Trojaner-Board - "Mögliche Archivbombe gefunden: home.1 und data.1 " - Die maximale Komprimierungsrate wurde überschritten.

Ja, leider! ;-) Herzlichen Dank!

So! Habe den Durchlauf mit dem 64er-Bit Tool gemacht. Füge gleich den Report als Grafik ein. Hoffe es ist ok für Dich wenn ich im Header die persönlichsten Daten anonymisiere.

Bis gleich & schönen Gruss
TangoGazelle

FRST-Report:
Sorry! Hier der Code und zwar n i c h t als Grafik.
(Bitte nicht vergessen, dass ich beide Dateien umbenannt habe. Auf "homeArchivBombe.Trojaner" und "dataArchivBombe.Trojaner")

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013

Ran by XXX (administrator) on XXX on 11-10-2013 13:15:30

Running from XXXX

Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(AMD) C:\windows\system32\atiesrxx.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe

(AMD) C:\windows\system32\atieclxx.exe

(Hewlett-Packard Company) C:\windows\system32\Hpservice.exe

(Validity Sensors, Inc.) C:\windows\system32\vcsFPService.exe

(DigitalPersona, Inc.) c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE

(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Motorola Solutions, Inc.) C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\windows\system32\CISVC.EXE

(Hewlett-Packard Company) c:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe

() C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe

(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

(ArcSoft, Inc.) C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe

(Motorola Solutions, Inc.) C:\Program Files\Motorola\Bluetooth\obexsrv.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

(Macrovision Europe Ltd.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe

(Hewlett-Packard Development Company, L.P) c:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe

(DigitalPersona, Inc.) c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe

() C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Microsoft Corporation) C:\Program Files\Microsoft Device Center\itype.exe

(Microsoft Corporation) C:\Program Files\Microsoft Device Center\ipoint.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe

(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe

(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

() C:\Program Files (x86)\HP HD Webcam [Fixed]\Monitor.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe

(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe

(DigitalPersona, Inc.) c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe

(Motorola Solutions, Inc.) C:\Program Files\Motorola\Bluetooth\audiosrv.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe

(Motorola Solutions, Inc.) C:\Program Files\Motorola\Bluetooth\btplayerctrl.exe

(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE

(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe

(Portrait Displays, Inc) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\SDKCOMServer.exe

(Hewlett-Packard Development Company L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpConnectionManager.exe

(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

(Hewlett-Packard Development Company L.P.) c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe

(Portrait Displays, Inc.) C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdiSdkHelperx64.exe

(Intel Corporation) C:\windows\system32\igfxext.exe

(Intel Corporation) C:\windows\system32\igfxsrvc.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [HPPowerAssistant] - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2919992 2011-01-27] (Hewlett-Packard Company)

HKLM\...\Run: [MfeEpePcMonitor] - C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe [200704 2012-02-08] ()

HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [IntelliType Pro] - c:\Program Files\Microsoft Device Center\itype.exe [1464928 2012-06-26] (Microsoft Corporation)

HKLM\...\Run: [IntelliPoint] - c:\Program Files\Microsoft Device Center\ipoint.exe [2004584 2012-06-26] (Microsoft Corporation)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3011824 2013-03-25] (Synaptics Incorporated)

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1664000 2013-05-29] (IDT, Inc.)

HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files\Motorola\Bluetooth\btmshell.dll",TrayApp

HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe

MountPoints2: {e10d47fc-8d0e-11e1-9804-20107af9f8d3} - I:\setup.exe AUTORUN=1

HKLM-x32\...\Run: [File Sanitizer] - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [12274688 2011-02-07] (Hewlett-Packard)

HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-26] (Intel Corporation)

HKLM-x32\...\Run: [NUSB3MON] - c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [HP HD Webcam [Fixed]_Monitor] - C:\Program Files (x86)\HP HD Webcam [Fixed]\monitor.exe [267128 2010-11-26] ()

HKLM-x32\...\Run: [DTRun] - c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [517456 2010-11-24] (ArcSoft Inc.)

HKLM-x32\...\Run: [HPConnectionManager] - c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-04-05] (Hewlett-Packard Development Company L.P.)

HKLM-x32\...\Run: [HPQuickWebProxy] - c:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe [76344 2011-02-11] (Hewlett-Packard Company)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-10-13] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [656920 2011-02-01] (PDF Complete Inc)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254896 2012-09-17] (Sun Microsystems, Inc.)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-01] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-10-09] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-09-24] (APN)

Lsa: [Notification Packages] EpePcNp64 DPPassFilter scecli
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:newtab

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&st=chrome&q=

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&st=chrome&q=

HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&st=chrome&q=

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM/10

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&st=chrome&q=

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM/10

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:newtab

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&st=chrome&q=

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&st=chrome&q=

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF

SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF

SearchScopes: HKLM-x32 - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&q={searchTerms}

SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF

SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF

SearchScopes: HKLM-x32 - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&q={searchTerms}

SearchScopes: HKCU - DefaultScope {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&q={searchTerms}

SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF

SearchScopes: HKCU - {6729E8BB-A70C-48E6-87E9-3E1DAF18C80F} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-4&o=APN10262&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AGT&apn_dtid=^YYYYYY^YY^CH&apn_uid=3929651f-37c1-43fb-b8c1-16b7605df211&apn_sauid=6A5FB3B7-C727-42D7-B129-6E7C485FCF75

SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF

SearchScopes: HKCU - {ec29edf6-ad3c-4e1c-a087-d6cb81400c43} URL = hxxp://search.certified-toolbar.com?si=66920&st=bs&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&q={searchTerms}

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: File Sanitizer for HP ProtectTools - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)

BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)

Toolbar: HKCU -  No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File

Toolbar: HKCU -  No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
 

FireFox:

========

FF ProfilePath: C:\Users\iqp1 Soraya B\AppData\Roaming\Mozilla\Firefox\Profiles\xge1f68h.default

FF NewTab: about:home

FF DefaultSearchEngine: Ask Search

FF SearchEngineOrder.1: Ask Search

FF SelectedSearchEngine: Ask Search

FF Homepage: www.google.com

FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_39 - C:\windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)

FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\iqp1 Soraya B\AppData\Roaming\Mozilla\Firefox\Profiles\xge1f68h.default\searchplugins\ask-search.xml

FF SearchPlugin: C:\Users\iqp1 Soraya B\AppData\Roaming\Mozilla\Firefox\Profiles\xge1f68h.default\searchplugins\askcom.xml

FF SearchPlugin: C:\Users\iqp1 Soraya B\AppData\Roaming\Mozilla\Firefox\Profiles\xge1f68h.default\searchplugins\Web Search.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Web Search.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: toolbar_AVIRA-V7 - C:\Users\iqp1 Soraya B\AppData\Roaming\Mozilla\Firefox\Profiles\xge1f68h.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}

FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\

FF Extension: DigitalPersona Extension - c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\
 

==================== Services (Whitelisted) =================
 

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [68096 2012-04-20] ()

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-10-09] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-10-09] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-10-09] (Avira Operations GmbH & Co. KG)

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [164816 2013-09-24] (APN LLC.)

R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [481104 2011-02-12] (DigitalPersona, Inc.)

S3 FLCDLOCK; c:\Windows\SysWOW64\flcdlock.exe [464480 2011-02-04] (Hewlett-Packard Company)

R3 HP ProtectTools Service; c:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [36864 2011-01-12] (Hewlett-Packard Development Company, L.P)

R2 HPDayStarterService; c:\Program Files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe [133688 2011-01-28] (Hewlett-Packard Company)

R2 McAfee Endpoint Encryption Agent; C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [1323008 2012-02-08] ()

R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1127448 2011-02-01] (PDF Complete Inc)

R2 uArcCapture; C:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [502464 2010-11-11] (ArcSoft, Inc.)

S2 XobniService; C:\Program Files (x86)\Xobni\XobniService.exe [62184 2011-03-07] (Xobni Corporation)

S2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [x]
 

==================== Drivers (Whitelisted) ====================
 

R3 ARCVCAM; C:\Windows\System32\DRIVERS\ArcSoftVCapture.sys [32192 2010-11-11] (ArcSoft, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-10-09] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-10-09] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-09] (Avira Operations GmbH & Co. KG)

S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [63336 2011-02-07] (Hewlett-Packard Company)

R0 MfeEpeOpal; C:\Windows\System32\Drivers\MfeEpeOpal.sys [100808 2012-02-08] (McAfee, Inc.)

R0 MfeEpePc; C:\Windows\System32\Drivers\MfeEpePc.sys [158920 2012-02-08] (McAfee, Inc.)

R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [2611704 2011-01-12] (Sunplus Technology)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-10-11 13:15 - 2013-10-11 13:15 - 00000000 ____D C:\FRST

2013-10-11 09:09 - 2013-10-11 09:09 - 100446413 _____ C:\windows\SysWOW64\ܦ鍴J

2013-10-09 09:35 - 2013-10-09 09:35 - 00000000 ____D C:\Users\iqp1 Soraya B\AppData\Roaming\Avira

2013-10-09 09:32 - 2013-10-09 09:32 - 00000000 ____D C:\ProgramData\AskPartnerNetwork

2013-10-09 09:32 - 2013-10-09 09:32 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork

2013-10-09 09:31 - 2013-10-09 09:31 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys

2013-10-09 09:31 - 2013-10-09 09:31 - 00002075 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-10-09 09:30 - 2013-10-09 09:30 - 00000000 ____D C:\Program Files (x86)\Avira

2013-10-09 09:30 - 2013-10-09 09:29 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys

2013-10-09 09:30 - 2013-10-09 09:29 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys

2013-10-09 09:30 - 2013-10-09 09:29 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys

2013-10-07 12:21 - 2013-04-02 22:32 - 00187392 _____ (Xerox Corporation) C:\windows\system32\xrxmnzil.dll

2013-10-07 12:20 - 2012-08-24 20:13 - 00154480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys

2013-10-07 12:20 - 2012-08-24 20:09 - 00458712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys

2013-10-07 12:20 - 2012-08-24 20:05 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll

2013-10-07 12:20 - 2012-08-24 20:03 - 01448448 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll

2013-10-07 12:20 - 2012-08-24 18:57 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll

2013-10-07 12:20 - 2012-08-24 18:57 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll

2013-10-07 12:20 - 2012-08-24 18:53 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll

2013-10-07 11:58 - 2013-10-07 11:58 - 00000000 ____D C:\ProgramData\APN

2013-10-07 09:33 - 2013-10-07 09:33 - 00001792 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-10-07 09:32 - 2013-10-07 09:33 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-10-07 09:32 - 2013-10-07 09:33 - 00000000 ____D C:\Program Files\iTunes

2013-10-07 09:32 - 2013-10-07 09:33 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-10-07 09:32 - 2013-10-07 09:32 - 00000000 ____D C:\Program Files\iPod

2013-10-02 15:00 - 2013-10-02 15:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-02 12:59 - 2013-10-11 12:59 - 00000364 _____ C:\windows\Tasks\HPCeeScheduleForiqp1 Soraya B.job

2013-10-02 12:59 - 2013-10-02 12:59 - 00003234 _____ C:\windows\System32\Tasks\HPCeeScheduleForiqp1 Soraya B

2013-09-26 12:26 - 2013-10-11 12:31 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-09-26 12:26 - 2013-10-11 12:31 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-09-26 12:26 - 2013-09-26 12:27 - 00000000 ____D C:\Program Files (x86)\Google

2013-09-26 12:26 - 2013-09-26 12:26 - 00004120 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-09-26 12:26 - 2013-09-26 12:26 - 00003868 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-09-26 12:26 - 2013-09-26 12:26 - 00000000 ____D C:\Users\iqp1 Soraya B\AppData\Local\Google

2013-09-23 12:12 - 2013-09-23 12:12 - 00001278 _____ C:\Users\iqp1 Soraya B\Desktop\RegSeeker - Verknüpfung.lnk

2013-09-21 10:57 - 2013-08-13 08:38 - 00032328 _____ C:\windows\Launcher.exe

2013-09-21 10:55 - 2013-09-21 10:55 - 00000216 _____ C:\Users\iqp1 Soraya B\Desktop\Amazon.url

2013-09-21 10:55 - 2013-09-21 10:55 - 00000000 ____D C:\Users\iqp1 Soraya B\AppData\Local\DownloadGuide

2013-09-12 09:27 - 2013-07-31 16:17 - 17833472 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2013-09-12 09:27 - 2013-07-31 15:42 - 10926080 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2013-09-12 09:27 - 2013-07-31 15:29 - 02312704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2013-09-12 09:27 - 2013-07-31 15:20 - 01346560 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2013-09-12 09:27 - 2013-07-31 15:19 - 01392128 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2013-09-12 09:27 - 2013-07-31 15:18 - 01494528 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2013-09-12 09:27 - 2013-07-31 15:17 - 00237056 _____ (Microsoft Corporation) C:\windows\system32\url.dll

2013-09-12 09:27 - 2013-07-31 15:16 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2013-09-12 09:27 - 2013-07-31 15:14 - 00173056 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2013-09-12 09:27 - 2013-07-31 15:13 - 00816640 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll

2013-09-12 09:27 - 2013-07-31 15:13 - 00599040 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll

2013-09-12 09:27 - 2013-07-31 15:11 - 02147840 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2013-09-12 09:27 - 2013-07-31 15:11 - 00729088 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2013-09-12 09:27 - 2013-07-31 15:09 - 00096768 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll

2013-09-12 09:27 - 2013-07-31 15:08 - 02382848 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2013-09-12 09:27 - 2013-07-31 15:05 - 00248320 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2013-09-12 09:27 - 2013-07-31 12:30 - 12335104 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll

2013-09-12 09:27 - 2013-07-31 12:05 - 09738752 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll

2013-09-12 09:27 - 2013-07-31 12:00 - 01800704 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll

2013-09-12 09:27 - 2013-07-31 11:53 - 01104896 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll

2013-09-12 09:27 - 2013-07-31 11:52 - 01427968 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl

2013-09-12 09:27 - 2013-07-31 11:52 - 01129472 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll

2013-09-12 09:27 - 2013-07-31 11:51 - 00231936 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll

2013-09-12 09:27 - 2013-07-31 11:49 - 00065024 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll

2013-09-12 09:27 - 2013-07-31 11:48 - 00717824 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll

2013-09-12 09:27 - 2013-07-31 11:48 - 00420864 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll

2013-09-12 09:27 - 2013-07-31 11:48 - 00142848 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe

2013-09-12 09:27 - 2013-07-31 11:47 - 00607744 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll

2013-09-12 09:27 - 2013-07-31 11:46 - 01796096 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll

2013-09-12 09:27 - 2013-07-31 11:45 - 02382848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb

2013-09-12 09:27 - 2013-07-31 11:45 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll

2013-09-12 09:27 - 2013-07-31 11:42 - 00176640 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll

2013-09-11 08:57 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys

2013-09-11 08:57 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys

2013-09-11 08:57 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe

2013-09-11 08:57 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll

2013-09-11 08:57 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll

2013-09-11 08:57 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll

2013-09-11 08:57 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll

2013-09-11 08:57 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll

2013-09-11 08:57 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll

2013-09-11 08:57 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll

2013-09-11 08:57 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe

2013-09-11 08:57 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe

2013-09-11 08:57 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll

2013-09-11 08:57 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll

2013-09-11 08:57 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll

2013-09-11 08:57 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe

2013-09-11 08:57 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe

2013-09-11 08:57 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe

2013-09-11 08:57 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll

2013-09-11 08:57 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe

2013-09-11 08:57 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe

2013-09-11 08:57 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-11 08:57 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-11 08:57 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll

2013-09-11 08:57 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll

2013-09-11 08:57 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll

2013-09-11 08:57 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\SysWOW64\shdocvw.dll
 

==================== One Month Modified Files and Folders =======
 

2013-10-11 13:15 - 2013-10-11 13:15 - 00000000 ____D C:\FRST

2013-10-11 13:14 - 2012-04-07 20:46 - 00000000 ____D C:\Users\iqp1 Soraya B\AppData\Roaming\Skype

2013-10-11 13:12 - 2009-07-14 06:45 - 00020944 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-10-11 13:12 - 2009-07-14 06:45 - 00020944 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-10-11 12:59 - 2013-10-02 12:59 - 00000364 _____ C:\windows\Tasks\HPCeeScheduleForiqp1 Soraya B.job

2013-10-11 12:55 - 2012-04-11 18:29 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2013-10-11 12:31 - 2013-09-26 12:26 - 00001124 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-10-11 12:31 - 2013-09-26 12:26 - 00001120 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-10-11 12:14 - 2011-12-24 13:03 - 01053969 _____ C:\windows\WindowsUpdate.log

2013-10-11 11:52 - 2011-05-03 20:08 - 00705294 _____ C:\windows\system32\perfh007.dat

2013-10-11 11:52 - 2011-05-03 20:08 - 00151470 _____ C:\windows\system32\perfc007.dat

2013-10-11 11:52 - 2009-07-14 07:13 - 01630558 _____ C:\windows\system32\PerfStringBackup.INI

2013-10-11 11:43 - 2012-04-20 13:23 - 00000000 ____D C:\ProgramData\Adobe

2013-10-11 11:43 - 2012-03-11 12:37 - 00000000 ____D C:\Users\iqp1 Soraya B\AppData\Roaming\Adobe

2013-10-11 09:19 - 2011-05-03 20:23 - 00000000 ____D C:\ProgramData\PDFC

2013-10-11 09:14 - 2013-02-12 09:13 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-10-11 09:14 - 2011-12-24 13:24 - 00000000 ____D C:\ProgramData\Skype

2013-10-11 09:09 - 2013-10-11 09:09 - 100446413 _____ C:\windows\SysWOW64\ܦ鍴J

2013-10-11 09:08 - 2011-05-03 20:19 - 00000000 ____D C:\ProgramData\HPQLOG

2013-10-11 09:08 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT

2013-10-11 09:07 - 2009-07-14 06:51 - 00076718 _____ C:\windows\setupact.log

2013-10-10 09:55 - 2012-04-11 18:29 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe

2013-10-10 09:55 - 2012-04-11 18:29 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-10-10 09:55 - 2012-04-11 18:29 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater

2013-10-10 09:17 - 2011-12-24 13:30 - 01026058 _____ C:\windows\PFRO.log

2013-10-09 09:35 - 2013-10-09 09:35 - 00000000 ____D C:\Users\iqp1 Soraya B\AppData\Roaming\Avira

2013-10-09 09:32 - 2013-10-09 09:32 - 00000000 ____D C:\ProgramData\AskPartnerNetwork

2013-10-09 09:32 - 2013-10-09 09:32 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork

2013-10-09 09:31 - 2013-10-09 09:31 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys

2013-10-09 09:31 - 2013-10-09 09:31 - 00002075 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-10-09 09:30 - 2013-10-09 09:30 - 00000000 ____D C:\Program Files (x86)\Avira

2013-10-09 09:30 - 2013-03-11 09:56 - 00000000 ____D C:\ProgramData\Avira

2013-10-09 09:29 - 2013-10-09 09:30 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys

2013-10-09 09:29 - 2013-10-09 09:30 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys

2013-10-09 09:29 - 2013-10-09 09:30 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avkmgr.sys

2013-10-07 18:54 - 2012-03-11 17:09 - 00000000 ____D C:\windows\rescache

2013-10-07 14:34 - 2012-04-25 23:03 - 00000000 ____D C:\Program Files (x86)\Mobile Connection Manager

2013-10-07 14:20 - 2012-03-11 11:41 - 00073640 _____ C:\Users\iqp1 Soraya B\AppData\Local\GDIPFONTCACHEV1.DAT

2013-10-07 14:19 - 2009-07-14 06:45 - 00336448 _____ C:\windows\system32\FNTCACHE.DAT

2013-10-07 11:58 - 2013-10-07 11:58 - 00000000 ____D C:\ProgramData\APN

2013-10-07 11:37 - 2012-03-26 18:13 - 00000052 _____ C:\windows\SysWOW64\DOErrors.log

2013-10-07 11:36 - 2013-02-18 10:25 - 00000000 _____ C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt

2013-10-07 09:33 - 2013-10-07 09:33 - 00001792 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-10-07 09:33 - 2013-10-07 09:32 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-10-07 09:33 - 2013-10-07 09:32 - 00000000 ____D C:\Program Files\iTunes

2013-10-07 09:33 - 2013-10-07 09:32 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-10-07 09:32 - 2013-10-07 09:32 - 00000000 ____D C:\Program Files\iPod

2013-10-04 07:41 - 2012-05-07 09:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-10-03 10:10 - 2012-03-12 08:03 - 00000000 ____D C:\Users\iqp1 Soraya B\AppData\Local\Mozilla

2013-10-02 15:00 - 2013-10-02 15:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-10-02 12:59 - 2013-10-02 12:59 - 00003234 _____ C:\windows\System32\Tasks\HPCeeScheduleForiqp1 Soraya B

2013-09-26 12:27 - 2013-09-26 12:26 - 00000000 ____D C:\Program Files (x86)\Google

2013-09-26 12:26 - 2013-09-26 12:26 - 00004120 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA

2013-09-26 12:26 - 2013-09-26 12:26 - 00003868 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

2013-09-26 12:26 - 2013-09-26 12:26 - 00000000 ____D C:\Users\iqp1 Soraya B\AppData\Local\Google

2013-09-23 12:12 - 2013-09-23 12:12 - 00001278 _____ C:\Users\iqp1 Soraya B\Desktop\RegSeeker - Verknüpfung.lnk

2013-09-21 11:07 - 2012-03-11 09:23 - 00003224 _____ C:\windows\System32\Tasks\HPCeeScheduleForIQP1SORAYAB$

2013-09-21 11:07 - 2012-03-11 09:23 - 00000348 _____ C:\windows\Tasks\HPCeeScheduleForIQP1SORAYAB$.job

2013-09-21 10:55 - 2013-09-21 10:55 - 00000216 _____ C:\Users\iqp1 Soraya B\Desktop\Amazon.url

2013-09-21 10:55 - 2013-09-21 10:55 - 00000000 ____D C:\Users\iqp1 Soraya B\AppData\Local\DownloadGuide

2013-09-19 08:43 - 2009-07-14 07:08 - 00032640 _____ C:\windows\Tasks\SCHEDLGU.TXT

2013-09-14 09:48 - 2012-03-27 10:25 - 00002685 _____ C:\Users\iqp1 Soraya B\Desktop\Microsoft Office Excel 2007.lnk

2013-09-14 09:48 - 2012-03-26 18:46 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-12 15:25 - 2012-03-28 17:35 - 00000000 ____D C:\Users\iqp1 Soraya B\AppData\Local\CrashDumps

2013-09-12 09:44 - 2012-03-11 11:43 - 00000000 ___RD C:\Users\iqp1 Soraya B\Virtual Machines

2013-09-12 09:44 - 2012-03-11 11:43 - 00000000 ___RD C:\Users\iqp1 Soraya B\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-12 09:44 - 2012-03-11 11:43 - 00000000 ___RD C:\Users\iqp1 Soraya B\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-12 09:33 - 2013-08-15 08:48 - 00000000 ____D C:\windows\system32\MRT

2013-09-12 09:30 - 2012-03-11 21:22 - 79143768 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
 

Some content of TEMP:

====================

C:\Users\iqp1 Soraya B\AppData\Local\Temp\apptorun.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\AtpTimerInfo.dll

C:\Users\iqp1 Soraya B\AppData\Local\Temp\avgnt.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\DIFxAPI.dll

C:\Users\iqp1 Soraya B\AppData\Local\Temp\Extract.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\firefoxjre_exe-1.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\firefoxjre_exe.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\FORMAT.EXE

C:\Users\iqp1 Soraya B\AppData\Local\Temp\FP_PL_PFS_INSTALLER_32bit.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\HPHelpUpdater.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\LOCK.EXE

C:\Users\iqp1 Soraya B\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\Resource.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\setup.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SHSetup.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SkypeSetup.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP52617.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP52772.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP52850.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP53546.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP53628.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP53796.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP53858.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP54614.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\sp54620.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP54714.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP54963.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP55156.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP56247.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP56290.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP56488.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP56729.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP57014.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP57555.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP57698.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\sp58915.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP59118.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP59202.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP59291.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP59529.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP60686.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP60769.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\SP61104.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\tbu317B.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\udll.dll

C:\Users\iqp1 Soraya B\AppData\Local\Temp\ufddll.dll

C:\Users\iqp1 Soraya B\AppData\Local\Temp\UninstallHPSA.exe

C:\Users\iqp1 Soraya B\AppData\Local\Temp\UninstallHPTCA.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-10-03 11:48
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Und hier die Addition:FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013

Ran by XXX at 2013-10-11 13:16:24

Running from XXX

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

 Update for Microsoft Office 2007 (KB2508958) (x32)

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)

Adobe Photoshop CS (x32 Version: CS)

Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)

Agatha Christie - Peril at End House (x32 Version: 2.2.0.95)

AMD APP SDK Runtime (Version: 2.5.793.1)

AMD Catalyst Install Manager (Version: 3.0.851.0)

AMD Media Foundation Decoders (Version: 1.0.61013.1636)

Apple Application Support (x32 Version: 2.3.6)

Apple Mobile Device Support (Version: 7.0.0.117)

Apple Software Update (x32 Version: 2.1.3.127)

ArcSoft TotalMedia (x32 Version: 1.0.48.25)

ArcSoft TotalMedia (x32 Version: 2.0.39.12)

ArcSoft Webcam Sharing Manager (x32 Version: 2.0.0.30)

Avira Free Antivirus (x32 Version: 13.0.0.4052)

Avira SearchFree Toolbar (x32 Version: 12.5.1.1249)

Bejeweled 2 Deluxe (x32 Version: 2.2.0.95)

Bing Bar (x32 Version: 7.2.241.0)

Bing Rewards Client Installer (x32 Version: 16.0.345.0)

Blasterball 3 (x32 Version: 2.2.0.95)

Bonjour (Version: 3.0.0.10)

Bounce Symphony (x32 Version: 2.2.0.95)

Brother P-touch Address Book 1.1 (x32 Version: 1.1.2002)

Brother P-touch Editor 4.2 (x32 Version: 4.2)

Brother P-touch Editor 5.0 (x32 Version: 5.0.2101)

Brother P-touch Quick Editor 2.0 (x32 Version: 2.0.201)

Brother P-touch Software (x32 Version: 1.0.006)

Build-a-Lot - The Elizabethan Era (x32 Version: 2.2.0.95)

Cake Mania (x32 Version: 2.2.0.95)

Catalyst Control Center - Branding (x32 Version: 1.00.0000)

Catalyst Control Center (x32 Version: 2011.1013.1702.28713)

Catalyst Control Center Graphics Previews Common (x32 Version: 2011.1013.1702.28713)

Catalyst Control Center InstallProxy (x32 Version: 2011.1013.1702.28713)

Catalyst Control Center Localization All (x32 Version: 2011.1013.1702.28713)

Catalyst Control Center Profiles Mobile (x32 Version: 2011.1013.1702.28713)

CCC Help Chinese Standard (x32 Version: 2011.1013.1701.28713)

CCC Help Chinese Traditional (x32 Version: 2011.1013.1701.28713)

CCC Help Czech (x32 Version: 2011.1013.1701.28713)

CCC Help Danish (x32 Version: 2011.1013.1701.28713)

CCC Help Dutch (x32 Version: 2011.1013.1701.28713)

CCC Help English (x32 Version: 2011.1013.1701.28713)

CCC Help Finnish (x32 Version: 2011.1013.1701.28713)

CCC Help French (x32 Version: 2011.1013.1701.28713)

CCC Help German (x32 Version: 2011.1013.1701.28713)

CCC Help Greek (x32 Version: 2011.1013.1701.28713)

CCC Help Hungarian (x32 Version: 2011.1013.1701.28713)

CCC Help Italian (x32 Version: 2011.1013.1701.28713)

CCC Help Japanese (x32 Version: 2011.1013.1701.28713)

CCC Help Korean (x32 Version: 2011.1013.1701.28713)

CCC Help Norwegian (x32 Version: 2011.1013.1701.28713)

CCC Help Polish (x32 Version: 2011.1013.1701.28713)

CCC Help Portuguese (x32 Version: 2011.1013.1701.28713)

CCC Help Russian (x32 Version: 2011.1013.1701.28713)

CCC Help Spanish (x32 Version: 2011.1013.1701.28713)

CCC Help Swedish (x32 Version: 2011.1013.1701.28713)

CCC Help Thai (x32 Version: 2011.1013.1701.28713)

CCC Help Turkish (x32 Version: 2011.1013.1701.28713)

ccc-utility64 (Version: 2011.1013.1702.28713)

Chuzzle Deluxe (x32 Version: 2.2.0.95)

Cisco EAP-FAST Module (x32 Version: 2.2.14)

Cisco LEAP Module (x32 Version: 1.0.19)

Cisco PEAP Module (x32 Version: 1.1.6)

D3DX10 (x32 Version: 15.4.2368.0902)

Device Access Manager for HP ProtectTools (Version: 6.0.0.9)

Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95)

Drive Encryption For HP ProtectTools (Version: 6.0.98.29476)

Energy Star Digital Logo (x32 Version: 1.0.1)

Evernote v. 4.2.2 (x32 Version: 4.2.2.3979)

Face Recognition for HP ProtectTools (Version: 6.00.4303)

Farm Frenzy (x32 Version: 2.2.0.95)

FATE (x32 Version: 2.2.0.95)

File Sanitizer For HP ProtectTools (x32 Version: 6.0.0.8)

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)

Google Earth Plug-in (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.21.153)

Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000)

HP 3D DriveGuard (Version: 4.1.14.1)

HP Auto (Version: 1.0.12494.3472)

HP Connection Manager (x32 Version: 4.1.10.1)

HP Customer Experience Enhancements (x32 Version: 6.0.1.7)

HP DayStarter (Version: 2.0.0.12)

HP Documentation (x32 Version: 1.2.0.0)

HP ESU for Microsoft Windows 7 (x32 Version: 2.0.8.1)

HP Game Console (x32)

HP Games (x32 Version: 1.0.1.5)

HP HD Webcam [Fixed] (x32 Version: 3.3.4.07)

HP Power Assistant (Version: 2.0.2.0)

HP ProtectTools Security Manager (Version: 6.00.888)

HP QuickWeb (x32 Version: 3.0.0.9057)

HP Setup (x32 Version: 8.5.4526.3645)

HP SoftPaq Download Manager (x32 Version: 3.4.4.0)

HP Software Framework (x32 Version: 4.6.10.1)

HP Software Setup (x32 Version: 8.2.1.1)

HP Support Assistant (x32 Version: 7.0.39.15)

HP System Default Settings (x32 Version: 2.1.2)

HP Wallpaper (x32 Version: 2.00)

iCloud (Version: 2.1.2.8)

IDT Audio (x32 Version: 1.0.6428.0)

Insaniquarium Deluxe (x32 Version: 2.2.0.95)

Intel(R) Display Audio Driver (x32 Version: 6.14.00.3074)

Intel(R) Identity Protection Technology 1.0.71.0 (x32 Version: 1.0.71.0)

Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)

Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004)

iTunes (Version: 11.1.1.11)

Java Auto Updater (x32 Version: 2.0.7.2)

Java(TM) 6 Update 39 (x32 Version: 6.0.390)

Jewel Quest II (x32 Version: 2.2.0.95)

Jewel Quest Solitaire (x32 Version: 2.2.0.95)

JMicron Flash Media Controller Driver (x32 Version: 1.0.72.4)

John Deere Drive Green (x32 Version: 2.2.0.95)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Office 2007 Service Pack 3 (SP3) (x32)

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)

Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Standard 2007 (x32 Version: 12.0.6612.1000)

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft_VC90_CRT_x86 (x32 Version: 1.0.0)

Microsoft-Maus- und Tastatur-Center (Version: 1.1.500.0)

Mobile Connection Manager (x32 Version: 1.0.0.1)

Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)

Mozilla Maintenance Service (x32 Version: 24.0)

MSVCRT (x32 Version: 15.4.2862.0708)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

PDF Complete Special Edition (x32 Version: 4.0.33)

Penguins! (x32 Version: 2.2.0.95)

Plants vs. Zombies (x32 Version: 2.2.0.95)

Polar Bowler (x32 Version: 2.2.0.95)

Privacy Manager for HP ProtectTools (Version: 6.00.831)

PX Profile Update (x32 Version: 1.00.1.)

QuickTime (x32 Version: 7.74.80.86)

Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)

Realtek Ethernet Controller All-In-One Windows Driver (x32 Version: 7.58.411.2012)

Realtek Motorola BC8 Bluetooth 3.0+HS Adapter (Version: 3.0.82.298)

REALTEK Wireless LAN Driver (x32 Version: 1.00.11.0706)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0)

Safari (x32 Version: 5.34.57.2)

SDK (x32 Version: 2.24.025)

Skype™ 6.9 (x32 Version: 6.9.106)

Slingo Deluxe (x32 Version: 2.2.0.95)

Synaptics Pointing Device Driver (Version: 16.3.9.0)

TeamViewer 8 (x32 Version: 8.0.20768)

Theft Recovery for HP ProtectTools (x32 Version: 6.0.0.30)

Update for 2007 Microsoft Office System (KB967642) (x32)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825641) 32-Bit Edition (x32)

Update für Microsoft Office Excel 2007 Help (KB963678) (x32)

Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)

Update für Microsoft Office Word 2007 Help (KB963665) (x32)

Validity Fingerprint Sensor Driver (Version: 4.3.216.0)

VIP Access SDK x64(1.0.0.50)  (x32 Version: 1.0.0.50)

Virtual Villagers - The Secret City (x32 Version: 2.2.0.95)

Wedding Dash (x32 Version: 2.2.0.95)

Windows Live (x32 Version: 15.4.3502.0922)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3502.0922)

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)

Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)

Windows Live Installer (x32 Version: 15.4.3502.0922)

Windows Live Language Selector (Version: 15.4.3502.0922)

Windows Live Movie Maker (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 15.4.3502.0922)

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)

Windows Live PIMT Platform (x32 Version: 15.4.3502.0922)

Windows Live SOXE (x32 Version: 15.4.3502.0922)

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)

Windows Live UX Platform (x32 Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922)

WinZip 14.5 (x32 Version: 14.5.9095)

Xerox Phaser 6128MFP Scanner-Treiber (x32 Version: 1.0.1.0)

Xobni (x32 Version: 1.9.5.13282)

Xobni Core (x32 Version: 1.0.0)

Zuma Deluxe (x32 Version: 2.2.0.95)
 

==================== Restore Points  =========================
 

07-10-2013 09:34:39 HP Support Assistant Wiederherstellungspunkt

07-10-2013 10:20:23 Windows Update

11-10-2013 07:40:59 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {078F2EDF-28F2-43B3-96B4-D226903DA552} - System32\Tasks\{59787B14-FF69-4028-B322-7D58CB7E097C} => Firefox.exe Skype auf Ihren Computer herunterladen ? Mac, Windows, Linux*?*Skype

Task: {1FD59EC5-51A6-4312-9380-F73D42E5ADD3} - System32\Tasks\HPCeeScheduleForIQP1SORAYAB$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)

Task: {273F3DA6-4BA0-45F3-8529-5CB104C3ACEA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-26] (Google Inc.)

Task: {2C42900E-1A51-4E00-9368-1D334EAD3568} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {322D9764-47AD-4588-9682-1D8055B45325} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-26] (Google Inc.)

Task: {5B55B291-405A-4341-B22A-A20C340554B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)

Task: {5BD834FC-9D81-4967-BE9E-DD8EF5BCA5E8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-04-01] (Hewlett-Packard Company)

Task: {5F60A8C6-5747-4498-A6EE-BCEBD134E63C} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {631BE306-4BFD-4643-997C-2FE48C421EB2} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Device Center\itype.exe [2012-06-26] (Microsoft Corporation)

Task: {75850E71-CC4B-4C51-9ECF-07258BAEB4EC} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Device Center\ipoint.exe [2012-06-26] (Microsoft Corporation)

Task: {80624833-8897-4D54-A49F-5F119D49B622} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10] (Adobe Systems Incorporated)

Task: {86CBA783-68F0-4B49-A45F-E19750AED659} - System32\Tasks\Microsoft_Hardware_Launch_devicecenter_exe => c:\Program Files\Microsoft Device Center\devicecenter.exe [2012-06-26] (Microsoft)

Task: {957CB2B5-3115-4CA8-82F2-236C92E3AC19} - System32\Tasks\HPCeeScheduleForiqp1 Soraya B => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)

Task: {C03DF7FA-F6FE-4B66-819F-51508E050953} - System32\Tasks\{AECD4AC9-3683-4DE6-8B4C-4F84BB277371} => Firefox.exe Skype auf Ihren Computer herunterladen ? Mac, Windows, Linux*?*Skype

Task: {CAFA62FD-0DEB-44C3-97F5-1E02BF5DA07B} - System32\Tasks\{F435DF8E-9161-44F7-962C-1659C3F8D230} => Firefox.exe Skype auf Ihren Computer herunterladen ? Mac, Windows, Linux*?*Skype

Task: {CCFA5960-6980-4D37-85C2-F3C7FF28C21F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)

Task: {E7429480-ED7B-4F87-8308-D5DC620AFCC3} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)

Task: {EB363B37-002B-4EF1-A747-A6D6726577BF} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\windows\Tasks\HPCeeScheduleForiqp1 Soraya B.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

Task: C:\windows\Tasks\HPCeeScheduleForIQP1SORAYAB$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-04-05 12:58 - 2013-04-05 12:58 - 00954696 _____ () C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll

2011-01-27 07:11 - 2011-01-27 07:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2011-11-09 09:55 - 2011-11-09 09:55 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll

2011-11-02 14:03 - 2011-11-02 14:03 - 00024576 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\BrandingResources.dll

2011-10-13 16:01 - 2011-10-13 16:01 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll

2011-01-27 03:13 - 2011-01-27 03:13 - 00080440 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HardwareAccess.dll

2011-01-27 03:14 - 2011-01-27 03:14 - 00036408 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Remote.dll

2011-01-27 03:13 - 2011-01-27 03:13 - 00047160 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\Graphs.dll

2011-05-03 20:25 - 2011-01-27 02:34 - 01083392 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\System.Data.SQLite.dll

2010-06-24 13:21 - 2010-06-24 13:21 - 01102336 _____ () C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\System.Data.SQLite.dll

2013-10-09 09:30 - 2013-10-09 09:29 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

2012-02-20 21:29 - 2012-02-20 21:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2012-02-20 21:28 - 2012-02-20 21:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2012-02-08 12:40 - 2012-02-08 12:40 - 02830336 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcEncryptionProviderPlugin.dll

2012-02-08 12:08 - 2012-02-08 12:08 - 00126976 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHostInterface.dll

2012-02-08 12:43 - 2012-02-08 12:43 - 02863104 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeHpDpHostPlugin.dll

2012-02-08 12:41 - 2012-02-08 12:41 - 00053248 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeOpalATASec4SATA.dll

2012-02-08 12:12 - 2012-02-08 12:12 - 02035712 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeCoreEncryptionPlugin.dll

2012-02-08 12:13 - 2012-02-08 12:13 - 01945600 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeProductDetectionPlugin.dll

2012-02-08 12:39 - 2012-02-08 12:39 - 03092480 _____ () C:\Program Files\Hewlett-Packard\Drive Encryption\EpeOpalEncryptionProviderPlugin.dll

2010-09-06 23:18 - 2010-09-06 23:18 - 01412608 _____ () C:\windows\system32\LIBEAY32.dll

2013-08-15 09:46 - 2013-08-15 09:46 - 00169472 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\9ab0e818cb3d1b6930eba54179f89300\IsdiInterop.ni.dll

2011-12-24 13:04 - 2011-01-13 03:56 - 00058880 ____R () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2009-02-26 13:46 - 2009-02-26 13:46 - 00064344 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\ColleagueImport.dll

2011-06-22 11:46 - 2011-06-22 11:46 - 00434016 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll

2013-07-10 18:07 - 2013-07-10 18:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL

2010-06-24 13:19 - 2010-06-24 13:19 - 00514570 _____ () c:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\sqlite3.dll

2013-10-02 15:00 - 2013-10-02 15:00 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2013-10-10 09:55 - 2013-10-10 09:55 - 16233864 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 

Name: hp CDDVDW SN-208BB

Description: CD-ROM-Laufwerk

Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standard-CD-ROM-Laufwerke)

Service: cdrom

Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)

Resolution: A registry problem was detected.

 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (10/07/2013 09:28:22 AM) (Source: Bonjour Service) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 24
 

Error: (10/07/2013 09:28:22 AM) (Source: Bonjour Service) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 23
 

Error: (10/07/2013 09:28:22 AM) (Source: Bonjour Service) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 22
 

Error: (10/07/2013 09:28:22 AM) (Source: Bonjour Service) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 21
 

Error: (10/07/2013 09:28:22 AM) (Source: Bonjour Service) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 20
 

Error: (10/07/2013 09:28:22 AM) (Source: Bonjour Service) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 19
 

Error: (10/07/2013 09:28:22 AM) (Source: Bonjour Service) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 18
 

Error: (10/07/2013 09:28:22 AM) (Source: Bonjour Service) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 17
 

Error: (10/07/2013 09:28:22 AM) (Source: Bonjour Service) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 16
 

Error: (10/07/2013 09:28:22 AM) (Source: Bonjour Service) (User: )

Description: ERROR: handle_resolve_request bad interfaceIndex 15
 
 

System errors:

=============

Error: (10/11/2013 09:55:02 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.159.1955.0)
 

Error: (10/11/2013 09:15:18 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.
 

Error: (10/11/2013 09:08:37 AM) (Source: Service Control Manager) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

cdrom
 

Error: (10/11/2013 09:08:08 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "hpHotkeyMonitor" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (10/10/2013 01:36:50 PM) (Source: DCOM) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (10/10/2013 09:19:05 AM) (Source: Service Control Manager) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

cdrom
 

Error: (10/10/2013 09:18:39 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "hpHotkeyMonitor" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (10/09/2013 10:10:58 PM) (Source: DCOM) (User: )

Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
 

Error: (10/09/2013 09:15:40 AM) (Source: Service Control Manager) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

cdrom
 

Error: (10/09/2013 09:15:30 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "hpHotkeyMonitor" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (04/28/2012 09:25:35 AM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6607.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 389 seconds with 60 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-10-11 09:23:36.591

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-10-11 09:14:56.350

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-10-11 09:14:56.084

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAC64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-10-11 09:14:50.365

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-10-11 09:13:16.988

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-10-11 09:13:07.081

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-10-11 09:12:19.959

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-10-10 13:36:51.219

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-10-10 13:36:39.902

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-10-10 13:36:37.523

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\AESTAR64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 71%

Total physical RAM: 4030.36 MB

Available physical RAM: 1153.11 MB

Total Pagefile: 8058.9 MB

Available Pagefile: 4497.04 MB

Total Virtual: 8192 MB

Available Virtual: 8191.8 MB
 

==================== Drives ================================
 

Drive c: (Laufwerk ) (Fixed) (Total:346.89 GB) (Free:249.23 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive d: (Download) (Fixed) (Total:97.66 GB) (Free:57.11 GB) NTFS

Drive e: (Data_Business) (Fixed) (Total:230.89 GB) (Free:13.76 GB) NTFS

Drive f: (HP_RECOVERY) (Fixed) (Total:17.9 GB) (Free:2.72 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive h: (HP_TOOLS) (Fixed) (Total:4.98 GB) (Free:2.12 GB) FAT32
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: F2D83907)

Partition 1: (Not Active) - (Size=993 KB) - (Type=42)

Partition 2: (Active) - (Size=300 MB) - (Type=42)

Partition 3: (Not Active) - (Size=347 GB) - (Type=42)

Partition 4: (Not Active) - (Size=351 GB) - (Type=42)
 

==================== End Of Log ============================

--- --- ---

Guten Abend Schrauber,

danke für Deine Rückmeldung. Habe Deinen Anweisungen folge geleistet. Doch jetzt wird es etwas merkwürdig bis kompliziert:
Mein Virenscanner hat heute plötzlich zwei neue Viren entdeckt, obwohl ein Scan bisher ja nicht möglich war. Auf einmal ging das, obwohl die ComboFix nur downgeloadet war aber die Anwendung noch nicht gestartet war. Den habe ich erst erst vor wenigen Minuten durchgeführt. Einer der neuen Viren konnte in Quarantäne verschoben und gelöscht werden, der Zweite jedoch nicht.
Nun meine Frage:
- soll ich Dir zusätzlich zum ComboFix-Report auch den von meinem Virenscanner zukommen lassen? (Einen Auszug oder auch komplett)
- ich hatte ja beide Dateien der Archivbombe vorher umbenannt. Ist dies berücksichtigt worden?
Im Moment läuft der Virenscanner durch - bin gespannt ob er jetzt wieder resp. immer noch funktioniert..
Hoffe, Du konntest folgen..

Vielen Dank & schöne Grüsse
TangoGazelle

Code:

Combofix Logfile:
 

        Code:


        
ComboFix 13-10-12.01 - XXXXX 13.10.2013  22:21:17.1.4 - x64

Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.4030.1931 [GMT 2:00]

ausgeführt von:: c:\users\XXXXX\Desktop\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-09-13 bis 2013-10-13  ))))))))))))))))))))))))))))))

.

.

2013-10-13 20:28 . 2013-10-13 20:28        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-10-11 11:15 . 2013-10-11 11:15        --------        d-----w-        C:\FRST

2013-10-11 08:13 . 2013-09-15 22:50        9694160        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{C7851F6B-B772-4FD8-B2B0-BB2ACB3DF597}\mpengine.dll

2013-10-11 07:48 . 2013-07-04 12:50        633856        ----a-w-        c:\windows\system32\comctl32.dll

2013-10-11 07:48 . 2013-07-04 11:50        530432        ----a-w-        c:\windows\SysWow64\comctl32.dll

2013-10-11 07:47 . 2013-06-06 05:50        41472        ----a-w-        c:\windows\system32\lpk.dll

2013-10-11 07:47 . 2013-06-06 05:49        100864        ----a-w-        c:\windows\system32\fontsub.dll

2013-10-11 07:47 . 2013-06-06 05:49        14336        ----a-w-        c:\windows\system32\dciman32.dll

2013-10-11 07:47 . 2013-06-06 05:47        46080        ----a-w-        c:\windows\system32\atmlib.dll

2013-10-11 07:47 . 2013-06-06 04:57        25600        ----a-w-        c:\windows\SysWow64\lpk.dll

2013-10-11 07:47 . 2013-06-06 04:51        70656        ----a-w-        c:\windows\SysWow64\fontsub.dll

2013-10-11 07:47 . 2013-06-06 04:50        10240        ----a-w-        c:\windows\SysWow64\dciman32.dll

2013-10-11 07:47 . 2013-06-06 03:30        368128        ----a-w-        c:\windows\system32\atmfd.dll

2013-10-11 07:47 . 2013-06-06 03:01        295424        ----a-w-        c:\windows\SysWow64\atmfd.dll

2013-10-11 07:47 . 2013-06-06 03:01        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll

2013-10-11 07:47 . 2013-06-25 22:55        785624        ----a-w-        c:\windows\system32\drivers\Wdf01000.sys

2013-10-11 07:46 . 2013-07-12 10:41        185344        ----a-w-        c:\windows\system32\drivers\usbvideo.sys

2013-10-11 07:46 . 2013-07-12 10:41        100864        ----a-w-        c:\windows\system32\drivers\usbcir.sys

2013-10-11 07:46 . 2013-07-03 04:05        76800        ----a-w-        c:\windows\system32\drivers\hidclass.sys

2013-10-11 07:46 . 2013-07-03 04:05        32896        ----a-w-        c:\windows\system32\drivers\hidparse.sys

2013-10-11 07:45 . 2013-07-04 12:57        259584        ----a-w-        c:\windows\system32\WebClnt.dll

2013-10-11 07:45 . 2013-07-04 12:50        102400        ----a-w-        c:\windows\system32\davclnt.dll

2013-10-11 07:45 . 2013-07-04 11:57        205824        ----a-w-        c:\windows\SysWow64\WebClnt.dll

2013-10-11 07:45 . 2013-07-04 11:51        81920        ----a-w-        c:\windows\SysWow64\davclnt.dll

2013-10-11 07:45 . 2013-07-04 10:11        140800        ----a-w-        c:\windows\system32\drivers\mrxdav.sys

2013-10-11 07:45 . 2013-09-08 02:30        1903552        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2013-10-11 07:45 . 2013-09-14 01:10        497152        ----a-w-        c:\windows\system32\drivers\afd.sys

2013-10-11 07:45 . 2013-09-08 02:27        327168        ----a-w-        c:\windows\system32\mswsock.dll

2013-10-11 07:45 . 2013-09-08 02:03        231424        ----a-w-        c:\windows\SysWow64\mswsock.dll

2013-10-11 07:42 . 2013-07-20 10:33        102608        ----a-w-        c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll

2013-10-11 07:42 . 2013-07-20 10:33        124112        ----a-w-        c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-10-11 07:41 . 2013-08-01 09:19        984512        ----a-w-        c:\windows\system32\drivers\dxgkrnl.sys

2013-10-11 07:41 . 2013-08-01 09:19        265152        ----a-w-        c:\windows\system32\drivers\dxgmms1.sys

2013-10-11 07:41 . 2013-08-28 01:12        461312        ----a-w-        c:\windows\system32\scavengeui.dll

2013-10-09 07:35 . 2013-10-09 07:35        --------        d-----w-        c:\users\iqp1 Soraya B\AppData\Roaming\Avira

2013-10-09 07:32 . 2013-10-09 07:32        --------        d-----w-        c:\programdata\AskPartnerNetwork

2013-10-09 07:32 . 2013-10-09 07:32        --------        d-----w-        c:\program files (x86)\AskPartnerNetwork

2013-10-09 07:31 . 2013-10-09 07:31        81112        ----a-w-        c:\windows\system32\drivers\avnetflt.sys

2013-10-09 07:30 . 2013-10-09 07:29        28600        ----a-w-        c:\windows\system32\drivers\avkmgr.sys

2013-10-09 07:30 . 2013-10-09 07:29        132088        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2013-10-09 07:30 . 2013-10-09 07:29        105344        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2013-10-09 07:30 . 2013-10-09 07:30        --------        d-----w-        c:\program files (x86)\Avira

2013-10-07 10:21 . 2013-04-02 20:32        187392        ----a-w-        c:\windows\system32\xrxmnzil.dll

2013-10-07 10:20 . 2012-08-24 18:05        340992        ----a-w-        c:\windows\system32\schannel.dll

2013-10-07 10:20 . 2012-08-24 18:13        154480        ----a-w-        c:\windows\system32\drivers\ksecpkg.sys

2013-10-07 10:20 . 2012-08-24 18:09        458712        ----a-w-        c:\windows\system32\drivers\cng.sys

2013-10-07 10:20 . 2012-08-24 18:03        1448448        ----a-w-        c:\windows\system32\lsasrv.dll

2013-10-07 10:20 . 2012-08-24 16:57        247808        ----a-w-        c:\windows\SysWow64\schannel.dll

2013-10-07 10:20 . 2012-08-24 16:57        22016        ----a-w-        c:\windows\SysWow64\secur32.dll

2013-10-07 10:20 . 2012-08-24 16:53        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll

2013-10-07 09:58 . 2013-10-07 09:58        --------        d-----w-        c:\programdata\APN

2013-10-07 07:32 . 2013-10-07 07:32        --------        d-----w-        c:\program files\iPod

2013-10-07 07:32 . 2013-10-07 07:33        --------        d-----w-        c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-10-07 07:32 . 2013-10-07 07:33        --------        d-----w-        c:\program files\iTunes

2013-10-07 07:32 . 2013-10-07 07:33        --------        d-----w-        c:\program files (x86)\iTunes

2013-09-26 10:26 . 2013-09-26 10:27        --------        d-----w-        c:\program files (x86)\Google

2013-09-26 10:26 . 2013-09-26 10:26        --------        d-----w-        c:\users\iqp1 Soraya B\AppData\Local\Google

2013-09-21 08:57 . 2013-08-13 06:38        32328        ----a-w-        c:\windows\Launcher.exe

2013-09-21 08:55 . 2013-09-21 08:55        --------        d-----w-        c:\users\iqp1 Soraya B\AppData\Local\DownloadGuide

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-10-12 00:28 . 2012-03-11 19:22        80541720        ----a-w-        c:\windows\system32\MRT.exe

2013-10-10 07:55 . 2012-04-11 16:29        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-10-10 07:55 . 2012-04-11 16:29        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-08-29 01:48 . 2013-10-11 07:44        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2013-08-07 02:22 . 2012-03-11 07:39        278800        ------w-        c:\windows\system32\MpSigStub.exe

2013-08-05 02:25 . 2013-09-11 06:57        155584        ----a-w-        c:\windows\system32\drivers\ataport.sys

2013-08-02 02:14 . 2013-09-11 06:57        215040        ----a-w-        c:\windows\system32\winsrv.dll

2013-08-02 02:13 . 2013-09-11 06:57        424448        ----a-w-        c:\windows\system32\KernelBase.dll

2013-08-02 02:13 . 2013-09-11 06:57        1161216        ----a-w-        c:\windows\system32\kernel32.dll

2013-08-02 02:12 . 2013-09-11 06:57        43520        ----a-w-        c:\windows\system32\csrsrv.dll

2013-08-02 02:12 . 2013-09-11 06:57        6144        ---ha-w-        c:\windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        6656        ----a-w-        c:\windows\system32\apisetschema.dll

2013-08-02 02:12 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        4608        ---ha-w-        c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        4096        ---ha-w-        c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        5120        ---ha-w-        c:\windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-08-02 02:12 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-08-02 01:50 . 2013-09-11 06:57        274944        ----a-w-        c:\windows\SysWow64\KernelBase.dll

2013-08-02 01:48 . 2013-09-11 06:57        5120        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        4608        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        6656        ----a-w-        c:\windows\SysWow64\apisetschema.dll

2013-08-02 01:48 . 2013-09-11 06:57        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll

2013-08-02 01:48 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll

2013-08-02 01:09 . 2013-09-11 06:57        338432        ----a-w-        c:\windows\system32\conhost.exe

2013-08-02 00:59 . 2013-09-11 06:57        112640        ----a-w-        c:\windows\system32\smss.exe

2013-08-02 00:43 . 2013-09-11 06:57        6144        ---ha-w-        c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

2013-08-02 00:43 . 2013-09-11 06:57        4608        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

2013-08-02 00:43 . 2013-09-11 06:57        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

2013-08-02 00:43 . 2013-09-11 06:57        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

2013-07-26 02:24 . 2013-09-11 06:57        14172672        ----a-w-        c:\windows\system32\shell32.dll

2013-07-26 02:24 . 2013-09-11 06:57        197120        ----a-w-        c:\windows\system32\shdocvw.dll

2013-07-25 09:25 . 2013-08-14 06:54        1888768        ----a-w-        c:\windows\system32\WMVDECOD.DLL

2013-07-25 08:57 . 2013-08-14 06:54        1620992        ----a-w-        c:\windows\SysWow64\WMVDECOD.DLL

2013-07-19 01:58 . 2013-08-14 06:55        2048        ----a-w-        c:\windows\system32\tzres.dll

2013-07-19 01:41 . 2013-08-14 06:55        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}]

2013-09-24 01:18        12240        ----a-w-        c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]

"{41564952-412D-5637-00A7-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll" [2013-09-24 12240]

.

[HKEY_CLASSES_ROOT\clsid\{41564952-412d-5637-00a7-7a786e7484d7}]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"File Sanitizer"="c:\program files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe" [2011-02-07 12274688]

"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-01-26 283160]

"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-11-17 113288]

"HP HD Webcam [Fixed]_Monitor"="c:\program files (x86)\HP HD Webcam [Fixed]\monitor.exe" [2010-11-26 11:31 267128]

"DTRun"="c:\program files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe" [2010-11-24 517456]

"HPConnectionManager"="c:\program files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe" [2011-04-05 94264]

"HPQuickWebProxy"="c:\program files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" [2011-02-11 76344]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-10-13 343168]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]

"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2011-02-01 656920]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-09-17 254896]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-10-01 152392]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-10-09 347192]

"ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2013-09-24 1673680]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Adobe Gamma Loader.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2012-4-20 113664]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

"Userinit"="userinit.exe"

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DeviceNP]

2011-02-03 22:09        75360        ----a-w-        c:\windows\System32\DeviceNP.dll

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Notification Packages        REG_MULTI_SZ           DPPassFilter scecli

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 HP Power Assistant Service;HP Power Assistant Service;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [x]

R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]

R2 hpHotkeyMonitor;hpHotkeyMonitor;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP Hotkey Support\HpHotkeyMonitor.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R2 XobniService;XobniService;c:\program files (x86)\Xobni\XobniService.exe;c:\program files (x86)\Xobni\XobniService.exe [x]

R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe [x]

R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files\Motorola\Bluetooth\audiosrv.exe;c:\program files\Motorola\Bluetooth\audiosrv.exe [x]

R3 BTMCOM;Bluetooth Serial Port;c:\windows\system32\Drivers\btmcom.sys;c:\windows\SYSNATIVE\Drivers\btmcom.sys [x]

R3 BTMUSB;Motorola Bluetooth Radio Service;c:\windows\system32\Drivers\btmusb.sys;c:\windows\SYSNATIVE\Drivers\btmusb.sys [x]

R3 DAMDrv;DAMDrv;c:\windows\system32\DRIVERS\DAMDrv64.sys;c:\windows\SYSNATIVE\DRIVERS\DAMDrv64.sys [x]

R3 FLCDLOCK;HP ProtectTools Device Locking / Auditing;c:\windows\SysWOW64\flcdlock.exe;c:\windows\SysWOW64\flcdlock.exe [x]

R3 hpCMSrv;HP Connection Manager 4 Service;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe;c:\program files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [x]

R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]

S0 MfeEpeOpal;MfeEpeOpal; [x]

S0 MfeEpePc;MfeEpePc; [x]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]

S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]

S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]

S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [x]

S2 APNMCP;Ask Aktualisierungsdienst;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]

S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe [x]

S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files\Motorola\Bluetooth\obexsrv.exe;c:\program files\Motorola\Bluetooth\obexsrv.exe [x]

S2 HPDayStarterService;HP DayStarter Service;c:\program files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe;c:\program files\Hewlett-Packard\HP DayStarter\32-bit\HPDayStarterService.exe [x]

S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [x]

S2 HPFSService;File Sanitizer for HP ProtectTools;c:\program files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe;c:\program files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [x]

S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]

S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]

S2 jhi_service;Intel(R) Identity Protection Technology Host Interface Service;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe [x]

S2 McAfee Endpoint Encryption Agent;McAfee Endpoint Encryption Agent;c:\program files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe;c:\program files\Hewlett-Packard\Drive Encryption\EEAgent\MfeEpeHost.exe [x]

S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe;c:\program files (x86)\PDF Complete\pdfsvc.exe [x]

S2 PdiService;Portrait Displays SDK Service;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe;c:\program files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe [x]

S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]

S2 uArcCapture;ArcCapture;c:\windows\SysWow64\ArcVCapRender\uArcCapture.exe;c:\windows\SysWow64\ArcVCapRender\uArcCapture.exe [x]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]

S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe;c:\windows\SYSNATIVE\vcsFPService.exe [x]

S3 ARCVCAM;ARCVCAM, ArcSoft Webcam Sharing Manager Driver;c:\windows\system32\DRIVERS\ArcSoftVCapture.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftVCapture.sys [x]

S3 Bluetooth Device Manager;Bluetooth Device Manager;c:\program files\Motorola\Bluetooth\devmgrsrv.exe;c:\program files\Motorola\Bluetooth\devmgrsrv.exe [x]

S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [x]

S3 HP ProtectTools Service;HP ProtectTools Service;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [x]

S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]

S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x]

S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]

S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

S3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;c:\windows\system32\DRIVERS\rtl8192Ce.sys;c:\windows\SYSNATIVE\DRIVERS\rtl8192Ce.sys [x]

S3 SPUVCbv;SPUVCb Driver Service;c:\windows\system32\Drivers\SPUVCbv_x64.sys;c:\windows\SYSNATIVE\Drivers\SPUVCbv_x64.sys [x]

S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys;c:\windows\SYSNATIVE\DRIVERS\teamviewervpn.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

.

Inhalt des "geplante Tasks" Ordners

.

2013-10-13 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 07:55]

.

2013-10-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-26 10:26]

.

2013-10-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-09-26 10:26]

.

2013-10-13 c:\windows\Tasks\HPCeeScheduleForiqp1 Soraya B.job

- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15]

.

2013-09-21 c:\windows\Tasks\HPCeeScheduleForIQP1SORAYAB$.job

- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HPPowerAssistant"="c:\program files\Hewlett-Packard\HP Power Assistant\DelayedAppStarter.exe" [2011-01-27 13880]

"MfeEpePcMonitor"="c:\program files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe" [2012-02-08 200704]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-09-01 167704]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-09-01 392472]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-09-01 416024]

"IntelliType Pro"="c:\program files\Microsoft Device Center\itype.exe" [2012-06-26 1464928]

"IntelliPoint"="c:\program files\Microsoft Device Center\ipoint.exe" [2012-06-26 2004584]

"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-05-29 1664000]

"BTMTrayAgent"="c:\program files\Motorola\Bluetooth\btmshell.dll" [2011-02-15 21709904]

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = about:newtab

uDefault_Search_URL = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&st=chrome&q=

mDefault_Search_URL = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&st=chrome&q=

mStart Page = about:newtab

mLocal Page = c:\windows\SysWOW64\blank.htm

mSearch Page = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&st=chrome&q=

mSearch Bar = hxxp://search.certified-toolbar.com?si=66920&tid=6787&ver=4.4&ts=1379753741912&tguid=66920-6787-1379753741912-BD58BC3C6DCB03E2DFB236C800BEC61C&st=chrome&q=

uInternet Settings,ProxyOverride = *.local

IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

IE: {{bd707fe6-39f6-4bda-9265-86a76719bdc5} - c:\program files\Motorola\Bluetooth\btmiesend.htm

LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll

TCP: DhcpNameServer = 192.168.1.1

FF - ProfilePath - c:\users\iqp1 Soraya B\AppData\Roaming\Mozilla\Firefox\Profiles\xge1f68h.default\

FF - prefs.js: browser.search.selectedEngine - Ask Search

FF - prefs.js: browser.startup.homepage - www.google.com

FF - ExtSQL: 2013-10-07 16:28; toolbar_AVIRA-V7@apn.ask.com; c:\users\iqp1 Soraya B\AppData\Roaming\Mozilla\Firefox\Profiles\xge1f68h.default\extensions\toolbar_AVIRA-V7@apn.ask.com.xpi

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Wow6432Node-HKCU-Run-MobileDocuments - c:\program files (x86)\Common Files\Apple\Internet Services\ubd.exe

WebBrowser-{41564952-412D-5637-00A7-7A786E7484D7} - (no file)

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\pdfcDispatcher]

"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe

c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

c:\program files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe

c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2013-10-13  22:37:28 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2013-10-13 20:37

.

Vor Suchlauf: 12 Verzeichnis(se), 265.960.636.416 Bytes frei

Nach Suchlauf: 18 Verzeichnis(se), 269.673.971.712 Bytes frei

.

- - End Of File - - C2830EAE939A273AD0B5731B51DF0A9F

 
--- --- ---

P.S. Wäre es nicht sicherer die Reports via Mail zu schicken, anstatt sie hier zu publizieren?