Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   USB-Sticks kann Dateien und Ordner nur noch als Verknüpfungen abspeichern (https://www.trojaner-board.de/154012-usb-sticks-dateien-ordner-nur-noch-verknuepfungen-abspeichern.html)

danieelchen 17.05.2014 20:10
USB-Sticks kann Dateien und Ordner nur noch als Verknüpfungen abspeichern
 
Hallo,

ich habe diese Woche meinen USB-Stick an einem PC in der Studia angeschlossen und seit dem Tag zeigt der USB-Stick alle Dateien und Ordner nur noch als Verknüpfungen an. Unter Rechtsklick: Eigenschaften wird unter "Größe" die tatsächliche Größe der Datei, und unter "Größe auf dem Datenträger" immer nur 4kb angezeigt.
Wenn ich die Ordner öffne, werden die Unterordner und Dateien "normal" angezeigt und lassen sich auch öffnen. Dateien (.doc, .ppt, openoffice), die direkt auf dem USB (nicht in einem Unterordner) gespeichert sind, lassen sich zwar öffnen, aber nicht mehr weiter bearbeiten.
Wenn ich den Dateipfad öffnen will, wird bei jeder Datei/jedem Ordner als Dateipfad: Computer/Lokaler Datenträger (C:)/Windows/system32 und darunter eine Datei mit Namen cmd (eine Anwendung) angezeigt.

Ich habe die Dateien in den Ordnern auf meinen Desktop kopiert und den USB-Stick formatiert. Bei neuerlichem Versuch, Dateien auf dem USB abzuspeichern, hat es sie weiterhin nur als Verknüpfungen angezeigt.

Ich habe mir die Malwarebytes Anti-Malware runtergeladen und die Dateien, die er mir als schädlich angezeigt hat, gelöscht bzw. deinstalliert (ich hoffe, das war nicht zu voreilig). Beim letzten Durchlauf hat er nichts mehr gefunden. Ich habe dann den Avira-Scan laufen lassen, der hat ein paar Trojaner gefunden. Das Speichern auf dem USB-Stick funktioniert nach wie vor nicht...
Anbei habe ich die Reports hochgeladen.

Ich wäre über Hilfe bei dem Problem sehr dankbar, selber kenne ich mich leider zu wenig aus!!..

schrauber 17.05.2014 20:11
Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307



Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


danieelchen 17.05.2014 20:26
Ok, danke für den Hinweis!
Das ist das Ergebnis vom Avira-Scan:



Code:

Avira Free Antivirus
Erstellungsdatum der Reportdatei: Samstag, 17. Mai 2014  18:57


Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer  : Avira Antivirus Free
Seriennummer  : 0000149996-AVHOE-0000001
Plattform      : Windows 7 Professional
Windowsversion : (Service Pack 1)  [6.1.7601]
Boot Modus    : Normal gebootet
Benutzername  : SYSTEM
Computername  : DANIELA-PC

Versionsinformationen:
BUILD.DAT      : 14.0.3.350    56624 Bytes  25.02.2014 11:41:00
AVSCAN.EXE    : 14.0.3.332  1058384 Bytes  22.02.2014 16:03:12
AVSCANRC.DLL  : 14.0.2.180    62008 Bytes  16.01.2014 19:03:57
LUKE.DLL      : 14.0.3.336    65616 Bytes  22.02.2014 16:03:13
AVSCPLR.DLL    : 14.0.3.336    124496 Bytes  22.02.2014 16:03:12
AVREG.DLL      : 14.0.3.336    250448 Bytes  22.02.2014 16:03:12
avlode.dll    : 14.0.3.336    544848 Bytes  22.02.2014 16:03:12
avlode.rdf    : 14.0.4.22      64276 Bytes  17.05.2014 10:39:18
VBASE000.VDF  : 7.11.70.0  66736640 Bytes  04.04.2013 15:27:11
VBASE001.VDF  : 7.11.74.226  2201600 Bytes  30.04.2013 15:27:20
VBASE002.VDF  : 7.11.80.60  2751488 Bytes  28.05.2013 15:27:27
VBASE003.VDF  : 7.11.85.214  2162688 Bytes  21.06.2013 15:27:33
VBASE004.VDF  : 7.11.91.176  3903488 Bytes  23.07.2013 15:27:43
VBASE005.VDF  : 7.11.98.186  6822912 Bytes  29.08.2013 15:56:21
VBASE006.VDF  : 7.11.139.38 15708672 Bytes  27.03.2014 14:26:46
VBASE007.VDF  : 7.11.145.136  2117120 Bytes  28.04.2014 20:12:15
VBASE008.VDF  : 7.11.145.137    2048 Bytes  28.04.2014 20:12:15
VBASE009.VDF  : 7.11.145.138    2048 Bytes  28.04.2014 20:12:15
VBASE010.VDF  : 7.11.145.139    2048 Bytes  28.04.2014 20:12:15
VBASE011.VDF  : 7.11.145.140    2048 Bytes  28.04.2014 20:12:15
VBASE012.VDF  : 7.11.145.141    2048 Bytes  28.04.2014 20:12:16
VBASE013.VDF  : 7.11.146.20  166912 Bytes  29.04.2014 20:12:16
VBASE014.VDF  : 7.11.146.131  194048 Bytes  01.05.2014 13:00:28
VBASE015.VDF  : 7.11.146.243  167936 Bytes  03.05.2014 19:00:29
VBASE016.VDF  : 7.11.147.97  122368 Bytes  05.05.2014 18:57:03
VBASE017.VDF  : 7.11.147.207  169472 Bytes  06.05.2014 18:58:56
VBASE018.VDF  : 7.11.148.61  174080 Bytes  08.05.2014 08:40:03
VBASE019.VDF  : 7.11.148.149  257024 Bytes  09.05.2014 18:20:23
VBASE020.VDF  : 7.11.148.241  135168 Bytes  12.05.2014 10:39:20
VBASE021.VDF  : 7.11.149.61  139264 Bytes  13.05.2014 10:39:22
VBASE022.VDF  : 7.11.149.169  160256 Bytes  15.05.2014 10:39:25
VBASE023.VDF  : 7.11.150.31  189440 Bytes  17.05.2014 10:39:27
VBASE024.VDF  : 7.11.150.32    2048 Bytes  17.05.2014 10:39:28
VBASE025.VDF  : 7.11.150.33    2048 Bytes  17.05.2014 10:39:28
VBASE026.VDF  : 7.11.150.34    2048 Bytes  17.05.2014 10:39:28
VBASE027.VDF  : 7.11.150.35    2048 Bytes  17.05.2014 10:39:28
VBASE028.VDF  : 7.11.150.36    2048 Bytes  17.05.2014 10:39:28
VBASE029.VDF  : 7.11.150.37    2048 Bytes  17.05.2014 10:39:28
VBASE030.VDF  : 7.11.150.38    2048 Bytes  17.05.2014 10:39:28
VBASE031.VDF  : 7.11.150.60  131072 Bytes  17.05.2014 16:38:48
Engineversion  : 8.3.18.22
AEVDF.DLL      : 8.3.0.4      118976 Bytes  22.03.2014 16:23:16
AESCRIPT.DLL  : 8.1.4.204    528584 Bytes  17.05.2014 10:39:17
AESCN.DLL      : 8.3.0.2      135360 Bytes  22.03.2014 16:23:15
AESBX.DLL      : 8.2.20.24    1409224 Bytes  09.05.2014 08:40:00
AERDL.DLL      : 8.2.0.138    704888 Bytes  16.12.2013 10:04:01
AEPACK.DLL    : 8.4.0.24      778440 Bytes  17.05.2014 10:39:14
AEOFFICE.DLL  : 8.3.0.4      205000 Bytes  17.04.2014 13:56:43
AEHEUR.DLL    : 8.1.4.1066  6705352 Bytes  17.05.2014 10:39:10
AEHELP.DLL    : 8.3.0.0      274808 Bytes  14.03.2014 14:00:30
AEGEN.DLL      : 8.1.7.26      450752 Bytes  17.04.2014 13:56:42
AEEXP.DLL      : 8.4.1.312    569544 Bytes  30.04.2014 16:00:07
AEEMU.DLL      : 8.1.3.2      393587 Bytes  24.07.2013 15:27:52
AECORE.DLL    : 8.3.0.6      241864 Bytes  22.03.2014 16:19:26
AEBB.DLL      : 8.1.1.4        53619 Bytes  24.07.2013 15:27:51
AVWINLL.DLL    : 14.0.3.252    23608 Bytes  22.02.2014 16:03:12
AVPREF.DLL    : 14.0.3.252    48696 Bytes  22.02.2014 16:03:12
AVREP.DLL      : 14.0.3.252    175672 Bytes  22.02.2014 16:03:12
AVARKT.DLL    : 14.0.3.336    256080 Bytes  22.02.2014 16:03:12
AVEVTLOG.DLL  : 14.0.3.336    165968 Bytes  22.02.2014 16:03:12
SQLITE3.DLL    : 3.7.0.1      394824 Bytes  24.07.2013 15:30:40
AVSMTP.DLL    : 14.0.3.252    60472 Bytes  22.02.2014 16:03:12
NETNT.DLL      : 14.0.3.252    13368 Bytes  22.02.2014 16:03:13
RCIMAGE.DLL    : 14.0.3.260  4979256 Bytes  22.02.2014 16:03:12
RCTEXT.DLL    : 14.0.3.282    72760 Bytes  22.02.2014 16:03:12

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: c:\program files (x86)\avira\antivir desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Samstag, 17. Mai 2014  18:57

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:)'
    [INFO]      Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '52' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'atiesrxx.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '109' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '58' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '149' Modul(e) wurden durchsucht
Durchsuche Prozess 'atieclxx.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '76' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '77' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'armsvc.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'ANIWConnService.exe' - '25' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '110' Modul(e) wurden durchsucht
Durchsuche Prozess 'FreemakeUtilsService.exe' - '91' Modul(e) wurden durchsucht
Durchsuche Prozess 'nutsrv4.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'portmap.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '32' Modul(e) wurden durchsucht
Durchsuche Prozess 'WTGService.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '69' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '221' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmiprvse.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'GUI.exe' - '95' Modul(e) wurden durchsucht
Durchsuche Prozess 'RAVCpl64.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess 'sidebar.exe' - '95' Modul(e) wurden durchsucht
Durchsuche Prozess 'wscript.exe' - '84' Modul(e) wurden durchsucht
Durchsuche Prozess '3DataManager_Launcher.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dropbox.exe' - '111' Modul(e) wurden durchsucht
Durchsuche Prozess 'WZCSLDR2.exe' - '49' Modul(e) wurden durchsucht
Durchsuche Prozess 'soffice.exe' - '24' Modul(e) wurden durchsucht
Durchsuche Prozess 'AirGCFG.exe' - '45' Modul(e) wurden durchsucht
Durchsuche Prozess 'soffice.bin' - '183' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '96' Modul(e) wurden durchsucht
Durchsuche Prozess 'MOM.exe' - '71' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '61' Modul(e) wurden durchsucht
Durchsuche Prozess 'CCC.exe' - '207' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskmgr.exe' - '46' Modul(e) wurden durchsucht
Durchsuche Prozess '3DataManager.exe' - '132' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '44' Modul(e) wurden durchsucht
Durchsuche Prozess 'WUDFHost.exe' - '36' Modul(e) wurden durchsucht
Durchsuche Prozess 'vlc.exe' - '335' Modul(e) wurden durchsucht
Durchsuche Prozess 'PresentationFontCache.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'firefox.exe' - '164' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'FABS.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '127' Modul(e) wurden durchsucht
Durchsuche Prozess 'plugin-container.exe' - '82' Modul(e) wurden durchsucht
Durchsuche Prozess 'FlashPlayerPlugin_13_0_0_214.exe' - '54' Modul(e) wurden durchsucht
Durchsuche Prozess 'FlashPlayerPlugin_13_0_0_214.exe' - '67' Modul(e) wurden durchsucht
Durchsuche Prozess 'splwow64.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'prevhost.exe' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'prevhost.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '126' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '28' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '29' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '27' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '26' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '63' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '16' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '3028' Dateien ).


Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\'
    [0] Archivtyp: RSRC
    --> C:\Users\Daniela\AppData\Roaming\Dropbox\bin\Dropbox.exe
        [1] Archivtyp: RSRC
      --> C:\Users\Daniela\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DW1RBN31\pack[1].7z
          [2] Archivtyp: 7-Zip
        --> bprotect.exe
            [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen
            [WARNUNG]  Infizierte Dateien in Archiven können nicht repariert werden
        --> x64injector.exe
            [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen2
            [WARNUNG]  Infizierte Dateien in Archiven können nicht repariert werden
        --> loader.dll
            [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen
            [WARNUNG]  Infizierte Dateien in Archiven können nicht repariert werden
        --> protector.dll
            [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen
            [WARNUNG]  Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\Daniela\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DW1RBN31\pack[1].7z
  [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen

Beginne mit der Desinfektion:
C:\Users\Daniela\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DW1RBN31\pack[1].7z
  [FUND]      Ist das Trojanische Pferd TR/BProtector.Gen
  [HINWEIS]  Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5b710ae3.qua' verschoben!


Ende des Suchlaufs: Samstag, 17. Mai 2014  20:29
Benötigte Zeit:  1:31:24 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

  34946 Verzeichnisse wurden überprüft
 1102863 Dateien wurden geprüft
      5 Viren bzw. unerwünschte Programme wurden gefunden
      0 Dateien wurden als verdächtig eingestuft
      0 Dateien wurden gelöscht
      0 Viren bzw. unerwünschte Programme wurden repariert
      1 Dateien wurden in die Quarantäne verschoben
      0 Dateien wurden umbenannt
      0 Dateien konnten nicht durchsucht werden
 1102858 Dateien ohne Befall
  8514 Archive wurden durchsucht
      4 Warnungen
      1 Hinweise
 863138 Objekte wurden beim Rootkitscan durchsucht
      0 Versteckte Objekte wurden gefunden

Das ist das Ergebnis vom FRST:


FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Daniela (administrator) on DANIELA-PC on 17-05-2014 21:23:13
Running from C:\Users\Daniela\Documents\Desktop\Sicherheit
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Windows\SysWOW64\ANIWConnService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(MKS Software Inc.) C:\Windows\System32\nutsrv4.exe
(PTC) C:\Program Files\PTC\PTC Portmapper\i486_nt\obj\portmap.exe
() C:\Program Files (x86)\3DataManager\WTGService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
() C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe
(Dropbox, Inc.) C:\Users\Daniela\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Wireless Service) C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe
(D-Link Corp.) C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(WebToGo Mobile Internet GmbH) C:\Program Files (x86)\3DataManager\3DataManager.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
() C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor)
HKLM-x32\...\Run: [ANIWZCS2Service] => C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe [98304 2009-08-21] (Wireless Service)
HKLM-x32\...\Run: [D-Link D-Link Wireless G DWL-G122_DWA-110] => C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe [1708032 2009-09-18] (D-Link Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-06-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NuTCSetupEnviron] => C:\Program Files\PTC\MKS Toolkit\bin\ncoeenv.exe [37160 2009-11-23] (MKS Software Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\RunOnce: [EasyTuneVI] - C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe [20480 2007-07-26] ()
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Daniela\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [mmrrqkqpas] => wscript.exe //B "C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs" <===== ATTENTION
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {4cb14140-802e-11e2-8594-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {4cb1415b-802e-11e2-8594-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {5e6e520d-9e34-11e2-86fa-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {7b76f3d8-813f-11e2-955f-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {9e2c28b9-b32a-11e2-b66f-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {bce19f56-77f4-11e2-9e92-50e5495b3e25} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {bce19f64-77f4-11e2-9e92-50e5495b3e25} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {bd3d3106-7ee7-11e3-a157-806e6f6e6963} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {d40a0837-bef5-11e2-98c0-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Daniela\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [mmrrqkqpas] => wscript.exe //B "C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs" <===== ATTENTION
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {4cb14140-802e-11e2-8594-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {4cb1415b-802e-11e2-8594-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {5e6e520d-9e34-11e2-86fa-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {7b76f3d8-813f-11e2-955f-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {9e2c28b9-b32a-11e2-b66f-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {bce19f56-77f4-11e2-9e92-50e5495b3e25} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {bce19f64-77f4-11e2-9e92-50e5495b3e25} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {bd3d3106-7ee7-11e3-a157-806e6f6e6963} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {d40a0837-bef5-11e2-98c0-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk
ShortcutTarget: Launcher.lnk -> C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe ()
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Daniela\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs ()
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6B44B148E2ADCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321540&octid=EB_ORIGINAL_CTID&ISID=M522E8BA5-F382-4B48-9322-3BC584AE0B6B&SearchSource=58&CUI=&UM=5&UP=SPEFA9F89B-AF42-407A-B86D-73940D2E1AAA&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321540&octid=EB_ORIGINAL_CTID&ISID=M522E8BA5-F382-4B48-9322-3BC584AE0B6B&SearchSource=58&CUI=&UM=5&UP=SPEFA9F89B-AF42-407A-B86D-73940D2E1AAA&q={searchTerms}&SSPV=
SearchScopes: HKCU - {76788FCF-6517-4664-8884-455ADC72D2F9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321540&octid=EB_ORIGINAL_CTID&ISID=M522E8BA5-F382-4B48-9322-3BC584AE0B6B&SearchSource=58&CUI=&UM=5&UP=SPEFA9F89B-AF42-407A-B86D-73940D2E1AAA&q={searchTerms}&SSPV=
SearchScopes: HKCU - {8BEF02FA-D076-4ED8-A986-220289A68432} URL = hxxp://search.softonic.com/MOY00006/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=12dba528000000000000582c80139263&r=531
SearchScopes: HKCU - {E88769CA-CC25-4C53-8F68-41086E55F343} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=crm&q={searchTerms}&locale=de_US&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^AT&apn_uid=e3423595-d731-4397-840a-f38368ab8654&apn_sauid=0E2CB41F-C436-4BAA-AD64-D84FDAB82636
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 11 C:\Windows\SysWOW64\nutafun4.dll [164144] (MKS Software Inc.)
Winsock: Catalog9 12 C:\Windows\SysWOW64\nutafun4.dll [164144] (MKS Software Inc.)
Winsock: Catalog9-x64 11 %SystemRoot%\system32\nutafun4.dll [205024] (MKS Software Inc.)
Winsock: Catalog9-x64 12 %SystemRoot%\system32\nutafun4.dll [205024] (MKS Software Inc.)
Tcpip\..\Interfaces\{229568EE-F79A-4D35-9334-16F6282920BD}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{40650E9F-BAB0-44FD-91D3-41620C54A9BA}: [NameServer]213.94.78.16 213.94.78.17
Tcpip\..\Interfaces\{4EE829F7-98BA-4F45-8DA5-40F740AD4C64}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{AE63A2E6-A363-451E-B54E-DC26B7E7A5E7}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{C8AEA777-F6C5-4F9B-A007-211F765EBB61}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{E8A7C741-6A5D-40A0-8600-D6A94EDF60F9}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{F4D11E85-3AE0-445A-BB2E-65BC4BC78CC6}: [NameServer]213.94.78.17 213.94.78.16

FireFox:
========
FF ProfilePath: C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SelectedSearchEngine: Google
FF Homepage: https://www.google.at/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Daniela\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Dilandau - C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default\Extensions\download_mp3@dilandau.eu.xpi [2013-03-05]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-22]
FF Extension: Adblock Plus - C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-16]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-01-31]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (YouTube) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-01-31]
CHR Extension: (YoutubeAdblocker) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\bniihpnpjcapipbhphchcjokklpkpnei [2014-03-02]
CHR Extension: (New Tab Page) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\cikkigamncoobkmpenfdeniclmehdidh [2014-03-02]
CHR Extension: (Google Search) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-01-31]
CHR Extension: (No Name) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\hempmfkijmahkaddljkmchcmjbojoedl [2013-01-04]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-01-31]
CHR Extension: (wEubsAviEE) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\olekefbkmdeccakekdijjfbhaoimdmmb [2014-03-02]
CHR Extension: (Gmail) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-01-31]
CHR HKCU\...\Chrome\Extension: [hempmfkijmahkaddljkmchcmjbojoedl] - C:\Users\Daniela\AppData\Local\CRE\hempmfkijmahkaddljkmchcmjbojoedl.crx [2012-11-19]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Daniela\AppData\Roaming\DVDVideoSoft\DVDVideoSoftBrowserExtension.crx [2012-11-23]
CHR HKLM-x32\...\Chrome\Extension: [hempmfkijmahkaddljkmchcmjbojoedl] - C:\Users\Daniela\AppData\Local\CRE\hempmfkijmahkaddljkmchcmjbojoedl.crx [2012-11-19]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2013-07-31]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]

==================== Services (Whitelisted) =================

R2 ANIWConnService; C:\Windows\SysWOW64\ANIWConnService.exe [151552 2009-07-07] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-08-01] (Freemake)
R2 NuTCRACKERService; C:\Windows\system32\nutsrv4.exe [563424 2009-11-10] (MKS Software Inc.)
R2 PortmapperService; C:\Program Files\PTC/PTC Portmapper/i486_nt/obj/portmap.exe [676864 2013-03-25] (PTC)
R2 WTGService; C:\Program Files (x86)\3DataManager\WTGService.exe [343024 2012-07-05] ()

==================== Drivers (Whitelisted) ====================

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11832 2010-06-29] (Advanced Micro Devices Inc.)
R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2009-03-06] ()
R3 AODDriver; C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [52280 2010-03-12] (Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-16] (Avira Operations GmbH & Co. KG)
R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2014-05-17] ()
R3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [229376 2013-02-25] (Huawei Technologies Co., Ltd.)
S3 netr28ux; C:\Windows\System32\DRIVERS\Dnetr28ux.sys [987648 2009-08-05] (Ralink Technology Corp.)
S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-17 17:05 - 2014-05-17 20:39 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-17 17:05 - 2014-05-17 17:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-17 17:05 - 2014-05-17 17:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-17 17:05 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-17 17:05 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-16 14:10 - 2014-05-16 14:10 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\DropboxMaster
2014-05-15 22:46 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 22:46 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 22:46 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 22:45 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 22:45 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 22:45 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 17:47 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 17:47 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 17:42 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 17:42 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 17:42 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 17:42 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 17:42 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 17:42 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 17:42 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 17:42 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 17:42 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 17:42 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 17:42 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 17:42 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 17:42 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 17:42 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-15 17:41 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 17:41 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieUserList
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieSiteList
2014-05-09 23:51 - 2014-05-09 23:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 20:15 - 2014-05-09 20:15 - 01292312 _____ () C:\Windows\Minidump\050914-16411-01.dmp
2014-05-09 00:14 - 2014-05-09 00:14 - 00455296 _____ () C:\Windows\Minidump\050914-17331-01.dmp
2014-05-06 23:51 - 2014-05-06 23:52 - 00000004 _____ () C:\end
2014-05-06 22:30 - 2014-05-06 22:30 - 01241296 _____ () C:\Windows\Minidump\050614-16458-01.dmp
2014-05-03 18:42 - 2014-05-03 18:42 - 00005992 _____ () C:\Users\Daniela\AppData\Local\recently-used.xbel
2014-04-29 22:03 - 2014-04-29 22:03 - 01243304 _____ () C:\Windows\Minidump\042914-14352-01.dmp
2014-04-25 16:47 - 2014-04-25 16:47 - 01153720 _____ () C:\Windows\Minidump\042514-15740-01.dmp
2014-04-22 10:43 - 2014-04-22 10:44 - 01206984 _____ () C:\Windows\Minidump\042214-15662-01.dmp
2014-04-17 03:01 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-17 03:01 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-17 03:01 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-17 03:01 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-17 03:01 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-17 03:01 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-17 03:01 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-17 03:01 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-17 03:01 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-17 03:01 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-17 03:01 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-17 03:01 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-17 03:01 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-17 03:01 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-17 03:01 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-17 03:01 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-17 03:01 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-17 03:01 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-17 03:01 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-17 03:01 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-17 03:01 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-17 03:01 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-17 03:01 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-17 03:01 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-17 03:01 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-17 03:01 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-17 03:01 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-17 03:01 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-17 03:01 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-17 03:01 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-17 03:01 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-17 03:01 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-17 03:01 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-17 03:01 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-17 03:01 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-17 03:01 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-17 03:01 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-17 03:01 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-17 03:01 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-17 03:01 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-17 03:01 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-17 03:01 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-17 03:01 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-17 03:01 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

==================== One Month Modified Files and Folders =======

2014-05-17 21:23 - 2014-03-09 14:16 - 00000000 ____D () C:\FRST
2014-05-17 21:14 - 2012-12-08 17:00 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Dropbox
2014-05-17 21:01 - 2011-11-29 15:48 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Skype
2014-05-17 20:42 - 2009-07-14 06:45 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-17 20:42 - 2009-07-14 06:45 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-17 20:39 - 2014-05-17 17:05 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-17 20:39 - 2011-11-28 17:13 - 01834926 _____ () C:\Windows\WindowsUpdate.log
2014-05-17 20:39 - 2009-07-14 19:58 - 00653928 _____ () C:\Windows\system32\perfh007.dat
2014-05-17 20:39 - 2009-07-14 19:58 - 00129800 _____ () C:\Windows\system32\perfc007.dat
2014-05-17 20:39 - 2009-07-14 07:13 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-17 20:36 - 2013-02-25 18:38 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\3DataManager
2014-05-17 20:36 - 2012-12-08 17:03 - 00000000 ___RD () C:\Users\Daniela\Dropbox
2014-05-17 20:36 - 2012-12-07 23:59 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-17 20:35 - 2011-11-28 20:14 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2014-05-17 20:35 - 2011-11-28 20:14 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2014-05-17 20:34 - 2013-10-15 15:59 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cec9aed053bc50.job
2014-05-17 20:34 - 2013-09-29 07:07 - 00032222 _____ () C:\Windows\PFRO.log
2014-05-17 20:34 - 2013-09-23 10:50 - 00013574 _____ () C:\Windows\setupact.log
2014-05-17 20:34 - 2011-11-28 20:14 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-05-17 20:34 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\addins
2014-05-17 20:34 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-17 20:33 - 2012-01-31 17:40 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-17 18:56 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-05-17 17:23 - 2011-12-02 18:29 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-05-17 17:05 - 2014-05-17 17:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-17 17:05 - 2014-05-17 17:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-17 17:05 - 2014-03-09 14:21 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Malwarebytes
2014-05-17 17:05 - 2014-03-09 14:21 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-17 12:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-16 20:50 - 2011-11-28 17:14 - 00000000 ___RD () C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-16 14:10 - 2014-05-16 14:10 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\DropboxMaster
2014-05-16 14:10 - 2012-12-08 17:01 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-16 14:05 - 2011-11-28 17:14 - 00000000 ___RD () C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 14:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-15 22:45 - 2013-08-31 07:43 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 22:44 - 2012-04-02 22:13 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-15 17:58 - 2012-02-14 22:58 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-14 20:47 - 2013-03-25 23:36 - 00000112 _____ () C:\Users\Public\Documents\std.err
2014-05-14 20:47 - 2013-03-25 23:14 - 00001952 _____ () C:\Users\Public\Documents\std.out
2014-05-14 18:38 - 2012-12-07 23:59 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 18:38 - 2012-12-07 23:59 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 18:38 - 2012-02-07 21:37 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 17:52 - 2012-12-10 12:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieUserList
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieSiteList
2014-05-09 23:51 - 2014-05-09 23:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 23:04 - 2012-02-13 22:42 - 00000000 ____D () C:\Users\Daniela\Sonstiges
2014-05-09 20:15 - 2014-05-09 20:15 - 01292312 _____ () C:\Windows\Minidump\050914-16411-01.dmp
2014-05-09 20:15 - 2013-09-29 07:07 - 467427714 _____ () C:\Windows\MEMORY.DMP
2014-05-09 20:15 - 2012-03-27 22:06 - 00000000 ____D () C:\Windows\Minidump
2014-05-09 00:14 - 2014-05-09 00:14 - 00455296 _____ () C:\Windows\Minidump\050914-17331-01.dmp
2014-05-08 10:28 - 2013-12-14 13:10 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cec9aed053bc50
2014-05-08 10:28 - 2012-01-31 17:40 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-06 23:52 - 2014-05-06 23:51 - 00000004 _____ () C:\end
2014-05-06 23:51 - 2012-11-23 10:55 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-06 23:51 - 2011-11-29 17:06 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\DVDVideoSoft
2014-05-06 23:51 - 2011-11-29 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-06 22:30 - 2014-05-06 22:30 - 01241296 _____ () C:\Windows\Minidump\050614-16458-01.dmp
2014-05-06 06:40 - 2014-05-15 22:46 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 22:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 22:45 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 22:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 22:46 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 22:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-03 18:47 - 2014-04-03 00:54 - 00000000 ____D () C:\Users\Daniela\.gimp-2.8
2014-05-03 18:42 - 2014-05-03 18:42 - 00005992 _____ () C:\Users\Daniela\AppData\Local\recently-used.xbel
2014-05-03 18:42 - 2014-04-03 00:55 - 00000000 ____D () C:\Users\Daniela\AppData\Local\gtk-2.0
2014-04-30 21:09 - 2014-03-27 16:01 - 00000000 ____D () C:\Program Files\Recuva
2014-04-29 22:03 - 2014-04-29 22:03 - 01243304 _____ () C:\Windows\Minidump\042914-14352-01.dmp
2014-04-25 16:47 - 2014-04-25 16:47 - 01153720 _____ () C:\Windows\Minidump\042514-15740-01.dmp
2014-04-22 10:44 - 2014-04-22 10:43 - 01206984 _____ () C:\Windows\Minidump\042214-15662-01.dmp

Some content of TEMP:
====================
C:\Users\Daniela\AppData\Local\Temp\avgnt.exe
C:\Users\Daniela\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpjoie4y.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-15 17:42] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-09 11:17

==================== End Of Log ============================
--- --- ---

--- --- ---


kommt das Addition-File automatisch oder muss ich dazu noch etwas machen?

danieelchen 17.05.2014 20:33
Entschuldige, ich habe übersehen, dass ich das Addition-Kästchen noch anwählen muss. Hier das Ergebnis davon:


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014
Ran by Daniela at 2014-05-17 21:31:06
Running from C:\Users\Daniela\Documents\Desktop\Sicherheit
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Out of date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Out of date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.12 - GIGABYTE)
3DataManager (HKLM-x32\...\3DataManager) (Version: 3.5 - 3DataManager)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.60607.2201 - ATI Technologies Inc.) Hidden
AMD VISION Engine Control Center (x32 Version: 2011.0607.2212.38019 - Ihr Firmenname) Hidden
ANIWZCS2 Service (HKLM-x32\...\{4C590030-7469-453E-8589-D15DA9D03F52}) (Version:  - )
ATI Catalyst Install Manager (HKLM\...\{DDD72DB8-BB69-1AE3-9E21-BFD1CB87AEDF}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
AutoGreen B10.1021.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B10.1021.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
BitTorrent (HKLM-x32\...\BitTorrent) (Version: 7.7.3.28706 - BitTorrent Inc.)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0607.2212.38019 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0607.2212.38019 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0607.2212.38019 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help English (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help French (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help German (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0607.2211.38019 - ATI) Hidden
ccc-utility64 (Version: 2011.0607.2212.38019 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.05 - Piriform)
Creo Direct Version 2.0 Datecode [M020] (HKLM-x32\...\Creo Direct Version 2.0 Datecode [M020]) (Version: 2.0 - PTC)
Creo Help Version 2.0 Datecode [M020] (HKLM-x32\...\Creo Help Version 2.0 Datecode [M020]) (Version: 2.0 - PTC)
Creo Layout Version 2.0 Datecode [M020] (HKLM-x32\...\Creo Layout Version 2.0 Datecode [M020]) (Version: 2.0 - PTC)
Creo Parametric Version 2.0 Datecode [M020] (HKLM-x32\...\Creo Parametric Version 2.0 Datecode [M020]) (Version: 2.0 - PTC)
Creo Platform 2.10 (HKLM-x32\...\{3D2C04FC-1F9B-4C13-BA4A-E21E5C6A26C5}) (Version: 2.10.0 - PTC)
Creo Simulate Version 2.0 Datecode [M020] (HKLM-x32\...\Creo Simulate Version 2.0 Datecode [M020]) (Version: 2.0 - PTC)
Creo Thumbnail Viewer 2.0 (HKLM\...\{F0B52181-4318-4EF9-A835-187EC09569DD}) (Version: 30.12.230 - PTC)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.5 - DivX, LLC)
D-Link Wireless G DWL-G122_DWA-110 (HKLM-x32\...\{5F753314-628E-4C13-B8AE-BFA7FD514CBE}) (Version:  - D-Link)
Dream Aquarium (HKLM-x32\...\DreamAqua) (Version:  - )
Dropbox (HKCU\...\Dropbox) (Version: 2.6.33 - Dropbox, Inc.)
Easy Tune 6 B11.0704.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B11.0704.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Festo FluidSim 3.6 (HKLM-x32\...\Festo Fluidsim_is1) (Version:  - My Company, Inc.)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{6C5F8503-55D2-4398-858C-362B7A7AF51C}) (Version: 2.1.31.0 - MAGIX AG)
FluidDRAW Version 4.1c (HKLM-x32\...\FluidDRAW Version 4.1c) (Version:  - )
Free YouTube Download version 3.0.20.1228 (HKLM-x32\...\Free YouTube Download_is1) (Version:  - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.34.430 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.34.430 - DVDVideoSoft Ltd.)
Freecorder 2.3 (with Skype Call Recording) (HKLM-x32\...\Freecorder_1.0) (Version:  - )
Freemake Video Converter Version 4.0.3 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.0.3 - Ellora Assets Corporation)
Fuelgas V1R1 (HKLM-x32\...\FuelgasV1_is1) (Version:  - Günther M. FOIDL / TEA GE Jenbacher)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.137 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Java Auto Updater (x32 Version: 2.0.2.4 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 22 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216022FF}) (Version: 6.0.220 - Oracle)
LifeGlobe Goldfish Aquarium 2.0 (HKLM-x32\...\LifeGlobe Goldfish Aquarium 2.0_is1) (Version: 2.0 - Prolific Publishing, Inc.)
MAGIX Foto Manager MX (HKLM-x32\...\MAGIX_{02359FE8-6BBF-407A-B7E1-39AA26C09525}) (Version: 9.0.1.250 - MAGIX AG)
MAGIX Foto Manager MX (Version: 9.0.1.250 - MAGIX AG) Hidden
MAGIX Screenshare (HKLM-x32\...\MAGIX_{DB33E7CB-D489-4CE5-8FD4-9CCCB4188C2F}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare (Version: 4.3.6.1987 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MKS Platform Components 9.x (HKLM\...\{30023972-0000-0903-9ABB-000BDB5CF35D}) (Version: 9.3.0000 - Mortice Kern Systems)
Mozilla Firefox 29.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 en-US)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
ON_OFF Charge B11.0110.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
PTC Portmapper Version 2.0 Datecode [M020] (HKLM-x32\...\PTC Portmapper Version 2.0 Datecode [M020]) (Version: 2.0 - PTC)
PTC Quality Agent (HKLM-x32\...\{836CC6A9-9789-4A4A-A950-D06B1C54C10A}) (Version: 2.0.0.0 - PTC)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.531.2011 - Realtek)
Realtek Ethernet Diagnostic Utility (HKLM-x32\...\{DADC7AB0-E554-4705-9F6A-83EA82ED708E}) (Version: 1.00.0000 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player 1.1.5 (HKLM-x32\...\VLC media player) (Version: 1.1.5 - VideoLAN)
webbsuavveo (HKLM-x32\...\{476D78C4-1DB0-2D88-7FCC-AA6559F59A8D}) (Version: 4.3.0.1718 - webesave)

==================== Restore Points  =========================

28-04-2014 16:25:48 Windows-Sicherung
03-05-2014 01:00:26 Windows Update
04-05-2014 17:00:07 Windows-Sicherung
11-05-2014 17:00:10 Windows-Sicherung
15-05-2014 20:41:06 Windows Update
17-05-2014 15:21:24 Freecell3D wird entfernt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02F4D11D-232D-4FE9-B13C-CAD1CBF9B228} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-31] (Google Inc.)
Task: {03813238-F438-4DD6-8357-E95E023A313B} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14] (Sun Microsystems, Inc.)
Task: {268E6A9E-8387-4646-96A7-35976A609E2B} - System32\Tasks\YourFile DownloaderUpdate => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe <==== ATTENTION
Task: {3538DAB0-B477-42A8-A57E-D16646607AB7} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {38E57737-07F3-42FE-AD7C-260415DF1BD2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-31] (Google Inc.)
Task: {456D1E74-D4AF-49A5-9E53-BB88FDF2EA29} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {4B8C1671-998B-4890-B402-D17EDB07298E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {52365EF8-AB0F-48EE-A4F4-6E11FBA0BE7E} - \BrowserDefendert No Task File <==== ATTENTION
Task: {650121CF-C360-4769-83AE-2ED93FC2820E} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {783CD0E6-588F-465E-9B64-D89EB69581FD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {928739B3-0B2A-45DD-9D10-8A4B4A5E11E7} - \EPUpdater No Task File <==== ATTENTION
Task: {C315643E-DD90-4833-8BFE-49FEB1E4EEC8} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe
Task: {C9AE5F41-4BFB-4F7F-B3C7-B16916E5BD82} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-07-29] ()
Task: {D30162AA-87EB-4BD0-B4FC-9081B316D9E1} - System32\Tasks\GoogleUpdateTaskMachineCore1cec9aed053bc50 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-01-31] (Google Inc.)
Task: {DC132879-C888-41C4-A3A8-C8CA6FE707B1} - \BitGuard No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cec9aed053bc50.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-11-28 17:19 - 2009-07-07 21:10 - 00151552 _____ () C:\Windows\SysWOW64\ANIWConnService.exe
2013-02-25 18:37 - 2012-07-05 06:03 - 00343024 ____N () C:\Program Files (x86)\3DataManager\WTGService.exe
2008-03-25 18:21 - 2008-03-25 18:21 - 00219656 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe
2013-02-25 18:37 - 2012-07-10 15:38 - 00506864 ____N () C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe
2011-06-07 23:11 - 2011-06-07 23:11 - 00243712 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00107008 _____ () C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
2013-07-24 17:31 - 2013-07-24 17:30 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2011-06-30 16:27 - 2011-06-30 16:27 - 02601031 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Normal.dll
2011-06-30 16:35 - 2011-06-30 16:35 - 00421955 _____ () C:\Program Files (x86)\GIGABYTE\ET6\work.dll
2011-06-15 15:19 - 2011-06-15 15:19 - 00106496 _____ () C:\Program Files (x86)\GIGABYTE\ET6\SF.dll
2008-05-07 16:22 - 2008-05-07 16:22 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\CIAMIB.dll
2011-06-23 21:04 - 2011-06-23 21:04 - 00155648 _____ () C:\Program Files (x86)\GIGABYTE\ET6\OCK.dll
2009-12-22 17:52 - 2009-12-22 17:52 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\ycc.dll
2010-10-19 11:59 - 2010-10-19 11:59 - 00065536 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GPTT.dll
2010-06-24 16:50 - 2010-06-24 16:50 - 00094208 _____ () C:\Program Files (x86)\GIGABYTE\ET6\IccLibDll.dll
2011-03-01 20:00 - 2011-03-01 20:00 - 00126976 _____ () C:\Program Files (x86)\GIGABYTE\ET6\StabilityLib.dll
2010-12-02 17:01 - 2010-12-02 17:01 - 00106496 _____ () C:\Program Files (x86)\GIGABYTE\ET6\HM.dll
2011-07-04 15:39 - 2011-07-04 15:39 - 00192512 _____ () C:\Program Files (x86)\GIGABYTE\ET6\GVTunner.dll
2003-02-14 15:11 - 2003-02-14 15:11 - 00102400 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Sound.dll
2010-06-10 16:52 - 2010-06-10 16:52 - 00110592 _____ () C:\Program Files (x86)\GIGABYTE\ET6\AMD8.dll
2010-03-12 06:40 - 2010-03-12 06:40 - 04449632 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Platform.dll
2010-03-12 06:40 - 2010-03-12 06:40 - 00423256 _____ () C:\Program Files (x86)\GIGABYTE\ET6\Device.dll
2011-06-03 18:23 - 2011-06-03 18:23 - 00307200 _____ () C:\Program Files (x86)\GIGABYTE\ET6\MFCCPU.DLL
2014-05-17 20:35 - 2014-05-17 20:35 - 00041984 _____ () c:\users\daniela\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpjoie4y.dll
2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Daniela\AppData\Roaming\Dropbox\bin\libcef.dll
2011-11-28 17:18 - 2009-06-01 15:23 - 00315392 _____ () C:\Program Files (x86)\ANI\ANIWZCS2 Service\ANIOApi.dll
2011-11-28 17:17 - 2009-06-01 15:23 - 00315392 _____ () C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\ANIOApi.dll
2011-01-17 17:19 - 2011-11-29 16:21 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2010-11-19 19:45 - 2011-11-29 16:21 - 00170496 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll
2013-02-25 18:37 - 2012-07-13 14:19 - 00073728 ____N () C:\Program Files (x86)\3DataManager\WtgDriverInstall.dll
2013-02-25 18:37 - 2012-07-13 14:21 - 00745472 ____N () C:\Program Files (x86)\3DataManager\WtgCore.dll
2013-02-25 18:37 - 2012-07-13 14:20 - 00139264 ____N () C:\Program Files (x86)\3DataManager\WtgBluetooth.dll
2013-02-25 18:37 - 2012-07-13 14:20 - 00086016 ____N () C:\Program Files (x86)\3DataManager\WtgDialup.dll
2013-02-25 18:37 - 2012-07-13 14:19 - 00098304 ____N () C:\Program Files (x86)\3DataManager\WtgUtil.dll
2013-02-25 18:37 - 2012-07-13 14:20 - 00098304 ____N () C:\Program Files (x86)\3DataManager\WtgPorts.dll
2013-02-25 18:37 - 2012-07-13 14:20 - 00110592 ____N () C:\Program Files (x86)\3DataManager\WtgDatabase.dll
2013-02-25 18:37 - 2012-07-13 14:20 - 00208896 ____N () C:\Program Files (x86)\3DataManager\WtgDetection.dll
2013-02-25 18:37 - 2012-07-13 14:19 - 00012288 ____N () C:\Program Files (x86)\3DataManager\WTGDebugs.dll
2013-02-25 18:37 - 2011-11-10 09:48 - 01105920 ____N () C:\Program Files (x86)\3DataManager\NDISAPI.dll
2013-02-25 18:38 - 2011-06-09 10:44 - 00602112 ____N () C:\Program Files (x86)\3DataManager\WTGXMLUtil.dll
2013-02-25 18:37 - 2012-07-13 14:20 - 00274432 ____N () C:\Program Files (x86)\3DataManager\WTGSMSPCClient.Dll
2013-02-25 18:37 - 2012-07-13 14:21 - 00012800 ____N () C:\Program Files (x86)\3DataManager\WTGDriverInstallX.Dll
2013-02-25 18:37 - 2012-06-12 10:02 - 00249856 ____N () C:\Program Files (x86)\3DataManager\WtgMobileBroadband7.dll
2014-05-09 23:51 - 2014-05-09 23:51 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00101376 _____ () C:\Program Files (x86)\VideoLAN\VLC\libvlc.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 02262528 _____ () C:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00065536 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52tofloat32_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00030720 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52tospdif_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liba52_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031232 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_attachment_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00090112 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_bd_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_fake_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00041472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_ftp_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00088064 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_http_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00044544 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_imem_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00075776 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_mms_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00030720 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_dummy_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_file_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_http_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00394240 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_shout_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_output_udp_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00070144 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_realrtsp_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034304 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_smb_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_tcp_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032768 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaccess_udp_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00049152 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libadjust_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libadpcm_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033280 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaes3_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaiff_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033280 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libalphamask_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00047104 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaout_directx_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034816 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaout_file_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00266240 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaout_sdl_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00045568 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaraw_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00071680 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libasf_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00185344 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libatmo_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00037376 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudiobargraph_a_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00053248 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudiobargraph_v_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00042496 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudioscrobbler_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00041472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libaudio_format_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libau_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 07065600 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libavcodec_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00090112 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libavi_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00043008 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libball_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00047104 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libbandlimited_resampler_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00151552 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libbda_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035328 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libblendbench_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00057344 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libblend_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libbluescreen_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00831488 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libcaca_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035328 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libcanvas_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00039424 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libcc_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00129024 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libcdda_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034304 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libcdg_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032768 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libchain_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libchorus_flanger_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033280 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libclone_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034816 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libcolorthres_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032768 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libconverter_fixed_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libcroppadd_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00043520 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libcrop_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libcvdsub_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00097280 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdeinterlace_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdemuxdump_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdemux_cdg_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 01131520 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdirac_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00061440 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdirect3d_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00067072 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdirectx_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00050176 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdmo_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdolby_surround_decoder_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031232 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdrawable_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00210944 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdshow_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00178176 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdtstofloat32_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdtstospdif_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00039424 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdts_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00039936 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdummy_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00150528 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdvbsub_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00231424 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdvdnav_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00157696 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libdvdread_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00042496 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libequalizer_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liberase_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00041472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libes_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00037888 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libexport_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00040960 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libextract_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00309760 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libfaad_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00037376 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libfake_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00039424 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libfilesystem_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00041984 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libflacsys_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00265216 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libflac_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libfloat32_mixer_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00258048 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libfluidsynth_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031232 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libfolder_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 01747456 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libfreetype_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034304 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libgaussianblur_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libgestures_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libglobalhotkeys_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00053248 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libglwin32_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00379904 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libgme_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 01045504 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libgnutls_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00231936 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libgoom_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00042496 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libgradient_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libgrain_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032768 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libgrey_yuv_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libh264_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00037376 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libheadphone_channel_mixer_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00046592 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libhotkeys_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00073728 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_mmx_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00052224 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00135680 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_rgb_sse2_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00039936 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_mmx_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00038400 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00048640 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libi420_yuy2_sse2_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032768 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_i420_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00037888 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_mmx_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00046080 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libi422_yuy2_sse2_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031232 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libinvert_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033280 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libinvmem_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00094720 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libkate_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 01747968 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liblibass_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00152576 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liblibmpeg2_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 01073664 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liblive555_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034816 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liblogger_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00039424 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liblogo_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liblpcm_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00337920 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liblua_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00037376 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmagnify_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmarq_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmediadirs_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmemcpy3dn_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmemcpymmxext_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033280 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmemcpymmx_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmirror_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035328 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmjpeg_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 01319936 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmkv_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00440832 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmod_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmono_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00048128 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmosaic_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmotionblur_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00039936 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmotiondetect_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00194048 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmp4_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00037888 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpeg_audio_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00128000 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpgatofixed32_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031232 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmpgv_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032768 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmsn_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00052224 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_asf_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00040448 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_avi_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_dummy_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00052224 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_mp4_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_mpjpeg_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00052736 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_ogg_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00091648 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_ps_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00134144 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_ts_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033280 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libmux_wav_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035328 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libnetsync_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libnoise_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033280 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libnormvol_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libnsc_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libnsv_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libntservice_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00040960 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libnuv_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00089600 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libogg_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00098304 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liboldhttp_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00067072 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liboldrc_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00040960 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\liboldtelnet_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00038400 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libosdmenu_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00043520 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libosd_parser_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_copy_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00047616 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_dirac_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00039424 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_flac_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00081408 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_h264_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mlp_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00053760 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mpeg4audio_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00039424 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mpeg4video_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00040448 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_mpegvideo_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00042496 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpacketizer_vc1_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00054272 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpanoramix_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035328 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libparam_eq_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00108032 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libplaylist_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00238080 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpng_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00037888 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpodcast_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00090624 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libportaudio_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00080384 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpostproc_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034816 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpsychedelic_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00051200 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libps_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpuzzle_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libpva_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 11047936 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libqt4_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035328 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libquicktime_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\librawaud_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\librawdv_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032768 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\librawvideo_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\librawvid_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034304 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\librealvideo_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00052224 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libreal_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00401920 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libremoteosd_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032768 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libripple_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\librotate_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00044032 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\librss_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00400384 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\librtp_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031232 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\librv32_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00080896 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libsap_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libscaletempo_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libscale_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libscene_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 01025536 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libschroedinger_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00039424 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libscreen_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00291840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libsdl_image_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032768 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libsharpen_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libsimple_channel_mixer_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 02170368 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libskins2_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libsmf_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00103936 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libspatializer_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00030720 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libspdif_mixer_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00130048 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libspeex_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libspudec_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstats_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034304 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_filter_rar_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031232 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_filter_record_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_autodel_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_bridge_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00030720 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_description_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032768 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_display_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00030208 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_dummy_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034816 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_duplicate_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_es_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_gather_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00041472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_mosaic_bridge_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00401920 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_raop_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00041472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_record_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00437760 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_rtp_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00035840 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_smem_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00040960 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_standard_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00065536 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libstream_out_transcode_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00047104 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libsubsdec_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00041472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libsubsusf_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00052224 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libsubtitle_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libsvcdsub_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00297472 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libswscale_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00030720 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libt140_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 01199104 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libtaglib_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00368640 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libtheora_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00040960 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libtransform_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libtrivial_channel_mixer_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00030720 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libtrivial_mixer_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00122368 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libts_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libtta_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00144384 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libtwolame_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00052736 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libty_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031232 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libugly_resampler_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libvc1_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00048640 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libvcd_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00040960 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libvideo_filter_wrapper_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00062464 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libvisual_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034816 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libvmem_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00044544 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libvobsub_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libvoc_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00056832 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libvod_rtsp_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 01712128 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libvorbis_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00272896 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libvout_sdl_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00038912 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libvout_wrapper_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036352 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libwall_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00046592 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libwaveout_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00032256 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libwave_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libwav_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00052736 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libwingdi_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00960512 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libx264_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031744 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libxa_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 01141248 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libxml_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00034304 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libxtag_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00031232 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuvp_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00033792 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuv_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00040448 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuy2_i420_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00036864 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libyuy2_i422_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 00078848 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libzip_plugin.dll
2010-11-13 18:46 - 2010-11-13 18:46 - 01451520 _____ () C:\Program Files (x86)\VideoLAN\VLC\plugins\libzvbi_plugin.dll
2014-05-14 18:38 - 2014-05-14 18:38 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: SBRE
Description: SBRE
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: SBRE
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/17/2014 07:11:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: FreemakeUtilsService.exe, Version: 1.0.0.0, Zeitstempel: 0x51fa3a93
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0x73c
Startzeit der fehlerhaften Anwendung: 0xFreemakeUtilsService.exe0
Pfad der fehlerhaften Anwendung: FreemakeUtilsService.exe1
Pfad des fehlerhaften Moduls: FreemakeUtilsService.exe2
Berichtskennung: FreemakeUtilsService.exe3

Error: (05/17/2014 07:11:52 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: FreemakeUtilsService.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ArgumentException
Stapel:
  bei System.Security.Principal.SecurityIdentifier..ctor(System.String)
  bei FreemakeUtilsService.Common.ToolbarInstallationChecker.GetSidToUsernameDictionary()
  bei FreemakeUtilsService.Common.ToolbarInstallationChecker.CheckInfo(FreemakeUtilsService.Common.FreemakeToolbarsInfo)
  bei FreemakeUtilsService.Statistics.Manager.StartToolbarInfoCheck()
  bei FreemakeUtilsService.Statistics.Manager.SettingsSyncFailed(System.Object, System.EventArgs)
  bei FreemakeUtilsService.Common.Synchronizer.OnWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs)
  bei System.ComponentModel.BackgroundWorker.OnRunWorkerCompleted(System.ComponentModel.RunWorkerCompletedEventArgs)
  bei System.ComponentModel.BackgroundWorker.AsyncOperationCompleted(System.Object)
  bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
  bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
  bei System.Threading.ThreadPoolWorkQueue.Dispatch()
  bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (05/17/2014 06:57:58 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm mbam.exe, Version 1.0.0.500 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1930

Startzeit: 01cf71eccc2033f3

Endzeit: 45

Anwendungspfad: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

Berichts-ID: 6310b6c2-dde4-11e3-a1ec-50e5495b3e25

Error: (05/17/2014 06:16:10 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm mbam.exe, Version 1.0.0.500 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1b28

Startzeit: 01cf71e17229a455

Endzeit: 4

Anwendungspfad: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

Berichts-ID: 8c4cdcd6-ddde-11e3-a1ec-50e5495b3e25

Error: (05/10/2014 02:26:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: prevhost.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce796ac
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00038e19
ID des fehlerhaften Prozesses: 0x15f8
Startzeit der fehlerhaften Anwendung: 0xprevhost.exe0
Pfad der fehlerhaften Anwendung: prevhost.exe1
Pfad des fehlerhaften Moduls: prevhost.exe2
Berichtskennung: prevhost.exe3

Error: (05/01/2014 11:23:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: 3DataManager.exe, Version: 1.0.0.1, Zeitstempel: 0x5000133d
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0150014
Fehleroffset: 0x0008480f
ID des fehlerhaften Prozesses: 0xef0
Startzeit der fehlerhaften Anwendung: 0x3DataManager.exe0
Pfad der fehlerhaften Anwendung: 3DataManager.exe1
Pfad des fehlerhaften Moduls: 3DataManager.exe2
Berichtskennung: 3DataManager.exe3

Error: (04/21/2014 05:16:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: 3DataManager.exe, Version: 1.0.0.1, Zeitstempel: 0x5000133d
Name des fehlerhaften Moduls: 3DataManager.exe, Version: 1.0.0.1, Zeitstempel: 0x5000133d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000c8965
ID des fehlerhaften Prozesses: 0x1158
Startzeit der fehlerhaften Anwendung: 0x3DataManager.exe0
Pfad der fehlerhaften Anwendung: 3DataManager.exe1
Pfad des fehlerhaften Moduls: 3DataManager.exe2
Berichtskennung: 3DataManager.exe3

Error: (04/15/2014 07:08:27 AM) (Source: Windows Backup) (EventID: 4100) (User: )
Description: Die Sicherung wurde nicht erfolgreich abgeschlossen, da eine Schattenkopie nicht erstellt werden konnte. Löschen Sie auf dem zu sichernden Laufwerk nicht benötigte Dateien, um Speicherplatz freizugeben, und wiederholen Sie den Vorgang.

Error: (04/08/2014 09:10:40 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/27/2014 09:22:04 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm xtop.exe, Version 30.0.2012.230 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1b3c

Startzeit: 01cf49eeab8b1624

Endzeit: 55

Anwendungspfad: C:\Program Files\Creo 2.0\Common Files\M020\x86e_win64\obj\xtop.exe

Berichts-ID: 111236ba-b5e5-11e3-a1dd-50e5495b3e25


System errors:
=============
Error: (05/17/2014 08:34:51 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
SBRE

Error: (05/17/2014 08:33:11 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (05/17/2014 08:32:42 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (05/17/2014 07:12:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Freemake Improver" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/17/2014 01:11:36 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
SBRE

Error: (05/17/2014 01:10:58 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎17.‎05.‎2014 um 13:00:56 unerwartet heruntergefahren.

Error: (05/17/2014 08:33:33 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
SBRE

Error: (05/17/2014 06:42:15 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (05/17/2014 06:42:04 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (05/16/2014 02:04:37 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
SBRE


Microsoft Office Sessions:
=========================
Error: (05/17/2014 07:11:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: FreemakeUtilsService.exe1.0.0.051fa3a93KERNELBASE.dll6.1.7601.1840953159a86e04343520000c42d73c01cf71c0b20c6e4fC:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exeC:\Windows\syswow64\KERNELBASE.dll5845e6f1-dde6-11e3-a1ec-50e5495b3e25

Error: (05/17/2014 07:11:52 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: FreemakeUtilsService.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ArgumentException
Stapel:
  bei System.Security.Principal.SecurityIdentifier..ctor(System.String)
  bei FreemakeUtilsService.Common.ToolbarInstallationChecker.GetSidToUsernameDictionary()
  bei FreemakeUtilsService.Common.ToolbarInstallationChecker.CheckInfo(FreemakeUtilsService.Common.FreemakeToolbarsInfo)
  bei FreemakeUtilsService.Statistics.Manager.StartToolbarInfoCheck()
  bei FreemakeUtilsService.Statistics.Manager.SettingsSyncFailed(System.Object, System.EventArgs)
  bei FreemakeUtilsService.Common.Synchronizer.OnWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs)
  bei System.ComponentModel.BackgroundWorker.OnRunWorkerCompleted(System.ComponentModel.RunWorkerCompletedEventArgs)
  bei System.ComponentModel.BackgroundWorker.AsyncOperationCompleted(System.Object)
  bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
  bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
  bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
  bei System.Threading.ThreadPoolWorkQueue.Dispatch()
  bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (05/17/2014 06:57:58 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: mbam.exe1.0.0.500193001cf71eccc2033f345C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe6310b6c2-dde4-11e3-a1ec-50e5495b3e25

Error: (05/17/2014 06:16:10 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: mbam.exe1.0.0.5001b2801cf71e17229a4554C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe8c4cdcd6-ddde-11e3-a1ec-50e5495b3e25

Error: (05/10/2014 02:26:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: prevhost.exe6.1.7601.175144ce796acntdll.dll6.1.7601.18247521ea8e7c000000500038e1915f801cf6c4acb8f408fC:\Windows\SysWOW64\prevhost.exeC:\Windows\SysWOW64\ntdll.dll4a3ef569-d83e-11e3-baad-50e5495b3e25

Error: (05/01/2014 11:23:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: 3DataManager.exe1.0.0.15000133dntdll.dll6.1.7601.18247521ea8e7c01500140008480fef001cf650fc74b6ce5C:\Program Files (x86)\3DataManager\3DataManager.exeC:\Windows\SysWOW64\ntdll.dll45fe613a-d112-11e3-a984-50e5495b3e25

Error: (04/21/2014 05:16:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: 3DataManager.exe1.0.0.15000133d3DataManager.exe1.0.0.15000133dc0000005000c8965115801cf5d747c81979bC:\Program Files (x86)\3DataManager\3DataManager.exeC:\Program Files (x86)\3DataManager\3DataManager.exee5e7970b-c967-11e3-96ca-50e5495b3e25

Error: (04/15/2014 07:08:27 AM) (Source: Windows Backup) (EventID: 4100) (User: )
Description: Bei der Erstellung einer Schattenkopie ist eine Zeitüberschreitung aufgetreten. Wiederholen Sie diesen Vorgang. (0x81000101)

Error: (04/08/2014 09:10:40 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Daniela\Documents\Desktop\Sicherheit\esetsmartinstaller_enu.exe

Error: (03/27/2014 09:22:04 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: xtop.exe30.0.2012.2301b3c01cf49eeab8b162455C:\Program Files\Creo 2.0\Common Files\M020\x86e_win64\obj\xtop.exe111236ba-b5e5-11e3-a1dd-50e5495b3e25


==================== Memory info ===========================

Percentage of memory in use: 53%
Total physical RAM: 3581.36 MB
Available physical RAM: 1649.47 MB
Total Pagefile: 7160.89 MB
Available Pagefile: 4594.38 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:604.46 GB) NTFS
Drive e: (3DataManager) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS
Drive g: () (Removable) (Total:3.65 GB) (Free:3.65 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: F164647B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 4 GB) (Disk ID: 87D73D92)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)

==================== End Of Log ============================

schrauber 18.05.2014 18:58
Sticks anklemmen, nicht mehr abklemmen.

http://www.filepony.de/icon/panda_usb_vaccine.png Panda USB Vaccine

Bitte lade Dir von hier Panda USB Vaccine herunter.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [mmrrqkqpas] => wscript.exe //B "C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs" <===== ATTENTION
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Daniela\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [mmrrqkqpas] => wscript.exe //B "C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs" <===== ATTENTION
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs ()
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321540&octid=EB_ORIGINAL_CTID&ISID=M522E8BA5-F382-4B48-9322-3BC584AE0B6B&SearchSource=58&CUI=&UM=5&UP=SPEFA9F89B-AF42-407A-B86D-73940D2E1AAA&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321540&octid=EB_ORIGINAL_CTID&ISID=M522E8BA5-F382-4B48-9322-3BC584AE0B6B&SearchSource=58&CUI=&UM=5&UP=SPEFA9F89B-AF42-407A-B86D-73940D2E1AAA&q={searchTerms}&SSPV=
SearchScopes: HKCU - {76788FCF-6517-4664-8884-455ADC72D2F9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321540&octid=EB_ORIGINAL_CTID&ISID=M522E8BA5-F382-4B48-9322-3BC584AE0B6B&SearchSource=58&CUI=&UM=5&UP=SPEFA9F89B-AF42-407A-B86D-73940D2E1AAA&q={searchTerms}&SSPV=
SearchScopes: HKCU - {8BEF02FA-D076-4ED8-A986-220289A68432} URL = hxxp://search.softonic.com/MOY00006/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=12dba528000000000000582c80139263&r=531
SearchScopes: HKCU - {E88769CA-CC25-4C53-8F68-41086E55F343} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=crm&q={searchTerms}&locale=de_US&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^AT&apn_uid=e3423595-d731-4397-840a-f38368ab8654&apn_sauid=0E2CB41F-C436-4BAA-AD64-D84FDAB82636

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


danieelchen 18.05.2014 19:44
Hey,

habe ich erledigt, danke!
Anbei das logfile von dem Fix:


Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-05-2014
Ran by Daniela at 2014-05-18 20:42:06 Run:1
Running from C:\Users\Daniela\Documents\Desktop\Sicherheit
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [mmrrqkqpas] => wscript.exe //B "C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs" <===== ATTENTION
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Daniela\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [mmrrqkqpas] => wscript.exe //B "C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs" <===== ATTENTION
AppInit_DLLs: c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll => c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll File Not Found
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs ()
SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321540&octid=EB_ORIGINAL_CTID&ISID=M522E8BA5-F382-4B48-9322-3BC584AE0B6B&SearchSource=58&CUI=&UM=5&UP=SPEFA9F89B-AF42-407A-B86D-73940D2E1AAA&q={searchTerms}&SSPV=
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321540&octid=EB_ORIGINAL_CTID&ISID=M522E8BA5-F382-4B48-9322-3BC584AE0B6B&SearchSource=58&CUI=&UM=5&UP=SPEFA9F89B-AF42-407A-B86D-73940D2E1AAA&q={searchTerms}&SSPV=
SearchScopes: HKCU - {76788FCF-6517-4664-8884-455ADC72D2F9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3321540&octid=EB_ORIGINAL_CTID&ISID=M522E8BA5-F382-4B48-9322-3BC584AE0B6B&SearchSource=58&CUI=&UM=5&UP=SPEFA9F89B-AF42-407A-B86D-73940D2E1AAA&q={searchTerms}&SSPV=
SearchScopes: HKCU - {8BEF02FA-D076-4ED8-A986-220289A68432} URL = hxxp://search.softonic.com/MOY00006/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=12dba528000000000000582c80139263&r=531
SearchScopes: HKCU - {E88769CA-CC25-4C53-8F68-41086E55F343} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=crm&q={searchTerms}&locale=de_US&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^AT&apn_uid=e3423595-d731-4397-840a-f38368ab8654&apn_sauid=0E2CB41F-C436-4BAA-AD64-D84FDAB82636
       
*****************

HKU\S-1-5-21-2476081923-213242794-1430544202-1000\Software\Microsoft\Windows\CurrentVersion\Run\\mmrrqkqpas => Value deleted successfully.
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Windows\CurrentVersion\Run\\AmazonMP3DownloaderHelper => Value not found.
HKU\S-1-5-21-2476081923-213242794-1430544202-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Windows\CurrentVersion\Run\\mmrrqkqpas => Value not found.
"c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll" => Value Data removed successfully.
C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs => Moved successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => Key deleted successfully.
HKCR\CLSID\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{76788FCF-6517-4664-8884-455ADC72D2F9} => Key deleted successfully.
HKCR\CLSID\{76788FCF-6517-4664-8884-455ADC72D2F9} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8BEF02FA-D076-4ED8-A986-220289A68432} => Key deleted successfully.
HKCR\CLSID\{8BEF02FA-D076-4ED8-A986-220289A68432} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E88769CA-CC25-4C53-8F68-41086E55F343} => Key deleted successfully.
HKCR\CLSID\{E88769CA-CC25-4C53-8F68-41086E55F343} => Key not found.

==== End of Fixlog ====

schrauber 19.05.2014 18:01
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

danieelchen 19.05.2014 21:22
Hey!

Das wäre das File vom Malwarebytes:

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlauf Datum: 19.05.2014
Suchlauf-Zeit: 21:56:31
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.1.1004
Malware Datenbank: v2014.05.19.10
Rootkit Datenbank: v2014.03.27.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Chameleon: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Daniela

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 279328
Verstrichene Zeit: 10 Min, 30 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Shuriken: Aktiviert
PUP: Warnen
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 0
(No malicious items detected)

Registrierungswerte: 0
(No malicious items detected)

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 0
(No malicious items detected)

Physische Sektoren: 0
(No malicious items detected)


(end)

Das ist das Ergebnis vom AWD-Cleaner:

Code:
# AdwCleaner v3.210 - Bericht erstellt am 19/05/2014 um 22:06:21
# Aktualisiert 19/05/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Daniela - DANIELA-PC
# Gestartet von : C:\Users\Daniela\Documents\Desktop\Sicherheit\adwcleaner_3.210.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\webbsuavveo
Ordner Gelöscht : C:\Program Files (x86)\webbsuavveo
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\torch
Ordner Gelöscht : C:\Users\Gast\AppData\Local\torch
Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\torch
Ordner Gelöscht : C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\hempmfkijmahkaddljkmchcmjbojoedl
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bniihpnpjcapipbhphchcjokklpkpnei
Ordner Gelöscht : C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\bniihpnpjcapipbhphchcjokklpkpnei
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\bniihpnpjcapipbhphchcjokklpkpnei
Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bniihpnpjcapipbhphchcjokklpkpnei
Ordner Gelöscht : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\olekefbkmdeccakekdijjfbhaoimdmmb
Ordner Gelöscht : C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\olekefbkmdeccakekdijjfbhaoimdmmb
Ordner Gelöscht : C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\olekefbkmdeccakekdijjfbhaoimdmmb
Ordner Gelöscht : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\olekefbkmdeccakekdijjfbhaoimdmmb
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Windows\System32\Tasks\YourFile DownloaderUpdate

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\hempmfkijmahkaddljkmchcmjbojoedl
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\hempmfkijmahkaddljkmchcmjbojoedl
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\RegisteredApplicationsEx

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v29.0.1 (en-US)

[ Datei : C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default\prefs.js ]


-\\ Google Chrome v34.0.1847.137

*************************

AdwCleaner[R0].txt - [38358 octets] - [09/03/2014 14:06:03]
AdwCleaner[R1].txt - [3200 octets] - [19/05/2014 22:05:15]
AdwCleaner[S0].txt - [36810 octets] - [09/03/2014 14:06:37]
AdwCleaner[S1].txt - [3008 octets] - [19/05/2014 22:06:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3068 octets] ##########

Und hier noch das vom Junkware Removal:

Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Daniela on 19.05.2014 at 22:13:04,33
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2476081923-213242794-1430544202-1000\Software\sweetim



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\Users\Daniela\appdata\locallow\boost_interprocess"



~~~ FireFox

Successfully deleted the following from C:\Users\Daniela\AppData\Roaming\mozilla\firefox\profiles\08wfw5gq.default\prefs.js

user_pref("extensions.jUXYgp.url", "hxxp://getsrv.info/sync2/?q=hfZ9ofV9CShEAen0pjs9tMqLDe49CNU0nlnMCMlNhd9FqdaHrdsGrjkGrjaMBzqUojw9rdrEqHsErjn9rGh7hfs0pihPBMn0pdwGrdnGqHw8pdn
Emptied folder: C:\Users\Daniela\AppData\Roaming\mozilla\firefox\profiles\08wfw5gq.default\minidumps [83 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19.05.2014 at 22:18:12,25
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Danke schon mal!

schrauber 20.05.2014 12:35

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

danieelchen 22.05.2014 19:34
Hi!
War die letzten Tage zu wenig am PC..

Anbei das File vom ESET:

Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=5f7afdf94e417c4c889dfbd781e046b7
# engine=18357
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-05-22 06:42:42
# local_time=2014-05-22 08:42:42 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 300118 26061508 292879 0
# compatibility_mode=5893 16776574 100 94 26061050 152370812 0 0
# scanned=215990
# found=3
# cleaned=0
# scan_time=39317
sh=6FCC2D1C7A56AC7FB78AE6794E2104BE9EB1DC50 ft=0 fh=0000000000000000 vn="VBS/Kryptik.W Trojaner" ac=I fn="C:\FRST\Quarantine\C\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs.xBAD"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="VBS/Kryptik.W Trojaner" ac=I fn="C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs"
sh=6FCC2D1C7A56AC7FB78AE6794E2104BE9EB1DC50 ft=0 fh=0000000000000000 vn="VBS/Kryptik.W Trojaner" ac=I fn="C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs"
Hier das File vom Security Check:

Code:
Results of screen317's Security Check version 0.99.83 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
 Windows Security Center service is not running! This report may not be accurate!
Avira Desktop 
 Antivirus out of date! 
`````````Anti-malware/Other Utilities Check:`````````
 Java(TM) 6 Update 22 
 Java version out of Date!
 Adobe Flash Player 13.0.0.214 
 Adobe Reader 10.1.10 Adobe Reader out of Date! 
 Mozilla Firefox (29.0.1)
 Google Chrome 34.0.1847.131 
 Google Chrome 34.0.1847.137 
````````Process Check: objlist.exe by Laurent```````` 
 Avira Antivir avgnt.exe
 Avira Antivir avguard.exe
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````
und dann noch das vom FRST:


FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Daniela (administrator) on DANIELA-PC on 22-05-2014 20:27:31
Running from C:\Users\Daniela\Documents\Desktop\Sicherheit
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Windows\SysWOW64\ANIWConnService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(MKS Software Inc.) C:\Windows\System32\nutsrv4.exe
(PTC) C:\Program Files\PTC\PTC Portmapper\i486_nt\obj\portmap.exe
() C:\Program Files (x86)\3DataManager\WTGService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
() C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
() C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe
(Dropbox, Inc.) C:\Users\Daniela\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Wireless Service) C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe
(D-Link Corp.) C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
(WebToGo Mobile Internet GmbH) C:\Program Files (x86)\3DataManager\3DataManager.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor)
HKLM-x32\...\Run: [ANIWZCS2Service] => C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe [98304 2009-08-21] (Wireless Service)
HKLM-x32\...\Run: [D-Link D-Link Wireless G DWL-G122_DWA-110] => C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe [1708032 2009-09-18] (D-Link Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-06-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NuTCSetupEnviron] => C:\Program Files\PTC\MKS Toolkit\bin\ncoeenv.exe [37160 2009-11-23] (MKS Software Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\RunOnce: [EasyTuneVI] - C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe [20480 2007-07-26] ()
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Daniela\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [mmrrqkqpas] => wscript.exe //B "C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs" <===== ATTENTION
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {4cb14140-802e-11e2-8594-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {4cb1415b-802e-11e2-8594-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {5e6e520d-9e34-11e2-86fa-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {7b76f3d8-813f-11e2-955f-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {9e2c28b9-b32a-11e2-b66f-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {bce19f56-77f4-11e2-9e92-50e5495b3e25} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {bce19f64-77f4-11e2-9e92-50e5495b3e25} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {bd3d3106-7ee7-11e3-a157-806e6f6e6963} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {d40a0837-bef5-11e2-98c0-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk
ShortcutTarget: Launcher.lnk -> C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe ()
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Daniela\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs ()
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6B44B148E2ADCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{229568EE-F79A-4D35-9334-16F6282920BD}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{40650E9F-BAB0-44FD-91D3-41620C54A9BA}: [NameServer]213.94.78.16 213.94.78.17
Tcpip\..\Interfaces\{4EE829F7-98BA-4F45-8DA5-40F740AD4C64}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{AE63A2E6-A363-451E-B54E-DC26B7E7A5E7}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{C8AEA777-F6C5-4F9B-A007-211F765EBB61}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{E8A7C741-6A5D-40A0-8600-D6A94EDF60F9}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{F4D11E85-3AE0-445A-BB2E-65BC4BC78CC6}: [NameServer]213.94.78.17 213.94.78.16

FireFox:
========
FF ProfilePath: C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SelectedSearchEngine: Google
FF Homepage: https://www.google.at/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Daniela\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Dilandau - C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default\Extensions\download_mp3@dilandau.eu.xpi [2013-03-05]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-22]
FF Extension: Adblock Plus - C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-16]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-01-31]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (YouTube) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-01-31]
CHR Extension: (No Name) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\bniihpnpjcapipbhphchcjokklpkpnei [2014-03-02]
CHR Extension: (New Tab Page) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\cikkigamncoobkmpenfdeniclmehdidh [2014-03-02]
CHR Extension: (Google Search) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-01-31]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-01-31]
CHR Extension: (No Name) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\olekefbkmdeccakekdijjfbhaoimdmmb [2014-03-02]
CHR Extension: (Gmail) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-01-31]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Daniela\AppData\Roaming\DVDVideoSoft\DVDVideoSoftBrowserExtension.crx [2012-11-23]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]

==================== Services (Whitelisted) =================

R2 ANIWConnService; C:\Windows\SysWOW64\ANIWConnService.exe [151552 2009-07-07] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-08-01] (Freemake)
R2 NuTCRACKERService; C:\Windows\system32\nutsrv4.exe [563424 2009-11-10] (MKS Software Inc.)
R2 PortmapperService; C:\Program Files\PTC/PTC Portmapper/i486_nt/obj/portmap.exe [676864 2013-03-25] (PTC)
R2 WTGService; C:\Program Files (x86)\3DataManager\WTGService.exe [343024 2012-07-05] ()

==================== Drivers (Whitelisted) ====================

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11832 2010-06-29] (Advanced Micro Devices Inc.)
R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2009-03-06] ()
R3 AODDriver; C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [52280 2010-03-12] (Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-16] (Avira Operations GmbH & Co. KG)
R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2014-05-21] ()
R3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [229376 2013-02-25] (Huawei Technologies Co., Ltd.)
S3 netr28ux; C:\Windows\System32\DRIVERS\Dnetr28ux.sys [987648 2009-08-05] (Ralink Technology Corp.)
S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-19 22:18 - 2014-05-19 22:18 - 00001396 _____ () C:\Users\Daniela\Desktop\JRT.txt
2014-05-19 22:13 - 2014-05-19 22:13 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 22:05 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-18 20:40 - 2014-05-18 20:40 - 00000000 ____D () C:\ProgramData\Panda Security
2014-05-18 20:39 - 2014-05-18 20:39 - 00003108 _____ () C:\Windows\System32\Tasks\PandaUSBVaccine
2014-05-18 20:39 - 2014-05-18 20:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2014-05-18 20:39 - 2014-05-18 20:39 - 00000000 ____D () C:\Program Files (x86)\Panda USB Vaccine
2014-05-17 17:05 - 2014-05-19 22:01 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-17 17:05 - 2014-05-19 21:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-17 17:05 - 2014-05-19 21:39 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-17 17:05 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-17 17:05 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-16 14:10 - 2014-05-16 14:10 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\DropboxMaster
2014-05-15 22:46 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 22:46 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 22:46 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 22:45 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 22:45 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 22:45 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 17:47 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 17:47 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 17:42 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 17:42 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 17:42 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 17:42 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 17:42 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 17:42 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 17:42 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 17:42 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 17:42 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 17:42 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 17:42 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 17:42 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 17:42 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 17:42 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-15 17:41 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 17:41 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieUserList
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieSiteList
2014-05-09 23:51 - 2014-05-09 23:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 20:15 - 2014-05-09 20:15 - 01292312 _____ () C:\Windows\Minidump\050914-16411-01.dmp
2014-05-09 00:14 - 2014-05-09 00:14 - 00455296 _____ () C:\Windows\Minidump\050914-17331-01.dmp
2014-05-06 22:30 - 2014-05-06 22:30 - 01241296 _____ () C:\Windows\Minidump\050614-16458-01.dmp
2014-05-03 18:42 - 2014-05-03 18:42 - 00005992 _____ () C:\Users\Daniela\AppData\Local\recently-used.xbel
2014-04-29 22:03 - 2014-04-29 22:03 - 01243304 _____ () C:\Windows\Minidump\042914-14352-01.dmp
2014-04-25 16:47 - 2014-04-25 16:47 - 01153720 _____ () C:\Windows\Minidump\042514-15740-01.dmp
2014-04-22 10:43 - 2014-04-22 10:44 - 01206984 _____ () C:\Windows\Minidump\042214-15662-01.dmp

==================== One Month Modified Files and Folders =======

2014-05-22 20:27 - 2014-03-09 14:16 - 00000000 ____D () C:\FRST
2014-05-22 20:23 - 2013-02-25 18:38 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\3DataManager
2014-05-22 20:23 - 2011-11-28 17:13 - 01933264 _____ () C:\Windows\WindowsUpdate.log
2014-05-22 20:21 - 2012-01-31 17:40 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-22 20:20 - 2012-12-07 23:59 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-21 23:08 - 2011-11-29 15:48 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Skype
2014-05-21 22:56 - 2012-12-08 17:00 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Dropbox
2014-05-21 21:15 - 2009-07-14 06:45 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-21 21:15 - 2009-07-14 06:45 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-21 21:13 - 2009-07-14 19:58 - 00653928 _____ () C:\Windows\system32\perfh007.dat
2014-05-21 21:13 - 2009-07-14 19:58 - 00129800 _____ () C:\Windows\system32\perfc007.dat
2014-05-21 21:13 - 2009-07-14 07:13 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-21 21:10 - 2012-12-08 17:03 - 00000000 ___RD () C:\Users\Daniela\Dropbox
2014-05-21 21:09 - 2011-11-28 20:14 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2014-05-21 21:09 - 2011-11-28 20:14 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2014-05-21 21:08 - 2013-10-15 15:59 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cec9aed053bc50.job
2014-05-21 21:08 - 2013-09-23 10:50 - 00013966 _____ () C:\Windows\setupact.log
2014-05-21 21:08 - 2011-11-28 20:14 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-05-21 21:08 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-19 22:18 - 2014-05-19 22:18 - 00001396 _____ () C:\Users\Daniela\Desktop\JRT.txt
2014-05-19 22:13 - 2014-05-19 22:13 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 22:07 - 2013-09-29 07:07 - 00032532 _____ () C:\Windows\PFRO.log
2014-05-19 22:06 - 2014-03-09 14:05 - 00000000 ____D () C:\AdwCleaner
2014-05-19 22:01 - 2014-05-17 17:05 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-19 21:39 - 2014-05-17 17:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-19 21:39 - 2014-05-17 17:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-18 20:42 - 2011-11-28 17:14 - 00000000 ___RD () C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-18 20:40 - 2014-05-18 20:40 - 00000000 ____D () C:\ProgramData\Panda Security
2014-05-18 20:39 - 2014-05-18 20:39 - 00003108 _____ () C:\Windows\System32\Tasks\PandaUSBVaccine
2014-05-18 20:39 - 2014-05-18 20:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2014-05-18 20:39 - 2014-05-18 20:39 - 00000000 ____D () C:\Program Files (x86)\Panda USB Vaccine
2014-05-17 20:34 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-05-17 20:34 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\addins
2014-05-17 17:23 - 2011-12-02 18:29 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-05-17 17:05 - 2014-03-09 14:21 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Malwarebytes
2014-05-17 17:05 - 2014-03-09 14:21 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-17 12:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-16 14:10 - 2014-05-16 14:10 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\DropboxMaster
2014-05-16 14:10 - 2012-12-08 17:01 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-16 14:05 - 2011-11-28 17:14 - 00000000 ___RD () C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 14:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-15 22:45 - 2013-08-31 07:43 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 22:44 - 2012-04-02 22:13 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-15 17:58 - 2012-02-14 22:58 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-14 20:47 - 2013-03-25 23:36 - 00000112 _____ () C:\Users\Public\Documents\std.err
2014-05-14 20:47 - 2013-03-25 23:14 - 00001952 _____ () C:\Users\Public\Documents\std.out
2014-05-14 18:38 - 2012-12-07 23:59 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 18:38 - 2012-12-07 23:59 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 18:38 - 2012-02-07 21:37 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 17:52 - 2012-12-10 12:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieUserList
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieSiteList
2014-05-09 23:51 - 2014-05-09 23:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 23:04 - 2012-02-13 22:42 - 00000000 ____D () C:\Users\Daniela\Sonstiges
2014-05-09 20:15 - 2014-05-09 20:15 - 01292312 _____ () C:\Windows\Minidump\050914-16411-01.dmp
2014-05-09 20:15 - 2013-09-29 07:07 - 467427714 _____ () C:\Windows\MEMORY.DMP
2014-05-09 20:15 - 2012-03-27 22:06 - 00000000 ____D () C:\Windows\Minidump
2014-05-09 00:14 - 2014-05-09 00:14 - 00455296 _____ () C:\Windows\Minidump\050914-17331-01.dmp
2014-05-08 10:28 - 2013-12-14 13:10 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cec9aed053bc50
2014-05-08 10:28 - 2012-01-31 17:40 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-06 23:51 - 2012-11-23 10:55 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-06 23:51 - 2011-11-29 17:06 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\DVDVideoSoft
2014-05-06 23:51 - 2011-11-29 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-06 22:30 - 2014-05-06 22:30 - 01241296 _____ () C:\Windows\Minidump\050614-16458-01.dmp
2014-05-06 06:40 - 2014-05-15 22:46 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 22:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 22:45 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 22:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 22:46 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 22:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-03 18:47 - 2014-04-03 00:54 - 00000000 ____D () C:\Users\Daniela\.gimp-2.8
2014-05-03 18:42 - 2014-05-03 18:42 - 00005992 _____ () C:\Users\Daniela\AppData\Local\recently-used.xbel
2014-05-03 18:42 - 2014-04-03 00:55 - 00000000 ____D () C:\Users\Daniela\AppData\Local\gtk-2.0
2014-04-30 21:09 - 2014-03-27 16:01 - 00000000 ____D () C:\Program Files\Recuva
2014-04-29 22:03 - 2014-04-29 22:03 - 01243304 _____ () C:\Windows\Minidump\042914-14352-01.dmp
2014-04-25 16:47 - 2014-04-25 16:47 - 01153720 _____ () C:\Windows\Minidump\042514-15740-01.dmp
2014-04-22 10:44 - 2014-04-22 10:43 - 01206984 _____ () C:\Windows\Minidump\042214-15662-01.dmp

Some content of TEMP:
====================
C:\Users\Daniela\AppData\Local\Temp\avgnt.exe
C:\Users\Daniela\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpmbywp9.dll
C:\Users\Daniela\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-15 17:42] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-22 09:16

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---


Aber der USB-Stick speichert immer noch nur Verknüpfungen :(
Hab ich da was falsch gemacht?

schrauber 23.05.2014 16:19
Java und Adobe updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs
C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [mmrrqkqpas] => wscript.exe //B "C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs" <===== ATTENTION
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs ()

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


danieelchen 23.05.2014 17:30
Hey!

Danke, das wäre das File dazu:


Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 17-05-2014
Ran by Daniela at 2014-05-23 18:24:45 Run:2
Running from C:\Users\Daniela\Documents\Desktop\Sicherheit
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs
C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [mmrrqkqpas] => wscript.exe //B "C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs" <===== ATTENTION
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs ()
       
*****************

Could not move "C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs" => Scheduled to move on reboot.
C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs => Moved successfully.
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\Software\Microsoft\Windows\CurrentVersion\Run\\mmrrqkqpas => Value deleted successfully.
C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\mmrrqkqpas.vbs not found.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-05-23 18:27:03)<=

C:\Users\Daniela\AppData\Local\Temp\mmrrqkqpas.vbs => Is moved successfully.

==== End of Fixlog ====

schrauber 24.05.2014 11:23
Frisches FRST log bitte. Versuch nochmal was auf den Stick zu schieben. Die bereits vorhanden Sachen auf dem Stick beheben wir danach, das ist das kleinste Problem.

danieelchen 24.05.2014 12:39
Jetzt funktioniert's!! super, danke! :)
Was war da denn jetzt los?



FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014
Ran by Daniela (administrator) on DANIELA-PC on 24-05-2014 13:34:00
Running from C:\Users\Daniela\Documents\Desktop\Sicherheit
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Windows\SysWOW64\ANIWConnService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(MKS Software Inc.) C:\Windows\System32\nutsrv4.exe
(PTC) C:\Program Files\PTC\PTC Portmapper\i486_nt\obj\portmap.exe
() C:\Program Files (x86)\3DataManager\WTGService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
() C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe
(Dropbox, Inc.) C:\Users\Daniela\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Wireless Service) C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe
(D-Link Corp.) C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(WebToGo Mobile Internet GmbH) C:\Program Files (x86)\3DataManager\3DataManager.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor)
HKLM-x32\...\Run: [ANIWZCS2Service] => C:\Program Files (x86)\ANI\ANIWZCS2 Service\WZCSLDR2.exe [98304 2009-08-21] (Wireless Service)
HKLM-x32\...\Run: [D-Link D-Link Wireless G DWL-G122_DWA-110] => C:\Program Files (x86)\D-Link\DWL-G122_DWA-110\AirGCFG.exe [1708032 2009-09-18] (D-Link Corp.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-06-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NuTCSetupEnviron] => C:\Program Files\PTC\MKS Toolkit\bin\ncoeenv.exe [37160 2009-11-23] (MKS Software Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\RunOnce: [EasyTuneVI] - C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe [20480 2007-07-26] ()
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Daniela\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {4cb14140-802e-11e2-8594-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {4cb1415b-802e-11e2-8594-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {5e6e520d-9e34-11e2-86fa-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {7b76f3d8-813f-11e2-955f-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {9e2c28b9-b32a-11e2-b66f-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {bce19f56-77f4-11e2-9e92-50e5495b3e25} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {bce19f64-77f4-11e2-9e92-50e5495b3e25} - F:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {bd3d3106-7ee7-11e3-a157-806e6f6e6963} - E:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-2476081923-213242794-1430544202-1000\...\MountPoints2: {d40a0837-bef5-11e2-98c0-50e5495b3e25} - E:\.\Autorun.exe AUTORUN=1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk
ShortcutTarget: Launcher.lnk -> C:\Program Files (x86)\3DataManager\3DataManager_Launcher.exe ()
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Daniela\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6B44B148E2ADCC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{229568EE-F79A-4D35-9334-16F6282920BD}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{40650E9F-BAB0-44FD-91D3-41620C54A9BA}: [NameServer]213.94.78.16 213.94.78.17
Tcpip\..\Interfaces\{4EE829F7-98BA-4F45-8DA5-40F740AD4C64}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{AE63A2E6-A363-451E-B54E-DC26B7E7A5E7}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{C8AEA777-F6C5-4F9B-A007-211F765EBB61}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{E8A7C741-6A5D-40A0-8600-D6A94EDF60F9}: [NameServer]213.94.78.17 213.94.78.16
Tcpip\..\Interfaces\{F4D11E85-3AE0-445A-BB2E-65BC4BC78CC6}: [NameServer]213.94.78.16 213.94.78.17

FireFox:
========
FF ProfilePath: C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SelectedSearchEngine: Google
FF Homepage: https://www.google.at/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Daniela\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Dilandau - C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default\Extensions\download_mp3@dilandau.eu.xpi [2013-03-05]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-22]
FF Extension: Adblock Plus - C:\Users\Daniela\AppData\Roaming\Mozilla\Firefox\Profiles\08wfw5gq.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-16]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-01-31]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (YouTube) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-01-31]
CHR Extension: (No Name) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\bniihpnpjcapipbhphchcjokklpkpnei [2014-03-02]
CHR Extension: (New Tab Page) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\cikkigamncoobkmpenfdeniclmehdidh [2014-03-02]
CHR Extension: (Google Search) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-01-31]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2012-01-31]
CHR Extension: (No Name) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\olekefbkmdeccakekdijjfbhaoimdmmb [2014-03-02]
CHR Extension: (Gmail) - C:\Users\Daniela\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-01-31]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Users\Daniela\AppData\Roaming\DVDVideoSoft\DVDVideoSoftBrowserExtension.crx [2012-11-23]
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]

==================== Services (Whitelisted) =================

R2 ANIWConnService; C:\Windows\SysWOW64\ANIWConnService.exe [151552 2009-07-07] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [101888 2013-08-01] (Freemake)
R2 NuTCRACKERService; C:\Windows\system32\nutsrv4.exe [563424 2009-11-10] (MKS Software Inc.)
R2 PortmapperService; C:\Program Files\PTC/PTC Portmapper/i486_nt/obj/portmap.exe [676864 2013-03-25] (PTC)
R2 WTGService; C:\Program Files (x86)\3DataManager\WTGService.exe [343024 2012-07-05] ()

==================== Drivers (Whitelisted) ====================

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11832 2010-06-29] (Advanced Micro Devices Inc.)
R1 anodlwf; C:\Windows\System32\DRIVERS\anodlwfx.sys [15872 2009-03-06] ()
R3 AODDriver; C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [52280 2010-03-12] (Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-01-16] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-01-16] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-01-16] (Avira Operations GmbH & Co. KG)
R3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2014-05-24] ()
R3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [229376 2013-02-25] (Huawei Technologies Co., Ltd.)
S3 netr28ux; C:\Windows\System32\DRIVERS\Dnetr28ux.sys [987648 2009-08-05] (Ralink Technology Corp.)
S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-23 18:22 - 2014-05-23 18:22 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-23 18:22 - 2014-05-23 18:22 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-05-23 18:22 - 2014-05-23 18:22 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-19 22:18 - 2014-05-19 22:18 - 00001396 _____ () C:\Users\Daniela\Desktop\JRT.txt
2014-05-19 22:13 - 2014-05-19 22:13 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 22:05 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-18 20:40 - 2014-05-18 20:40 - 00000000 ____D () C:\ProgramData\Panda Security
2014-05-18 20:39 - 2014-05-18 20:39 - 00003108 _____ () C:\Windows\System32\Tasks\PandaUSBVaccine
2014-05-18 20:39 - 2014-05-18 20:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2014-05-18 20:39 - 2014-05-18 20:39 - 00000000 ____D () C:\Program Files (x86)\Panda USB Vaccine
2014-05-17 17:05 - 2014-05-19 22:01 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-17 17:05 - 2014-05-19 21:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-17 17:05 - 2014-05-19 21:39 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-17 17:05 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-17 17:05 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-16 14:10 - 2014-05-16 14:10 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\DropboxMaster
2014-05-15 22:46 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 22:46 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 22:46 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 22:45 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 22:45 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 22:45 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 17:47 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 17:47 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 17:42 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 17:42 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 17:42 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 17:42 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 17:42 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 17:42 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 17:42 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 17:42 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 17:42 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 17:42 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 17:42 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 17:42 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 17:42 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 17:42 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 17:42 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 17:42 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 17:42 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-15 17:41 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 17:41 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieUserList
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieSiteList
2014-05-09 23:51 - 2014-05-09 23:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 20:15 - 2014-05-09 20:15 - 01292312 _____ () C:\Windows\Minidump\050914-16411-01.dmp
2014-05-09 00:14 - 2014-05-09 00:14 - 00455296 _____ () C:\Windows\Minidump\050914-17331-01.dmp
2014-05-06 22:30 - 2014-05-06 22:30 - 01241296 _____ () C:\Windows\Minidump\050614-16458-01.dmp
2014-05-03 18:42 - 2014-05-03 18:42 - 00005992 _____ () C:\Users\Daniela\AppData\Local\recently-used.xbel
2014-04-29 22:03 - 2014-04-29 22:03 - 01243304 _____ () C:\Windows\Minidump\042914-14352-01.dmp
2014-04-25 16:47 - 2014-04-25 16:47 - 01153720 _____ () C:\Windows\Minidump\042514-15740-01.dmp

==================== One Month Modified Files and Folders =======

2014-05-24 13:34 - 2014-03-09 14:16 - 00000000 ____D () C:\FRST
2014-05-24 13:33 - 2012-01-31 17:40 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-24 13:24 - 2011-11-29 15:48 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Skype
2014-05-24 13:14 - 2013-02-25 18:38 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\3DataManager
2014-05-24 12:36 - 2012-12-07 23:59 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-24 11:43 - 2012-12-08 17:03 - 00000000 ___RD () C:\Users\Daniela\Dropbox
2014-05-24 11:43 - 2012-12-08 17:00 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Dropbox
2014-05-24 11:36 - 2011-11-28 17:13 - 02017808 _____ () C:\Windows\WindowsUpdate.log
2014-05-24 10:59 - 2009-07-14 19:58 - 00653928 _____ () C:\Windows\system32\perfh007.dat
2014-05-24 10:59 - 2009-07-14 19:58 - 00129800 _____ () C:\Windows\system32\perfc007.dat
2014-05-24 10:59 - 2009-07-14 07:13 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-24 10:59 - 2009-07-14 06:45 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-24 10:59 - 2009-07-14 06:45 - 00015152 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-24 10:57 - 2013-10-15 15:59 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cec9aed053bc50.job
2014-05-24 10:57 - 2011-11-28 20:14 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2014-05-24 10:57 - 2011-11-28 20:14 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-05-24 10:57 - 2011-11-28 20:14 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2014-05-24 10:51 - 2013-09-23 10:50 - 00014078 _____ () C:\Windows\setupact.log
2014-05-24 10:51 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-23 18:26 - 2013-09-29 07:07 - 00034020 _____ () C:\Windows\PFRO.log
2014-05-23 18:24 - 2011-11-28 17:14 - 00000000 ___RD () C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-23 18:23 - 2011-11-29 16:27 - 00000000 ____D () C:\Users\Daniela\AppData\Local\Adobe
2014-05-23 18:22 - 2014-05-23 18:22 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-23 18:22 - 2014-05-23 18:22 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-05-23 18:22 - 2014-05-23 18:22 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-05-23 18:22 - 2011-11-28 17:22 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-19 22:18 - 2014-05-19 22:18 - 00001396 _____ () C:\Users\Daniela\Desktop\JRT.txt
2014-05-19 22:13 - 2014-05-19 22:13 - 00000000 ____D () C:\Windows\ERUNT
2014-05-19 22:06 - 2014-03-09 14:05 - 00000000 ____D () C:\AdwCleaner
2014-05-19 22:01 - 2014-05-17 17:05 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-19 21:39 - 2014-05-17 17:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-19 21:39 - 2014-05-17 17:05 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-18 20:40 - 2014-05-18 20:40 - 00000000 ____D () C:\ProgramData\Panda Security
2014-05-18 20:39 - 2014-05-18 20:39 - 00003108 _____ () C:\Windows\System32\Tasks\PandaUSBVaccine
2014-05-18 20:39 - 2014-05-18 20:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security
2014-05-18 20:39 - 2014-05-18 20:39 - 00000000 ____D () C:\Program Files (x86)\Panda USB Vaccine
2014-05-17 20:34 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-05-17 20:34 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\addins
2014-05-17 17:23 - 2011-12-02 18:29 - 00000000 ____D () C:\Program Files (x86)\JDownloader
2014-05-17 17:05 - 2014-03-09 14:21 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Malwarebytes
2014-05-17 17:05 - 2014-03-09 14:21 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-17 12:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-16 14:10 - 2014-05-16 14:10 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\DropboxMaster
2014-05-16 14:10 - 2012-12-08 17:01 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-16 14:05 - 2011-11-28 17:14 - 00000000 ___RD () C:\Users\Daniela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-16 14:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-15 22:45 - 2013-08-31 07:43 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 22:44 - 2012-04-02 22:13 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 20:47 - 2013-03-25 23:36 - 00000112 _____ () C:\Users\Public\Documents\std.err
2014-05-14 20:47 - 2013-03-25 23:14 - 00001952 _____ () C:\Users\Public\Documents\std.out
2014-05-14 18:38 - 2012-12-07 23:59 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 18:38 - 2012-12-07 23:59 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 18:38 - 2012-02-07 21:37 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 17:52 - 2012-12-10 12:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieUserList
2014-05-11 20:47 - 2014-05-11 20:47 - 00000000 __SHD () C:\Users\Daniela\AppData\Local\EmieSiteList
2014-05-09 23:51 - 2014-05-09 23:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-09 23:04 - 2012-02-13 22:42 - 00000000 ____D () C:\Users\Daniela\Sonstiges
2014-05-09 20:15 - 2014-05-09 20:15 - 01292312 _____ () C:\Windows\Minidump\050914-16411-01.dmp
2014-05-09 20:15 - 2013-09-29 07:07 - 467427714 _____ () C:\Windows\MEMORY.DMP
2014-05-09 20:15 - 2012-03-27 22:06 - 00000000 ____D () C:\Windows\Minidump
2014-05-09 00:14 - 2014-05-09 00:14 - 00455296 _____ () C:\Windows\Minidump\050914-17331-01.dmp
2014-05-08 10:28 - 2013-12-14 13:10 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1cec9aed053bc50
2014-05-08 10:28 - 2012-01-31 17:40 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-06 23:51 - 2012-11-23 10:55 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-06 23:51 - 2011-11-29 17:06 - 00000000 ____D () C:\Users\Daniela\AppData\Roaming\DVDVideoSoft
2014-05-06 23:51 - 2011-11-29 16:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-06 22:30 - 2014-05-06 22:30 - 01241296 _____ () C:\Windows\Minidump\050614-16458-01.dmp
2014-05-06 06:40 - 2014-05-15 22:46 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 22:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 22:45 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 22:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 22:46 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 22:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-03 18:47 - 2014-04-03 00:54 - 00000000 ____D () C:\Users\Daniela\.gimp-2.8
2014-05-03 18:42 - 2014-05-03 18:42 - 00005992 _____ () C:\Users\Daniela\AppData\Local\recently-used.xbel
2014-05-03 18:42 - 2014-04-03 00:55 - 00000000 ____D () C:\Users\Daniela\AppData\Local\gtk-2.0
2014-04-30 21:09 - 2014-03-27 16:01 - 00000000 ____D () C:\Program Files\Recuva
2014-04-29 22:03 - 2014-04-29 22:03 - 01243304 _____ () C:\Windows\Minidump\042914-14352-01.dmp
2014-04-25 16:47 - 2014-04-25 16:47 - 01153720 _____ () C:\Windows\Minidump\042514-15740-01.dmp

Some content of TEMP:
====================
C:\Users\Daniela\AppData\Local\Temp\avgnt.exe
C:\Users\Daniela\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpl1luau.dll
C:\Users\Daniela\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-15 17:42] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-22 09:16

==================== End Of Log ============================
--- --- ---

schrauber 25.05.2014 06:48
Malware, grob umschrieben :)

JEtzt versteckte DAteien sichtbar machen, Haken raus bei geschützte Dateien ausblenden. Du solltest jetzt die normalen Ordner auf dem Stick sehen. Rechtsklick > Eigenschaften, Haken weg bei geschützt und versteckt, dann kannste die Verknüpfungen löschen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 22:50 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19