|
Win7 nach AntiVir Funden "TR/Crypt.zpack.Gen7" und "Adspy.Gen2" stark verlangsamt Liebe Forengemeinde, ich brauche dringend eure Hilfe :( Seit Dienstag ist mein Laptop nahezu komplett außer Betrieb. Ich habe über Chip etwas heruntergeladen. Anschließend kamen 2 Funde: "TR/Crypt.zpack.Gen7" und "Adspy.Gen2" (Exportierte Ereignisse s.u.) Ich habe diese gelöscht.. Anschließend ging fast gar nichts mehr. Habe anschließend mit AntiVir noch einmal einen kompletten Virencheck vorgenommen ohne Funde. Habe zudem noch Microsoft Support Emergency Response Tool (MSERT) heruntergeladen. Einziger Fund hier war "Win32/Yontoo" Weiß mir inzwischen nicht mehr zu helfen da ich mich auf dem Gebiet auch nicht gut auskenne :/ Hab die hier angegeben Schritte vollzogen- diese sind im Anhang beigefügt. Die abgespeicherte Datei bei Gmer war leider leer ich weiß nicht wieso :/ Ich bin für jede Hilfe dankbar! :) Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-03-2014 01 Ran by Lars at 2014-03-08 22:01:37 Running from C:\Users\Lars\Downloads Boot Mode: Safe Mode (with Networking) ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Version: 2.00.11.15 - STMicroelectronics) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Photoshop Elements 7.0 (HKLM-x32\...\Adobe Photoshop Elements 7) (Version: 7.0 - Adobe Systems Incorporated) Adobe Photoshop Elements 7.0 (x32 Version: 7.0.0.3 - Adobe Systems Incorporated) Hidden Adobe Photoshop Lightroom 4.4 64-bit (HKLM\...\{11A955CD-4398-405A-886D-E464C3618FBF}) (Version: 4.4.1 - Adobe) Adobe Premiere Elements 7.0 (HKLM-x32\...\PremElem70) (Version: 7.0 - Adobe Systems Incorporated) Adobe Premiere Elements 7.0 (x32 Version: 7.0 - Adobe Systems Incorporated) Hidden Adobe Premiere Elements 7.0 Templates (HKLM-x32\...\PremElem70Templates) (Version: 7.0.0 - Adobe Systems Incorporated) Adobe Premiere Elements 7.0 Templates (x32 Version: 7.0.0 - Adobe Systems Incorporated) Hidden Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated) Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd) Anno 1701 (HKLM-x32\...\{A2433A63-5F5D-40E5-B529-9123C2B3E734}) (Version: 1.02 - Sunflowers) Ask Toolbar (HKLM-x32\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.14.1.0 - Ask.com) <==== ATTENTION Assassin's Creed III 1.01 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.01 - Ubisoft) AutoShutdownManager (HKLM-x32\...\{361CE298-8B86-4049-915C-4A28E2577CE0}) (Version: 4 - EnviProt - www.EnviProt.com) Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira) BrowserCompanion (HKLM-x32\...\BrowserCompanion) (Version: - ) <==== ATTENTION Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version: - ) Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve) Counter-Strike: Source Beta (HKLM-x32\...\Steam App 260) (Version: - ) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.1.0236 - DT Soft Ltd) Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.60 - Dell) Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.60 - Dell) Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell) Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc) Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.) Dell MusicStage (HKLM-x32\...\{17407164-F2AD-4E04-886B-8060D503F21C}) (Version: 1.4.162.0 - Fingertapps) Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.30 - ArcSoft) Dell Stage (HKLM-x32\...\{AB1723E2-05BC-49C1-86AB-409764C0E608}) (Version: 1.4.173.0 - Fingertapps) Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.1.1.1408 - CyberLink Corp.) Dell VideoStage (x32 Version: 1.1.1.1408 - CyberLink Corp.) Hidden Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.35 - Creative Technology Ltd) Delta Chrome Toolbar (HKLM-x32\...\{177586E7-E42E-4F38-83D1-D15B4AF5B714}) (Version: 1.0.0.0 - DeltaInstaller) <==== ATTENTION Delta toolbar (HKLM-x32\...\delta) (Version: 1.8.10.0 - Delta) <==== ATTENTION DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden Dll-Files.com Fixer (HKLM-x32\...\Dll-Files.com Fixer_is1) (Version: 1.0 - Dll-Files.com) Dream Video Converter Ultimate 4.3.8 (HKLM-x32\...\{66712EEE-ECBC-4CA6-solid-mp4-video-converter-converter}_is1) (Version: - TopVideoSoft,Inc.) Flatcast Viewer Plugin 5.3.0.784 (HKLM-x32\...\Flatcast Viewer 5.3_is1) (Version: - 1 mal 1 Software GmbH) Flitzer 1.02 (HKLM-x32\...\{D6A859C6-CC3A-40BB-B031-906114E36F61}_is1) (Version: Flitzer 1.02 - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden HDVidCodec (HKLM-x32\...\1ClickDownload) (Version: 2.1 Build 26473 - hdvidcodec.com) <==== ATTENTION ICQ Toolbar (HKLM-x32\...\ICQToolbar) (Version: 3.0.0 - ICQ) ICQ7.6 (HKLM-x32\...\{7644E42D-B096-457F-8B5B-901238FC81AE}) (Version: 7.6 - ICQ) Intel PROSet Wireless (Version: - ) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2189 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{D16A2127-B927-4379-B153-3DEC091E4EEB}) (Version: 13.02.1000 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation) Intel(R) Wireless Display (HKLM\...\{C298FF86-AB23-4B58-AC53-A23383C07B3A}) (Version: 1.2.20.0 - Intel Corporation) Java Auto Updater (x32 Version: 2.0.7.2 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022F0}) (Version: 6.0.220 - Oracle) Java(TM) 6 Update 24 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416024FF}) (Version: 6.0.240 - Oracle) Java(TM) 6 Update 37 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216037FF}) (Version: 6.0.370 - Oracle) Java(TM) 7 Update 5 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417005FF}) (Version: 7.0.50 - Oracle) JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.52.4 - JMicron Technology Corp.) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft IntelliPoint 8.1 (HKLM\...\Microsoft IntelliPoint 8.1) (Version: 8.15.406.0 - Microsoft) Microsoft IntelliPoint 8.1 (Version: 8.15.406.0 - Microsoft) Hidden Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 17.0.2003.1112 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}) (Version: 8.0.58299 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden Moorhuhn Remake (HKLM-x32\...\{52210D57-0B1F-4681-90DD-8659DF4BCC40}) (Version: 1.00.0000 - ) Mozilla Firefox 26.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 26.0 (x86 de)) (Version: 26.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla) MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.) Nokia Connectivity Cable Driver (HKLM-x32\...\{4AA68A73-DB9C-439D-9481-981C82BD008B}) (Version: 7.1.69.0 - Nokia) NVIDIA 3D Vision Treiber 266.39 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 266.39 - NVIDIA Corporation) NVIDIA Grafiktreiber 266.39 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 266.39 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.265.39.0 - NVIDIA Corporation) Hidden NVIDIA Optimus 1.0.11 (Version: 1.0.11 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6639 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 266.39 (Version: 266.39 - NVIDIA Corporation) Hidden NVIDIA Update Components (Version: 1.0.11 - NVIDIA Corporation) Hidden OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org) PC Auto Shutdown 5.1 (HKLM-x32\...\PC Auto Shutdown_is1) (Version: 5.1 - GoldSolution Software, Inc.) PC Connectivity Solution (HKLM-x32\...\{A2AA4204-C05A-4013-888A-AD153139297F}) (Version: 11.5.29.0 - Nokia) PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.8 - Google, Inc.) PokerStars (HKLM-x32\...\PokerStars) (Version: - PokerStars) Pro Evolution Soccer 2012 DEMO (HKLM-x32\...\{6844E55F-37A1-42BC-B316-326B48C49ADC}) (Version: 1.00.0000 - KONAMI) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.8.5 - Dell Inc.) RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6240 - Realtek Semiconductor Corp.) Re-Volt Demo (HKLM-x32\...\Re-Volt Demo) (Version: - ) Roxio Activation Module (x32 Version: 1.0 - Roxio) Hidden Roxio BackOnTrack (x32 Version: 1.3.3 - Roxio) Hidden Roxio Burn (x32 Version: 1.8 - Roxio) Hidden Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio) Roxio Creator Starter (x32 Version: 1.0.439 - Roxio) Hidden Roxio Creator Starter (x32 Version: 5.0.0 - Roxio) Hidden Roxio Express Labeler 3 (x32 Version: 3.2.2 - Roxio) Hidden Roxio File Backup (Version: 1.3.2 - Roxio) Hidden SES Driver (HKLM\...\{D8CC254C-C671-4664-9A38-FA368D1E2C97}) (Version: 1.0.0 - Western Digital) Skype Toolbars (HKLM-x32\...\{981029E0-7FC9-4CF3-AB39-6F133621921A}) (Version: 1.0.4051 - Skype Technologies S.A.) Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) SmartSound Quicktracks for Premiere Elements (HKLM-x32\...\InstallShield_{F6234880-85BE-4DCB-8A45-1FF85A1A8552}) (Version: 3.11.3090 - SmartSound Software Inc) SmartSound Quicktracks for Premiere Elements (x32 Version: 3.11.3090 - SmartSound Software Inc) Hidden Solid YouTube Downloader and Converter DB Toolbar (HKLM-x32\...\Solid YouTube Downloader and Converter DB Toolbar) (Version: - ) Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden Sopcast Ask Toolbar Updater (HKCU\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.0.20007 - Ask.com) <==== ATTENTION Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) SUPER © v2011.build.49 (July 1st, 2011) Version v2011.build.49 (HKLM-x32\...\{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1) (Version: v2011.build.49 - eRightSoft) Swiss Casino (HKCU\...\Swiss Casino) (Version: - ) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.1.4.0 - Synaptics Incorporated) Tipard MPEG TS Converter 6.1.22 (HKLM-x32\...\{FE6790DD-5A25-41d9-9059-0A8B33076E65}_is1) (Version: - ) Trojan Remover 6.9.0 (HKLM-x32\...\Trojan Remover_is1) (Version: 6.9.0 - Simply Super Software) TuneUp Utilities 2012 (HKLM-x32\...\TuneUp Utilities 2012) (Version: 12.0.2160.11 - TuneUp Software) TuneUp Utilities 2012 (x32 Version: 12.0.2160.11 - TuneUp Software) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.2160.11 - TuneUp Software) Hidden Überwachungstool für die Intel® Turbo-Boost-Technik (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.6 - Intel) Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft) VLC media player 1.1.9 (HKLM-x32\...\VLC media player) (Version: 1.1.9 - VideoLAN) waterMark V2 (HKLM-x32\...\waterMark V2) (Version: - ) Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM (01/19/2011 1.0.0009.0) (HKLM\...\4CA7CFBB29889F25ACB3DF6E3A42BAE29EB43B20) (Version: 01/19/2011 1.0.0009.0 - Western Digital Technologies) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM\...\FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D) (Version: 08/22/2008 7.0.0.0 - Nokia) WinRAR 4.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH) Yontoo 1.12.02 (HKLM\...\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}) (Version: 1.12.02 - Yontoo LLC) <==== ATTENTION ==================== Restore Points ========================= 06-03-2014 05:27:23 Windows Update 06-03-2014 05:30:29 Windows Update 07-03-2014 05:26:46 Windows Update ==================== Hosts content: ========================== Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-03-2014 01 Ran by Lars (administrator) on LARS-PC on 08-03-2014 22:00:57 Running from C:\Users\Lars\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Safe Mode (with Networking) The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\system32\taskmgr.exe (Farbar) C:\Users\Lars\Downloads\FRST64 (1).exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2247976 2010-07-15] (Synaptics Incorporated) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6539880 2010-11-09] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2181224 2010-11-03] (Realtek Semiconductor) HKLM\...\Run: [NVHotkey] - C:\Windows\system32\nvHotkey.dll [312936 2010-12-24] (NVIDIA Corporation) HKLM\...\Run: [IntelWireless] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation) HKLM\...\Run: [QuickSet] - c:\Program Files\Dell\QuickSet\QuickSet.exe [3206816 2010-08-04] (Dell Inc.) HKLM\...\Run: [FreeFallProtection] - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [727664 2010-09-24] () HKLM\...\Run: [IntelliPoint] - c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2399632 2011-04-13] (Microsoft Corporation) HKLM\...\Run: [AutoShutdownManager] - C:\Program Files (x86)\AutoShutdownManager\AutoShutdownManager.exe [2602728 2012-03-26] (EnviProt) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation) HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [487562 2010-08-20] (Creative Technology Ltd) HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1391272 2012-01-03] (Ask) HKLM-x32\...\Run: [PC Auto Shutdown] - C:\Program Files (x86)\PC Auto Shutdown\AutoShutdown.exe [1435912 2012-04-02] (GoldSolution Software, Inc.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [TrojanScanner] - C:\Program Files (x86)\Trojan Remover\Trjscan.exe [1704720 2014-01-23] (Simply Super Software) HKLM-x32\...\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] - "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [559616 2011-10-08] (Dell) HKLM-x32\...\RunOnce: [Launcher] - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe [165184 2011-08-01] (Softthinks) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-3322404370-2438604178-2610899639-1001\...\Run: [Steam] - C:\Program Files (x86)\Steam\steam.exe [1610664 2014-01-07] (Valve Corporation) HKU\S-1-5-21-3322404370-2438604178-2610899639-1001\...\MountPoints2: F - F:\LaunchU3.exe -a HKU\S-1-5-21-3322404370-2438604178-2610899639-1001\...\MountPoints2: {a3a97180-063d-11e1-a3e9-14feb5a95b67} - "E:\WD SmartWare.exe" autoplay=true AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2010-12-24] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [192616 2010-12-24] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=5af853a50000000000008ca982757c51 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8 HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=sm HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=5af853a50000000000008ca982757c51 URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) URLSearchHook: HKCU - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ) URLSearchHook: HKCU - ToolbarURLSearchHook Class - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Program Files (x86)\Solid YouTube Downloader and Converter DB Toolbar\tbhelper.dll () SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=5af853a50000000000008ca982757c51 SearchScopes: HKCU - ToolbarSearchProviderProgress {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=5af853a50000000000008ca982757c51 SearchScopes: HKCU - {3442F597-4E2E-41C3-B41E-E398F2F73FBD} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=kw&q={searchTerms}&locale=de_NL&apn_ptnrs=PV&apn_dtid=YYYYYYYYNL&apn_uid=5e3c9fae-a8a8-415b-96e5-162b9a3b2595&apn_sauid=027C0F96-B9A9-4E3B-8AA4-E413274BBDE0 SearchScopes: HKCU - {49606DC7-976D-4030-A74E-9FB5C842FA68} URL = SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=sm SearchScopes: HKCU - {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} URL = hxxp://www.bigseekpro.com/search/browser/solidyoutube/{00E23D03-0045-4ABC-A7AF-C5FB1455AA2D}?q={searchTerms} BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Browser Companion Helper - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files (x86)\BrowserCompanion\jsloader.dll ( ) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Browser Companion Helper Verifier - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files (x86)\BrowserCompanion\updatebhoWin32.dll ( ) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.10.0\bh\delta.dll (Delta-search.com) BHO-x32: Sopcast Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO-x32: SMTTB2009 Class - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\Solid YouTube Downloader and Converter DB Toolbar\tbcore3.dll () Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ) Toolbar: HKLM-x32 - Solid YouTube Downloader and Converter DB Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\Solid YouTube Downloader and Converter DB Toolbar\tbcore3.dll () Toolbar: HKLM-x32 - Sopcast Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.10.0\deltaTlbr.dll (Delta-search.com) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab Handler: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - No File Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) Handler-x32: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) Handler-x32: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Lars\AppData\Roaming\Mozilla\Firefox\Profiles\nj3993on.default FF user.js: detected! => C:\Users\Lars\AppData\Roaming\Mozilla\Firefox\Profiles\nj3993on.default\user.js FF NewTab: hxxp://www.delta-search.com/?affID=119776&babsrc=NT_ss&mntrId=5af853a50000000000008ca982757c51 FF SearchEngineOrder.1: Delta Search FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll () FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_37 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.) FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\Users\Lars\AppData\Roaming\Mozilla\Plugins\NpFv530.dll (1 mal 1 Software GmbH) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) FF Plugin ProgramFiles/Appdata: C:\Users\Lars\AppData\Roaming\mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH) FF SearchPlugin: C:\Users\Lars\AppData\Roaming\Mozilla\Firefox\Profiles\nj3993on.default\searchplugins\delta.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: BYTubeD - Bulk YouTube video Downloader - C:\Users\Lars\AppData\Roaming\Mozilla\Firefox\Profiles\nj3993on.default\Extensions\bytubed@cs213.cse.iitk.ac.in [2013-07-07] FF Extension: Delta Toolbar - C:\Users\Lars\AppData\Roaming\Mozilla\Firefox\Profiles\nj3993on.default\Extensions\ffxtlbr@delta.com [2013-02-09] FF Extension: Yontoo - C:\Users\Lars\AppData\Roaming\Mozilla\Firefox\Profiles\nj3993on.default\Extensions\plugin@yontoo.com.xpi [2013-02-21] FF Extension: Adblock Plus - C:\Users\Lars\AppData\Roaming\Mozilla\Firefox\Profiles\nj3993on.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-12-03] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-01-01] FF HKCU\...\Firefox\Extensions: [{58bd07eb-0ee0-4df0-8121-dc9b693373df}] - C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension Chrome: ======= CHR HomePage: hxxp://nl.ask.com/?l=dis&o=15003 CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.75\PepperFlash\pepflashplayer.dll No File CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\gcswf32.dll No File CHR Plugin: (Remoting Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\pdf.dll () CHR Plugin: ( "name": "",) - C:\Users\Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\chromeNPAPI.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) CHR Plugin: (Bing Bar) - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2282.0\npwinext.dll No File CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File CHR Extension: (Browser Companion Helper) - C:\Users\Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf [2012-08-10] CHR Extension: (Delta Toolbar) - C:\Users\Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde [2013-02-14] CHR Extension: (Yontoo) - C:\Users\Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc [2013-02-14] CHR Extension: (Google Wallet) - C:\Users\Lars\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21] CHR HKLM-x32\...\Chrome\Extension: [bodddioamolcibagionmmobehnbhiakf] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx [2012-07-01] CHR HKLM-x32\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonChrome.crx [2012-07-01] CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Lars\AppData\Roaming\Delta\delta.crx [2012-11-25] CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2012-11-25] CHR HKLM-x32\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files (x86)\Yontoo\YontooLayers.crx [2013-02-09] CHR HKLM-x32\...\Chrome\Extension: [pgafcinpmmpklohkojmllohdhomoefph] - C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx [2013-02-09] ==================== Services (Whitelisted) ================= S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG) S2 ASDM_Service; C:\Program Files (x86)\AutoShutdownManager\Services\AutoShutdownManager_Service.exe [57344 2012-03-26] (EnviProt) S3 ASDM_UpdateService; C:\Program Files (x86)\AutoShutdownManager\Services\ASDM_Helperservice.exe [32768 2012-03-26] (EnviProt) S4 ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [246584 2010-06-21] () S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] () S2 PCAutoShutdown_Service; C:\Program Files (x86)\PC Auto Shutdown\ShutdownService.exe [442136 2011-11-14] (GoldSolution Software, Inc.) S2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2012-11-30] () S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2123584 2011-12-14] (TuneUp Software) ==================== Drivers (Whitelisted) ==================== R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [19600 2012-08-21] (AVAST Software) S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG) S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG) S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-11-12] (DT Soft Ltd) S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2011-11-24] (TuneUp Software) S2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] () ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-08 21:58 - 2014-03-08 21:59 - 02156544 _____ (Farbar) C:\Users\Lars\Downloads\FRST64 (1).exe 2014-03-08 21:54 - 2014-03-08 22:01 - 00021788 _____ () C:\Users\Lars\Downloads\FRST.txt 2014-03-08 21:54 - 2014-03-08 21:54 - 00000000 ____D () C:\FRST 2014-03-08 21:53 - 2014-03-08 21:53 - 02156544 _____ (Farbar) C:\Users\Lars\Downloads\FRST64.exe 2014-03-08 21:51 - 2014-03-08 21:52 - 00000470 _____ () C:\Users\Lars\Downloads\defogger_disable.log 2014-03-08 21:51 - 2014-03-08 21:51 - 00050477 _____ () C:\Users\Lars\Downloads\Defogger.exe 2014-03-08 21:51 - 2014-03-08 21:51 - 00000000 _____ () C:\Users\Lars\defogger_reenable 2014-03-08 20:02 - 2014-03-08 20:02 - 00003112 _____ () C:\Windows\System32\Tasks\RDReminder 2014-03-08 00:02 - 2014-03-08 00:02 - 00000000 ____D () C:\Users\Lars\Documents\Simply Super Software 2014-03-08 00:02 - 2014-03-08 00:02 - 00000000 ____D () C:\ProgramData\Licenses 2014-03-08 00:01 - 2014-03-08 00:01 - 00000000 ____D () C:\ProgramData\Simply Super Software 2014-03-08 00:01 - 2014-03-08 00:01 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover 2014-03-07 23:54 - 2014-03-07 23:55 - 21407864 _____ (Simply Super Software ) C:\Users\Lars\Downloads\trjsetup690.exe 2014-03-07 06:30 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-03-07 06:30 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-03-07 06:29 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-07 06:29 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-03-07 06:29 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-07 06:29 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-03-07 06:29 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-07 06:29 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-07 06:29 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-07 06:29 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-03-07 06:29 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-03-07 06:28 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-07 06:28 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-07 06:28 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-07 06:28 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-03-07 06:28 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-07 06:28 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-03-07 06:28 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-03-07 06:28 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-03-07 06:28 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-07 06:28 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-07 06:28 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-07 06:28 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-03-07 06:28 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-07 06:28 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-07 06:28 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-03-07 06:28 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-03-07 06:28 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-03-07 06:28 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-03-07 06:28 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-03-07 06:28 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-07 06:28 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-07 06:28 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-07 06:28 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-07 06:28 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-03-07 06:28 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-07 06:28 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-07 06:28 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-07 06:28 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-03-07 06:28 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-07 06:28 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-03-06 06:36 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-03-06 06:32 - 2014-03-06 06:32 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-03-06 06:32 - 2014-03-06 06:32 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-03-06 06:32 - 2014-03-06 06:32 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-03-06 06:32 - 2014-03-06 06:32 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-03-06 06:32 - 2014-03-06 06:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-03-06 06:32 - 2014-03-06 06:32 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-03-06 06:32 - 2014-03-06 06:32 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-03-05 23:56 - 2014-03-06 00:00 - 104376088 _____ (Microsoft Corporation) C:\Users\Lars\Downloads\msert (2).exe 2014-03-05 23:53 - 2014-03-05 23:54 - 25165824 _____ () C:\Users\Lars\Downloads\msert (1).exe 2014-03-05 23:52 - 2014-03-05 23:52 - 06291456 _____ () C:\Users\Lars\Downloads\msert.exe 2014-03-04 20:23 - 2014-03-04 20:28 - 138607664 _____ () C:\Users\Lars\Downloads\avira_free_antivirus_de_14.0.3.350.exe 2014-03-04 18:24 - 2014-03-04 18:24 - 00262144 _____ () C:\Windows\Minidump\030414-23930-01.dmp 2014-03-04 18:00 - 2014-03-05 01:23 - 00000000 ____D () C:\Program Files (x86)\BlueStacks 2014-03-04 17:59 - 2014-03-04 18:29 - 00000000 ____D () C:\ProgramData\BlueStacksSetup 2014-03-04 17:59 - 2014-03-04 18:00 - 27735646 _____ () C:\Users\Lars\Downloads\se.feomedia.quizkampen.de.lite.apk 2014-03-04 17:59 - 2014-03-04 18:00 - 00000000 ____D () C:\ProgramData\BlueStacks 2014-03-01 13:39 - 2014-03-01 13:40 - 00000000 ____D () C:\Users\Lars\Downloads\2014 Mighty Oaks - Owls 2014-03-01 12:32 - 2014-03-08 21:51 - 00006264 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-01 12:30 - 2012-12-03 19:32 - 00000000 ____D () C:\Users\Lars\Downloads\Maxime Chattam - Alterra - Band 4 - Der Herr des Nebels 2014-02-28 09:52 - 2014-03-02 11:41 - 00000000 ____D () C:\Users\Lars\Downloads\2013 Jupiter Jones- Das Gegenteil Von Allem 2014-02-25 18:24 - 2014-02-25 18:25 - 00000000 ____D () C:\Users\Lars\Downloads\Broilers----Vanitas 2014-02-23 20:06 - 2014-02-23 20:17 - 00000000 ____D () C:\Users\Lars\Downloads\Maxime Chattam - Alterra - Der Krieg der Kinder 2014-02-22 14:00 - 2014-02-22 14:00 - 00000044 _____ () C:\Users\Lars\Downloads\Alemannia (3).m3u 2014-02-22 14:00 - 2014-02-22 14:00 - 00000044 _____ () C:\Users\Lars\Downloads\Alemannia (2).m3u 2014-02-22 14:00 - 2014-02-22 14:00 - 00000044 _____ () C:\Users\Lars\Downloads\Alemannia (1).m3u 2014-02-22 13:57 - 2014-02-22 13:57 - 00000044 _____ () C:\Users\Lars\Downloads\Alemannia.m3u 2014-02-20 22:02 - 2014-02-20 22:28 - 00000000 ____D () C:\Users\Lars\Downloads\Die_Drei_Fragezeichen-F167_Und_Das_Blaue_Biest-DE-2014-VOiCE 2014-02-20 21:34 - 2014-02-20 21:36 - 00000000 ____D () C:\Users\Lars\Downloads\2014 Die Drei Fragezeichen - Das Raetsel Der Sieben 2014-02-20 20:55 - 2014-02-20 21:03 - 00000000 ____D () C:\Users\Lars\Desktop\Reiseführer Wien und Prag 2014-02-18 19:01 - 2010-08-27 15:46 - 00000000 ____D () C:\Users\Lars\Downloads\Maxime Chattam - Alterra - Band 02 - Im Reich der Königin 2014-02-16 21:51 - 2014-02-16 21:54 - 00000000 ____D () C:\Users\Lars\Desktop\Inserate 2014-02-16 12:45 - 2014-02-16 12:45 - 00008981 _____ () C:\Users\Lars\Desktop\soundfiles alternative.odt 2014-02-15 21:50 - 2014-02-15 21:50 - 00279048 _____ () C:\Windows\Minidump\021514-36785-01.dmp 2014-02-15 20:50 - 2014-02-15 20:50 - 00000094 ____H () C:\Users\Lars\Desktop\.~lock.Saison.odt# 2014-02-15 18:20 - 2014-02-15 18:20 - 00001933 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-02-15 18:20 - 2014-02-15 18:20 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-02-12 17:42 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-02-12 17:42 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-02-12 17:42 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-02-12 17:42 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-12 17:42 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-12 17:42 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-02-12 17:42 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-02-12 17:42 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-02-12 17:42 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-12 17:42 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-12 17:42 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-12 17:42 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-12 17:42 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-12 17:42 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-12 17:42 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-12 17:42 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-12 17:42 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-12 17:42 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-02-12 17:42 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-02-12 17:42 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-02-12 17:42 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-02-12 17:42 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-02-12 17:42 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-02-12 17:42 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-02-12 17:42 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-02-12 17:42 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-02-12 17:42 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-02-12 17:42 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-10 20:34 - 2014-02-02 02:20 - 00000000 ____D () C:\Users\Lars\Downloads\2014 William Fitzsimmons - Lions 2014-02-09 13:43 - 2014-02-09 13:43 - 00017055 _____ () C:\Users\Lars\Desktop\Saison.odt 2014-02-08 11:56 - 2014-02-08 11:56 - 00020395 _____ () C:\Users\Lars\Downloads\Saison.zip ==================== One Month Modified Files and Folders ======= 2014-03-08 22:01 - 2014-03-08 21:54 - 00021788 _____ () C:\Users\Lars\Downloads\FRST.txt 2014-03-08 21:59 - 2014-03-08 21:58 - 02156544 _____ (Farbar) C:\Users\Lars\Downloads\FRST64 (1).exe 2014-03-08 21:54 - 2014-03-08 21:54 - 00000000 ____D () C:\FRST 2014-03-08 21:53 - 2014-03-08 21:53 - 02156544 _____ (Farbar) C:\Users\Lars\Downloads\FRST64.exe 2014-03-08 21:52 - 2014-03-08 21:51 - 00000470 _____ () C:\Users\Lars\Downloads\defogger_disable.log 2014-03-08 21:51 - 2014-03-08 21:51 - 00050477 _____ () C:\Users\Lars\Downloads\Defogger.exe 2014-03-08 21:51 - 2014-03-08 21:51 - 00000000 _____ () C:\Users\Lars\defogger_reenable 2014-03-08 21:51 - 2014-03-01 12:32 - 00006264 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-08 21:51 - 2011-05-04 13:12 - 00000000 ____D () C:\Users\Lars 2014-03-08 21:51 - 2009-07-14 18:58 - 01142692 _____ () C:\Windows\system32\perfh007.dat 2014-03-08 21:51 - 2009-07-14 18:58 - 00291216 _____ () C:\Windows\system32\perfc007.dat 2014-03-08 21:41 - 2012-07-25 23:37 - 00000000 ____D () C:\Program Files (x86)\AutoShutdownManager 2014-03-08 21:41 - 2011-05-04 13:15 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks 2014-03-08 21:41 - 2011-05-04 13:15 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks 2014-03-08 21:41 - 2011-04-27 05:05 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup 2014-03-08 21:40 - 2012-08-10 13:03 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-08 21:40 - 2012-02-09 14:04 - 00045912 _____ () C:\Windows\setupact.log 2014-03-08 21:40 - 2011-04-26 21:42 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-03-08 21:40 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-08 21:26 - 2012-08-10 13:03 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-08 21:26 - 2009-07-14 06:10 - 01258738 _____ () C:\Windows\WindowsUpdate.log 2014-03-08 21:17 - 2012-04-03 10:18 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-03-08 20:40 - 2012-11-30 18:54 - 00000290 _____ () C:\Windows\Tasks\DLL-files.com Fixer_UPDATES.job 2014-03-08 20:02 - 2014-03-08 20:02 - 00003112 _____ () C:\Windows\System32\Tasks\RDReminder 2014-03-08 19:30 - 2013-02-09 14:51 - 00000000 ____D () C:\Program Files (x86)\Yontoo 2014-03-08 16:07 - 2013-05-24 15:59 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask 2014-03-08 09:52 - 2009-07-14 05:45 - 00014240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-03-08 09:52 - 2009-07-14 05:45 - 00014240 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-03-08 09:47 - 2012-11-18 20:56 - 00000000 ____D () C:\Users\Lars\Desktop\Dokumente 2014-03-08 09:44 - 2012-02-22 17:09 - 00140354 _____ () C:\Windows\PFRO.log 2014-03-08 09:40 - 2011-12-10 14:35 - 00000000 ____D () C:\Program Files (x86)\TuneUp Utilities 2012 2014-03-08 02:59 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-03-08 00:02 - 2014-03-08 00:02 - 00000000 ____D () C:\Users\Lars\Documents\Simply Super Software 2014-03-08 00:02 - 2014-03-08 00:02 - 00000000 ____D () C:\ProgramData\Licenses 2014-03-08 00:01 - 2014-03-08 00:01 - 00000000 ____D () C:\ProgramData\Simply Super Software 2014-03-08 00:01 - 2014-03-08 00:01 - 00000000 ____D () C:\Program Files (x86)\Trojan Remover 2014-03-07 23:55 - 2014-03-07 23:54 - 21407864 _____ (Simply Super Software ) C:\Users\Lars\Downloads\trjsetup690.exe 2014-03-06 19:50 - 2012-07-08 15:16 - 00000000 ____D () C:\Users\Lars\Desktop\Neuer Ordner 2014-03-06 19:47 - 2013-07-07 15:44 - 00000000 ____D () C:\Program Files (x86)\FreeTime 2014-03-06 07:11 - 2011-05-05 23:01 - 00001427 _____ () C:\Users\Lars\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-03-06 07:07 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-03-06 06:36 - 2013-11-21 03:13 - 00160682 _____ () C:\Windows\IE11_main.log 2014-03-06 06:32 - 2014-03-06 06:32 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-03-06 06:32 - 2014-03-06 06:32 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-03-06 06:32 - 2014-03-06 06:32 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-03-06 06:32 - 2014-03-06 06:32 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-03-06 06:32 - 2014-03-06 06:32 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-03-06 06:32 - 2014-03-06 06:32 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-03-06 06:32 - 2014-03-06 06:32 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-03-06 06:32 - 2014-03-06 06:32 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-03-06 06:32 - 2014-03-06 06:32 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-03-06 00:00 - 2014-03-05 23:56 - 104376088 _____ (Microsoft Corporation) C:\Users\Lars\Downloads\msert (2).exe 2014-03-05 23:54 - 2014-03-05 23:53 - 25165824 _____ () C:\Users\Lars\Downloads\msert (1).exe 2014-03-05 23:52 - 2014-03-05 23:52 - 06291456 _____ () C:\Users\Lars\Downloads\msert.exe 2014-03-05 19:41 - 2011-04-27 05:07 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-03-05 19:41 - 2011-04-27 05:06 - 00000000 ____D () C:\ProgramData\Skype 2014-03-05 01:23 - 2014-03-04 18:00 - 00000000 ____D () C:\Program Files (x86)\BlueStacks 2014-03-05 01:23 - 2012-11-17 13:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-03-05 01:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-03-04 20:28 - 2014-03-04 20:23 - 138607664 _____ () C:\Users\Lars\Downloads\avira_free_antivirus_de_14.0.3.350.exe 2014-03-04 18:37 - 2011-06-05 15:21 - 05350912 ___SH () C:\Users\Lars\Desktop\Thumbs.db 2014-03-04 18:29 - 2014-03-04 17:59 - 00000000 ____D () C:\ProgramData\BlueStacksSetup 2014-03-04 18:24 - 2014-03-04 18:24 - 00262144 _____ () C:\Windows\Minidump\030414-23930-01.dmp 2014-03-04 18:24 - 2012-02-20 13:05 - 510418422 _____ () C:\Windows\MEMORY.DMP 2014-03-04 18:24 - 2011-06-10 16:07 - 00000000 ____D () C:\Windows\Minidump 2014-03-04 18:00 - 2014-03-04 17:59 - 27735646 _____ () C:\Users\Lars\Downloads\se.feomedia.quizkampen.de.lite.apk 2014-03-04 18:00 - 2014-03-04 17:59 - 00000000 ____D () C:\ProgramData\BlueStacks 2014-03-02 11:41 - 2014-02-28 09:52 - 00000000 ____D () C:\Users\Lars\Downloads\2013 Jupiter Jones- Das Gegenteil Von Allem 2014-03-01 13:41 - 2013-07-11 19:52 - 00177152 ___SH () C:\Users\Lars\Downloads\Thumbs.db 2014-03-01 13:40 - 2014-03-01 13:39 - 00000000 ____D () C:\Users\Lars\Downloads\2014 Mighty Oaks - Owls 2014-02-26 19:22 - 2012-11-30 18:54 - 00000274 _____ () C:\Windows\Tasks\DLL-files.com Fixer_MONTHLY.job 2014-02-25 18:25 - 2014-02-25 18:24 - 00000000 ____D () C:\Users\Lars\Downloads\Broilers----Vanitas 2014-02-23 20:17 - 2014-02-23 20:06 - 00000000 ____D () C:\Users\Lars\Downloads\Maxime Chattam - Alterra - Der Krieg der Kinder 2014-02-22 14:00 - 2014-02-22 14:00 - 00000044 _____ () C:\Users\Lars\Downloads\Alemannia (3).m3u 2014-02-22 14:00 - 2014-02-22 14:00 - 00000044 _____ () C:\Users\Lars\Downloads\Alemannia (2).m3u 2014-02-22 14:00 - 2014-02-22 14:00 - 00000044 _____ () C:\Users\Lars\Downloads\Alemannia (1).m3u 2014-02-22 13:57 - 2014-02-22 13:57 - 00000044 _____ () C:\Users\Lars\Downloads\Alemannia.m3u 2014-02-22 12:17 - 2012-04-03 10:18 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-22 12:17 - 2012-04-03 10:18 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-22 12:17 - 2011-05-13 09:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-21 17:16 - 2013-05-24 15:58 - 00000000 ____D () C:\Program Files\My Dell 2014-02-21 17:16 - 2011-05-06 09:00 - 00000000 ____D () C:\ProgramData\PCDr 2014-02-20 22:28 - 2014-02-20 22:02 - 00000000 ____D () C:\Users\Lars\Downloads\Die_Drei_Fragezeichen-F167_Und_Das_Blaue_Biest-DE-2014-VOiCE 2014-02-20 21:36 - 2014-02-20 21:34 - 00000000 ____D () C:\Users\Lars\Downloads\2014 Die Drei Fragezeichen - Das Raetsel Der Sieben 2014-02-20 21:03 - 2014-02-20 20:55 - 00000000 ____D () C:\Users\Lars\Desktop\Reiseführer Wien und Prag 2014-02-17 06:26 - 2013-08-11 02:21 - 00000000 ____D () C:\Windows\system32\MRT 2014-02-17 06:21 - 2011-05-15 09:29 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-02-16 21:54 - 2014-02-16 21:51 - 00000000 ____D () C:\Users\Lars\Desktop\Inserate 2014-02-16 12:45 - 2014-02-16 12:45 - 00008981 _____ () C:\Users\Lars\Desktop\soundfiles alternative.odt 2014-02-15 22:39 - 2012-10-17 20:50 - 00000000 ____D () C:\Windows\rescache 2014-02-15 21:50 - 2014-02-15 21:50 - 00279048 _____ () C:\Windows\Minidump\021514-36785-01.dmp 2014-02-15 21:21 - 2014-01-30 22:04 - 00015886 _____ () C:\Users\Lars\Desktop\southside 2014.odt 2014-02-15 20:50 - 2014-02-15 20:50 - 00000094 ____H () C:\Users\Lars\Desktop\.~lock.Saison.odt# 2014-02-15 18:20 - 2014-02-15 18:20 - 00001933 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-02-15 18:20 - 2014-02-15 18:20 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-02-15 18:19 - 2012-12-03 22:01 - 00000000 ____D () C:\Users\Lars\Desktop\Bilder 2014-02-15 11:14 - 2014-02-03 18:47 - 00000000 ____D () C:\Users\Lars\Desktop\Mündliche Abschlussprüfung 2014-02-13 00:21 - 2012-08-10 13:03 - 00004102 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-02-13 00:21 - 2012-08-10 13:03 - 00003850 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-02-09 20:59 - 2014-01-31 22:17 - 00013626 _____ () C:\Users\Lars\Desktop\Traningsplan.odt 2014-02-09 13:43 - 2014-02-09 13:43 - 00017055 _____ () C:\Users\Lars\Desktop\Saison.odt 2014-02-08 11:56 - 2014-02-08 11:56 - 00020395 _____ () C:\Users\Lars\Downloads\Saison.zip 2014-02-06 13:16 - 2014-03-07 06:28 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-06 12:30 - 2014-03-07 06:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-06 12:30 - 2014-03-07 06:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-02-06 12:12 - 2014-03-07 06:28 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-06 12:07 - 2014-03-07 06:28 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-06 12:06 - 2014-03-07 06:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-02-06 11:57 - 2014-03-07 06:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-06 11:56 - 2014-03-07 06:29 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-06 11:52 - 2014-03-07 06:29 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-06 11:49 - 2014-03-07 06:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-02-06 11:48 - 2014-03-07 06:28 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-02-06 11:48 - 2014-03-07 06:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-02-06 11:38 - 2014-03-07 06:28 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-06 11:32 - 2014-03-07 06:29 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-06 11:20 - 2014-03-07 06:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-06 11:17 - 2014-03-07 06:29 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-06 11:11 - 2014-03-07 06:28 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-06 11:01 - 2014-03-07 06:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-06 11:00 - 2014-03-07 06:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-02-06 10:57 - 2014-03-07 06:28 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-06 10:57 - 2014-03-07 06:28 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-06 10:52 - 2014-03-07 06:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-06 10:52 - 2014-03-07 06:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-06 10:50 - 2014-03-07 06:28 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-02-06 10:49 - 2014-03-07 06:29 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-06 10:47 - 2014-03-07 06:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-02-06 10:46 - 2014-03-07 06:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-02-06 10:25 - 2014-03-07 06:29 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-06 10:25 - 2014-03-07 06:28 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-06 10:24 - 2014-03-07 06:28 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-06 10:22 - 2014-03-07 06:28 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-06 10:13 - 2014-03-07 06:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-06 10:09 - 2014-03-07 06:28 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-02-06 10:03 - 2014-03-07 06:28 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-06 09:55 - 2014-03-07 06:28 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-06 09:41 - 2014-03-07 06:28 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-06 09:40 - 2014-03-07 06:28 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-02-06 09:36 - 2014-03-07 06:28 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-06 09:34 - 2014-03-07 06:28 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll Some content of TEMP: ==================== C:\Users\Lars\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-02 15:55 ==================== End Of Log ============================ AntiVir: Exportierte Ereignisse: 04.03.2014 19:00 [Echtzeit-Scanner] Malware gefunden In der Datei 'C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe' wurde ein Virus oder unerwünschtes Programm 'ADSPY/AdSpy.Gen2' [adware] gefunden. Ausgeführte Aktion: Zugriff verweigern 04.03.2014 18:32 [Echtzeit-Scanner] Malware gefunden In der Datei 'C:\Program Files (x86)\Intel Corporation\Intel Wireless Display\WiDiApp.exe' wurde ein Virus oder unerwünschtes Programm 'TR/Crypt.ZPACK.Gen7' [trojan] gefunden. Ausgeführte Aktion: Zugriff verweigern |
hi,  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Bitte alle Tools im normalen Modus laufen lassen. Scan mit Combofix
|
[CODE] Additional scan result of Farbar Recovery Scan Tool (x64) Version: 08-03-2014 01 Ran by Lars at 2014-03-08 22:01:37 Running from C:\Users\Lars\Downloads Boot Mode: Safe Mode (with Networking) ========================================================== ==================== Security Center ======================== AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== AccelerometerP11 (HKLM-x32\...\{87434D51-51DB-4109-B68F-A829ECDCF380}) (Version: 2.00.11.15 - STMicroelectronics) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated) Adobe Photoshop Elements 7.0 (HKLM-x32\...\Adobe Photoshop Elements 7) (Version: 7.0 - Adobe Systems Incorporated) Adobe Photoshop Elements 7.0 (x32 Version: 7.0.0.3 - Adobe Systems Incorporated) Hidden Adobe Photoshop Lightroom 4.4 64-bit (HKLM\...\{11A955CD-4398-405A-886D-E464C3618FBF}) (Version: 4.4.1 - Adobe) Adobe Premiere Elements 7.0 (HKLM-x32\...\PremElem70) (Version: 7.0 - Adobe Systems Incorporated) Adobe Premiere Elements 7.0 (x32 Version: 7.0 - Adobe Systems Incorporated) Hidden Adobe Premiere Elements 7.0 Templates (HKLM-x32\...\PremElem70Templates) (Version: 7.0.0 - Adobe Systems Incorporated) Adobe Premiere Elements 7.0 Templates (x32 Version: 7.0.0 - Adobe Systems Incorporated) Hidden Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated) Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd) Anno 1701 (HKLM-x32\...\{A2433A63-5F5D-40E5-B529-9123C2B3E734}) (Version: 1.02 - Sunflowers) Ask Toolbar (HKLM-x32\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.14.1.0 - Ask.com) <==== ATTENTION Assassin's Creed III 1.01 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.01 - Ubisoft) AutoShutdownManager (HKLM-x32\...\{361CE298-8B86-4049-915C-4A28E2577CE0}) (Version: 4 - EnviProt - www.EnviProt.com) Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira) BrowserCompanion (HKLM-x32\...\BrowserCompanion) (Version: - ) <==== ATTENTION Canon MG5300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5300_series) (Version: - ) Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve) Counter-Strike: Source Beta (HKLM-x32\...\Steam App 260) (Version: - ) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.45.1.0236 - DT Soft Ltd) Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.60 - Dell) Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.60 - Dell) Dell DataSafe Online (HKLM-x32\...\{7EC66A95-AC2D-4127-940B-0445A526AB2F}) (Version: 2.1.19634 - Dell) Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc) Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.) Dell MusicStage (HKLM-x32\...\{17407164-F2AD-4E04-886B-8060D503F21C}) (Version: 1.4.162.0 - Fingertapps) Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.30 - ArcSoft) Dell Stage (HKLM-x32\...\{AB1723E2-05BC-49C1-86AB-409764C0E608}) (Version: 1.4.173.0 - Fingertapps) Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.1.1.1408 - CyberLink Corp.) Dell VideoStage (x32 Version: 1.1.1.1408 - CyberLink Corp.) Hidden Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.35 - Creative Technology Ltd) Delta Chrome Toolbar (HKLM-x32\...\{177586E7-E42E-4F38-83D1-D15B4AF5B714}) (Version: 1.0.0.0 - DeltaInstaller) <==== ATTENTION Delta toolbar (HKLM-x32\...\delta) (Version: 1.8.10.0 - Delta) <==== ATTENTION DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden Dll-Files.com Fixer (HKLM-x32\...\Dll-Files.com Fixer_is1) (Version: 1.0 - Dll-Files.com) Dream Video Converter Ultimate 4.3.8 (HKLM-x32\...\{66712EEE-ECBC-4CA6-solid-mp4-video-converter-converter}_is1) (Version: - TopVideoSoft,Inc.) Flatcast Viewer Plugin 5.3.0.784 (HKLM-x32\...\Flatcast Viewer 5.3_is1) (Version: - 1 mal 1 Software GmbH) Flitzer 1.02 (HKLM-x32\...\{D6A859C6-CC3A-40BB-B031-906114E36F61}_is1) (Version: Flitzer 1.02 - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden HDVidCodec (HKLM-x32\...\1ClickDownload) (Version: 2.1 Build 26473 - hdvidcodec.com) <==== ATTENTION ICQ Toolbar (HKLM-x32\...\ICQToolbar) (Version: 3.0.0 - ICQ) ICQ7.6 (HKLM-x32\...\{7644E42D-B096-457F-8B5B-901238FC81AE}) (Version: 7.6 - ICQ) Intel PROSet Wireless (Version: - ) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2189 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{D16A2127-B927-4379-B153-3DEC091E4EEB}) (Version: 13.02.1000 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation) Intel(R) Wireless Display (HKLM\...\{C298FF86-AB23-4B58-AC53-A23383C07B3A}) (Version: 1.2.20.0 - Intel Corporation) Java Auto Updater (x32 Version: 2.0.7.2 - Sun Microsystems, Inc.) Hidden Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022F0}) (Version: 6.0.220 - Oracle) Java(TM) 6 Update 24 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416024FF}) (Version: 6.0.240 - Oracle) Java(TM) 6 Update 37 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216037FF}) (Version: 6.0.370 - Oracle) Java(TM) 7 Update 5 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417005FF}) (Version: 7.0.50 - Oracle) JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.52.4 - JMicron Technology Corp.) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft IntelliPoint 8.1 (HKLM\...\Microsoft IntelliPoint 8.1) (Version: 8.15.406.0 - Microsoft) Microsoft IntelliPoint 8.1 (Version: 8.15.406.0 - Microsoft) Hidden Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 17.0.2003.1112 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}) (Version: 8.0.58299 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden Moorhuhn Remake (HKLM-x32\...\{52210D57-0B1F-4681-90DD-8659DF4BCC40}) (Version: 1.00.0000 - ) Mozilla Firefox 26.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 26.0 (x86 de)) (Version: 26.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla) MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.) Nokia Connectivity Cable Driver (HKLM-x32\...\{4AA68A73-DB9C-439D-9481-981C82BD008B}) (Version: 7.1.69.0 - Nokia) NVIDIA 3D Vision Treiber 266.39 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 266.39 - NVIDIA Corporation) NVIDIA Grafiktreiber 266.39 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 266.39 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.265.39.0 - NVIDIA Corporation) Hidden NVIDIA Optimus 1.0.11 (Version: 1.0.11 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6639 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 266.39 (Version: 266.39 - NVIDIA Corporation) Hidden NVIDIA Update Components (Version: 1.0.11 - NVIDIA Corporation) Hidden OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org) PC Auto Shutdown 5.1 (HKLM-x32\...\PC Auto Shutdown_is1) (Version: 5.1 - GoldSolution Software, Inc.) PC Connectivity Solution (HKLM-x32\...\{A2AA4204-C05A-4013-888A-AD153139297F}) (Version: 11.5.29.0 - Nokia) PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.8 - Google, Inc.) PokerStars (HKLM-x32\...\PokerStars) (Version: - PokerStars) Pro Evolution Soccer 2012 DEMO (HKLM-x32\...\{6844E55F-37A1-42BC-B316-326B48C49ADC}) (Version: 1.00.0000 - KONAMI) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.8.5 - Dell Inc.) RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6240 - Realtek Semiconductor Corp.) Re-Volt Demo (HKLM-x32\...\Re-Volt Demo) (Version: - ) Roxio Activation Module (x32 Version: 1.0 - Roxio) Hidden Roxio BackOnTrack (x32 Version: 1.3.3 - Roxio) Hidden Roxio Burn (x32 Version: 1.8 - Roxio) Hidden Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio) Roxio Creator Starter (x32 Version: 1.0.439 - Roxio) Hidden Roxio Creator Starter (x32 Version: 5.0.0 - Roxio) Hidden Roxio Express Labeler 3 (x32 Version: 3.2.2 - Roxio) Hidden Roxio File Backup (Version: 1.3.2 - Roxio) Hidden SES Driver (HKLM\...\{D8CC254C-C671-4664-9A38-FA368D1E2C97}) (Version: 1.0.0 - Western Digital) Skype Toolbars (HKLM-x32\...\{981029E0-7FC9-4CF3-AB39-6F133621921A}) (Version: 1.0.4051 - Skype Technologies S.A.) Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) SmartSound Quicktracks for Premiere Elements (HKLM-x32\...\InstallShield_{F6234880-85BE-4DCB-8A45-1FF85A1A8552}) (Version: 3.11.3090 - SmartSound Software Inc) SmartSound Quicktracks for Premiere Elements (x32 Version: 3.11.3090 - SmartSound Software Inc) Hidden Solid YouTube Downloader and Converter DB Toolbar (HKLM-x32\...\Solid YouTube Downloader and Converter DB Toolbar) (Version: - ) Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden Sopcast Ask Toolbar Updater (HKCU\...\{79A765E1-C399-405B-85AF-466F52E918B0}) (Version: 1.2.0.20007 - Ask.com) <==== ATTENTION Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) SUPER © v2011.build.49 (July 1st, 2011) Version v2011.build.49 (HKLM-x32\...\{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1) (Version: v2011.build.49 - eRightSoft) Swiss Casino (HKCU\...\Swiss Casino) (Version: - ) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.1.4.0 - Synaptics Incorporated) Tipard MPEG TS Converter 6.1.22 (HKLM-x32\...\{FE6790DD-5A25-41d9-9059-0A8B33076E65}_is1) (Version: - ) Trojan Remover 6.9.0 (HKLM-x32\...\Trojan Remover_is1) (Version: 6.9.0 - Simply Super Software) TuneUp Utilities 2012 (HKLM-x32\...\TuneUp Utilities 2012) (Version: 12.0.2160.11 - TuneUp Software) TuneUp Utilities 2012 (x32 Version: 12.0.2160.11 - TuneUp Software) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.2160.11 - TuneUp Software) Hidden Überwachungstool für die Intel® Turbo-Boost-Technik (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.6 - Intel) Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft) VLC media player 1.1.9 (HKLM-x32\...\VLC media player) (Version: 1.1.9 - VideoLAN) waterMark V2 (HKLM-x32\...\waterMark V2) (Version: - ) Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM (01/19/2011 1.0.0009.0) (HKLM\...\4CA7CFBB29889F25ACB3DF6E3A42BAE29EB43B20) (Version: 01/19/2011 1.0.0009.0 - Western Digital Technologies) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (HKLM\...\FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D) (Version: 08/22/2008 7.0.0.0 - Nokia) WinRAR 4.00 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.00.0 - win.rar GmbH) Yontoo 1.12.02 (HKLM\...\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}) (Version: 1.12.02 - Yontoo LLC) <==== ATTENTION ==================== Restore Points ========================= 06-03-2014 05:27:23 Windows Update 06-03-2014 05:30:29 Windows Update 07-03-2014 05:26:46 Windows Update ==================== Hosts content: ========================== FRST Logfile: FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-03-2014 01--- --- --- Ok dann lad ich das mal herunter und versuch mich. Zum Thema Neustart habe ich noch ein anderes Problem denn immer wenn ich neustarte kommt die Info "Operating System not found".. wenn ich den laptop danach neu anmache ist das aber kein Problem :confused: So habe alles im Abgesicherten Modus mit Netzwerktreibern gemacht. Combofix Logfile: Code: ComboFix 14-03-05.01 - Lars 09.03.2014 9:12.1.4 - x64 NETWORKFehlermeldungen kamen keine ;) Was muss ich als nächstes tun ? Im Vorraus schon mal vielen Dank für die Hilfe! |
Bitte wenn möglich im normalen Modus arbeiten. Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte. |
Vielen Dank für die schnelle Antwort Schrauber ;) Ich versuche morgen abend nach der arbeit alles mal im normalen modus denke aber das es nicht funktioniert. Bzgl. Neustart habe ich noch eine Frage: wie gesagt immer wenn ich neustart mache kommt "operating system not found" --> wenn ich den PC herunterfahre und dann wieder an mache hat das aber genau den gleichen effekt oder ? (Insbesondere bei der Durchführung mit AdwCleaner!) Das FRST mache ich nochmal mit welchem der bisher genutzten files ? :balla: :D Vielen Dank |
Mit dem PRogramm FRST. genau, ob jezt ein oder zwei Reboots ist wurscht. Danach müsen wir MBR und BCD checken, wegen der Meldung Operating System not found. Und sicher auf alle Fälle mal deine DAten, könnte auch sein dass sich die HDD verabschiedet. |
Logdatei Malwarebytes Anti-Malware: Code: Malwarebytes Anti-Malware (Test) 1.75.0.1300AdwCleaner Logfile: Code: # AdwCleaner v3.021 - Bericht erstellt am 11/03/2014 um 18:54:18JRT: Code: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
Neues FRST: FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2014Alles im normalen Modus - Was soll ich als nächstes machen ? |
ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? :) |
ESET Log: Code: ESETSmartInstaller@High as downloader log:Den Rest mache ich heute abend. Wenn ich das richtig verstanden habe hat esset was gefunden aber die sachen nicht behoben ? Kurzer Zwischenstand PC läuft wieder recht flüssig :) Habe aber eben mehrfach diese Fehlermeldung bekommen: Expection EEternalExpection in module libcef.ddl at 002ADD60. Externe Expection 80000003 Was ist das ist im gleichen Moment 6mal aufgegangen ? |
Wann genau? Hattest Du ein Programm offen? |
Offen waren windows media player und google chrome ;) Bei Secruity System kommt leider nur: "UNSUPPORTED OPERATING SYSTEM! ABORTED!" Was nun? |
Ok, poste mal noch das frische FRST log. Security Check kannste ignorieren, das zickt manchmal. |
ok ich lass frst grad mal durchlaufen ;) FRST Logfile: Code: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2014Und wie schauts aus ? Kannst du mir sicher sagen ob der virus weg ist ? Nutze nämlich normalerweise online banking und so am Rechner da würde ich gerne sicher sein :D |
Ja, diese beiden Funde waren alles Fehlmeldungen. Fertig :) Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann. |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 23:08 Uhr. |
Copyright ©2000-2025, Trojaner-Board
