013-08-17 22:09 . 2013-08-17 22:09        --------        d-----w-        c:\users\Meyer\AppData\Local\Apple
2013-08-17 21:54 . 2013-07-09 04:52        175104        ----a-w-        c:\windows\SysWow64\wintrust.dll
2013-08-17 21:54 . 2013-07-09 04:46        140288        ----a-w-        c:\windows\SysWow64\cryptsvc.dll
2013-08-17 21:54 . 2013-07-09 04:46        1166848        ----a-w-        c:\windows\SysWow64\crypt32.dll
2013-08-17 21:54 . 2013-07-09 04:46        103936        ----a-w-        c:\windows\SysWow64\cryptnet.dll
2013-08-17 21:54 . 2013-07-09 05:52        224256        ----a-w-        c:\windows\system32\wintrust.dll
2013-08-17 21:54 . 2013-07-09 05:46        184320        ----a-w-        c:\windows\system32\cryptsvc.dll
2013-08-17 21:54 . 2013-07-09 05:46        1472512        ----a-w-        c:\windows\system32\crypt32.dll
2013-08-17 21:54 . 2013-07-09 05:46        139776        ----a-w-        c:\windows\system32\cryptnet.dll
2013-08-17 20:12 . 2013-07-19 01:58        2048        ----a-w-        c:\windows\system32\tzres.dll
2013-08-17 20:12 . 2013-07-19 01:41        2048        ----a-w-        c:\windows\SysWow64\tzres.dll
2013-08-17 20:11 . 2013-07-09 05:51        1217024        ----a-w-        c:\windows\system32\rpcrt4.dll
2013-08-17 20:11 . 2013-07-09 04:52        663552        ----a-w-        c:\windows\SysWow64\rpcrt4.dll
2013-08-17 20:11 . 2013-06-15 04:32        39936        ----a-w-        c:\windows\system32\drivers\tssecsrv.sys
2013-08-17 20:06 . 2013-07-06 06:03        1910208        ----a-w-        c:\windows\system32\drivers\tcpip.sys
2013-07-31 19:45 . 2013-07-31 19:45        --------        d-----w-        c:\users\MGC\AppData\Roaming\Apple Computer
2013-07-31 09:31 . 2013-07-31 09:32        --------        d-----w-        c:\users\Meyer\AppData\Roaming\Apple Computer
2013-07-31 09:31 . 2013-07-31 09:31        --------        d-----w-        c:\users\Meyer\AppData\Local\Apple Computer
2013-07-31 09:31 . 2013-07-31 09:31        --------        dc----w-        c:\windows\system32\DRVSTORE
2013-07-31 09:31 . 2012-08-21 11:01        33240        ----a-w-        c:\windows\system32\drivers\GEARAspiWDM.sys
2013-07-31 09:30 . 2013-07-31 09:30        --------        d-----w-        c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-31 09:30 . 2013-07-31 09:30        --------        d-----w-        c:\program files\iTunes
2013-07-31 09:30 . 2013-07-31 09:30        --------        d-----w-        c:\program files (x86)\iTunes
2013-07-31 09:30 . 2013-07-31 09:30        --------        d-----w-        c:\programdata\Apple Computer
2013-07-31 09:30 . 2013-07-31 09:30        --------        d-----w-        c:\program files\iPod
2013-07-31 09:27 . 2013-07-31 09:27        --------        d-----w-        c:\users\Admin\AppData\Local\Apple
2013-07-31 09:27 . 2013-07-31 09:27        --------        d-----w-        c:\program files (x86)\Apple Software Update
2013-07-31 09:26 . 2013-07-31 09:26        --------        d-----w-        c:\program files\Common Files\Apple
2013-07-31 09:26 . 2013-07-31 09:26        --------        d-----w-        c:\program files\Bonjour
2013-07-31 09:26 . 2013-07-31 09:26        --------        d-----w-        c:\program files (x86)\Bonjour
2013-07-31 09:25 . 2013-07-31 09:30        --------        d-----w-        c:\program files (x86)\Common Files\Apple
2013-07-31 09:25 . 2013-07-31 09:27        --------        d-----w-        c:\programdata\Apple
2013-07-31 07:56 . 2013-07-31 09:32        --------        d-----w-        c:\users\Meyer\AppData\Roaming\DiskAid
2013-07-31 07:56 . 2013-07-31 07:56        --------        d-----w-        c:\program files (x86)\DigiDNA
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-26 22:04 . 2013-07-17 07:33        1236816        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-08-18 14:01 . 2012-11-21 16:01        78161360        ----a-w-        c:\windows\system32\MRT.exe
2013-07-17 07:33 . 2013-07-17 07:33        893552        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2013-07-17 07:33 . 2013-07-17 07:33        42776        ----a-w-        c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2013-07-17 07:28 . 2012-11-21 18:48        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-17 07:28 . 2012-11-21 18:48        692104        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2013-07-09 04:45 . 2013-08-18 13:30        44032        ----a-w-        c:\windows\apppatch\acwow64.dll
2013-07-03 12:38 . 2013-07-03 12:38        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-03 12:38 . 2012-11-21 15:33        867240        ----a-w-        c:\windows\SysWow64\npDeployJava1.dll
2013-07-03 12:38 . 2012-11-21 15:33        789416        ----a-w-        c:\windows\SysWow64\deployJava1.dll
2013-07-02 16:42 . 2013-07-02 16:42        178744        ----a-w-        c:\windows\SysWow64\LexEBankCommon40.dll
2013-07-01 14:50 . 2013-07-01 14:50        4959800        ----a-w-        c:\windows\SysWow64\LxXtreme110.dll
2013-07-01 14:50 . 2013-07-01 14:50        26168        ----a-w-        c:\windows\SysWow64\LxTPSW100.dll
2013-07-01 14:50 . 2013-07-01 14:50        104504        ----a-w-        c:\windows\SysWow64\LxUISettingsN100.dll
2013-07-01 14:50 . 2013-07-01 14:50        1362488        ----a-w-        c:\windows\SysWow64\LxTool111.dll
2013-07-01 14:50 . 2013-07-01 14:50        63544        ----a-w-        c:\windows\SysWow64\LxPXTree100.dll
2013-07-01 14:50 . 2013-07-01 14:50        127544        ----a-w-        c:\windows\SysWow64\LxMail100.dll
2013-07-01 14:50 . 2013-07-01 14:50        207928        ----a-w-        c:\windows\SysWow64\LxBasics100.dll
2013-07-01 14:06 . 2013-07-01 14:06        1361464        ----a-w-        c:\windows\SysWow64\LxTool110.dll
2013-07-01 09:14 . 2013-05-07 08:18        83672        ----a-w-        c:\windows\system32\drivers\avnetflt.sys
2013-06-19 08:35 . 2013-06-19 08:35        825696        ----a-w-        c:\windows\SysWow64\DDBACCPL.CPL
2013-06-19 08:35 . 2013-06-19 08:35        227680        ----a-w-        c:\windows\SysWow64\DDBACCTM.CPL
2013-06-05 03:34 . 2013-07-10 14:24        3153920        ----a-w-        c:\windows\system32\win32k.sys
2013-06-04 06:00 . 2013-07-10 14:24        624128        ----a-w-        c:\windows\system32\qedit.dll
2013-06-04 04:53 . 2013-07-10 14:24        509440        ----a-w-        c:\windows\SysWow64\qedit.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]
@="{594D4122-1F87-41E2-96C7-825FB4796516}"
[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]
2012-10-28 08:29        610816        ----a-w-        c:\program files\Classic Shell\ClassicExplorer32.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2008-08-11 524288]
"TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2012-08-23 6049096]
"AcronisTibMounterMonitor"="c:\program files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe" [2012-07-24 943856]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-07-01 345144]
"LexwareInfoService"="c:\program files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe" [2011-07-31 189808]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"UpdatePDRShortCut"="c:\program files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" [2008-12-03 218408]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2013-4-18 563224]
Taskmgr.lnk - c:\windows\System32\taskmgr.exe [2012-11-21 257024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"LexwareInfoService"=c:\program files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe /autostart
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
R3 ivusb;Initio Driver for USB Default Controller;c:\windows\system32\DRIVERS\ivusb.sys;c:\windows\SYSNATIVE\DRIVERS\ivusb.sys [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys;c:\windows\SYSNATIVE\DRIVERS\ss_bbus.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 tib_mounter;Acronis TIB Mounter;c:\windows\system32\DRIVERS\tib_mounter.sys;c:\windows\SYSNATIVE\DRIVERS\tib_mounter.sys [x]
S0 vididr;Acronis Virtual Disk;c:\windows\system32\DRIVERS\vididr.sys;c:\windows\SYSNATIVE\DRIVERS\vididr.sys [x]
S0 vidsflt;Acronis Disk Storage Filter;c:\windows\system32\DRIVERS\vidsflt.sys;c:\windows\SYSNATIVE\DRIVERS\vidsflt.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 afcdpsrv;Acronis Nonstop Backup Service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]
S2 AntiVirMailService;Avira Email Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [x]
S2 Lexware_Professional_Datenbank;Lexware Professional Datenbank;c:\program files (x86)\Sybase\SQL Anywhere 9\win32\dbsrv9.exe;c:\program files (x86)\Sybase\SQL Anywhere 9\win32\dbsrv9.exe [x]
S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x]
S2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x]
S2 StarMoney 7.0 OnlineUpdate;StarMoney 7.0 OnlineUpdate;c:\program files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 StarMoney 8.0 OnlineUpdate;StarMoney 8.0 OnlineUpdate;c:\program files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 syncagentsrv;Acronis Sync Agent Service;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [x]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [x]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]
S3 AVMCOWAN;AVM ISDN CoNDIS WAN CAPI Driver;c:\windows\system32\DRIVERS\AVMCOWAN.sys;c:\windows\SYSNATIVE\DRIVERS\AVMCOWAN.sys [x]
S3 FUS2BASE;AVM FRITZ!Card USB;c:\windows\system32\DRIVERS\fus2base.sys;c:\windows\SYSNATIVE\DRIVERS\fus2base.sys [x]
S3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
S3 LVUVC64;Logitech QuickCam E3500(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf_amd64.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf_amd64.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-08-28 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-21 07:28]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncError]
@="{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}"
[HKEY_CLASSES_ROOT\CLSID\{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}]
2012-08-23 02:51        2741024        ----a-w-        c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncInProgress]
@="{00F848DC-B1D4-4892-9C25-CAADC86A215D}"
[HKEY_CLASSES_ROOT\CLSID\{00F848DC-B1D4-4892-9C25-CAADC86A215D}]
2012-08-23 02:51        2741024        ----a-w-        c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncOk]
@="{71573297-552E-46fc-BE3D-3DFAF88D47B7}"
[HKEY_CLASSES_ROOT\CLSID\{71573297-552E-46fc-BE3D-3DFAF88D47B7}]
2012-08-23 02:51        2741024        ----a-w-        c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ShareOverlay]
@="{594D4122-1F87-41E2-96C7-825FB4796516}"
[HKEY_CLASSES_ROOT\CLSID\{594D4122-1F87-41E2-96C7-825FB4796516}]
2012-10-28 08:29        741376        ----a-w-        c:\program files\Classic Shell\ClassicExplorer64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-10-17 13307496]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-24 162584]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-24 386840]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-10-24 417560]
"Classic Start Menu"="c:\program files\Classic Shell\ClassicStartMenu.exe" [2012-10-28 160256]
"Acronis Scheduler2 Service"="c:\program files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [2012-08-23 403888]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.alawarspiele.de
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yol5rs76.default\
FF - prefs.js: browser.startup.homepage - hxxps://bay150.mail.live.com/default.aspx?id=64855
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-08-28  18:06:39
ComboFix-quarantined-files.txt  2013-08-28 16:06
.
Vor Suchlauf: 8 Verzeichnis(se), 124.480.376.832 Bytes frei
Nach Suchlauf: 12 Verzeichnis(se), 124.946.530.304 Bytes frei
.
- - End Of File - - 3D834CBC4C1B2F980B96256791449FE1

--- --- ---
A36C5E4F47E84449FF07ED3517B43A31
Danke Für deine schnelle Antwort, was mache ich mit dem defogger (enable/disable ?)

schrauber 29.08.2013 04:09
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

mummb 29.08.2013 13:15
Hallo Schrauber,

hier der Reihe nach die Logfiles
Malwarebytes
Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.08.29.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16660
Admin :: MEYER-PC [Administrator]

29.08.2013 09:22:19
mbam-log-2013-08-29 (09-22-19).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|G:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 536561
Laufzeit: 1 Stunde(n), 27 Minute(n), 23 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
AdwCleaner

Code:
# AdwCleaner v3.001 - Report created 29/08/2013 at 13:22:53
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Admin - MEYER-PC
# Running from : C:\Users\Admin\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AlawarEntertainment
Folder Deleted : C:\ProgramData\AlawarWrapper
Folder Deleted : C:\Program Files (x86)\AVG Secure Search
Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Deleted : C:\Users\Meyer\AppData\Local\AlawarWrapper
Folder Deleted : C:\Users\Meyer\AppData\Roaming\pdfforge
Folder Deleted : C:\Users\Meyer\AppData\Roaming\AlawarEntertainment
Folder Deleted : C:\Users\Admin\AppData\Local\AlawarWrapper
Folder Deleted : C:\Users\Admin\AppData\Roaming\AlawarEntertainment
File Deleted : C:\END
File Deleted : C:\Users\Meyer\AppData\Roaming\Mozilla\Firefox\Profiles\hovy39sj.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_librecad_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_librecad_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Softonic

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660


-\\ Mozilla Firefox v23.0.1 (de)

[ File : C:\Users\Meyer\AppData\Roaming\Mozilla\Firefox\Profiles\hovy39sj.default\prefs.js ]


[ File : C:\Users\MGC\AppData\Roaming\Mozilla\Firefox\Profiles\3skir939.default\prefs.js ]


[ File : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yol5rs76.default\prefs.js ]


[ File : C:\Users\Benni\AppData\Roaming\Mozilla\Firefox\Profiles\5uidnmtr.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [2653 octets] - [29/08/2013 13:21:45]
AdwCleaner[S0].txt - [2438 octets] - [29/08/2013 13:22:53]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2498 octets] ##########
JRT
JRT Logfile:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.5 (08.28.2013:1)
OS: Windows 7 Professional x64
Ran by Admin on 29.08.2013 at 14:03:19,41
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 29.08.2013 at 14:08:43,72
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- --- ---


und FRST


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by Admin (administrator) on 29-08-2013 13:51:08
Running from C:\Users\Admin\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(iAnywhere Solutions, Inc.) C:\Program Files (x86)\Sybase\SQL Anywhere 9\win32\dbsrv9.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_x64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] - C:\Program Files\Classic Shell\ClassicStartMenu.exe [160256 2012-10-28] (IvoSoft)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [403888 2012-08-23] (Acronis)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [524288 2008-08-11] ()
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6049096 2012-08-23] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LexwareInfoService] - C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Taskmgr.lnk
ShortcutTarget: Taskmgr.lnk -> C:\Windows\System32\taskmgr.exe (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.alawarspiele.de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yol5rs76.default
FF Homepage: https://bay150.mail.live.com/default.aspx?id=64855
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==================== Services (Whitelisted) =================

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [371768 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 Lexware_Professional_Datenbank; C:\Program Files (x86)\Sybase\SQL Anywhere 9\win32\dbsrv9.exe [83248 2011-06-29] (iAnywhere Solutions, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1227800 2013-04-18] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [659992 2013-04-18] (Secunia)
R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2143072 2012-05-29] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-28] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-28] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-28] (Avira Operations GmbH & Co. KG)
R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [79872 2009-06-10] (AVM GmbH)
R2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [54072 2007-10-22] (Samsung Electronics)
R2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [54072 2007-10-22] (Samsung Electronics)
R3 FUS2BASE; C:\Windows\System32\DRIVERS\fus2base.sys [696832 2009-06-10] (AVM Berlin)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-04-18] (Secunia)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-01-09] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2011-11-08] (TuneUp Software)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [166024 2013-01-09] (Acronis)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-29 13:34 - 2013-08-29 13:34 - 00000000 ____D C:\Windows\ERUNT
2013-08-29 13:31 - 2013-08-29 13:31 - 01023533 _____ (Thisisu) C:\Users\Admin\Downloads\JRT.exe
2013-08-29 13:21 - 2013-08-29 13:23 - 00000000 ____D C:\AdwCleaner
2013-08-29 09:54 - 2013-08-29 09:55 - 00994642 _____ C:\Users\Admin\Downloads\adwcleaner.exe
2013-08-29 09:18 - 2013-08-29 09:18 - 00026416 _____ C:\Users\Meyer\Documents\AVSCAN-20130828-203650-9E2DD70F.LOG
2013-08-28 18:26 - 2013-08-28 18:26 - 00000552 _____ C:\Windows\PFRO.log
2013-08-28 18:06 - 2013-08-28 18:06 - 00025343 _____ C:\Users\Admin\Downloads\ComboFix.txt
2013-08-28 17:43 - 2013-08-28 18:06 - 00000000 ____D C:\Qoobox
2013-08-28 17:43 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-28 17:43 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-28 17:43 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-28 17:43 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-28 17:43 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-28 17:43 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-28 17:43 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-28 17:43 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-28 17:42 - 2013-08-28 18:04 - 00000000 ____D C:\Windows\erdnt
2013-08-28 17:41 - 2013-08-28 17:41 - 05114728 ____R (Swearware) C:\Users\Admin\Downloads\ComboFix.exe
2013-08-28 17:14 - 2013-08-28 17:14 - 00003619 _____ C:\Users\Admin\Downloads\gmer.txt
2013-08-28 16:48 - 2013-08-28 16:48 - 00377856 _____ C:\Users\Admin\Downloads\gmer_2.1.19163.exe
2013-08-28 15:47 - 2013-08-29 13:27 - 00000728 _____ C:\Windows\setupact.log
2013-08-28 15:47 - 2013-08-28 15:47 - 00000000 _____ C:\Windows\setuperr.log
2013-08-28 14:45 - 2013-08-28 14:45 - 00020321 _____ C:\Users\Admin\Downloads\Addition.txt
2013-08-28 14:43 - 2013-08-28 14:43 - 00000000 ____D C:\FRST
2013-08-28 14:41 - 2013-08-28 14:41 - 00000472 _____ C:\Users\Admin\Downloads\defogger_disable.log
2013-08-28 14:41 - 2013-08-28 14:41 - 00000000 _____ C:\Users\Admin\defogger_reenable
2013-08-28 14:22 - 2013-08-28 14:23 - 01579080 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2013-08-28 14:16 - 2013-08-28 14:16 - 00050477 _____ C:\Users\Admin\Downloads\Defogger.exe
2013-08-28 13:26 - 2013-08-28 13:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\TeamViewer
2013-08-28 11:42 - 2013-08-28 11:42 - 00001117 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-28 11:42 - 2013-08-28 11:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-28 11:42 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-28 11:41 - 2013-08-28 11:41 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Admin\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-26 14:40 - 2013-08-26 14:43 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Mozilla
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Apple Computer
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Local\Mozilla
2013-08-22 15:31 - 2013-08-22 15:31 - 00027648 _____ C:\Users\Meyer\Documents\Kopie von Zimmereinteilung.xls
2013-08-21 22:14 - 2013-08-21 22:14 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\Users\Admin\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\ProgramData\WeatherLord
2013-08-19 16:58 - 2013-08-19 16:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-18 16:10 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-18 16:10 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-18 16:10 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-18 16:10 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-18 16:10 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-18 16:10 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-18 16:10 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-18 16:10 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-18 16:10 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-18 16:10 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-18 16:10 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-18 16:10 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-18 16:01 - 2013-08-18 16:05 - 00000000 ____D C:\Windows\system32\MRT
2013-08-18 15:51 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-18 15:51 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-18 15:48 - 2013-08-18 15:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Apple Computer
2013-08-18 15:30 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-18 15:30 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-18 15:30 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-18 15:30 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-18 15:30 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-18 15:30 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-18 15:30 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-18 15:30 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-18 15:30 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-18 15:30 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-18 15:30 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-18 00:09 - 2013-08-18 00:09 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple
2013-08-17 23:54 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-17 23:54 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-17 23:54 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-17 23:54 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-17 23:54 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-17 23:54 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-17 23:54 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-17 23:54 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-17 22:12 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-17 22:12 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-17 22:11 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-17 22:11 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-17 22:11 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-17 22:06 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-17 21:47 - 2013-08-17 21:50 - 00903449 _____ C:\Users\Meyer\Downloads\jxpiinstall.exe
2013-07-31 21:45 - 2013-07-31 21:45 - 00000000 ____D C:\Users\MGC\AppData\Roaming\Apple Computer
2013-07-31 11:31 - 2013-07-31 11:32 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\Apple Computer
2013-07-31 11:31 - 2013-07-31 11:31 - 00001791 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-31 11:31 - 2013-07-31 11:31 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple Computer
2013-07-31 11:31 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\Apple Computer
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iTunes
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iPod
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Users\Admin\AppData\Local\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Bonjour
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-07-31 11:25 - 2013-07-31 11:27 - 00000000 ____D C:\ProgramData\Apple
2013-07-31 10:00 - 2013-07-31 11:20 - 00000000 ____D C:\Users\Meyer\Downloads\Apple
2013-07-31 09:56 - 2013-07-31 11:32 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\DiskAid
2013-07-31 09:56 - 2013-07-31 09:56 - 00001043 _____ C:\Users\Public\Desktop\DiskAid.lnk
2013-07-31 09:56 - 2013-07-31 09:56 - 00000000 ____D C:\Program Files (x86)\DigiDNA

==================== One Month Modified Files and Folders =======

2013-08-29 13:39 - 2013-08-29 13:39 - 00000756 _____ C:\Users\Admin\Desktop\JRT.txt
2013-08-29 13:36 - 2009-07-14 06:45 - 00015136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-29 13:36 - 2009-07-14 06:45 - 00015136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-29 13:34 - 2013-08-29 13:34 - 00000000 ____D C:\Windows\ERUNT
2013-08-29 13:31 - 2013-08-29 13:31 - 01023533 _____ (Thisisu) C:\Users\Admin\Downloads\JRT.exe
2013-08-29 13:27 - 2013-08-28 15:47 - 00000728 _____ C:\Windows\setupact.log
2013-08-29 13:27 - 2012-11-27 11:48 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-08-29 13:27 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-29 13:25 - 2012-11-21 13:38 - 01098662 _____ C:\Windows\WindowsUpdate.log
2013-08-29 13:23 - 2013-08-29 13:21 - 00000000 ____D C:\AdwCleaner
2013-08-29 13:00 - 2012-11-21 20:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-29 10:37 - 2013-01-10 14:50 - 00000000 ____D C:\Users\Admin\AppData\Local\VirtualStore
2013-08-29 09:55 - 2013-08-29 09:54 - 00994642 _____ C:\Users\Admin\Downloads\adwcleaner.exe
2013-08-29 09:18 - 2013-08-29 09:18 - 00026416 _____ C:\Users\Meyer\Documents\AVSCAN-20130828-203650-9E2DD70F.LOG
2013-08-29 09:16 - 2013-06-21 12:35 - 00012610 _____ C:\Users\Meyer\Documents\Gewicht.xlsx
2013-08-28 19:33 - 2012-11-28 11:55 - 00011181 _____ C:\Users\Meyer\AppData\Roaming\SmarThruOptions.xml
2013-08-28 19:12 - 2012-11-27 15:03 - 00000000 ____D C:\Program Files (x86)\StarMoney 8.0 S-Edition
2013-08-28 18:26 - 2013-08-28 18:26 - 00000552 _____ C:\Windows\PFRO.log
2013-08-28 18:25 - 2013-01-09 09:45 - 00000000 ____D C:\Users\Admin
2013-08-28 18:06 - 2013-08-28 18:06 - 00025343 _____ C:\Users\Admin\Downloads\ComboFix.txt
2013-08-28 18:06 - 2013-08-28 17:43 - 00000000 ____D C:\Qoobox
2013-08-28 18:04 - 2013-08-28 17:42 - 00000000 ____D C:\Windows\erdnt
2013-08-28 18:03 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-08-28 17:41 - 2013-08-28 17:41 - 05114728 ____R (Swearware) C:\Users\Admin\Downloads\ComboFix.exe
2013-08-28 17:39 - 2012-11-27 19:37 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\Skype
2013-08-28 17:15 - 2012-11-21 13:43 - 00000000 ____D C:\Users\Meyer
2013-08-28 17:14 - 2013-08-28 17:14 - 00003619 _____ C:\Users\Admin\Downloads\gmer.txt
2013-08-28 16:48 - 2013-08-28 16:48 - 00377856 _____ C:\Users\Admin\Downloads\gmer_2.1.19163.exe
2013-08-28 15:47 - 2013-08-28 15:47 - 00000000 _____ C:\Windows\setuperr.log
2013-08-28 15:19 - 2012-11-22 01:00 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{DEFEEBAB-E89C-4DFD-9611-91D4E5A9AABC}
2013-08-28 14:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-28 14:45 - 2013-08-28 14:45 - 00020321 _____ C:\Users\Admin\Downloads\Addition.txt
2013-08-28 14:43 - 2013-08-28 14:43 - 00000000 ____D C:\FRST
2013-08-28 14:41 - 2013-08-28 14:41 - 00000472 _____ C:\Users\Admin\Downloads\defogger_disable.log
2013-08-28 14:41 - 2013-08-28 14:41 - 00000000 _____ C:\Users\Admin\defogger_reenable
2013-08-28 14:39 - 2012-11-21 13:35 - 00000000 ____D C:\Windows\Panther
2013-08-28 14:23 - 2013-08-28 14:22 - 01579080 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2013-08-28 14:16 - 2013-08-28 14:16 - 00050477 _____ C:\Users\Admin\Downloads\Defogger.exe
2013-08-28 13:26 - 2013-08-28 13:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\TeamViewer
2013-08-28 13:23 - 2013-01-16 16:30 - 00000000 ____D C:\Users\Meyer\Documents\Spiele
2013-08-28 11:42 - 2013-08-28 11:42 - 00001117 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-28 11:42 - 2013-08-28 11:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-28 11:41 - 2013-08-28 11:41 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Admin\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-28 11:29 - 2013-01-16 16:36 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jetztspielen.de
2013-08-28 11:27 - 2012-11-22 13:31 - 00000000 ____D C:\ProgramData\Lexware
2013-08-27 16:06 - 2005-04-01 09:38 - 00000000 ____D C:\Users\Meyer\Documents\Stunden
2013-08-26 14:58 - 2009-07-14 19:58 - 00709156 _____ C:\Windows\system32\perfh007.dat
2013-08-26 14:58 - 2009-07-14 19:58 - 00153592 _____ C:\Windows\system32\perfc007.dat
2013-08-26 14:58 - 2009-07-14 07:13 - 01647128 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-26 14:51 - 2012-11-27 10:11 - 00000000 ____D C:\Users\Meyer\AppData\Local\CrashDumps
2013-08-26 14:43 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Mozilla
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Apple Computer
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Local\Mozilla
2013-08-26 14:40 - 2013-07-05 23:01 - 00002851 _____ C:\Users\Benni\Desktop\CyberLink PowerDirector.lnk
2013-08-25 17:16 - 2013-01-07 11:12 - 00000000 ____D C:\Users\Meyer\Documents\Appener Weg
2013-08-24 17:32 - 2012-11-23 00:20 - 00045056 _____ C:\Users\Meyer\Documents\Geschenke.xls
2013-08-24 13:25 - 2012-11-21 19:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-22 15:31 - 2013-08-22 15:31 - 00027648 _____ C:\Users\Meyer\Documents\Kopie von Zimmereinteilung.xls
2013-08-21 22:14 - 2013-08-21 22:14 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\Users\Admin\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\ProgramData\WeatherLord
2013-08-19 16:58 - 2013-08-19 16:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-19 08:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-08-19 08:26 - 2013-02-22 00:49 - 00001083 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-18 16:06 - 2012-11-22 09:56 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-18 16:05 - 2013-08-18 16:01 - 00000000 ____D C:\Windows\system32\MRT
2013-08-18 16:01 - 2012-11-21 18:01 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-18 15:48 - 2013-08-18 15:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Apple Computer
2013-08-18 04:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-18 00:09 - 2013-08-18 00:09 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple
2013-08-17 21:50 - 2013-08-17 21:47 - 00903449 _____ C:\Users\Meyer\Downloads\jxpiinstall.exe
2013-08-01 16:27 - 2013-03-26 20:27 - 00011316 _____ C:\Users\Meyer\Documents\Kleidung.xlsx
2013-07-31 21:47 - 2012-12-31 00:27 - 00010900 _____ C:\Users\MGC\AppData\Roaming\SmarThruOptions.xml
2013-07-31 21:45 - 2013-07-31 21:45 - 00000000 ____D C:\Users\MGC\AppData\Roaming\Apple Computer
2013-07-31 21:45 - 2013-07-05 23:01 - 00002851 _____ C:\Users\MGC\Desktop\CyberLink PowerDirector.lnk
2013-07-31 21:45 - 2013-01-14 11:00 - 00118992 _____ C:\Users\MGC\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-31 11:32 - 2013-07-31 11:31 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\Apple Computer
2013-07-31 11:32 - 2013-07-31 09:56 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\DiskAid
2013-07-31 11:31 - 2013-07-31 11:31 - 00001791 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-31 11:31 - 2013-07-31 11:31 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple Computer
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\Apple Computer
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iTunes
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iPod
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Users\Admin\AppData\Local\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-07-31 11:27 - 2013-07-31 11:25 - 00000000 ____D C:\ProgramData\Apple
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Bonjour
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-07-31 11:20 - 2013-07-31 10:00 - 00000000 ____D C:\Users\Meyer\Downloads\Apple
2013-07-31 09:56 - 2013-07-31 09:56 - 00001043 _____ C:\Users\Public\Desktop\DiskAid.lnk
2013-07-31 09:56 - 2013-07-31 09:56 - 00000000 ____D C:\Program Files (x86)\DigiDNA
2013-07-30 22:26 - 2013-01-24 14:33 - 00018432 ___SH C:\Users\Meyer\Documents\Thumbs.db

Files to move or delete:
====================
C:\Users\Admin\AppData\Local\Temp\Quarantine.exe
C:\Users\Admin\AppData\Local\Temp\jrt\erunt\ERUNT.EXE

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 00:18

==================== End Of Log ============================
--- --- ---

--- --- ---

Allerdings habe ich jetzt ein Problem: wenn ich ein anderes Benutzerprofil öffnen will -und das muss ich - bekomme ich die Fehlermeldung "Die Anmeldung des Dienstes Benutzerprofildienst ist fehlgeschlagen. Benutzerprofil kann nicht geladen werden." Nur das Admin Profil funktioniert. Ich probier jetzt noch mal einen Neustart...

Trotzdem erstmal vielen Dank

Mummb

schrauber 29.08.2013 13:20

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

mummb 29.08.2013 16:37
Hallo,

die Benutzerprofile kann ich nach dem Neustart ganz normal öffnen, also kein Problem mehr.

Der Rest folgt gleich

so, das hat gedauert

Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=71cdbc75365f8a4b82d8d3c91f6deae8
# engine=14941
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-29 02:39:12
# local_time=2013-08-29 04:39:12 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1802 16775165 100 97 8183 148458455 963 0
# compatibility_mode=5893 16776574 100 94 3445796 129417002 0 0
# scanned=247638
# found=0
# cleaned=0
# scan_time=7301
Code:
Results of screen317's Security Check version 0.99.72 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 10 
``````````````Antivirus/Firewall Check:``````````````
Avira Desktop 
 Antivirus up to date!  (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
 Secunia PSI (3.0.0.7009) 
 Malwarebytes Anti-Malware Version 1.75.0.1300 
 TuneUp Utilities 2012 
 TuneUp Utilities Language Pack (de-DE)
 Java 7 Update 25 
 Adobe Flash Player 11.8.800.94 
 Adobe Reader XI 
 Mozilla Firefox (23.0.1)
````````Process Check: objlist.exe by Laurent```````` 
 Malwarebytes Anti-Malware mbamservice.exe 
 Malwarebytes Anti-Malware mbamgui.exe 
 Avira Antivir avgnt.exe
 Avira Antivir avguard.exe
 Malwarebytes' Anti-Malware mbamscheduler.exe 
 StarMoney 7.0 ouservice StarMoneyOnlineUpdate.exe 
 StarMoney 8.0 S-Edition ouservice StarMoneyOnlineUpdate.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````
FRST
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by Admin (administrator) on 29-08-2013 17:39:02
Running from C:\Users\Admin\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(iAnywhere Solutions, Inc.) C:\Program Files (x86)\Sybase\SQL Anywhere 9\win32\dbsrv9.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\system32\consent.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version7\tv_x64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Windows\Samsung\PanelMgr\SSMMgr.exe
(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
() C:\Windows\Samsung\PanelMgr\caller64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13307496 2011-10-17] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] - C:\Program Files\Classic Shell\ClassicStartMenu.exe [160256 2012-10-28] (IvoSoft)
HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [403888 2012-08-23] (Acronis)
HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [524288 2008-08-11] ()
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6049096 2012-08-23] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LexwareInfoService] - C:\Program Files (x86)\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [UpdatePDRShortCut] - C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Taskmgr.lnk
ShortcutTarget: Taskmgr.lnk -> C:\Windows\System32\taskmgr.exe (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.alawarspiele.de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\yol5rs76.default
FF Homepage: https://bay150.mail.live.com/default.aspx?id=64855
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==================== Services (Whitelisted) =================

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [371768 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-01] (Avira Operations GmbH & Co. KG)
R2 Lexware_Professional_Datenbank; C:\Program Files (x86)\Sybase\SQL Anywhere 9\win32\dbsrv9.exe [83248 2011-06-29] (iAnywhere Solutions, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1227800 2013-04-18] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [659992 2013-04-18] (Secunia)
R2 StarMoney 7.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe [554160 2011-11-08] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2143072 2012-05-29] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-28] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-28] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-28] (Avira Operations GmbH & Co. KG)
R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [79872 2009-06-10] (AVM GmbH)
R2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [54072 2007-10-22] (Samsung Electronics)
R2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [54072 2007-10-22] (Samsung Electronics)
R3 FUS2BASE; C:\Windows\System32\DRIVERS\fus2base.sys [696832 2009-06-10] (AVM Berlin)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-04-18] (Secunia)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-01-09] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2011-11-08] (TuneUp Software)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [166024 2013-01-09] (Acronis)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] ()
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-29 14:32 - 2013-08-29 14:32 - 00000000 ____D C:\Program Files (x86)\ESET
2013-08-29 14:31 - 2013-08-29 14:31 - 02347384 _____ (ESET) C:\Users\Admin\Downloads\esetsmartinstaller_enu.exe
2013-08-29 14:09 - 2013-08-29 14:09 - 00000625 _____ C:\Users\Admin\Documents\JRT.txt
2013-08-29 14:08 - 2013-08-29 14:08 - 00000625 _____ C:\Users\Admin\Desktop\JRT.txt
2013-08-29 13:34 - 2013-08-29 13:34 - 00000000 ____D C:\Windows\ERUNT
2013-08-29 13:31 - 2013-08-29 13:31 - 01023533 _____ (Thisisu) C:\Users\Admin\Downloads\JRT.exe
2013-08-29 13:21 - 2013-08-29 13:23 - 00000000 ____D C:\AdwCleaner
2013-08-29 09:54 - 2013-08-29 09:55 - 00994642 _____ C:\Users\Admin\Downloads\adwcleaner.exe
2013-08-29 09:18 - 2013-08-29 09:18 - 00026416 _____ C:\Users\Meyer\Documents\AVSCAN-20130828-203650-9E2DD70F.LOG
2013-08-28 18:26 - 2013-08-28 18:26 - 00000552 _____ C:\Windows\PFRO.log
2013-08-28 18:06 - 2013-08-28 18:06 - 00025343 _____ C:\Users\Admin\Downloads\ComboFix.txt
2013-08-28 17:43 - 2013-08-28 18:06 - 00000000 ____D C:\Qoobox
2013-08-28 17:43 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-28 17:43 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-28 17:43 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-28 17:43 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-28 17:43 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-28 17:43 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-28 17:43 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-28 17:43 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-28 17:42 - 2013-08-28 18:04 - 00000000 ____D C:\Windows\erdnt
2013-08-28 17:41 - 2013-08-28 17:41 - 05114728 ____R (Swearware) C:\Users\Admin\Downloads\ComboFix.exe
2013-08-28 17:14 - 2013-08-28 17:14 - 00003619 _____ C:\Users\Admin\Downloads\gmer.txt
2013-08-28 16:48 - 2013-08-28 16:48 - 00377856 _____ C:\Users\Admin\Downloads\gmer_2.1.19163.exe
2013-08-28 15:47 - 2013-08-29 14:26 - 00000840 _____ C:\Windows\setupact.log
2013-08-28 15:47 - 2013-08-28 15:47 - 00000000 _____ C:\Windows\setuperr.log
2013-08-28 14:45 - 2013-08-28 14:45 - 00020321 _____ C:\Users\Admin\Downloads\Addition.txt
2013-08-28 14:43 - 2013-08-28 14:43 - 00000000 ____D C:\FRST
2013-08-28 14:41 - 2013-08-28 14:41 - 00000472 _____ C:\Users\Admin\Downloads\defogger_disable.log
2013-08-28 14:41 - 2013-08-28 14:41 - 00000000 _____ C:\Users\Admin\defogger_reenable
2013-08-28 14:22 - 2013-08-28 14:23 - 01579080 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2013-08-28 14:16 - 2013-08-28 14:16 - 00050477 _____ C:\Users\Admin\Downloads\Defogger.exe
2013-08-28 13:26 - 2013-08-28 13:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\TeamViewer
2013-08-28 11:42 - 2013-08-28 11:42 - 00001117 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-28 11:42 - 2013-08-28 11:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-28 11:42 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-28 11:41 - 2013-08-28 11:41 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Admin\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-26 14:40 - 2013-08-26 14:43 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Mozilla
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Apple Computer
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Local\Mozilla
2013-08-22 15:31 - 2013-08-22 15:31 - 00027648 _____ C:\Users\Meyer\Documents\Kopie von Zimmereinteilung.xls
2013-08-21 22:14 - 2013-08-21 22:14 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\Users\Admin\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\ProgramData\WeatherLord
2013-08-19 16:58 - 2013-08-19 16:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-18 16:10 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-18 16:10 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-18 16:10 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-18 16:10 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-18 16:10 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-18 16:10 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-18 16:10 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-18 16:10 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-18 16:10 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-18 16:10 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-18 16:10 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-18 16:10 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-18 16:10 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-18 16:10 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-18 16:01 - 2013-08-18 16:05 - 00000000 ____D C:\Windows\system32\MRT
2013-08-18 15:51 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-18 15:51 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-18 15:48 - 2013-08-18 15:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Apple Computer
2013-08-18 15:30 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-18 15:30 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-18 15:30 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-18 15:30 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-18 15:30 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-18 15:30 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-18 15:30 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-18 15:30 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-18 15:30 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-18 15:30 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-18 15:30 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-18 00:09 - 2013-08-18 00:09 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple
2013-08-17 23:54 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-17 23:54 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-17 23:54 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-17 23:54 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-17 23:54 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-17 23:54 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-17 23:54 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-17 23:54 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-17 22:12 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-17 22:12 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-17 22:11 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-17 22:11 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-17 22:11 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-17 22:06 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-17 21:47 - 2013-08-17 21:50 - 00903449 _____ C:\Users\Meyer\Downloads\jxpiinstall.exe
2013-07-31 21:45 - 2013-07-31 21:45 - 00000000 ____D C:\Users\MGC\AppData\Roaming\Apple Computer
2013-07-31 11:31 - 2013-07-31 11:32 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\Apple Computer
2013-07-31 11:31 - 2013-07-31 11:31 - 00001791 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-31 11:31 - 2013-07-31 11:31 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple Computer
2013-07-31 11:31 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\Apple Computer
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iTunes
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iPod
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Users\Admin\AppData\Local\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Bonjour
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-07-31 11:25 - 2013-07-31 11:27 - 00000000 ____D C:\ProgramData\Apple
2013-07-31 10:00 - 2013-07-31 11:20 - 00000000 ____D C:\Users\Meyer\Downloads\Apple
2013-07-31 09:56 - 2013-07-31 11:32 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\DiskAid
2013-07-31 09:56 - 2013-07-31 09:56 - 00001043 _____ C:\Users\Public\Desktop\DiskAid.lnk
2013-07-31 09:56 - 2013-07-31 09:56 - 00000000 ____D C:\Program Files (x86)\DigiDNA

==================== One Month Modified Files and Folders =======

2013-08-29 17:25 - 2013-08-29 17:24 - 00891115 _____ C:\Users\Admin\Downloads\SecurityCheck.exe
2013-08-29 17:25 - 2012-11-21 13:38 - 01103912 _____ C:\Windows\WindowsUpdate.log
2013-08-29 17:00 - 2012-11-21 20:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-29 14:34 - 2009-07-14 06:45 - 00015136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-29 14:34 - 2009-07-14 06:45 - 00015136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-29 14:32 - 2013-08-29 14:32 - 00000000 ____D C:\Program Files (x86)\ESET
2013-08-29 14:31 - 2013-08-29 14:31 - 02347384 _____ (ESET) C:\Users\Admin\Downloads\esetsmartinstaller_enu.exe
2013-08-29 14:26 - 2013-08-28 15:47 - 00000840 _____ C:\Windows\setupact.log
2013-08-29 14:26 - 2012-11-27 11:48 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-08-29 14:26 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-29 14:09 - 2013-08-29 14:09 - 00000625 _____ C:\Users\Admin\Documents\JRT.txt
2013-08-29 14:08 - 2013-08-29 14:08 - 00000625 _____ C:\Users\Admin\Desktop\JRT.txt
2013-08-29 14:01 - 2013-03-05 11:08 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2013-08-29 13:34 - 2013-08-29 13:34 - 00000000 ____D C:\Windows\ERUNT
2013-08-29 13:31 - 2013-08-29 13:31 - 01023533 _____ (Thisisu) C:\Users\Admin\Downloads\JRT.exe
2013-08-29 13:23 - 2013-08-29 13:21 - 00000000 ____D C:\AdwCleaner
2013-08-29 10:37 - 2013-01-10 14:50 - 00000000 ____D C:\Users\Admin\AppData\Local\VirtualStore
2013-08-29 09:55 - 2013-08-29 09:54 - 00994642 _____ C:\Users\Admin\Downloads\adwcleaner.exe
2013-08-29 09:18 - 2013-08-29 09:18 - 00026416 _____ C:\Users\Meyer\Documents\AVSCAN-20130828-203650-9E2DD70F.LOG
2013-08-29 09:16 - 2013-06-21 12:35 - 00012610 _____ C:\Users\Meyer\Documents\Gewicht.xlsx
2013-08-28 19:33 - 2012-11-28 11:55 - 00011181 _____ C:\Users\Meyer\AppData\Roaming\SmarThruOptions.xml
2013-08-28 19:12 - 2012-11-27 15:03 - 00000000 ____D C:\Program Files (x86)\StarMoney 8.0 S-Edition
2013-08-28 18:26 - 2013-08-28 18:26 - 00000552 _____ C:\Windows\PFRO.log
2013-08-28 18:25 - 2013-01-09 09:45 - 00000000 ____D C:\Users\Admin
2013-08-28 18:06 - 2013-08-28 18:06 - 00025343 _____ C:\Users\Admin\Downloads\ComboFix.txt
2013-08-28 18:06 - 2013-08-28 17:43 - 00000000 ____D C:\Qoobox
2013-08-28 18:04 - 2013-08-28 17:42 - 00000000 ____D C:\Windows\erdnt
2013-08-28 18:03 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-08-28 17:41 - 2013-08-28 17:41 - 05114728 ____R (Swearware) C:\Users\Admin\Downloads\ComboFix.exe
2013-08-28 17:39 - 2012-11-27 19:37 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\Skype
2013-08-28 17:15 - 2012-11-21 13:43 - 00000000 ____D C:\Users\Meyer
2013-08-28 17:14 - 2013-08-28 17:14 - 00003619 _____ C:\Users\Admin\Downloads\gmer.txt
2013-08-28 16:48 - 2013-08-28 16:48 - 00377856 _____ C:\Users\Admin\Downloads\gmer_2.1.19163.exe
2013-08-28 15:47 - 2013-08-28 15:47 - 00000000 _____ C:\Windows\setuperr.log
2013-08-28 15:19 - 2012-11-22 01:00 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{DEFEEBAB-E89C-4DFD-9611-91D4E5A9AABC}
2013-08-28 14:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-28 14:45 - 2013-08-28 14:45 - 00020321 _____ C:\Users\Admin\Downloads\Addition.txt
2013-08-28 14:43 - 2013-08-28 14:43 - 00000000 ____D C:\FRST
2013-08-28 14:41 - 2013-08-28 14:41 - 00000472 _____ C:\Users\Admin\Downloads\defogger_disable.log
2013-08-28 14:41 - 2013-08-28 14:41 - 00000000 _____ C:\Users\Admin\defogger_reenable
2013-08-28 14:39 - 2012-11-21 13:35 - 00000000 ____D C:\Windows\Panther
2013-08-28 14:23 - 2013-08-28 14:22 - 01579080 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2013-08-28 14:16 - 2013-08-28 14:16 - 00050477 _____ C:\Users\Admin\Downloads\Defogger.exe
2013-08-28 13:26 - 2013-08-28 13:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\TeamViewer
2013-08-28 13:23 - 2013-01-16 16:30 - 00000000 ____D C:\Users\Meyer\Documents\Spiele
2013-08-28 11:42 - 2013-08-28 11:42 - 00001117 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-28 11:42 - 2013-08-28 11:42 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-28 11:41 - 2013-08-28 11:41 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Admin\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-28 11:29 - 2013-01-16 16:36 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jetztspielen.de
2013-08-28 11:27 - 2012-11-22 13:31 - 00000000 ____D C:\ProgramData\Lexware
2013-08-27 16:06 - 2005-04-01 09:38 - 00000000 ____D C:\Users\Meyer\Documents\Stunden
2013-08-26 14:58 - 2009-07-14 19:58 - 00709156 _____ C:\Windows\system32\perfh007.dat
2013-08-26 14:58 - 2009-07-14 19:58 - 00153592 _____ C:\Windows\system32\perfc007.dat
2013-08-26 14:58 - 2009-07-14 07:13 - 01647128 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-26 14:51 - 2012-11-27 10:11 - 00000000 ____D C:\Users\Meyer\AppData\Local\CrashDumps
2013-08-26 14:43 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Mozilla
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Roaming\Apple Computer
2013-08-26 14:40 - 2013-08-26 14:40 - 00000000 ____D C:\Users\Benni\AppData\Local\Mozilla
2013-08-26 14:40 - 2013-07-05 23:01 - 00002851 _____ C:\Users\Benni\Desktop\CyberLink PowerDirector.lnk
2013-08-25 17:16 - 2013-01-07 11:12 - 00000000 ____D C:\Users\Meyer\Documents\Appener Weg
2013-08-24 17:32 - 2012-11-23 00:20 - 00045056 _____ C:\Users\Meyer\Documents\Geschenke.xls
2013-08-24 13:25 - 2012-11-21 19:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-22 15:31 - 2013-08-22 15:31 - 00027648 _____ C:\Users\Meyer\Documents\Kopie von Zimmereinteilung.xls
2013-08-21 22:14 - 2013-08-21 22:14 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\Users\Admin\AppData\Roaming\WeatherLord
2013-08-21 19:09 - 2013-08-21 19:09 - 00000000 ____D C:\ProgramData\WeatherLord
2013-08-19 16:58 - 2013-08-19 16:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-19 08:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-08-19 08:26 - 2013-02-22 00:49 - 00001083 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-18 16:06 - 2012-11-22 09:56 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-18 16:05 - 2013-08-18 16:01 - 00000000 ____D C:\Windows\system32\MRT
2013-08-18 16:01 - 2012-11-21 18:01 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-18 15:48 - 2013-08-18 15:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Apple Computer
2013-08-18 04:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-18 00:09 - 2013-08-18 00:09 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple
2013-08-17 21:50 - 2013-08-17 21:47 - 00903449 _____ C:\Users\Meyer\Downloads\jxpiinstall.exe
2013-08-01 16:27 - 2013-03-26 20:27 - 00011316 _____ C:\Users\Meyer\Documents\Kleidung.xlsx
2013-07-31 21:47 - 2012-12-31 00:27 - 00010900 _____ C:\Users\MGC\AppData\Roaming\SmarThruOptions.xml
2013-07-31 21:45 - 2013-07-31 21:45 - 00000000 ____D C:\Users\MGC\AppData\Roaming\Apple Computer
2013-07-31 21:45 - 2013-07-05 23:01 - 00002851 _____ C:\Users\MGC\Desktop\CyberLink PowerDirector.lnk
2013-07-31 21:45 - 2013-01-14 11:00 - 00118992 _____ C:\Users\MGC\AppData\Local\GDIPFONTCACHEV1.DAT
2013-07-31 11:32 - 2013-07-31 11:31 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\Apple Computer
2013-07-31 11:32 - 2013-07-31 09:56 - 00000000 ____D C:\Users\Meyer\AppData\Roaming\DiskAid
2013-07-31 11:31 - 2013-07-31 11:31 - 00001791 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-07-31 11:31 - 2013-07-31 11:31 - 00000000 ____D C:\Users\Meyer\AppData\Local\Apple Computer
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\Apple Computer
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iTunes
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files\iPod
2013-07-31 11:30 - 2013-07-31 11:30 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Users\Admin\AppData\Local\Apple
2013-07-31 11:27 - 2013-07-31 11:27 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-07-31 11:27 - 2013-07-31 11:25 - 00000000 ____D C:\ProgramData\Apple
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files\Bonjour
2013-07-31 11:26 - 2013-07-31 11:26 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-07-31 11:20 - 2013-07-31 10:00 - 00000000 ____D C:\Users\Meyer\Downloads\Apple
2013-07-31 09:56 - 2013-07-31 09:56 - 00001043 _____ C:\Users\Public\Desktop\DiskAid.lnk
2013-07-31 09:56 - 2013-07-31 09:56 - 00000000 ____D C:\Program Files (x86)\DigiDNA
2013-07-30 22:26 - 2013-01-24 14:33 - 00018432 ___SH C:\Users\Meyer\Documents\Thumbs.db

Files to move or delete:
====================
C:\Users\Admin\AppData\Local\Temp\Quarantine.exe
C:\Users\Admin\AppData\Local\Temp\jrt\erunt\ERUNT.EXE

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 00:18

==================== End Of Log ============================
--- --- ---

schrauber 29.08.2013 17:58
Fertig :)

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

mummb 29.08.2013 18:11
:Boogie: Dankeschön :daumenhoc

super, dass das geklappt hat.

Muss noch Deine Punkte abarbeiten und melde mich dann nochmal.
Was mach ich mit den Laptops meiner Kids, die hatten auch jeder einen Fund von Malwarebytes ? Separat posten oder hier weiter machen ?

Nochmal Danke

Mummb

Ich habe ein Problem:

Bei Avira startet automatisch nur der Echtzeit-Schutz, den Browser-Schutz und den Email-Schutz kann ich nicht aktivieren. Hab schon einen weiteren Neustart gemacht, aber das hat nichts genützt.

schrauber 30.08.2013 06:31
Lesestoff:
Warum wir Avira nicht mehr empfehlen
Avira liefert seit einiger Zeit mit der Standardinstallation die Ask Toolbar mit aus. Diese Toolbar ist Voraussetzung dafür, dass der Webguard zuverlässig funktioniert. Die Ask Toolbar ist dafür bekannt, dass sie das Surfverhalten des Benutzers ausspioniert, um damit in letzter Konsequenz Geld zu verdienen. Daher wird von uns auf diesem Board als "schädlich" eingestuft. Mehr Informationen.

Eine Sicherheitsfirma, die dem Benutzer praktisch ungefragt schädliche Software "unterjubelt", scheidet für uns daher aus. Wir empfehlen daher allen Nutzern von Avira aufgrund dieser Geschäftspraktik, der teilweise äußerst schlechten Erkennungsrate und der überaus nervtötenden Werbung Avira zu deinstallieren und auf ein alternatives Produkt auszuweichen.

Solltest du dich zu einem Wechsel entscheiden, empfehlen wir dir nach der Deinstallation mit dem Avira-Cleaner alle Reste zu entfernen.



Laptops können wir einem nach dem anderen hier machen:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


mummb 30.08.2013 07:41
ok, darüber muss ich nachdenken, wie kann ich aber solange sie beiden Dienste wieder aktivieren? Ich habe die Professional Version und die noch bis nächstes Jahr bezahlt

schrauber 30.08.2013 15:30
Einfach Avira neu installieren.

mummb 02.09.2013 19:30
Hallo Schrauber,

ich bin jetzt zeitweise wieder online und fange mal mit dem Laptop meines Sohnes an:
Hier zunächst die Defogger Logdatei:
Code:
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:12 on 02/09/2013 (Benni)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...
Unable to read SafeBoot.sys


-=E.O.F=-
FRST:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-09-2013 04
Ran by Benni (administrator) on BMB on 02-09-2013 20:21:46
Running from C:\Dokumente und Einstellungen\Benni\Eigene Dateien\Downloads
Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AuthenTec, Inc.) C:\Programme\Fingerprint Sensor\AtService.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(SafeBoot International) C:\Programme\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(Broadcom Corporation.) C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(Microsoft Corporation) C:\WINDOWS\System32\SCardSvr.exe
(ActivIdentity) C:\Programme\ActivIdentity\ActivClient\acevents.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\AsGHost.exe
(ActivIdentity) C:\Programme\ActivIdentity\ActivClient\accoca.exe
(Agere Systems) C:\WINDOWS\system32\agrsmsvc.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe
(Hewlett-Packard Development Company, L.P) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(PDF Complete Inc) C:\Programme\PDF Complete\pdfsvc.exe
(Hewlett-Packard) C:\Programme\Hp\HP Software Update\HPWuSchd2.exe
(Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Hewlett-Packard Corporation) C:\WINDOWS\system32\AccelerometerSt.Exe
(Synaptics, Inc.) C:\Programme\Synaptics\SynTP\SynTPEnh.exe
(ActivIdentity) C:\Programme\ActivIdentity\ActivClient\accrdsub.exe
(Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE
( Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
(Analog Devices, Inc.) C:\Programme\Analog Devices\Core\smax4pnp.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Programme\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(Broadcom Corporation.) C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe
(ActivIdentity) C:\Programme\ActivIdentity\ActivClient\acevents.exe
(HP) C:\Programme\HPQ\HP Connection Manager 1.1\bin\mdvsrv.exe
(Advanced Micro Devices Inc.) C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
() C:\Programme\Hewlett-Packard\Shared\HpqToaster.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\AsGHost.exe
(Hewlett-Packard) C:\Programme\Hp\HP Software Update\HPWuSchd2.exe
(Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Hewlett-Packard Corporation) C:\WINDOWS\system32\AccelerometerSt.Exe
(Synaptics, Inc.) C:\Programme\Synaptics\SynTP\SynTPEnh.exe
(ActivIdentity) C:\Programme\ActivIdentity\ActivClient\accrdsub.exe
(Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE
(ActivIdentity) C:\Programme\ActivIdentity\ActivClient\acevents.exe
( Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
(Analog Devices, Inc.) C:\Programme\Analog Devices\Core\smax4pnp.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
() C:\Programme\Hewlett-Packard\Shared\HpqToaster.exe
(APN) C:\Programme\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Broadcom Corporation.) C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe
(Advanced Micro Devices Inc.) C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avnotify.exe
() C:\Dokumente und Einstellungen\Benni\Eigene Dateien\Downloads\Defogger.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IMJPMIG8.1] - C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [208952 2004-08-04] (Microsoft Corporation)
HKLM\...\Run: [PHIME2002ASync] - C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [455168 2004-08-04] (Microsoft Corporation)
HKLM\...\Run: [PHIME2002A] - C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [455168 2004-08-04] (Microsoft Corporation)
HKLM\...\Run: [Cpqset] - C:\Programme\Hewlett-Packard\Default Settings\cpqset.exe [61440 2008-05-14] ()
HKLM\...\Run: [coreworks] - C:\Programme\HPQ\HP Connection Manager 1.1\bin\gbxapp.exe [780776 2008-06-12] (HP)
HKLM\...\Run: [HP Software Update] - C:\Programme\Hp\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM\...\Run: [PDF Complete] - C:\Programme\PDF Complete\pdfsty.exe [318488 2008-05-12] (PDF Complete Inc)
HKLM\...\Run: [hpWirelessAssistant] - C:\Programme\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2008-04-15] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [WatchDog] - C:\Programme\InterVideo\DVD Check\DVDCheck.exe [197904 2008-05-23] (InterVideo Inc.)
HKLM\...\Run: [SoundMAX] - C:\Programme\Analog Devices\SoundMAX\Smax4.exe [884736 2008-03-24] (Analog Devices, Inc.)
HKLM\...\Run: [AccelerometerSysTrayApplet] - C:\WINDOWS\system32\AccelerometerSt.Exe [82224 2008-06-09] (Hewlett-Packard Corporation)
HKLM\...\Run: [StartCCC] - C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Programme\Synaptics\SynTP\SynTPEnh.exe [1040384 2008-03-27] (Synaptics, Inc.)
HKLM\...\Run: [] -  [x]
HKLM\...\Run: [accrdsub] - C:\Programme\ActivIdentity\ActivClient\accrdsub.exe [293168 2007-05-15] (ActivIdentity)
HKLM\...\Run: [PTHOSTTR] - C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE [238896 2008-06-10] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [CognizanceTS] - C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll [24848 2008-06-02] (Bioscrypt Inc.)
HKLM\...\Run: [QlbCtrl.exe] - C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [177456 2008-05-14] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [SoundMAXPnP] - C:\Programme\Analog Devices\Core\smax4pnp.exe [1044480 2008-04-04] (Analog Devices, Inc.)
HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [ApnTBMon] - C:\Programme\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-26] (APN)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\ackpbsc: C:\WINDOWS\system32\ackpbsc.dll (ActivIdentity)
Winlogon\Notify\acunlock: C:\Programme\ActivIdentity\ActivClient\acunlock.dll [X]
Winlogon\Notify\AtiExtEvent: Ati2evxx.dll (ATI Technologies Inc.)
Winlogon\Notify\OneCard: C:\Programme\Hewlett-Packard\IAM\Bin\ASWlnPkg.DLL [X]
Winlogon\Notify\WgaLogon: WgaLogon.dll (Microsoft Corporation)
Lsa: [Notification Packages] scecli ASWLNPkg
Startup: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Autostart\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Autostart\DVD Check.lnk
ShortcutTarget: DVD Check.lnk -> C:\Programme\InterVideo\DVD Check\DVDCheck.exe (InterVideo Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
BHO: Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Programme\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Programme\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
Toolbar: HKLM - Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Programme\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU -&Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU -Avira SearchFree Toolbar plus Web Protection - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Programme\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1374571681609
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Winsock: Catalog9 01 C:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 20 C:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\Mozilla\Firefox\Profiles\vsvz4md9.default
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: toolbar_AVIRA-V7 - C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\Mozilla\Firefox\Profiles\vsvz4md9.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

========================== Services (Whitelisted) =================

R2 accoca; C:\Programme\ActivIdentity\ActivClient\accoca.exe [182576 2007-05-15] (ActivIdentity)
R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.)
R2 ASBroker; C:\Programme\Hewlett-Packard\IAM\Bin\ASWlnPkg.DLL [112400 2008-06-02] (Bioscrypt Inc.)
R2 ASChannel; C:\Programme\Hewlett-Packard\IAM\Bin\AsChnl.dll [137488 2008-06-02] (Bioscrypt Inc.)
R2 ATService; C:\Programme\Fingerprint Sensor\AtService.exe [1176824 2008-05-15] (AuthenTec, Inc.)
R2 btwdins; C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe [264800 2008-05-12] (Broadcom Corporation.)
R3 Com4QLBEx; C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [193840 2008-04-03] (Hewlett-Packard Development Company, L.P.)
R2 HP ProtectTools Service; C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [18944 2008-06-10] (Hewlett-Packard Development Company, L.P)
R2 HpFkCryptService; C:\Programme\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [256512 2008-06-05] (SafeBoot International)
R3 hpqwmiex; C:\Programme\Hewlett-Packard\Shared\hpqwmiex.exe [165192 2008-04-16] (Hewlett-Packard Development Company, L.P.)
S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation)
R2 MBAMScheduler; C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 mdvsrv; C:\Programme\HPQ\HP Connection Manager 1.1\bin\mdvsrv.exe [575976 2008-06-12] (HP)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [117656 2013-08-17] (Mozilla Foundation)
R2 pdfcDispatcher; C:\Programme\PDF Complete\pdfsvc.exe [576024 2008-05-12] (PDF Complete Inc)
S4 HidServ; %SystemRoot%\System32\hidserv.dll [x]
R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf" [x]

==================== Drivers (Whitelisted) ====================

R0 Amddfltr; C:\Windows\System32\DRIVERS\Amddfltr.sys [15416 2008-03-12] (Advanced Micro Devices)
R1 AmdPPM; C:\Windows\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
S3 b57w2k; C:\Windows\System32\DRIVERS\b57xp32.sys [163328 2007-11-29] (Broadcom Corporation)
R3 BCM43XX; C:\Windows\System32\DRIVERS\bcmwl5.sys [1287552 2013-07-23] (Broadcom Corporation)
R3 BTKRNL; C:\Windows\System32\DRIVERS\btkrnl.sys [879624 2008-05-14] (Broadcom Corporation.)
S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [74688 2008-05-14] (Broadcom Corporation.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R1 RsvLock; C:\Windows\System32\Drivers\RsvLock.sys [12496 2008-06-05] (SafeBoot International)
R0 SafeBoot; C:\Windows\System32\Drivers\SafeBoot.sys [109184 2008-06-05] ()
R0 SbAlg; C:\Windows\System32\Drivers\SbAlg.sys [51376 2008-06-05] (SafeBoot N.V.)
R0 SbFsLock; C:\Windows\System32\Drivers\SbFsLock.sys [12928 2008-06-05] (SafeBoot International)
S3 SCR3XX2K; C:\Windows\System32\DRIVERS\SCR3XX2K.sys [56448 2007-06-21] (SCM Microsystems Inc.)
R0 SFAUDIO; C:\Windows\System32\drivers\sfaudio.sys [24064 2008-03-28] (Sonic Focus, Inc)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1804160 2008-04-10] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U2 CertPropSvc;
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-02 20:12 - 2013-09-02 20:12 - 00000000 _____ C:\Dokumente und Einstellungen\Benni\defogger_reenable
2013-08-31 18:59 - 2013-08-31 18:59 - 00007566 _____ C:\WINDOWS\KB2803821-v2.log
2013-08-31 18:59 - 2013-08-31 18:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$
2013-08-28 12:19 - 2013-08-28 12:19 - 00000000 ____D C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\Malwarebytes
2013-08-28 12:18 - 2013-08-28 12:18 - 00000756 _____ C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-28 12:18 - 2013-08-28 12:18 - 00000000 ____D C:\Programme\Malwarebytes' Anti-Malware
2013-08-28 12:18 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-08-22 20:01 - 2013-08-22 20:01 - 00000000 ____D C:\WINDOWS\LastGood
2013-08-22 19:33 - 2013-08-22 20:02 - 00005920 _____ C:\WINDOWS\WgaNotify.log
2013-08-22 19:33 - 2013-08-22 19:33 - 00000000 ____D C:\6f9c548778953e4d2ee129855559657c
2013-08-18 09:03 - 2013-08-18 09:03 - 00015509 _____ C:\WINDOWS\KB2862772-IE8.log
2013-08-18 09:01 - 2013-08-18 09:03 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-08-18 09:00 - 2013-08-18 09:00 - 00008061 _____ C:\WINDOWS\KB2863058.log
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-08-17 21:59 - 2013-08-18 08:56 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-08-17 21:13 - 2013-08-18 09:00 - 00014911 _____ C:\WINDOWS\KB2859537.log
2013-08-17 21:13 - 2013-08-18 09:00 - 00014113 _____ C:\WINDOWS\KB2850869.log

==================== One Month Modified Files and Folders =======

2013-09-02 20:21 - 2013-09-02 20:21 - 00000000 ____D C:\FRST
2013-09-02 20:12 - 2013-09-02 20:12 - 00000000 _____ C:\Dokumente und Einstellungen\Benni\defogger_reenable
2013-09-02 20:12 - 2013-07-22 15:56 - 00000000 ____D C:\Dokumente und Einstellungen\Benni
2013-09-02 20:05 - 2013-07-22 15:44 - 01529784 _____ C:\WINDOWS\WindowsUpdate.log
2013-09-02 09:34 - 2013-07-27 16:28 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2013-09-02 01:38 - 2013-07-23 02:42 - 00327680 _____ C:\WINDOWS\system32\config\ACEEvent.evt
2013-08-31 19:02 - 2013-07-22 16:14 - 00457375 _____ C:\WINDOWS\setupapi.log
2013-08-31 18:59 - 2013-08-31 18:59 - 00007566 _____ C:\WINDOWS\KB2803821-v2.log
2013-08-31 18:59 - 2013-08-31 18:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$
2013-08-31 18:59 - 2013-08-01 15:03 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-08-31 18:59 - 2013-07-22 16:16 - 01196764 _____ C:\WINDOWS\iis6.log
2013-08-31 18:59 - 2013-07-22 16:16 - 01023933 _____ C:\WINDOWS\FaxSetup.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00521635 _____ C:\WINDOWS\ocgen.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00480436 _____ C:\WINDOWS\tsoc.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00357692 _____ C:\WINDOWS\comsetup.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00330380 _____ C:\WINDOWS\msmqinst.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00218540 _____ C:\WINDOWS\ntdtcsetup.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00181084 _____ C:\WINDOWS\netfxocm.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00074279 _____ C:\WINDOWS\MedCtrOC.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00057391 _____ C:\WINDOWS\ocmsn.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00052102 _____ C:\WINDOWS\msgsocm.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00051832 _____ C:\WINDOWS\tabletoc.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00001374 _____ C:\WINDOWS\imsins.log
2013-08-28 12:19 - 2013-08-28 12:19 - 00000000 ____D C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\Malwarebytes
2013-08-28 12:18 - 2013-08-28 12:18 - 00000756 _____ C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-28 12:18 - 2013-08-28 12:18 - 00000000 ____D C:\Programme\Malwarebytes' Anti-Malware
2013-08-28 12:18 - 2013-07-22 13:36 - 00000000 ___RD C:\Programme
2013-08-25 12:37 - 2013-07-25 10:03 - 00000000 ____D C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\.minecraft
2013-08-23 21:16 - 2013-07-22 13:19 - 00000000 ____D C:\WINDOWS\Registration
2013-08-22 20:02 - 2013-08-22 19:33 - 00005920 _____ C:\WINDOWS\WgaNotify.log
2013-08-22 20:02 - 2013-07-25 11:12 - 00000000 ____D C:\WINDOWS\system32\KB905474
2013-08-22 20:02 - 2013-07-23 14:48 - 00080703 _____ C:\WINDOWS\spupdsvc.log
2013-08-22 20:02 - 2004-08-04 14:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-08-22 20:01 - 2013-08-22 20:01 - 00000000 ____D C:\WINDOWS\LastGood
2013-08-22 19:56 - 2013-07-22 23:24 - 00000000 ____D C:\Dokumente und Einstellungen\All Users.WINDOWS\HPQLOG
2013-08-22 19:56 - 2013-07-22 16:19 - 00000157 _____ C:\WINDOWS\wiadebug.log
2013-08-22 19:56 - 2013-07-22 16:19 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-08-22 19:56 - 2013-07-22 15:51 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-08-22 19:33 - 2013-08-22 19:33 - 00000000 ____D C:\6f9c548778953e4d2ee129855559657c
2013-08-22 19:28 - 2013-07-22 15:56 - 00000190 ___SH C:\Dokumente und Einstellungen\Benni\ntuser.ini
2013-08-22 19:28 - 2013-07-22 15:51 - 00015186 _____ C:\WINDOWS\SchedLgU.Txt
2013-08-18 14:32 - 2013-07-22 14:01 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-08-18 09:05 - 2013-07-23 12:48 - 00000000 ____D C:\Programme\Mozilla Maintenance Service
2013-08-18 09:03 - 2013-08-18 09:03 - 00015509 _____ C:\WINDOWS\KB2862772-IE8.log
2013-08-18 09:03 - 2013-08-18 09:01 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-08-18 09:03 - 2013-07-25 11:33 - 00000000 ____D C:\WINDOWS\ie8updates
2013-08-18 09:03 - 2013-07-22 23:12 - 00151069 _____ C:\WINDOWS\updspapi.log
2013-08-18 09:03 - 2013-07-22 16:16 - 00001374 _____ C:\WINDOWS\imsins.BAK
2013-08-18 09:01 - 2013-07-25 11:00 - 75778376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-08-18 09:00 - 2013-08-18 09:00 - 00008061 _____ C:\WINDOWS\KB2863058.log
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-08-18 09:00 - 2013-08-17 21:13 - 00014911 _____ C:\WINDOWS\KB2859537.log
2013-08-18 09:00 - 2013-08-17 21:13 - 00014113 _____ C:\WINDOWS\KB2850869.log
2013-08-18 09:00 - 2013-07-25 11:13 - 00012520 _____ C:\WINDOWS\system32\TZLog.log
2013-08-18 08:59 - 2013-07-22 16:16 - 01026888 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-18 08:56 - 2013-08-17 21:59 - 00000000 ____D C:\Programme\Mozilla Firefox

Files to move or delete:
====================
C:\DOKUME~1\Benni\LOKALE~1\Temp\_is13C.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\_is148.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\_is1DA.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\_is3B7.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\_is44B.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\{FCD79CF2-2FA3-41BD-98E7-F89A444B4B12}\ISSetup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{FCD79CF2-2FA3-41BD-98E7-F89A444B4B12}\_Setup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{EEF933FF-D8DE-45AD-A286-30D2979ECD6F}\ISSetup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{EEF933FF-D8DE-45AD-A286-30D2979ECD6F}\_Setup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{AE3BAF39-9759-4EFF-AB3A-DD4E9B4D5E33}\{7062DD5C-ECEC-4802-AA1E-116F3F109CF2}\LDevCTbl.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{AE3BAF39-9759-4EFF-AB3A-DD4E9B4D5E33}\{7062DD5C-ECEC-4802-AA1E-116F3F109CF2}\LXBurnCom.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{AE3BAF39-9759-4EFF-AB3A-DD4E9B4D5E33}\{7062DD5C-ECEC-4802-AA1E-116F3F109CF2}\ULCDRDrv.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{ABE1ADEC-E87A-48F7-808B-18614054D7A0}\IfxDrvSetupAppl32.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\{ABE1ADEC-E87A-48F7-808B-18614054D7A0}\IfxInstHlp.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{9A678650-8126-4210-9EA8-19E27DA5DF97}\{C151CE54-E7EA-4804-854B-F515368B0798}\difxapi.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{96C7C8B8-D43D-49C1-AB5C-19EEEC35C8F0}\ISSetup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{96C7C8B8-D43D-49C1-AB5C-19EEEC35C8F0}\_Setup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{3C33533D-9DF5-427E-8C84-9BEE7C3226F4}\ISSetup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{3C33533D-9DF5-427E-8C84-9BEE7C3226F4}\_Setup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{364A1DFB-8AE8-44A5-833B-A9C93D9C6481}\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}\difxapi.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{2B88BFDA-EA35-4A7C-8AE4-2404E1BF8F0E}\ISSetup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{2B88BFDA-EA35-4A7C-8AE4-2404E1BF8F0E}\_Setup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{275A149D-5F25-4577-B3D9-F717A6CFBE52}\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}\difxapi.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{25FB932F-3138-4F20-9504-6C34EFB4509F}\{C151CE54-E7EA-4804-854B-F515368B0798}\difxapi.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 5 für Minecraft_1.6.2.zip\Minecraft.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 4 für Minecraft_1.6.2.zip\Minecraft.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 3 für Minecraft_1.6.2.zip\Minecraft.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 2 für Minecraft_1.6.2.zip\Minecraft.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 1 für Minecraft_1.6.2.zip\Minecraft.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\isp19A.tmp\_Setup.dll

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2004-08-04 14:00] - [2008-04-14 07:52] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e

C:\Windows\System32\winlogon.exe
[2004-08-04 14:00] - [2008-04-14 07:53] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a

C:\Windows\System32\svchost.exe
[2004-08-04 14:00] - [2008-04-14 07:53] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366

C:\Windows\System32\services.exe
[2004-08-04 14:00] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc

C:\Windows\System32\User32.dll
[2004-08-04 14:00] - [2008-04-14 07:52] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd

C:\Windows\System32\userinit.exe
[2004-08-04 14:00] - [2008-04-14 07:53] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106

C:\Windows\System32\Drivers\volsnap.sys
[2004-08-04 14:00] - [2008-04-14 07:22] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d


==================== End Of Log ============================
--- --- ---


Addition
FRST Additions Logfile:
Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 02-09-2013 04
Ran by Benni at 2013-09-02 20:23:59
Running from C:\Dokumente und Einstellungen\Benni\Eigene Dateien\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

ActivClient 6.1 x86 (Version: 6.01.00034)
Agere Systems HDA Modem
AMD Driver Support for HP 3D DriverGuard (Version: 5.1.0000.0066)
AMD Processor Driver (Version: 1.3.2.0053)
ATI Catalyst Control Center (Version: 2.008.0515.2150)
ATI Display Driver (Version: 8.479.1.3-080515a-064429C-HP)
AuthenTec Fingerprint System (Version: 8.00.0000)
Avira Free Antivirus (Version: 13.0.0.3885)
Avira SearchFree Toolbar plus Web Protection (Version: 12.2.2.663)
Broadcom 802.11-WLAN-Adapter (Version: 4.170.77.3)
Broadcom NetXtreme Ethernet Controller (Version: 10.52.10)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center Core Implementation (Version: 2008.0515.2151.37248)
Catalyst Control Center Graphics Full Existing (Version: 2008.0515.2151.37248)
Catalyst Control Center Graphics Full New (Version: 2008.0515.2151.37248)
Catalyst Control Center Graphics Light (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Chinese Standard (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Chinese Traditional (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Czech (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Danish (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Dutch (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Finnish (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization French (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization German (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Greek (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Hungarian (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Italian (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Japanese (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Korean (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Norwegian (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Polish (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Portuguese (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Russian (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Spanish (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Swedish (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Thai (Version: 2008.0515.2151.37248)
Catalyst Control Center Localization Turkish (Version: 2008.0515.2151.37248)
CCC Help Chinese Standard (Version: 2008.0515.2150.37248)
CCC Help Chinese Traditional (Version: 2008.0515.2150.37248)
CCC Help Czech (Version: 2008.0515.2150.37248)
CCC Help Danish (Version: 2008.0515.2150.37248)
CCC Help Dutch (Version: 2008.0515.2150.37248)
CCC Help English (Version: 2008.0515.2150.37248)
CCC Help Finnish (Version: 2008.0515.2150.37248)
CCC Help French (Version: 2008.0515.2150.37248)
CCC Help German (Version: 2008.0515.2150.37248)
CCC Help Greek (Version: 2008.0515.2150.37248)
CCC Help Hungarian (Version: 2008.0515.2150.37248)
CCC Help Italian (Version: 2008.0515.2150.37248)
CCC Help Japanese (Version: 2008.0515.2150.37248)
CCC Help Korean (Version: 2008.0515.2150.37248)
CCC Help Norwegian (Version: 2008.0515.2150.37248)
CCC Help Polish (Version: 2008.0515.2150.37248)
CCC Help Portuguese (Version: 2008.0515.2150.37248)
CCC Help Russian (Version: 2008.0515.2150.37248)
CCC Help Spanish (Version: 2008.0515.2150.37248)
CCC Help Swedish (Version: 2008.0515.2150.37248)
CCC Help Thai (Version: 2008.0515.2150.37248)
CCC Help Turkish (Version: 2008.0515.2150.37248)
ccc-core-preinstall (Version: 2008.0515.2151.37248)
ccc-core-static (Version: 2008.0515.2151.37248)
ccc-utility (Version: 2008.0515.2151.37248)
Credential Manager for HP ProtectTools (Version: 4.0.4.1216.1)
Drive Encryption for HP ProtectTools (Version: 4.0.6)
Hotfix für Windows XP (KB2779562) (Version: 1)
Hotfix für Windows XP (KB949764) (Version: 1)
Hotfix für Windows XP (KB952287) (Version: 1)
Hotfix für Windows XP (KB961118) (Version: 1)
HP 3D DriveGuard (Version: 1.10 A8)
HP Connection Manager 1.1 (Version: 1.01.0002)
HP Doc Viewer (Version: 1.03.0001)
HP Help and Support (Version: 4.4.0003)
HP Integrated Module with Bluetooth wireless technology (Version: 5.1.0.4803)
HP JavaCard for HP ProtectTools (Version: 04.00.03.0001)
HP ProtectTools Security Manager (Version: 4.00 C1)
HP ProtectTools Security Manager Suite (Version: 04.00.03.0001)
HP Quick Launch Buttons 6.40 E1 (Version: 6.40 E1)
HP Update (Version: 4.000.010.008)
HP User Guide Bluetooth Addendum 0062 (Version: 1.01.0000)
HP User Guides 0097 (Version: 1.03.0000)
HP Webcam (Version: 5.8.39004.0)
HP Webcam Application (Version: 1.0.021.0507)
HP Wireless Assistant (Version: 3.00 K1)
InterVideo DVD Check
InterVideo WinDVD (Version: 5.0-B11.1256)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300)
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 German Language Pack (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2833941)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30729)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30729)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 23.0.1 (x86 de) (Version: 23.0.1)
Mozilla Maintenance Service (Version: 23.0.1)
MSXML 6.0 Parser (Version: 6.00.3883.8)
OpenOffice 4.0.0 (Version: 4.00.9702)
PDF Complete (Version: 3.5.30)
SCR3xxx Smart Card Reader (Version: 8.28)
Sicherheitsupdate für Microsoft Windows (KB2564958)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2510531) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2618444) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2744842) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2846071) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB2862772) (Version: 1)
Sicherheitsupdate für Windows Internet Explorer 8 (KB982381) (Version: 1)
Sicherheitsupdate für Windows Media Player (KB2378111)
Sicherheitsupdate für Windows Media Player (KB2803821)
Sicherheitsupdate für Windows Media Player (KB2803821-v2)
Sicherheitsupdate für Windows Media Player (KB952069)
Sicherheitsupdate für Windows Media Player (KB954155)
Sicherheitsupdate für Windows Media Player (KB973540)
Sicherheitsupdate für Windows Media Player (KB975558)
Sicherheitsupdate für Windows Media Player (KB978695)
Sicherheitsupdate für Windows XP (KB2115168) (Version: 1)
Sicherheitsupdate für Windows XP (KB2229593) (Version: 1)
Sicherheitsupdate für Windows XP (KB2296011) (Version: 1)
Sicherheitsupdate für Windows XP (KB2347290) (Version: 1)
Sicherheitsupdate für Windows XP (KB2360937) (Version: 1)
Sicherheitsupdate für Windows XP (KB2387149) (Version: 1)
Sicherheitsupdate für Windows XP (KB2393802) (Version: 1)
Sicherheitsupdate für Windows XP (KB2419632) (Version: 1)
Sicherheitsupdate für Windows XP (KB2423089) (Version: 1)
Sicherheitsupdate für Windows XP (KB2440591) (Version: 1)
Sicherheitsupdate für Windows XP (KB2443105) (Version: 1)
Sicherheitsupdate für Windows XP (KB2478960) (Version: 1)
Sicherheitsupdate für Windows XP (KB2478971) (Version: 1)
Sicherheitsupdate für Windows XP (KB2479943) (Version: 1)
Sicherheitsupdate für Windows XP (KB2481109) (Version: 1)
Sicherheitsupdate für Windows XP (KB2483185) (Version: 1)
Sicherheitsupdate für Windows XP (KB2485663) (Version: 1)
Sicherheitsupdate für Windows XP (KB2506212) (Version: 1)
Sicherheitsupdate für Windows XP (KB2507938) (Version: 1)
Sicherheitsupdate für Windows XP (KB2508429) (Version: 1)
Sicherheitsupdate für Windows XP (KB2509553) (Version: 1)
Sicherheitsupdate für Windows XP (KB2510581) (Version: 1)
Sicherheitsupdate für Windows XP (KB2535512) (Version: 1)
Sicherheitsupdate für Windows XP (KB2536276-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB2544893-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB2566454) (Version: 1)
Sicherheitsupdate für Windows XP (KB2570947) (Version: 1)
Sicherheitsupdate für Windows XP (KB2584146) (Version: 1)
Sicherheitsupdate für Windows XP (KB2585542) (Version: 1)
Sicherheitsupdate für Windows XP (KB2592799) (Version: 1)
Sicherheitsupdate für Windows XP (KB2598479) (Version: 1)
Sicherheitsupdate für Windows XP (KB2603381) (Version: 1)
Sicherheitsupdate für Windows XP (KB2618451) (Version: 1)
Sicherheitsupdate für Windows XP (KB2619339) (Version: 1)
Sicherheitsupdate für Windows XP (KB2620712) (Version: 1)
Sicherheitsupdate für Windows XP (KB2624667) (Version: 1)
Sicherheitsupdate für Windows XP (KB2631813) (Version: 1)
Sicherheitsupdate für Windows XP (KB2653956) (Version: 1)
Sicherheitsupdate für Windows XP (KB2655992) (Version: 1)
Sicherheitsupdate für Windows XP (KB2659262) (Version: 1)
Sicherheitsupdate für Windows XP (KB2661637) (Version: 1)
Sicherheitsupdate für Windows XP (KB2676562) (Version: 1)
Sicherheitsupdate für Windows XP (KB2686509) (Version: 1)
Sicherheitsupdate für Windows XP (KB2691442) (Version: 1)
Sicherheitsupdate für Windows XP (KB2698365) (Version: 1)
Sicherheitsupdate für Windows XP (KB2705219-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB2712808) (Version: 1)
Sicherheitsupdate für Windows XP (KB2719985) (Version: 1)
Sicherheitsupdate für Windows XP (KB2723135-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB2727528) (Version: 1)
Sicherheitsupdate für Windows XP (KB2753842-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB2757638) (Version: 1)
Sicherheitsupdate für Windows XP (KB2758857) (Version: 1)
Sicherheitsupdate für Windows XP (KB2770660) (Version: 1)
Sicherheitsupdate für Windows XP (KB2780091) (Version: 1)
Sicherheitsupdate für Windows XP (KB2802968) (Version: 1)
Sicherheitsupdate für Windows XP (KB2807986) (Version: 1)
Sicherheitsupdate für Windows XP (KB2813345) (Version: 1)
Sicherheitsupdate für Windows XP (KB2820197) (Version: 1)
Sicherheitsupdate für Windows XP (KB2820917) (Version: 1)
Sicherheitsupdate für Windows XP (KB2834886) (Version: 1)
Sicherheitsupdate für Windows XP (KB2839229) (Version: 1)
Sicherheitsupdate für Windows XP (KB2845187) (Version: 1)
Sicherheitsupdate für Windows XP (KB2846071) (Version: 1)
Sicherheitsupdate für Windows XP (KB2849470) (Version: 1)
Sicherheitsupdate für Windows XP (KB2850851) (Version: 1)
Sicherheitsupdate für Windows XP (KB2850869) (Version: 1)
Sicherheitsupdate für Windows XP (KB2859537) (Version: 1)
Sicherheitsupdate für Windows XP (KB923561) (Version: 1)
Sicherheitsupdate für Windows XP (KB923789)
Sicherheitsupdate für Windows XP (KB946648) (Version: 1)
Sicherheitsupdate für Windows XP (KB950762) (Version: 1)
Sicherheitsupdate für Windows XP (KB950974) (Version: 1)
Sicherheitsupdate für Windows XP (KB951376-v2) (Version: 2)
Sicherheitsupdate für Windows XP (KB952004) (Version: 1)
Sicherheitsupdate für Windows XP (KB952954) (Version: 1)
Sicherheitsupdate für Windows XP (KB956572) (Version: 1)
Sicherheitsupdate für Windows XP (KB956802) (Version: 1)
Sicherheitsupdate für Windows XP (KB956844) (Version: 1)
Sicherheitsupdate für Windows XP (KB960803) (Version: 1)
Sicherheitsupdate für Windows XP (KB960859) (Version: 1)
Sicherheitsupdate für Windows XP (KB969059) (Version: 1)
Sicherheitsupdate für Windows XP (KB970430) (Version: 1)
Sicherheitsupdate für Windows XP (KB971657) (Version: 1)
Sicherheitsupdate für Windows XP (KB972270) (Version: 1)
Sicherheitsupdate für Windows XP (KB973507) (Version: 1)
Sicherheitsupdate für Windows XP (KB973869) (Version: 1)
Sicherheitsupdate für Windows XP (KB973904) (Version: 1)
Sicherheitsupdate für Windows XP (KB974112) (Version: 1)
Sicherheitsupdate für Windows XP (KB974318) (Version: 1)
Sicherheitsupdate für Windows XP (KB974392) (Version: 1)
Sicherheitsupdate für Windows XP (KB974571) (Version: 1)
Sicherheitsupdate für Windows XP (KB975025) (Version: 1)
Sicherheitsupdate für Windows XP (KB975467) (Version: 1)
Sicherheitsupdate für Windows XP (KB975560) (Version: 1)
Sicherheitsupdate für Windows XP (KB975713) (Version: 1)
Sicherheitsupdate für Windows XP (KB977816) (Version: 1)
Sicherheitsupdate für Windows XP (KB977914) (Version: 1)
Sicherheitsupdate für Windows XP (KB978338) (Version: 1)
Sicherheitsupdate für Windows XP (KB978542) (Version: 1)
Sicherheitsupdate für Windows XP (KB978706) (Version: 1)
Sicherheitsupdate für Windows XP (KB979309) (Version: 1)
Sicherheitsupdate für Windows XP (KB979482) (Version: 1)
Sicherheitsupdate für Windows XP (KB979687) (Version: 1)
Sicherheitsupdate für Windows XP (KB981322) (Version: 1)
Sicherheitsupdate für Windows XP (KB981997) (Version: 1)
Sicherheitsupdate für Windows XP (KB982132) (Version: 1)
Sicherheitsupdate für Windows XP (KB982665) (Version: 1)
Skins (Version: 2008.0515.2151.37248)
SoundMAX (Version: 5.10.01.5820)
Synaptics Pointing Device Driver (Version: 11.0.7.0)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update für Windows Internet Explorer 8 (KB2598845) (Version: 1)
Update für Windows XP (KB2345886) (Version: 1)
Update für Windows XP (KB2467659) (Version: 1)
Update für Windows XP (KB2661254-v2) (Version: 2)
Update für Windows XP (KB2749655) (Version: 1)
Update für Windows XP (KB2863058) (Version: 1)
Update für Windows XP (KB898461) (Version: 1)
Update für Windows XP (KB951978) (Version: 1)
Update für Windows XP (KB955759) (Version: 1)
Update für Windows XP (KB968389) (Version: 1)
Update für Windows XP (KB971029) (Version: 1)
Update für Windows XP (KB973815) (Version: 1)
WebFldrs XP (Version: 9.50.7523)
Windows Genuine Advantage Notifications (KB905474) (Version: 1.9.0040.0)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows XP Service Pack 3 (Version: 20080414.031514)
 

==================== Restore Points  =========================

22-07-2013 13:56:55 Systemprüfpunkt
22-07-2013 19:35:37 Installed InterVideo Register Manager
22-07-2013 19:39:00 HP Update wird installiert
22-07-2013 19:39:17 Installiert HP Help and Support
22-07-2013 19:40:08 Druckertreiber PDF Complete Converter installiert
22-07-2013 19:40:29 Installed HP Webcam Application
22-07-2013 19:41:49 Windows Installer KB893803v2 wurde installiert.
22-07-2013 21:06:11 Windows XP KB888111WXPSP2 wurde installiert.
22-07-2013 21:06:36 Installiert SoundMAX
22-07-2013 21:06:42 Installiert SoundMAX
22-07-2013 21:09:40 Installed Combined Modem Driver Installer
22-07-2013 21:10:24 Windows XP KB885855 wurde installiert.
22-07-2013 21:10:31 Windows XP KB888239 wurde installiert.
22-07-2013 21:10:40 Windows XP KB892559-v3 wurde installiert.
22-07-2013 21:10:48 Windows XP KB896256 wurde installiert.
22-07-2013 21:10:57 Windows XP KB909095 wurde installiert.
22-07-2013 21:11:05 Windows XP KB909667 wurde installiert.
22-07-2013 21:11:12 Windows XP KB912436 wurde installiert.
22-07-2013 21:11:18 Windows XP KB918005 wurde installiert.
22-07-2013 21:11:25 Windows XP KB883667 wurde installiert.
22-07-2013 21:11:32 Windows XP KB885464 wurde installiert.
22-07-2013 21:11:39 Windows XP KB888402 wurde installiert.
22-07-2013 21:11:46 Windows XP KB889673 wurde installiert.
22-07-2013 21:11:54 Windows XP KB915326 wurde installiert.
22-07-2013 21:12:00 Windows XP KB949764 wurde installiert.
22-07-2013 21:12:30 Windows Installer KB893803v2 wurde installiert.
22-07-2013 21:15:18 Installiert ATI Catalyst Control Center
22-07-2013 21:18:58 Installiert AMD Processor Driver
22-07-2013 21:20:00 Installiert HP Webcam
22-07-2013 21:24:09 Installed Windows XP Wdf01005.
22-07-2013 21:25:41 Installiert HP Quick Launch Buttons
23-07-2013 09:32:05 Konfiguriert SoundMAX
23-07-2013 09:32:13 Installiert SoundMAX
23-07-2013 09:33:01 Installed Combined Modem Driver Installer
23-07-2013 09:33:58 Windows XP KB885855 wurde installiert.
23-07-2013 09:34:07 Windows XP KB888239 wurde installiert.
23-07-2013 09:34:21 Windows XP KB892559-v3 wurde installiert.
23-07-2013 09:34:33 Windows XP KB896256 wurde installiert.
23-07-2013 09:34:43 Windows XP KB909095 wurde installiert.
23-07-2013 09:34:54 Windows XP KB909667 wurde installiert.
23-07-2013 09:35:02 Windows XP KB912436 wurde installiert.
23-07-2013 09:35:10 Windows XP KB918005 wurde installiert.
23-07-2013 09:35:19 Windows XP KB883667 wurde installiert.
23-07-2013 09:35:27 Windows XP KB885464 wurde installiert.
23-07-2013 09:35:35 Windows XP KB888402 wurde installiert.
23-07-2013 09:35:44 Windows XP KB889673 wurde installiert.
23-07-2013 09:35:53 Windows XP KB915326 wurde installiert.
23-07-2013 09:36:01 Windows XP KB949764 wurde installiert.
23-07-2013 09:36:47 Windows Installer KB893803v2 wurde installiert.
23-07-2013 09:38:56 Installiert ATI Catalyst Control Center
23-07-2013 09:42:14 Installiert HP Webcam
23-07-2013 12:41:51 Windows XP Service Pack 3 wurde installiert.
23-07-2013 12:50:43 Windows XP KB949764 wurde installiert.
23-07-2013 14:05:39 Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
23-07-2013 14:06:07 OpenOffice 4.0.0 wird installiert
25-07-2013 07:44:20 Software Distribution Service 3.0
25-07-2013 07:49:38 Java 7 Update 25 wird installiert
25-07-2013 08:54:44 Software Distribution Service 3.0
25-07-2013 09:27:58 Software Distribution Service 3.0
25-07-2013 10:21:39 Software Distribution Service 3.0
26-07-2013 18:54:20 Systemprüfpunkt
27-07-2013 08:21:33 Software Distribution Service 3.0
28-07-2013 07:10:32 Software Distribution Service 3.0
28-07-2013 19:40:06 Software Distribution Service 3.0
31-07-2013 11:17:08 Systemprüfpunkt
01-08-2013 14:45:23 Systemprüfpunkt
18-08-2013 06:56:06 Software Distribution Service 3.0
20-08-2013 17:54:23 Systemprüfpunkt
22-08-2013 12:01:04 Systemprüfpunkt
22-08-2013 18:01:53 Windows XP WgaNotify wurde installiert.
24-08-2013 08:26:23 Systemprüfpunkt
28-08-2013 10:38:30 Systemprüfpunkt
31-08-2013 16:59:22 Software Distribution Service 3.0

==================== Hosts content: ==========================

2004-08-04 14:00 - 2004-08-04 14:00 - 00000820 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1      localhost

==================== Scheduled Tasks (whitelisted) =============


==================== Loaded Modules (whitelisted) =============

2008-03-25 14:17 - 2008-03-25 14:17 - 00076048 _____ (Bioscrypt Inc.) C:\WINDOWS\system32\APSHook.dll
2004-08-04 14:00 - 2008-04-14 07:51 - 00177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfime.ime
2007-05-15 16:08 - 2007-05-15 16:08 - 00112640 _____ (ActivIdentity) C:\WINDOWS\system32\ackpbsc.dll
2007-05-15 16:08 - 2007-05-15 16:08 - 00118784 _____ (ActivIdentity) C:\WINDOWS\system32\aclog.dll
2006-12-02 00:25 - 2006-12-02 00:25 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL
2007-05-15 16:08 - 2007-05-15 16:08 - 00655360 _____ (ActivIdentity) C:\WINDOWS\system32\ACLIBEAY.dll
2006-12-02 00:08 - 2006-12-02 00:08 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80DEU.DLL
2007-05-15 16:08 - 2007-05-15 16:08 - 00100864 _____ (ActivIdentity) C:\WINDOWS\system32\acevtsub.dll
2007-05-15 16:08 - 2007-05-15 16:08 - 00325120 _____ (ActivIdentity) C:\WINDOWS\system32\asphat32.dll
2007-05-15 16:08 - 2007-05-15 16:08 - 00029696 _____ (ActivIdentity) C:\WINDOWS\system32\acerrmes.dll
2007-05-15 16:08 - 2007-05-15 16:08 - 00087040 _____ (ActivIdentity) C:\WINDOWS\system32\aspcom.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCARDDLG.dll
2013-07-22 23:23 - 2013-07-22 23:23 - 00064512 _____ (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\Resources\Merged\acerrmrc.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC42LOC.DLL
2013-07-22 23:23 - 2013-07-22 23:23 - 00053760 _____ (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\Resources\Merged\asphatrc.dll
2008-05-16 00:08 - 2008-05-16 00:08 - 00131072 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.dll
2008-06-02 14:06 - 2008-06-02 14:06 - 00112400 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ASWlnPkg.DLL
2013-07-22 23:24 - 2005-01-19 19:25 - 00339968 ____R (Microsoft Corporation) C:\WINDOWS\system32\MSVCR70.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00685328 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\ItMsg.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00239888 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\TrayIcon.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00187664 _____ (Hewlett-Packard Company) C:\Programme\Hewlett-Packard\IAM\bin\brand.dll
2008-06-02 14:08 - 2008-06-02 14:08 - 00008464 _____ (Hewlett-Packard Company) C:\Programme\Hewlett-Packard\IAM\bin\DEU\brand.dll
2008-06-02 14:08 - 2008-06-02 14:08 - 00217872 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\DEU\ItMsg.dll
2008-06-02 14:06 - 2008-06-02 14:06 - 00137488 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\AsChnl.dll
2013-04-22 05:45 - 2013-04-22 05:45 - 05920408 _____ (Microsoft Corporation) c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
2013-07-28 09:30 - 2013-07-28 09:30 - 11497984 _____ (Microsoft Corporation) C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\b14359470744c840c59fbe4e58034fd6\mscorlib.ni.dll
2008-06-10 11:14 - 2008-06-10 11:14 - 01417216 _____ (Hewlett-Packard) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTHostServices.dll
2012-10-03 06:44 - 2012-10-03 06:44 - 00364640 _____ (Microsoft Corporation) c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
2008-07-25 11:17 - 2008-07-25 11:17 - 00575496 _____ (Microsoft Corporation) c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
2013-07-28 09:29 - 2013-08-18 08:59 - 02052096 _____ (Microsoft Corporation) C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll
2013-07-28 09:30 - 2013-08-18 08:59 - 03194880 _____ (Microsoft Corporation) C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
2013-07-28 09:30 - 2013-08-18 08:59 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
2008-06-02 14:06 - 2008-06-02 14:06 - 00670992 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\BioAuth.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00080656 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ItClient.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00162576 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ItReports.DLL
2008-06-02 14:08 - 2008-06-02 14:08 - 00042256 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\DEU\BioAuth.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00309520 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ittal.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00258104 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avsda.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00131344 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ItVCClient.dll
2007-05-15 16:08 - 2007-05-15 16:08 - 00281088 _____ (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\acunlock.dll
2007-05-15 16:08 - 2007-05-15 16:08 - 00224768 _____ (ActivIdentity) C:\WINDOWS\system32\aipingui.dll
2013-07-22 23:23 - 2013-07-22 23:23 - 00254464 _____ (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\Resources\Merged\aipinguirc.dll
2007-05-15 16:08 - 2007-05-15 16:08 - 00206848 _____ (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\resources\acCobAPIrc.dll
2013-07-22 23:23 - 2013-07-22 23:23 - 00056832 _____ (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\Resources\Merged\acunlockrc.dll
2008-06-06 09:58 - 2008-06-06 09:58 - 00549136 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\AuthWiz.dll
2008-06-02 14:08 - 2008-06-02 14:08 - 00041232 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\DEU\AuthWiz.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00447760 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\HPPlugIn.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00085776 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\STEngine.dll
2008-06-02 14:06 - 2008-06-02 14:06 - 00112400 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\ASWLNPkg.dll
2008-03-25 14:17 - 2008-03-25 14:17 - 00076048 _____ (Bioscrypt Inc.) C:\WINDOWS\System32\APSHook.dll
2008-06-02 14:06 - 2008-06-02 14:06 - 00112400 _____ (Bioscrypt Inc.) c:\programme\hewlett-packard\iam\bin\aswlnpkg.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00685328 _____ (Bioscrypt Inc.) c:\programme\hewlett-packard\iam\bin\ItMsg.dll
2008-06-02 14:06 - 2008-06-02 14:06 - 00137488 _____ (Bioscrypt Inc.) c:\programme\hewlett-packard\iam\bin\aschnl.dll
2008-06-02 14:06 - 2008-06-02 14:06 - 00109840 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\BioAuthSrv.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00672528 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ItDac.DLL
2004-08-04 14:00 - 2008-04-14 07:52 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\System32\adsnt.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\System32\RASSAPI.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00360208 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ItAuth.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00176248 _____ (Microsoft Corporation) C:\WINDOWS\system32\xenroll.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00247056 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\TpmAuth.dll
2008-06-02 14:08 - 2008-06-02 14:08 - 00013584 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\DEU\TpmAuth.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00396048 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ItVCard.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00232208 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ItAPS.dll
2008-06-02 14:08 - 2008-06-02 14:08 - 00016144 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\DEU\ItAPS.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00182544 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ItVCServer.dll
2008-05-16 00:08 - 2008-05-16 00:08 - 00043520 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\Ati2edxx.dll
2008-05-16 00:09 - 2008-05-16 00:09 - 00172032 _____ (ATI Technologies, Inc.) C:\WINDOWS\system32\atipdlxx.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\System32\unimdmat.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\modemui.dll
2004-08-04 14:00 - 2009-03-08 04:32 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\advpack.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00438272 _____ (Microsoft Corporation) c:\windows\system32\ntmssvc.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00180224 _____ (Microsoft Corporation) c:\windows\system32\NTMSDBA.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\System32\xmlprovi.dll
2013-07-22 15:43 - 2012-06-02 15:19 - 00577048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2008-05-12 14:36 - 2008-05-12 14:36 - 00106496 _____ (Broadcom Corporation.) C:\WINDOWS\system32\bthcrp.dll
2008-05-12 14:19 - 2008-05-12 14:19 - 00573440 _____ (Broadcom Corporation.) C:\WINDOWS\system32\WidcommSdk.dll
2008-05-12 14:21 - 2008-05-12 14:21 - 00507965 _____ (Broadcom Corporation.) C:\WINDOWS\system32\wbtapi.dll
2004-08-04 14:00 - 2011-02-08 15:33 - 00978944 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC42.DLL
2013-07-22 21:40 - 2008-05-12 06:28 - 00015368 _____ (PDF Complete, Inc.) C:\WINDOWS\system32\pdfc_port.dll
2013-07-25 12:26 - 2008-07-06 14:06 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll
2011-02-19 23:03 - 2011-02-19 23:03 - 00421200 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVCP100.dll
2011-02-19 00:40 - 2011-02-19 00:40 - 00773968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVCR100.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00378424 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\grdcore.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00054840 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\cfglib.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00218168 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\gpipc.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00191032 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\gpgen.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00128056 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\gpschd.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00164920 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avevtlog.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00013368 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\schedr.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00394824 _____ () C:\Programme\Avira\AntiVir Desktop\sqlite3.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00059448 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avipc.dll
2008-05-16 00:08 - 2008-05-16 00:08 - 00131072 _____ (ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00685328 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ItMsg.dll
2008-06-02 14:06 - 2008-06-02 14:06 - 00214288 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ASWallet.dll
2008-06-02 14:08 - 2008-06-02 14:08 - 00018192 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\DEU\ASWallet.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00382224 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ItSSO.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00134416 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\RasAdmin.dll
2008-06-02 14:08 - 2008-06-02 14:08 - 00020752 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\DEU\RasAdmin.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00142608 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\PkiAdmin.dll
2008-06-02 14:08 - 2008-06-02 14:08 - 00015632 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\DEU\PkiAdmin.dll
2008-06-02 14:07 - 2008-06-02 14:07 - 00183568 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\NetAdmin.dll
2008-06-02 14:08 - 2008-06-02 14:08 - 00023824 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\DEU\NetAdmin.dll
2008-05-08 06:22 - 2008-05-08 06:22 - 00248080 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\SSOMngr.dll
2008-06-02 14:08 - 2008-06-02 14:08 - 00033552 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\DEU\SSOMngr.dll
2008-06-02 14:06 - 2008-06-02 14:06 - 00176912 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\ASBioATFSS.dll
2008-06-02 14:08 - 2008-06-02 14:08 - 00013072 _____ (Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\bin\DEU\ASBioATFSS.dll
2008-05-15 15:11 - 2008-05-15 15:11 - 00517368 _____ (AuthenTec, Inc.) C:\WINDOWS\system32\AFSSClientLib.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\scarddlg.dll
2008-05-12 14:51 - 2008-05-12 14:51 - 00073728 _____ (Broadcom Corporation.) C:\WINDOWS\system32\btmmhook.dll
2013-08-18 08:59 - 2013-08-18 08:59 - 05025792 _____ (Microsoft Corporation) C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
2013-08-18 08:59 - 2013-08-18 08:59 - 00630784 _____ (Microsoft Corporation) C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
2013-07-23 14:47 - 2008-04-14 00:09 - 00779776 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpsp3res.dll
2008-05-12 14:49 - 2008-05-12 14:49 - 00040960 _____ () C:\Programme\WIDCOMM\Bluetooth Software\btkeyind.dll
2013-07-16 15:29 - 2013-07-16 15:29 - 00435200 _____ (Apache Software Foundation) C:\Programme\OpenOffice 4\program\shlxthdl\shlxthdl.dll
2013-08-28 12:18 - 2013-04-04 14:50 - 00080968 _____ (Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamext.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00154680 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\shlext.dll
2011-02-19 23:03 - 2011-02-19 23:03 - 04422992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc100u.dll
2011-02-19 23:03 - 2011-02-19 23:03 - 00064336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC100DEU.DLL
2004-08-04 14:00 - 2008-04-14 07:52 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquoui.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquota.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\DEVMGR.DLL
2007-05-15 16:08 - 2007-05-15 16:08 - 00043008 _____ (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\resources\accocarc.dll
2007-05-15 16:08 - 2007-05-15 16:08 - 00071680 _____ (ActivIdentity) C:\Programme\ActivIdentity\ActivClient\accocaps.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00041016 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\gpgrd.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00333368 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\gpavgio.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00057912 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\gpgui.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00045624 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\gplegacy.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00058936 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\gpgenrep.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00025656 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\onlcfg.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00042040 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\guardmsg.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00078392 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\AVGIO.DLL
2013-07-23 15:04 - 2013-06-20 14:48 - 00048184 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\avpref.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00135736 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\avesvc.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00013880 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\avesvcr.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00247864 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\avreg.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00023608 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\avwinll.dll
2013-07-23 15:04 - 2013-08-23 16:03 - 00201081 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aecore.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00102774 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aevdf.dll
2013-07-23 15:04 - 2013-09-02 20:09 - 00512382 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aescript.dll
2013-07-23 15:04 - 2013-03-26 22:14 - 00131446 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aescn.dll
2013-07-23 15:04 - 2013-08-23 16:03 - 01245560 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aesbx.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00688504 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aerdl.dll
2013-07-23 15:04 - 2013-06-20 15:16 - 00749945 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aepack.dll
2013-07-23 15:04 - 2013-08-17 21:14 - 00205181 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aeoffice.dll
2013-07-23 15:04 - 2013-09-02 20:09 - 06091130 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aeheur.dll
2013-07-23 15:04 - 2013-08-27 17:13 - 00266617 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aehelp.dll
2013-07-23 15:04 - 2013-08-17 21:14 - 00442743 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aegen.dll
2013-07-23 15:04 - 2013-09-02 20:09 - 00311671 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aeexp.dll
2013-07-23 15:04 - 2012-11-29 12:25 - 00393587 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aeemu.dll
2013-07-23 15:04 - 2012-11-29 12:25 - 00053619 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\aebb.dll
2013-08-18 09:00 - 2013-08-18 09:00 - 07977984 _____ (Microsoft Corporation) C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\10df39542df7d48462451fc39bce8418\System.ni.dll
2013-08-18 14:31 - 2013-08-18 14:31 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\15fd2d2f4e709154b44187a6915db244\System.ServiceProcess.ni.dll
2013-08-18 09:02 - 2013-08-18 09:02 - 05462016 _____ (Microsoft Corporation) C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\f93600ac836b9140e1df13bb0f6bfccf\System.Xml.ni.dll
2013-07-28 09:29 - 2013-08-18 08:59 - 00303104 _____ (Microsoft Corporation) C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
2013-08-18 14:31 - 2013-08-18 14:31 - 00998400 _____ (Microsoft Corporation) C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\cf3c9d1496acdcb836853e59fe20223b\System.Management.ni.dll
2008-07-25 11:17 - 2008-07-25 11:17 - 00037896 _____ (Microsoft Corporation) c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
2013-08-18 14:29 - 2013-08-18 14:29 - 00978944 _____ (Microsoft Corporation) C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\14d1a28674a9f78c5759e7dcf74a13fd\System.Configuration.ni.dll
2008-06-10 11:13 - 2008-06-10 11:13 - 00007168 _____ ( ) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\Interop.PTHstServsLib.dll
2008-06-10 11:13 - 2008-06-10 11:13 - 00245760 _____ (Hewlett-Packard) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\BIOSDomain.dll
2008-06-10 11:13 - 2008-06-10 11:13 - 00028672 _____ ( ) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\Interop.PTPluginLib.dll
2008-06-10 11:10 - 2008-06-10 11:10 - 00053248 _____ (Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTStrings.dll
2008-06-05 17:03 - 2008-06-05 17:03 - 00764416 _____ (SafeBoot International) C:\Programme\Hewlett-Packard\Drive Encryption\Languages\0007\SbHpFve.lng
2008-06-10 11:11 - 2008-06-10 11:11 - 01073152 _____ (Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\HPjCard.dll
2007-05-15 16:08 - 2007-05-15 16:08 - 00169984 _____ (ActivIdentity) C:\WINDOWS\system32\acomx.dll
2007-05-15 16:08 - 2007-05-15 16:08 - 00140800 _____ (ActivIdentity) C:\WINDOWS\system32\acbsi21.dll
2008-06-10 11:13 - 2008-06-10 11:13 - 00005632 _____ ( ) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\Interop.HPQWMIEXLib.dll
2013-08-18 14:31 - 2013-08-18 14:31 - 11816960 _____ (Microsoft Corporation) C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\9b32857137a545633a4f303ec88d418c\System.Web.ni.dll
2013-07-25 09:49 - 2013-07-25 09:49 - 00770384 _____ (Microsoft Corporation) C:\Programme\Java\jre7\bin\MSVCR100.dll
2004-08-04 14:00 - 2009-03-06 16:19 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcbcp.dll
2009-11-07 01:07 - 2009-11-07 01:07 - 00049488 _____ (Microsoft Corporation) C:\WINDOWS\system32\netfxperf.dll
2008-07-25 11:17 - 2008-07-25 11:17 - 00088584 _____ (Microsoft Corporation) c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\perfcounter.dll
2008-07-25 11:17 - 2008-07-25 11:17 - 00089608 _____ (Microsoft Corporation) c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CorperfmonExt.dll
2008-07-25 11:16 - 2008-07-25 11:16 - 00033800 _____ (Microsoft Corporation) c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_perf.dll
2013-04-03 01:00 - 2013-04-03 01:00 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
2003-02-21 04:42 - 2003-02-21 04:42 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll
2013-07-22 15:41 - 2008-06-12 16:20 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.DLL
2013-07-22 15:41 - 2008-06-12 16:20 - 00428032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSDTCPRX.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\pschdprf.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\TRAFFIC.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\System32\rsvpperf.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapiperf.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Perfctrs.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\UTILDLL.dll
2013-07-22 15:41 - 2008-04-14 07:52 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbem\wmiaprpl.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\loadperf.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\System32\rasctrs.dll
2013-07-22 15:43 - 2008-04-14 07:52 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgrprxy.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00334336 _____ (Microsoft Corporation) c:\windows\system32\wiaservc.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiavusd.dll
2008-06-09 08:11 - 2008-06-09 08:11 - 00017712 _____ (Hewlett-Packard Corporation) C:\WINDOWS\system32\accelerometerDLL.dll
2013-07-22 23:21 - 2008-03-27 20:15 - 00163840 _____ (Synaptics, Inc.) C:\WINDOWS\system32\SynCOM.dll
2013-07-22 23:21 - 2008-03-27 20:27 - 00151552 _____ (Synaptics, Inc.) C:\WINDOWS\system32\SynTPAPI.dll
2008-06-05 17:07 - 2008-06-05 17:07 - 02255448 _____ (SafeBoot International) C:\Programme\Hewlett-Packard\Drive Encryption\SbHpFve.dll
2008-02-22 16:36 - 2008-02-22 16:36 - 00483328 _____ (SafeBoot International) C:\Programme\Hewlett-Packard\Drive Encryption\SbUILib.dll
2013-07-22 23:25 - 2007-09-27 16:07 - 00300336 _____ (Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\QLBSERVICE.DLL
2013-07-22 13:42 - 2008-04-11 18:42 - 00290816 ____R (Analog Devices, Inc.) C:\Programme\Analog Devices\Core\SMWDMIF.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00739384 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\ccwkrlib.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00349752 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccguard.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00030432 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccgrdrc.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00229432 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccgrdw.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00418872 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccwgrd.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00026168 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccwgrdrc.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00127544 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccwgrdw.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00790584 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccgen.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00049208 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccgenrc.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00219192 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccupdate.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00029472 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccupdrc.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00082488 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\cclic.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00011632 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\cclicrc.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00207928 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccmsg.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00010608 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccmsgrc.dll
2013-07-23 15:04 - 2012-12-07 09:39 - 04780832 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\rcimage.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00016240 _____ (Avira Operations GmbH & Co. KG) c:\programme\avira\antivir desktop\ccmainrc.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00212536 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\ccupdw.dll
2008-05-12 14:34 - 2008-05-12 14:34 - 00122880 _____ (Broadcom Corporation.) C:\WINDOWS\system32\btosif.dll
2008-05-12 14:45 - 2008-05-12 14:45 - 00233472 _____ (Broadcom Corporation.) C:\WINDOWS\system32\btwhidcs.DLL
2013-07-22 13:58 - 2008-05-14 10:08 - 00036864 _____ (Broadcom Corporation.) C:\Programme\WIDCOMM\Bluetooth Software\BtBalloon.dll
2008-05-12 14:27 - 2008-05-14 10:08 - 03411968 _____ (Broadcom Corporation.) C:\WINDOWS\system32\btrez.dll
2008-05-12 14:51 - 2008-05-12 14:51 - 02842624 _____ () C:\WINDOWS\system32\btwicons.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scredir.dll
2008-06-12 13:19 - 2008-06-12 13:19 - 00223720 _____ () C:\Programme\HPQ\HP Connection Manager 1.1\bin\HPBIOS.DLL
2013-08-18 09:02 - 2013-08-18 09:02 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b34cb206ab0cec687c3730b14cdff57\System.Drawing.ni.dll
2013-08-18 09:02 - 2013-08-18 09:02 - 12434432 _____ (Microsoft Corporation) C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\a12a09aaa2c560a808dea7eaba5040c1\System.Windows.Forms.ni.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00102400 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.3057.37461__90ba9c70f846762e\MOM.Implementation.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00032768 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.2939.23662__90ba9c70f846762e\LOG.Foundation.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00032768 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2939.23679__90ba9c70f846762e\LOG.Foundation.Private.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00061440 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3057.37459__90ba9c70f846762e\LOG.Foundation.Implementation.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.2939.23707__90ba9c70f846762e\MOM.Foundation.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2939.23712__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00045056 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.3057.37214__90ba9c70f846762e\AEM.Server.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00024576 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2939.23667__90ba9c70f846762e\NEWAEM.Foundation.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00032768 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.3057.37460__90ba9c70f846762e\CCC.Implementation.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00053248 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.2939.23668__90ba9c70f846762e\CLI.Foundation.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00028672 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2939.23802__90ba9c70f846762e\CLI.Foundation.XManifest.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00073728 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3057.37214__90ba9c70f846762e\CLI.Component.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00045056 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2939.23713__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00040960 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2939.23678__90ba9c70f846762e\CLI.Foundation.Private.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.2939.23688__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00032768 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00006656 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3057.37214__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00024576 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\AEM.Foundation\2.0.2939.23665__90ba9c70f846762e\AEM.Foundation.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2939.23710__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2939.23687__90ba9c70f846762e\AEM.Server.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00040960 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3057.37487__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2939.23768__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2939.23687__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00045056 _____ (ATI Technologies Inc.) C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (ATI Technologies Inc.) C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.2939.23718__90ba9c70f846762e\DEM.Graphics.dll
2013-07-22 23:14 - 2008-05-16 00:19 - 00372736 ____R (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ATIDEMGX.dll
2013-07-22 23:18 - 2013-07-22 23:18 - 00253952 _____ (Advanced Mirco Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3057.37222__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00053248 _____ (Advanced Mirco Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2939.23689__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00024576 _____ (ATI Technologies Inc.) C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2939.23717__90ba9c70f846762e\DEM.OS.I0602.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.2939.23717__90ba9c70f846762e\DEM.OS.dll
2007-10-29 14:56 - 2007-10-29 14:56 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Programme\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0709.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2939.23767__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00065536 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.3057.37215__90ba9c70f846762e\ATIDEMOS.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2939.23679__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\LOCALIZATION.Foundation.Private\2.0.2939.23677__90ba9c70f846762e\LOCALIZATION.Foundation.Private.dll
2013-07-22 23:18 - 2013-07-22 23:18 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3057.37240__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2939.23719__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
2013-07-22 23:18 - 2013-07-22 23:18 - 00065536 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3057.37407__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2939.23746__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00040960 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2939.23742__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00024576 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2939.23711__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
2013-07-22 23:18 - 2013-07-22 23:18 - 00036864 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3057.37367__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00032768 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2939.23708__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
2013-07-22 23:18 - 2013-07-22 23:18 - 00077824 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3057.37441__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00065536 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2965.22300__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00040960 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3057.37291__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00028672 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2939.23735__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00036864 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3057.37387__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00024576 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2939.23741__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00040960 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3057.37374__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00053248 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2939.23739__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00032768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3057.37400__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00028672 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2939.23719__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00061440 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3057.37367__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00045056 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2939.23738__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
2008-01-18 11:35 - 2008-01-18 11:35 - 00016384 _____ (Advanced Micro Devices, Inc.) C:\Programme\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0712.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00028672 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Runtime\2.0.3057.37266__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.2939.23735__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00061440 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3057.37414__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00053248 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2939.23743__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00073728 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3057.37374__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00049152 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2939.23740__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00045056 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Runtime\2.0.3057.37481__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Runtime.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00028672 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Shared\2.0.2939.23766__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00053248 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\APM.Server\2.0.3057.37213__90ba9c70f846762e\APM.Server.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.2939.23709__90ba9c70f846762e\APM.Foundation.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00491520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3057.37248__90ba9c70f846762e\CLI.Component.Wizard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00040960 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2939.23689__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2939.23679__90ba9c70f846762e\CLI.Component.Client.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2939.23693__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00024576 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2939.23694__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
2013-07-22 23:18 - 2013-07-22 23:18 - 00040960 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3057.37253__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2939.23734__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
2013-07-22 23:18 - 2013-07-22 23:18 - 00483328 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3057.37469__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00090112 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3057.37420__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
2013-07-22 23:18 - 2013-07-22 23:18 - 01679360 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3057.37261__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
2013-07-22 23:18 - 2013-07-22 23:18 - 00196608 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3057.37273__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00040960 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2939.23764__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00006656 _____ ( ) C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00401408 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3057.37433__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00307200 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3057.37292__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll
2013-07-22 23:18 - 2013-07-22 23:18 - 00364544 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.3057.37448__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.dll
2013-07-22 23:18 - 2013-07-22 23:18 - 00688128 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard\2.0.3057.37427__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 01511424 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3057.37228__90ba9c70f846762e\CLI.Component.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2939.23687__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00020480 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2939.23711__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00073728 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3057.37234__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00016384 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2939.23718__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00135168 _____ (Advanced Mirco Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3057.37476__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00217088 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3057.37280__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00438272 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3057.37241__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00118784 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3057.37388__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00479232 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3057.37369__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00401408 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3057.37401__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00663552 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard\2.0.3057.37408__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00901120 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.3057.37442__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00446464 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3057.37362__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00352256 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3057.37415__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00585728 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3057.37286__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00802816 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3057.37375__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00139264 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Dashboard\2.0.3057.37482__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Dashboard.dll
2013-07-22 23:17 - 2013-07-22 23:17 - 00102400 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard\2.0.3057.37267__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00188984 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\msgclient.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00022072 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avwebgrc.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00054840 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\cfglib.dll
2013-07-22 15:41 - 2008-04-14 07:24 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbem\WMIApRes.dll
2013-07-22 15:41 - 2008-04-14 07:52 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbem\wmiprov.dll
2004-08-04 14:00 - 2008-04-14 07:52 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\txflog.dll
2013-07-22 15:41 - 2008-04-14 07:52 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XOLEHLP.DLL
2013-07-22 15:41 - 2008-04-14 07:52 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatex.dll
2009-03-10 22:18 - 2009-03-10 22:18 - 00265096 ____N (Microsoft Corporation) C:\WINDOWS\system32\WgaLogon.dll
2013-08-28 12:18 - 2013-04-04 14:50 - 00527944 _____ (Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbam.dll
2013-08-28 12:18 - 2013-04-04 14:50 - 02191944 _____ (Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamnet.dll
2013-08-28 12:18 - 2013-04-04 14:50 - 01127496 _____ (Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamcore.dll
2013-08-17 22:00 - 2010-03-18 18:15 - 00770384 _____ (Microsoft Corporation) C:\Programme\Mozilla Firefox\MSVCR100.dll
2013-08-17 22:00 - 2010-03-18 18:15 - 00421200 _____ (Microsoft Corporation) C:\Programme\Mozilla Firefox\MSVCP100.dll
2013-08-17 22:00 - 2013-08-17 22:00 - 00158104 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\mozglue.dll
2013-08-17 22:00 - 2013-08-17 22:00 - 01914264 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\nss3.dll
2013-08-17 22:00 - 2013-08-17 22:00 - 03551640 _____ () C:\Programme\Mozilla Firefox\mozjs.dll
2013-08-17 22:00 - 2013-08-17 22:00 - 00016280 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\mozalloc.dll
2013-08-17 22:00 - 2013-08-17 22:00 - 03429784 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\gkmedias.dll
2013-08-17 22:00 - 2013-08-17 22:00 - 20616088 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\xul.dll
2013-08-17 22:00 - 2013-08-17 22:01 - 00262552 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\browser\components\browsercomps.dll
2004-08-04 14:00 - 2010-08-27 10:01 - 00119808 ____N (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2004-08-04 14:00 - 2004-08-04 14:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\LZ32.dll
2013-08-17 22:00 - 2013-08-17 22:00 - 00152984 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\softokn3.dll
2013-08-17 22:00 - 2013-08-17 22:00 - 00091544 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\nssdbm3.dll
2013-08-17 22:00 - 2013-08-17 22:00 - 00301976 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\freebl3.dll
2013-08-17 22:00 - 2013-08-17 22:00 - 00392600 _____ (Mozilla Foundation) C:\Programme\Mozilla Firefox\nssckbi.dll
2013-07-23 15:04 - 2013-06-20 14:48 - 00013880 _____ (Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avnotify.dll
2004-08-04 14:00 - 2009-03-08 04:34 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSRATING.dll

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============
Error: (09/02/2013 08:01:33 PM) (Source: Windows Update Agent) (User: )
Description: Verbindung nicht möglich: Es konnte keine Verbindung mit dem Dienst "Automatische Updates" hergestellt werden, daher können Updates nicht nach dem angegebenen Zeitplan heruntergeladen und installiert werden. Es wird weiterhin versucht, eine Verbindung herzustellen.

Error: (08/28/2013 10:15:42 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: Ein DCOM-Server konnte nicht gestartet werden: {5E248397-8614-4EC5-8926-BD242DC9830A}.
Fehler:
"%%2"
aufgetreten beim Starten dieses Befehls:
"C:\Programme\ActivIdentity\ActivClient\acevents.exe" -Embedding

Error: (08/28/2013 10:11:09 AM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 192.168.0.107 für die Netzwerkkarte mit der Netzwerkadresse 0021004165E8 wurde durch
den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).

Error: (08/27/2013 05:12:59 PM) (Source: Dhcp) (User: )
Description: Die IP-Adresslease 192.168.0.101 für die Netzwerkkarte mit der Netzwerkadresse 0021004165E8 wurde durch
den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).

Error: (08/18/2013 04:37:06 PM) (Source: 0) (User: )
Description: 192.168.0.10290:00:4E:B6:83:88

Error: (07/25/2013 11:27:22 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: Ein DCOM-Server konnte nicht gestartet werden: {5E248397-8614-4EC5-8926-BD242DC9830A}.
Fehler:
"%%2"
aufgetreten beim Starten dieses Befehls:
"C:\Programme\ActivIdentity\ActivClient\acevents.exe" -Embedding

Error: (07/25/2013 10:56:09 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: Ein DCOM-Server konnte nicht gestartet werden: {5E248397-8614-4EC5-8926-BD242DC9830A}.
Fehler:
"%%2"
aufgetreten beim Starten dieses Befehls:
"C:\Programme\ActivIdentity\ActivClient\acevents.exe" -Embedding


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Percentage of memory in use: 54%
Total physical RAM: 1788.79 MB
Available physical RAM: 817.26 MB
Total Pagefile: 3682.85 MB
Available Pagefile: 2351.02 MB
Total Virtual: 2047.88 MB
Available Virtual: 1945.77 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:149.04 GB) (Free:130.77 GB) NTFS ==>[Drive with boot components (Windows XP)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 149 GB) (Disk ID: 9E1A054B)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)

==================== End Of Log ============================
--- --- ---

schrauber 02.09.2013 19:53
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

mummb 03.09.2013 18:39
Hallo Schrauber,

der Laptop ist total langsam geworden, darum jetzt erst die Logfiles.

Der erste Malwarebytes-File ist von letzter Woche, gleich nach der Mail der Telekom
Code:
Malwarebytes Anti-Malware (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.08.28.02

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Benni :: BMB [Administrator]

Schutz: Aktiviert

28.8.2013 12:22:32
mbam-log-2013-08-28 (12-22-32).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 412745
Laufzeit: 1 Stunde(n), 9 Minute(n), 47 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 1
HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bösartig: (1) Gut: (0) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
der zweite von gestern
Code:
Malwarebytes Anti-Malware (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.02.08

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Benni :: BMB [Administrator]

Schutz: Aktiviert

2.9.2013 21:50:15
mbam-log-2013-09-02 (21-50-15).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 339145
Laufzeit: 24 Minute(n), 34 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
Bei Adwarecleaner kam nur diese Datei
AdwCleaner Logfile:
Code:
# AdwCleaner v3.002 - Bericht erstellt am 02/09/2013 um 22:21:56
# Updated 01/09/2013 von Xplode
# Betriebssystem : Microsoft Windows XP Service Pack 3 (32 bits)
# Benutzername : Benni - BMB
# Gestartet von : C:\Dokumente und Einstellungen\Benni\Eigene Dateien\Downloads\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v23.0.1 (de)

[ Datei : C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\Mozilla\Firefox\Profiles\vsvz4md9.default\prefs.js ]


[ Datei : C:\Dokumente und Einstellungen\Surfer\Anwendungsdaten\Mozilla\Firefox\Profiles\nuqafqnt.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [837 octets] - [02/09/2013 22:21:56]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [896 octets] ##########
--- --- ---


JRT.TXT
JRT Logfile:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.7 (09.01.2013:1)
OS: Microsoft Windows XP x86
Ran by Benni on Di 03.09.2013 at  0:49:09,57
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values




~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [File] C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\mozilla\firefox\profiles\vsvz4md9.default\extensions\toolbar_avira-v7@apn.ask.com.xpi





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Di 03.09.2013 at  8:04:17,18
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- --- ---


Zuletzt noch Frst

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-09-2013 02
Ran by Benni (administrator) on BMB on 03-09-2013 19:32:01
Running from C:\Dokumente und Einstellungen\Benni\Eigene Dateien\Downloads
Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AuthenTec, Inc.) C:\Programme\Fingerprint Sensor\AtService.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(SafeBoot International) C:\Programme\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(Broadcom Corporation.) C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(ActivIdentity) C:\Programme\ActivIdentity\ActivClient\acevents.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(Microsoft Corporation) C:\WINDOWS\System32\SCardSvr.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe
(ActivIdentity) C:\Programme\ActivIdentity\ActivClient\accoca.exe
(Agere Systems) C:\WINDOWS\system32\agrsmsvc.exe
(Bioscrypt Inc.) C:\Programme\Hewlett-Packard\IAM\Bin\AsGHost.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(Hewlett-Packard) C:\Programme\Hp\HP Software Update\HPWuSchd2.exe
(Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Hewlett-Packard Corporation) C:\WINDOWS\system32\AccelerometerSt.Exe
(Synaptics, Inc.) C:\Programme\Synaptics\SynTP\SynTPEnh.exe
(ActivIdentity) C:\Programme\ActivIdentity\ActivClient\accrdsub.exe
(Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE
( Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
(Analog Devices, Inc.) C:\Programme\Analog Devices\Core\smax4pnp.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Broadcom Corporation.) C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe
(ActivIdentity) C:\Programme\ActivIdentity\ActivClient\acevents.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
(PDF Complete Inc) C:\Programme\PDF Complete\pdfsvc.exe
(Malwarebytes Corporation) C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
(HP) C:\Programme\HPQ\HP Connection Manager 1.1\bin\mdvsrv.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\Shared\hpqwmiex.exe
() C:\Programme\Hewlett-Packard\Shared\HpqToaster.exe
(Hewlett-Packard Development Company, L.P.) C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Programme\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IMJPMIG8.1] - C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [208952 2004-08-04] (Microsoft Corporation)
HKLM\...\Run: [PHIME2002ASync] - C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [455168 2004-08-04] (Microsoft Corporation)
HKLM\...\Run: [PHIME2002A] - C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [455168 2004-08-04] (Microsoft Corporation)
HKLM\...\Run: [Cpqset] - C:\Programme\Hewlett-Packard\Default Settings\cpqset.exe [61440 2008-05-14] ()
HKLM\...\Run: [coreworks] - C:\Programme\HPQ\HP Connection Manager 1.1\bin\gbxapp.exe [780776 2008-06-12] (HP)
HKLM\...\Run: [HP Software Update] - C:\Programme\Hp\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM\...\Run: [PDF Complete] - C:\Programme\PDF Complete\pdfsty.exe [318488 2008-05-12] (PDF Complete Inc)
HKLM\...\Run: [hpWirelessAssistant] - C:\Programme\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2008-04-15] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [WatchDog] - C:\Programme\InterVideo\DVD Check\DVDCheck.exe [197904 2008-05-23] (InterVideo Inc.)
HKLM\...\Run: [SoundMAX] - C:\Programme\Analog Devices\SoundMAX\Smax4.exe [884736 2008-03-24] (Analog Devices, Inc.)
HKLM\...\Run: [AccelerometerSysTrayApplet] - C:\WINDOWS\system32\AccelerometerSt.Exe [82224 2008-06-09] (Hewlett-Packard Corporation)
HKLM\...\Run: [StartCCC] - C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Programme\Synaptics\SynTP\SynTPEnh.exe [1040384 2008-03-27] (Synaptics, Inc.)
HKLM\...\Run: [] -  [x]
HKLM\...\Run: [accrdsub] - C:\Programme\ActivIdentity\ActivClient\accrdsub.exe [293168 2007-05-15] (ActivIdentity)
HKLM\...\Run: [PTHOSTTR] - C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE [238896 2008-06-10] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [CognizanceTS] - C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll [24848 2008-06-02] (Bioscrypt Inc.)
HKLM\...\Run: [QlbCtrl.exe] - C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [177456 2008-05-14] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [SoundMAXPnP] - C:\Programme\Analog Devices\Core\smax4pnp.exe [1044480 2008-04-04] (Analog Devices, Inc.)
HKLM\...\Run: [avgnt] - C:\Programme\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
Winlogon\Notify\ackpbsc: C:\WINDOWS\system32\ackpbsc.dll (ActivIdentity)
Winlogon\Notify\acunlock: C:\Programme\ActivIdentity\ActivClient\acunlock.dll [X]
Winlogon\Notify\AtiExtEvent: Ati2evxx.dll (ATI Technologies Inc.)
Winlogon\Notify\OneCard: C:\Programme\Hewlett-Packard\IAM\Bin\ASWlnPkg.DLL [X]
Winlogon\Notify\WgaLogon: WgaLogon.dll (Microsoft Corporation)
Lsa: [Notification Packages] scecli ASWLNPkg
Startup: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Autostart\BTTray.lnk
ShortcutTarget: BTTray.lnk -> C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Autostart\DVD Check.lnk
ShortcutTarget: DVD Check.lnk -> C:\Programme\InterVideo\DVD Check\DVDCheck.exe (InterVideo Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Programme\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
Toolbar: HKLM - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
Toolbar: HKCU -&Adresse - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU -No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1374571681609
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)
Winsock: Catalog9 01 C:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 20 C:\Programme\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\Mozilla\Firefox\Profiles\vsvz4md9.default
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Programme\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

========================== Services (Whitelisted) =================

R2 accoca; C:\Programme\ActivIdentity\ActivClient\accoca.exe [182576 2007-05-15] (ActivIdentity)
R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [84024 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-20] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Programme\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-26] (APN LLC.)
R2 ASBroker; C:\Programme\Hewlett-Packard\IAM\Bin\ASWlnPkg.DLL [112400 2008-06-02] (Bioscrypt Inc.)
R2 ASChannel; C:\Programme\Hewlett-Packard\IAM\Bin\AsChnl.dll [137488 2008-06-02] (Bioscrypt Inc.)
R2 ATService; C:\Programme\Fingerprint Sensor\AtService.exe [1176824 2008-05-15] (AuthenTec, Inc.)
R2 btwdins; C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe [264800 2008-05-12] (Broadcom Corporation.)
R3 Com4QLBEx; C:\Programme\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [193840 2008-04-03] (Hewlett-Packard Development Company, L.P.)
S2 HP ProtectTools Service; C:\Programme\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [18944 2008-06-10] (Hewlett-Packard Development Company, L.P)
R2 HpFkCryptService; C:\Programme\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [256512 2008-06-05] (SafeBoot International)
R3 hpqwmiex; C:\Programme\Hewlett-Packard\Shared\hpqwmiex.exe [165192 2008-04-16] (Hewlett-Packard Development Company, L.P.)
S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation)
R2 MBAMScheduler; C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 mdvsrv; C:\Programme\HPQ\HP Connection Manager 1.1\bin\mdvsrv.exe [575976 2008-06-12] (HP)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [117656 2013-08-17] (Mozilla Foundation)
R2 pdfcDispatcher; C:\Programme\PDF Complete\pdfsvc.exe [576024 2008-05-12] (PDF Complete Inc)
R2 JavaQuickStarterService; "C:\Programme\Java\jre7\bin\jqs.exe" -service -config "C:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf" [x]

==================== Drivers (Whitelisted) ====================

R0 Amddfltr; C:\Windows\System32\DRIVERS\Amddfltr.sys [15416 2008-03-12] (Advanced Micro Devices)
R1 AmdPPM; C:\Windows\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-06-20] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R3 b57w2k; C:\Windows\System32\DRIVERS\b57xp32.sys [163328 2007-11-29] (Broadcom Corporation)
R3 BCM43XX; C:\Windows\System32\DRIVERS\bcmwl5.sys [1287552 2013-07-23] (Broadcom Corporation)
R3 BTKRNL; C:\Windows\System32\DRIVERS\btkrnl.sys [879624 2008-05-14] (Broadcom Corporation.)
S3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [74688 2008-05-14] (Broadcom Corporation.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R1 RsvLock; C:\Windows\System32\Drivers\RsvLock.sys [12496 2008-06-05] (SafeBoot International)
R0 SafeBoot; C:\Windows\System32\Drivers\SafeBoot.sys [109184 2008-06-05] ()
R0 SbAlg; C:\Windows\System32\Drivers\SbAlg.sys [51376 2008-06-05] (SafeBoot N.V.)
R0 SbFsLock; C:\Windows\System32\Drivers\SbFsLock.sys [12928 2008-06-05] (SafeBoot International)
S3 SCR3XX2K; C:\Windows\System32\DRIVERS\SCR3XX2K.sys [56448 2007-06-21] (SCM Microsystems Inc.)
R0 SFAUDIO; C:\Windows\System32\drivers\sfaudio.sys [24064 2008-03-28] (Sonic Focus, Inc)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1804160 2008-04-10] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
U2 CertPropSvc;
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-03 08:04 - 2013-09-03 08:04 - 00000905 _____ C:\Dokumente und Einstellungen\Benni\Desktop\JRT.txt
2013-09-03 00:36 - 2013-09-03 00:36 - 00000000 ____D C:\WINDOWS\ERUNT
2013-09-02 22:20 - 2013-09-02 22:49 - 00000000 ____D C:\AdwCleaner
2013-09-02 20:21 - 2013-09-02 20:21 - 00000000 ____D C:\FRST
2013-09-02 20:12 - 2013-09-02 20:12 - 00000000 _____ C:\Dokumente und Einstellungen\Benni\defogger_reenable
2013-08-31 18:59 - 2013-08-31 18:59 - 00007566 _____ C:\WINDOWS\KB2803821-v2.log
2013-08-31 18:59 - 2013-08-31 18:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$
2013-08-28 12:19 - 2013-08-28 12:19 - 00000000 ____D C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\Malwarebytes
2013-08-28 12:18 - 2013-08-28 12:18 - 00000756 _____ C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-28 12:18 - 2013-08-28 12:18 - 00000000 ____D C:\Programme\Malwarebytes' Anti-Malware
2013-08-28 12:18 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-08-22 19:33 - 2013-08-22 20:02 - 00005920 _____ C:\WINDOWS\WgaNotify.log
2013-08-22 19:33 - 2013-08-22 19:33 - 00000000 ____D C:\6f9c548778953e4d2ee129855559657c
2013-08-18 09:03 - 2013-08-18 09:03 - 00015509 _____ C:\WINDOWS\KB2862772-IE8.log
2013-08-18 09:01 - 2013-08-18 09:03 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-08-18 09:00 - 2013-08-18 09:00 - 00008061 _____ C:\WINDOWS\KB2863058.log
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-08-17 21:59 - 2013-08-18 08:56 - 00000000 ____D C:\Programme\Mozilla Firefox
2013-08-17 21:13 - 2013-08-18 09:00 - 00014911 _____ C:\WINDOWS\KB2859537.log
2013-08-17 21:13 - 2013-08-18 09:00 - 00014113 _____ C:\WINDOWS\KB2850869.log

==================== One Month Modified Files and Folders =======

2013-09-03 19:30 - 2013-09-03 19:30 - 00000000 __SHD C:\Dokumente und Einstellungen\Benni\PrivacIE
2013-09-03 19:30 - 2013-07-22 15:56 - 00000000 ____D C:\Dokumente und Einstellungen\Benni
2013-09-03 19:21 - 2013-07-22 15:44 - 01551811 _____ C:\WINDOWS\WindowsUpdate.log
2013-09-03 08:04 - 2013-09-03 08:04 - 00000905 _____ C:\Dokumente und Einstellungen\Benni\Desktop\JRT.txt
2013-09-03 00:49 - 2013-07-22 16:16 - 01071796 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-09-03 00:48 - 2004-08-04 14:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-09-03 00:45 - 2013-07-23 02:42 - 00393216 _____ C:\WINDOWS\system32\config\ACEEvent.evt
2013-09-03 00:43 - 2013-07-22 16:19 - 00000157 _____ C:\WINDOWS\wiadebug.log
2013-09-03 00:43 - 2013-07-22 16:19 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-09-03 00:42 - 2013-07-22 23:24 - 00000000 ____D C:\Dokumente und Einstellungen\All Users.WINDOWS\HPQLOG
2013-09-03 00:42 - 2013-07-22 15:51 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-09-03 00:38 - 2013-07-22 15:56 - 00000190 ___SH C:\Dokumente und Einstellungen\Benni\ntuser.ini
2013-09-03 00:38 - 2013-07-22 15:51 - 00015834 _____ C:\WINDOWS\SchedLgU.Txt
2013-09-03 00:36 - 2013-09-03 00:36 - 00000000 ____D C:\WINDOWS\ERUNT
2013-09-02 22:49 - 2013-09-02 22:20 - 00000000 ____D C:\AdwCleaner
2013-09-02 21:02 - 2013-07-25 09:33 - 00000190 ___SH C:\Dokumente und Einstellungen\Surfer\ntuser.ini
2013-09-02 21:02 - 2013-07-25 09:33 - 00000000 ____D C:\Dokumente und Einstellungen\Surfer
2013-09-02 20:21 - 2013-09-02 20:21 - 00000000 ____D C:\FRST
2013-09-02 20:12 - 2013-09-02 20:12 - 00000000 _____ C:\Dokumente und Einstellungen\Benni\defogger_reenable
2013-09-02 09:34 - 2013-07-27 16:28 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2013-08-31 19:02 - 2013-07-22 16:14 - 00457375 _____ C:\WINDOWS\setupapi.log
2013-08-31 18:59 - 2013-08-31 18:59 - 00007566 _____ C:\WINDOWS\KB2803821-v2.log
2013-08-31 18:59 - 2013-08-31 18:59 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2803821-v2_WM9$
2013-08-31 18:59 - 2013-08-01 15:03 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-08-31 18:59 - 2013-07-22 16:16 - 01196764 _____ C:\WINDOWS\iis6.log
2013-08-31 18:59 - 2013-07-22 16:16 - 01023933 _____ C:\WINDOWS\FaxSetup.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00521635 _____ C:\WINDOWS\ocgen.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00480436 _____ C:\WINDOWS\tsoc.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00357692 _____ C:\WINDOWS\comsetup.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00330380 _____ C:\WINDOWS\msmqinst.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00218540 _____ C:\WINDOWS\ntdtcsetup.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00181084 _____ C:\WINDOWS\netfxocm.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00074279 _____ C:\WINDOWS\MedCtrOC.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00057391 _____ C:\WINDOWS\ocmsn.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00052102 _____ C:\WINDOWS\msgsocm.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00051832 _____ C:\WINDOWS\tabletoc.log
2013-08-31 18:59 - 2013-07-22 16:16 - 00001374 _____ C:\WINDOWS\imsins.log
2013-08-28 12:19 - 2013-08-28 12:19 - 00000000 ____D C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\Malwarebytes
2013-08-28 12:18 - 2013-08-28 12:18 - 00000756 _____ C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Malwarebytes Anti-Malware.lnk
2013-08-28 12:18 - 2013-08-28 12:18 - 00000000 ____D C:\Programme\Malwarebytes' Anti-Malware
2013-08-28 12:18 - 2013-07-22 13:36 - 00000000 ___RD C:\Programme
2013-08-25 12:37 - 2013-07-25 10:03 - 00000000 ____D C:\Dokumente und Einstellungen\Benni\Anwendungsdaten\.minecraft
2013-08-23 21:16 - 2013-07-22 13:19 - 00000000 ____D C:\WINDOWS\Registration
2013-08-22 20:02 - 2013-08-22 19:33 - 00005920 _____ C:\WINDOWS\WgaNotify.log
2013-08-22 20:02 - 2013-07-23 14:48 - 00080703 _____ C:\WINDOWS\spupdsvc.log
2013-08-22 19:33 - 2013-08-22 19:33 - 00000000 ____D C:\6f9c548778953e4d2ee129855559657c
2013-08-18 14:32 - 2013-07-22 14:01 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-08-18 09:05 - 2013-07-23 12:48 - 00000000 ____D C:\Programme\Mozilla Maintenance Service
2013-08-18 09:03 - 2013-08-18 09:03 - 00015509 _____ C:\WINDOWS\KB2862772-IE8.log
2013-08-18 09:03 - 2013-08-18 09:01 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-08-18 09:03 - 2013-07-25 11:33 - 00000000 ____D C:\WINDOWS\ie8updates
2013-08-18 09:03 - 2013-07-22 23:12 - 00151069 _____ C:\WINDOWS\updspapi.log
2013-08-18 09:03 - 2013-07-22 16:16 - 00001374 _____ C:\WINDOWS\imsins.BAK
2013-08-18 09:01 - 2013-07-25 11:00 - 75778376 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-08-18 09:00 - 2013-08-18 09:00 - 00008061 _____ C:\WINDOWS\KB2863058.log
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-18 09:00 - 2013-08-18 09:00 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-08-18 09:00 - 2013-08-17 21:13 - 00014911 _____ C:\WINDOWS\KB2859537.log
2013-08-18 09:00 - 2013-08-17 21:13 - 00014113 _____ C:\WINDOWS\KB2850869.log
2013-08-18 09:00 - 2013-07-25 11:13 - 00012520 _____ C:\WINDOWS\system32\TZLog.log
2013-08-18 08:56 - 2013-08-17 21:59 - 00000000 ____D C:\Programme\Mozilla Firefox

Files to move or delete:
====================
C:\DOKUME~1\Benni\LOKALE~1\Temp\_is13C.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\_is148.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\_is1DA.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\_is3B7.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\_is44B.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\{FCD79CF2-2FA3-41BD-98E7-F89A444B4B12}\ISSetup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{FCD79CF2-2FA3-41BD-98E7-F89A444B4B12}\_Setup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{EEF933FF-D8DE-45AD-A286-30D2979ECD6F}\ISSetup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{EEF933FF-D8DE-45AD-A286-30D2979ECD6F}\_Setup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{AE3BAF39-9759-4EFF-AB3A-DD4E9B4D5E33}\{7062DD5C-ECEC-4802-AA1E-116F3F109CF2}\LDevCTbl.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{AE3BAF39-9759-4EFF-AB3A-DD4E9B4D5E33}\{7062DD5C-ECEC-4802-AA1E-116F3F109CF2}\LXBurnCom.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{AE3BAF39-9759-4EFF-AB3A-DD4E9B4D5E33}\{7062DD5C-ECEC-4802-AA1E-116F3F109CF2}\ULCDRDrv.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{ABE1ADEC-E87A-48F7-808B-18614054D7A0}\IfxDrvSetupAppl32.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\{ABE1ADEC-E87A-48F7-808B-18614054D7A0}\IfxInstHlp.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{9A678650-8126-4210-9EA8-19E27DA5DF97}\{C151CE54-E7EA-4804-854B-F515368B0798}\difxapi.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{96C7C8B8-D43D-49C1-AB5C-19EEEC35C8F0}\ISSetup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{96C7C8B8-D43D-49C1-AB5C-19EEEC35C8F0}\_Setup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{3C33533D-9DF5-427E-8C84-9BEE7C3226F4}\ISSetup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{3C33533D-9DF5-427E-8C84-9BEE7C3226F4}\_Setup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{364A1DFB-8AE8-44A5-833B-A9C93D9C6481}\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}\difxapi.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{2B88BFDA-EA35-4A7C-8AE4-2404E1BF8F0E}\ISSetup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{2B88BFDA-EA35-4A7C-8AE4-2404E1BF8F0E}\_Setup.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{275A149D-5F25-4577-B3D9-F717A6CFBE52}\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}\difxapi.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\{25FB932F-3138-4F20-9504-6C34EFB4509F}\{C151CE54-E7EA-4804-854B-F515368B0798}\difxapi.dll
C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 5 für Minecraft_1.6.2.zip\Minecraft.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 4 für Minecraft_1.6.2.zip\Minecraft.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 3 für Minecraft_1.6.2.zip\Minecraft.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 2 für Minecraft_1.6.2.zip\Minecraft.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\Temporäres Verzeichnis 1 für Minecraft_1.6.2.zip\Minecraft.exe
C:\DOKUME~1\Benni\LOKALE~1\Temp\jrt\erunt\ERUNT.EXE
C:\DOKUME~1\Benni\LOKALE~1\Temp\isp19A.tmp\_Setup.dll

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2004-08-04 14:00] - [2008-04-14 07:52] - 1036800 ____A (Microsoft Corporation) 418045a93cd87a352098ab7dabe1b53e

C:\Windows\System32\winlogon.exe
[2004-08-04 14:00] - [2008-04-14 07:53] - 0513024 ____A (Microsoft Corporation) f09a527b422e25c478e38caa0e44417a

C:\Windows\System32\svchost.exe
[2004-08-04 14:00] - [2008-04-14 07:53] - 0014336 ____A (Microsoft Corporation) 4fbc75b74479c7a6f829e0ca19df3366

C:\Windows\System32\services.exe
[2004-08-04 14:00] - [2009-02-09 13:21] - 0111104 ____A (Microsoft Corporation) a3edbe9053889fb24ab22492472b39dc

C:\Windows\System32\User32.dll
[2004-08-04 14:00] - [2008-04-14 07:52] - 0580096 ____A (Microsoft Corporation) b0050cc5340e3a0760dd8b417ff7aebd

C:\Windows\System32\userinit.exe
[2004-08-04 14:00] - [2008-04-14 07:53] - 0026624 ____A (Microsoft Corporation) 788f95312e26389d596c0fa55834e106

C:\Windows\System32\Drivers\volsnap.sys
[2004-08-04 14:00] - [2008-04-14 07:22] - 0053760 ____A (Microsoft Corporation) a5a712f4e880874a477af790b5186e1d


==================== End Of Log ============================
--- --- ---


und danke für Deine Hilfe

Ciao Mummb


Alle Zeitangaben in WEZ +1. Es ist jetzt 09:14 Uhr.
Seite 1 von 3 1 23
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131