Trojaner-Board - Auf seltsamen Link geklickt

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Auf seltsamen Link geklickt (https://www.trojaner-board.de/135998-seltsamen-link-geklickt.html)

Auf seltsamen Link geklickt

Hallo,
Ich habe mich gerade auf einer Seite anmelden wollen und mir wurde die Bestätigungsmail geschickt, nur in meiner Hektik habe ich gar nicht darauf geachtet ob es die richtige war und habe direkt auf den dortigen Link geklickt.
Erst als eine suspekte Seite kam, habe ich bemerkt das die Mail angeblich von Paypal sein soll, jedoch war sie das sicher nicht und, noch dazu, ich habe gar kein Paypal.
Jetzt habe ich natürlich die Befürchtung, dass es Malware, etc. war.

Bitte keine Kommentare wie: warum klickst du auch auf den Link, etc. denn das weiß ich selbst...

Danke, schon mal !

Zitat:

Bitte keine Kommentare wie: warum klickst du auch auf den Link, etc. denn das weiß ich selbst...

und warum machst Du es dann? :p

Scherz :)

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32bit oder FRST 64bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Scan.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Danke, für die schnelle Antwort!

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2013 03

Ran by Sarah (administrator) on 03-06-2013 21:59:29

Running from C:\Users\Sarah\Desktop

Windows 8 (X64) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe

(Microsoft Corporation) C:\WINDOWS\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe

() C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(Microsoft Corporation) C:\WINDOWS\SysWOW64\schtasks.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

() C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe

(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe

(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe

(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe

(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe

() C:\Program Files (x86)\Orange Mobiles Internet\UIExec.exe

() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

() C:\Program Files (x86)\Orange Mobiles Internet\UIMain.exe

() C:\Program Files (x86)\Orange Mobiles Internet\CMUpdater.exe

() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\Bluetooth Headset Helper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-27] (Synaptics Incorporated)

HKLM\...\Run: [SynLenovoGestureMgr] "%ProgramFiles%\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m [665400 2012-08-27] (Synaptics)

HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12921488 2012-09-14] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4  [1214608 2012-09-14] (Realtek Semiconductor)

HKLM\...\Run: [OnekeyStudio] C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-08-10] (Lenovo)

HKLM\...\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2012-10-20] (Lenovo (Beijing) Limited)

HKLM\...\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2012-10-20] (Lenovo(beijing) Limited)

HKCU\...\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-16] ()

HKCU\...\Run: [GoogleChromeAutoLaunch_3AA6F76B1F039D21D0A8ED450CE79138] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window [825808 2013-05-23] (Google Inc.)

MountPoints2: {3cc730bf-4c58-11e2-be76-20689d7b2506} - "F:\AutoRun.exe" 

HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60 [277504 2012-08-16] (Intel Corporation)

HKLM-x32\...\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-05-02] (Vimicro)

HKLM-x32\...\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart [508656 2012-07-25] (Dolby Laboratories Inc.)

HKLM-x32\...\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" [136488 2012-07-27] (CyberLink)

HKLM-x32\...\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s [167024 2012-07-27] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0" [217088 2012-04-18] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" [91432 2012-03-28] (CyberLink Corp.)

HKLM-x32\...\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [155488 2012-07-12] (Intel Corporation)

HKLM-x32\...\Run: [UIExec] "C:\Program Files (x86)\Orange Mobiles Internet\UIExec.exe" [153424 2012-02-11] ()

HKLM-x32\...\Run: [BambooCore] C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] ()

HKLM-x32\...\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345312 2013-05-08] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)

AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll [250504 2013-02-10] (NVIDIA Corporation)

Startup: C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk

ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: proxy:8080

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.delta-search.com/?affID=119528&babsrc=HP_ss&mntrId=36d0ada6000000000000024bffb3753b

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com

HKCU SearchScopes: DefaultScope {72066460-5C40-4AE7-A020-48DB00411009} URL = hxxp://search.softonic.com/MOY00006/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=906

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=119528&babsrc=SP_ss&mntrId=36d0ada6000000000000024bffb3753b

SearchScopes: HKCU - {72066460-5C40-4AE7-A020-48DB00411009} URL = hxxp://search.softonic.com/MOY00006/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=906

SearchScopes: HKCU - {B4001FFC-49CA-4047-BA64-2DA345FE8A83} URL = 

BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.10.0\bh\delta.dll (Delta-search.com)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: Softonic Helper Object - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files (x86)\Softonic\Softonic\1.8.8.11\bh\Softonic.dll (Softonic.com)

BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)

Toolbar: HKLM-x32 - Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\Softonic\1.8.8.11\SoftonicTlbr.dll (Softonic.com)

Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.10.0\deltaTlbr.dll (Delta-search.com)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 213.94.78.26 213.94.78.27
 

Chrome: 

=======

CHR HomePage: hxxp://www.delta-search.com/?affID=119528&babsrc=HP_ss&mntrId=36d0ada6000000000000024bffb3753b

CHR RestoreOnStartup: "hxxp://www.google.at/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\pdf.dll ()

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File

CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File

CHR Extension: (Google Docs) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: () - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\elchiiiejkobdbblfejjkbphbddgmljf\1.0_0

CHR Extension: () - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0

CHR Extension: (Nuvi Collection) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbjcghmcibkemiabpnofapahcpjjpefe\5_0

CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0

CHR Extension: (Gmail) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752 2013-04-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816 2013-04-02] (Avira Operations GmbH & Co. KG)

R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252088 2012-08-25] (Broadcom Corporation.)

R2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1249.132\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2787280 2013-03-22] ()

R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [957304 2012-09-06] (Broadcom Corporation.)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-07-18] ()

S2 UI Assistant Service; C:\Program Files (x86)\Orange Mobiles Internet\AssistantServices.exe [270672 2012-02-11] ()

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)

R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568 2012-07-18] (Intel® Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [165688 2012-08-25] (Broadcom Corporation.)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4273192 2012-08-19] (Intel Corporation)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated)

S3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [48096 2012-08-09] (Windows (R) Win 7 DDK provider)

R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [975104 2012-08-24] (Vimicro Corporation)

S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

R3 WUDFSensorLP; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)

R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)

S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-09] (Windows (R) Win 7 DDK provider)

R3 zte_cdc_acm; C:\Windows\system32\DRIVERS\zte_cdc_acm.sys [79872 2011-05-23] (ZTE)

R3 zte_cdc_ecm; C:\Windows\system32\DRIVERS\zte_cdc_ecm.sys [36864 2011-05-23] (ZTE)

S3 zte_cpo; C:\Windows\system32\DRIVERS\zte_cpo.sys [14336 2011-05-23] (ZTE)

R3 zte_ecm_enum; C:\Windows\System32\drivers\zte_ecm_enum.sys [56320 2011-05-23] (ZTE)

R3 zte_ecm_enum_filter; C:\Windows\System32\drivers\zte_ecm_enum_filter.sys [56320 2011-05-23] (ZTE)

R2 avgntflt; system32\DRIVERS\avgntflt.sys [x]

R1 avipbb; \SystemRoot\system32\DRIVERS\avipbb.sys [x]

R1 avkmgr; \SystemRoot\system32\DRIVERS\avkmgr.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-06-03 21:58 - 2013-06-03 21:58 - 01916716 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64.exe

2013-06-03 21:58 - 2013-06-03 21:58 - 00000000 ____D C:\FRST

2013-06-03 21:57 - 2013-06-03 21:57 - 01356197 ____A (Farbar) C:\Users\Sarah\Downloads\FRST.exe

2013-06-02 15:27 - 2013-06-02 15:27 - 00000000 ____D C:\Users\Sarah\Documents\Neuer Ordner

2013-05-28 18:51 - 2013-05-28 18:51 - 00008454 ____A C:\Users\Sarah\AppData\Local\recently-used.xbel

2013-05-27 13:59 - 2013-05-27 13:59 - 00009565 ____A C:\Users\Sarah\Documents\songs.zip

2013-05-27 13:59 - 2013-05-27 13:59 - 00000000 ____D C:\Users\Sarah\Documents\songs

2013-05-24 20:08 - 2013-05-24 20:08 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2013-05-22 22:33 - 2013-05-23 19:20 - 00027999 ____A C:\Users\Sarah\Documents\Handout-Referat-Deutsch.odt

2013-05-22 21:06 - 2013-05-22 21:09 - 00009511 ____A C:\Users\Sarah\Documents\Unbenannt 1.odt

2013-05-22 20:40 - 2013-05-22 20:40 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone (1).ppt

2013-05-21 17:16 - 2013-05-21 17:16 - 00009688 ____A C:\Users\Sarah\Documents\song.tg

2013-05-21 16:35 - 2013-05-21 16:35 - 00866720 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00788896 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Users\Sarah\.tuxguitar-1.2

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\ProgramData\Sun

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Program Files (x86)\Java

2013-05-21 16:31 - 2013-05-21 16:31 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (2).exe

2013-05-21 16:27 - 2013-05-21 16:27 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (1).exe

2013-05-21 16:26 - 2013-05-21 16:26 - 00008299 ____A C:\Users\Sarah\Documents\Untitled.tg

2013-05-21 16:19 - 2013-05-21 16:19 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21.exe

2013-05-21 16:19 - 2013-05-21 16:19 - 00000960 ____A C:\Users\Public\Desktop\TuxGuitar.lnk

2013-05-21 16:19 - 2013-05-21 16:19 - 00000000 ____D C:\Program Files (x86)\TuxGuitar

2013-05-21 16:17 - 2013-05-21 16:18 - 07715210 ____A (Herac) C:\Users\Sarah\Downloads\tuxguitar-1.2-windows-x86-installer.exe

2013-05-21 12:41 - 2013-05-21 12:41 - 00309752 ____A C:\Windows\System32\FNTCACHE.DAT

2013-05-20 17:30 - 2013-04-10 01:17 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 00915968 ____A (Microsoft Corporation) C:\Windows\System32\uxtheme.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2013-05-20 17:29 - 2013-04-10 01:16 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-05-20 17:29 - 2013-04-10 01:16 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-05-20 17:29 - 2013-04-10 01:16 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-05-20 17:29 - 2013-04-10 01:16 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-05-20 17:29 - 2013-04-10 00:30 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-05-20 17:29 - 2013-04-10 00:30 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-05-20 16:29 - 2013-05-20 16:29 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone.ppt

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\WebApp

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Lenovo

2013-05-19 14:42 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\Documents\CyberLink

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\Lenovo

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\ProgramData\Lenovo

2013-05-19 14:22 - 2013-04-16 04:34 - 01455368 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys

2013-05-18 16:44 - 2013-03-06 08:31 - 19758592 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll

2013-05-18 16:44 - 2013-03-06 07:03 - 17561600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-05-18 16:43 - 2013-03-06 09:10 - 00112872 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe

2013-05-18 16:43 - 2013-03-06 08:31 - 00222208 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll

2013-05-18 16:43 - 2013-03-06 08:29 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll

2013-05-18 16:43 - 2013-03-06 07:03 - 00199168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-05-18 16:09 - 2013-03-15 02:17 - 00861184 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\http.sys

2013-05-18 13:08 - 2013-03-22 05:49 - 02382336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2013-05-18 13:08 - 2013-03-22 00:47 - 02851840 ____A (Microsoft Corporation) C:\Windows\System32\esent.dll

2013-05-18 08:58 - 2013-04-09 06:51 - 14267904 ____A (Microsoft Corporation) C:\Windows\System32\wmp.dll

2013-05-18 08:58 - 2013-04-09 06:51 - 13648384 ____A (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll

2013-05-18 08:58 - 2013-04-09 06:51 - 03552768 ____A (Microsoft Corporation) C:\Windows\System32\tquery.dll

2013-05-18 08:58 - 2013-04-09 06:50 - 02107904 ____A (Microsoft Corporation) C:\Windows\System32\mssrch.dll

2013-05-18 08:58 - 2013-04-08 23:52 - 11878912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-05-18 08:58 - 2013-04-08 23:51 - 10789888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2013-05-18 08:58 - 2013-04-08 23:51 - 02767360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2013-05-18 08:58 - 2013-04-08 23:51 - 01593344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2013-05-18 08:57 - 2013-04-09 07:33 - 00489576 ____A (Microsoft Corporation) C:\Windows\System32\AudioEng.dll

2013-05-18 08:57 - 2013-04-09 07:33 - 00446792 ____A (Microsoft Corporation) C:\Windows\System32\AudioSes.dll

2013-05-18 08:57 - 2013-04-09 07:33 - 00253544 ____A (Microsoft Corporation) C:\Windows\System32\audiodg.exe

2013-05-18 08:57 - 2013-04-09 07:27 - 00284424 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys

2013-05-18 08:57 - 2013-04-09 07:20 - 00306952 ____A (Microsoft Corporation) C:\Windows\System32\kd_02_10ec.dll

2013-05-18 08:57 - 2013-04-09 07:20 - 00086280 ____A (Microsoft Corporation) C:\Windows\System32\kdnet.dll

2013-05-18 08:57 - 2013-04-09 07:18 - 00077960 ____A (Microsoft Corporation) C:\Windows\System32\kdvm.dll

2013-05-18 08:57 - 2013-04-09 07:17 - 01829408 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll

2013-05-18 08:57 - 2013-04-09 06:52 - 00816128 ____A (Microsoft Corporation) C:\Windows\System32\SearchIndexer.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00804352 ____A (Microsoft Corporation) C:\Windows\System32\RecoveryDrive.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00373760 ____A (Microsoft Corporation) C:\Windows\System32\SearchProtocolHost.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\SearchFilterHost.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00126464 ____A (Microsoft Corporation) C:\Windows\System32\Robocopy.exe

2013-05-18 08:57 - 2013-04-09 06:51 - 10116096 ____A (Microsoft Corporation) C:\Windows\System32\twinui.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00595456 ____A (Microsoft Corporation) C:\Windows\System32\Windows.Networking.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00523264 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00456704 ____A (Microsoft Corporation) C:\Windows\System32\wpncore.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\Windows.Networking.BackgroundTransfer.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00367616 ____A (Microsoft Corporation) C:\Windows\System32\conhost.exe

2013-05-18 08:57 - 2013-04-09 06:51 - 00099840 ____A (Microsoft Corporation) C:\Windows\System32\wscsvc.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 01285632 ____A (Microsoft Corporation) C:\Windows\System32\schedsvc.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00745984 ____A (Microsoft Corporation) C:\Windows\System32\mssvp.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00435200 ____A (Microsoft Corporation) C:\Windows\System32\mssph.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00422400 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00414720 ____A (Microsoft Corporation) C:\Windows\System32\GenuineCenter.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00096256 ____A (Microsoft Corporation) C:\Windows\System32\mssprxy.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\msscntrs.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\msshooks.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 01444864 ____A (Microsoft Corporation) C:\Windows\System32\MSAudDecMFT.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00817152 ____A (Microsoft Corporation) C:\Windows\System32\kerberos.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00468992 ____A (Microsoft Corporation) C:\Windows\System32\MFMediaEngine.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00281088 ____A (Microsoft Corporation) C:\Windows\System32\mfreadwrite.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\fhengine.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00210432 ____A (Microsoft Corporation) C:\Windows\System32\iuilp.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00196096 ____A (Microsoft Corporation) C:\Windows\System32\dmvdsitf.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00172544 ____A (Microsoft Corporation) C:\Windows\System32\dwmredir.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00050176 ____A (Microsoft Corporation) C:\Windows\System32\fmifs.dll

2013-05-18 08:57 - 2013-04-09 06:48 - 02303488 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll

2013-05-18 08:57 - 2013-04-09 06:48 - 00785408 ____A (Microsoft Corporation) C:\Windows\System32\audiosrv.dll

2013-05-18 08:57 - 2013-04-09 06:48 - 00419840 ____A (Microsoft Corporation) C:\Windows\System32\intl.cpl

2013-05-18 08:57 - 2013-04-09 06:48 - 00169472 ____A (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll

2013-05-18 08:57 - 2013-04-09 04:35 - 04038144 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys

2013-05-18 08:57 - 2013-04-09 04:34 - 00095744 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidbth.sys

2013-05-18 08:57 - 2013-04-09 04:34 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys

2013-05-18 08:57 - 2013-04-09 04:34 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidusb.sys

2013-05-18 08:57 - 2013-04-09 04:33 - 00623104 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys

2013-05-18 08:57 - 2013-04-09 04:33 - 00060416 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ndproxy.sys

2013-05-18 08:57 - 2013-04-09 04:32 - 00805376 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\PEAuth.sys

2013-05-18 08:57 - 2013-04-09 04:31 - 00247808 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys

2013-05-18 08:57 - 2013-04-09 04:31 - 00083456 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\wanarp.sys

2013-05-18 08:57 - 2013-04-09 01:44 - 00123880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll

2013-05-18 08:57 - 2013-04-09 01:39 - 01408896 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-05-18 08:57 - 2013-04-09 01:37 - 00426024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2013-05-18 08:57 - 2013-04-09 01:37 - 00324368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2013-05-18 08:57 - 2013-04-08 23:52 - 00670208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2013-05-18 08:57 - 2013-04-08 23:52 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2013-05-18 08:57 - 2013-04-08 23:52 - 00302592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2013-05-18 08:57 - 2013-04-08 23:52 - 00171008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2013-05-18 08:57 - 2013-04-08 23:52 - 00106496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe

2013-05-18 08:57 - 2013-04-08 23:51 - 08857088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 02035200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 01113600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSAudDecMFT.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00659456 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00656896 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00411136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00403968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00389632 ____A (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl

2013-05-18 08:57 - 2013-04-08 23:51 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00324096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00268800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00214528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00186880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00155648 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\fmifs.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00035328 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00010752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll

2013-05-18 08:57 - 2013-04-05 01:30 - 00503080 ____A (Microsoft Corporation) C:\Windows\System32\ci.dll

2013-05-18 08:57 - 2013-04-03 00:08 - 00387688 ____A C:\Windows\System32\ApnDatabase.xml

2013-05-18 08:57 - 2013-03-30 20:16 - 01403784 ____A (Microsoft Corporation) C:\Windows\System32\winload.efi

2013-05-18 08:57 - 2013-03-30 20:16 - 01267424 ____A (Microsoft Corporation) C:\Windows\System32\winload.exe

2013-05-18 08:57 - 2013-03-29 00:09 - 01217328 ____A (Microsoft Corporation) C:\Windows\System32\winresume.efi

2013-05-18 08:57 - 2013-03-29 00:09 - 01093880 ____A (Microsoft Corporation) C:\Windows\System32\winresume.exe

2013-05-18 08:57 - 2013-03-16 00:05 - 00298456 ____A (Microsoft Corporation) C:\Windows\System32\rsaenh.dll

2013-05-18 08:57 - 2013-03-16 00:05 - 00252928 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll

2013-05-18 08:57 - 2012-12-13 06:00 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll

2013-05-18 08:57 - 2012-12-13 05:59 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-05-15 19:21 - 2013-04-11 08:40 - 06987528 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2013-05-15 15:09 - 2013-05-15 15:09 - 00013658 ____A C:\Users\Sarah\Documents\In The Mourning.odt

2013-05-14 20:09 - 2013-01-15 23:06 - 03662237 ____A C:\Users\Sarah\Documents\Dublin pp.pptx

2013-05-14 20:09 - 2012-11-21 18:29 - 01249251 ____A C:\Users\Sarah\Documents\Die spätbyzantinische Zeit-PPP.pptx

2013-05-14 18:50 - 2013-05-14 20:05 - 03351024 ____A C:\Users\Sarah\Documents\Geburten.odp

2013-05-14 18:33 - 2013-05-14 18:33 - 00222253 ____A C:\Users\Sarah\Downloads\Geburten.pptx

2013-05-14 18:20 - 2013-05-14 20:08 - 00023905 ____A C:\Users\Sarah\Documents\BIUK-Geburt.odt

2013-05-13 12:43 - 2013-05-13 21:02 - 00021118 ____A C:\Users\Sarah\Documents\Frankreich- Jahresbericht!.odt

2013-05-13 08:05 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Documents\GWK.odt

2013-05-12 21:12 - 2013-05-13 08:03 - 00018534 ____A C:\Users\Sarah\Documents\GWK Handout.odt

2013-05-12 20:59 - 2013-05-12 21:42 - 01952043 ____A C:\Users\Sarah\Documents\GWK PPP.odp

2013-05-12 20:39 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Downloads\GWK.odt

2013-05-12 19:48 - 2013-05-12 19:48 - 00164636 ____A C:\Users\Sarah\Downloads\Alte Industrieregionen.pptx

2013-05-09 21:37 - 2013-05-09 21:37 - 00010094 ____A C:\Users\Sarah\Downloads\Unbenannt 1.odt

2013-05-09 21:13 - 2013-05-09 21:13 - 00049103 ____A C:\Users\Sarah\Downloads\Daydreamer.odt

2013-05-08 21:23 - 2013-05-08 21:23 - 00083160 ____A (Avira GmbH) C:\Windows\System32\Drivers\avnetflt.sys

2013-05-05 17:12 - 2013-05-05 17:12 - 00000000 ___HD C:\ProgramData\CanonBJ

2013-05-05 17:11 - 2012-03-14 05:00 - 00385024 ____A (CANON INC.) C:\Windows\System32\CNMLMAR.DLL

2013-05-05 17:11 - 2011-04-27 11:01 - 00373248 ____A (CANON INC.) C:\Windows\System32\CNC_ARL.dll

2013-05-05 17:11 - 2011-04-27 11:00 - 00323584 ____A (CANON INC.) C:\Windows\SysWOW64\CNC_ARL.dll

2013-05-05 17:11 - 2011-03-31 10:07 - 00302080 ____A (CANON INC.) C:\Windows\System32\CNC_ARC.dll

2013-05-05 17:11 - 2011-03-31 10:07 - 00114688 ____A (CANON INC.) C:\Windows\SysWOW64\CNC_ARU.dll

2013-05-05 17:11 - 2011-03-31 10:06 - 00112128 ____A (CANON INC.) C:\Windows\System32\CNC_ARI.dll

2013-05-05 17:11 - 2010-11-29 09:17 - 00063744 ____A C:\Windows\SysWOW64\CNC1752D.TBL

2013-05-05 17:11 - 2008-08-25 18:02 - 00017920 ____A (CANON INC.) C:\Windows\System32\CNHMCA6.dll

2013-05-05 17:11 - 2008-08-25 18:02 - 00015872 ____A (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll

2013-05-05 15:59 - 2013-05-05 15:59 - 00012684 ____A C:\Users\Sarah\Documents\English Presentation.odt

2013-05-04 00:43 - 2013-05-04 00:43 - 00001250 ____A C:\Users\Sarah\Desktop\League of Legends.lnk
 

==================== One Month Modified Files and Folders =======
 

2013-06-03 21:58 - 2013-06-03 21:58 - 01916716 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64.exe

2013-06-03 21:58 - 2013-06-03 21:58 - 00000000 ____D C:\FRST

2013-06-03 21:57 - 2013-06-03 21:57 - 01356197 ____A (Farbar) C:\Users\Sarah\Downloads\FRST.exe

2013-06-03 21:56 - 2013-02-18 19:49 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Skype

2013-06-03 21:30 - 2012-10-20 02:10 - 01165327 ____A C:\Windows\WindowsUpdate.log

2013-06-03 21:20 - 2012-10-20 11:17 - 00754172 ____A C:\Windows\System32\perfh007.dat

2013-06-03 21:20 - 2012-10-20 11:17 - 00156362 ____A C:\Windows\System32\perfc007.dat

2013-06-03 21:20 - 2012-07-26 09:28 - 01748838 ____A C:\Windows\System32\PerfStringBackup.INI

2013-06-03 21:15 - 2013-02-16 16:33 - 00000000 ____D C:\Users\Sarah\AppData\Local\PMB Files

2013-06-03 21:01 - 2013-02-03 18:41 - 00001124 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-06-03 21:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\System32\sru

2013-06-03 20:41 - 2013-02-03 18:41 - 00001120 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-06-02 16:01 - 2012-12-25 14:44 - 00000000 ____D C:\Users\Sarah\Documents\Fortsetzungsstorys

2013-06-02 15:27 - 2013-06-02 15:27 - 00000000 ____D C:\Users\Sarah\Documents\Neuer Ordner

2013-06-02 12:20 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent

2013-06-01 13:23 - 2012-07-26 09:21 - 00051373 ____A C:\Windows\setupact.log

2013-05-28 18:51 - 2013-05-28 18:51 - 00008454 ____A C:\Users\Sarah\AppData\Local\recently-used.xbel

2013-05-27 16:41 - 2012-07-26 09:22 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-05-27 16:40 - 2012-07-26 07:26 - 00262144 __ASH C:\Windows\System32\config\BBI

2013-05-27 13:59 - 2013-05-27 13:59 - 00009565 ____A C:\Users\Sarah\Documents\songs.zip

2013-05-27 13:59 - 2013-05-27 13:59 - 00000000 ____D C:\Users\Sarah\Documents\songs

2013-05-26 17:14 - 2013-02-16 16:33 - 00000000 ____D C:\ProgramData\PMB Files

2013-05-26 15:12 - 2013-05-03 14:26 - 00001082 ____A C:\Users\Public\Desktop\Gameforge Live.lnk

2013-05-26 15:12 - 2013-05-03 14:26 - 00000000 ____D C:\Users\Sarah\Downloads\Gameforge Live

2013-05-26 15:12 - 2013-05-03 14:26 - 00000000 ____D C:\Program Files (x86)\GameforgeLive

2013-05-24 20:08 - 2013-05-24 20:08 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2013-05-24 19:32 - 2013-02-20 21:58 - 00000000 ____D C:\Users\Sarah\Documents\Story-Ib

2013-05-24 18:11 - 2013-02-03 18:45 - 00002194 ____A C:\Users\Public\Desktop\Google Chrome.lnk

2013-05-23 19:20 - 2013-05-22 22:33 - 00027999 ____A C:\Users\Sarah\Documents\Handout-Referat-Deutsch.odt

2013-05-22 21:09 - 2013-05-22 21:06 - 00009511 ____A C:\Users\Sarah\Documents\Unbenannt 1.odt

2013-05-22 20:40 - 2013-05-22 20:40 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone (1).ppt

2013-05-22 19:50 - 2013-01-11 17:41 - 00000000 ____D C:\Users\Sarah\.gimp-2.8

2013-05-21 17:16 - 2013-05-21 17:16 - 00009688 ____A C:\Users\Sarah\Documents\song.tg

2013-05-21 16:35 - 2013-05-21 16:35 - 00866720 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00788896 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Users\Sarah\.tuxguitar-1.2

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\ProgramData\Sun

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Program Files (x86)\Java

2013-05-21 16:35 - 2013-02-03 18:22 - 00000000 ____D C:\users\Sarah

2013-05-21 16:31 - 2013-05-21 16:31 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (2).exe

2013-05-21 16:27 - 2013-05-21 16:27 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (1).exe

2013-05-21 16:26 - 2013-05-21 16:26 - 00008299 ____A C:\Users\Sarah\Documents\Untitled.tg

2013-05-21 16:19 - 2013-05-21 16:19 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21.exe

2013-05-21 16:19 - 2013-05-21 16:19 - 00000960 ____A C:\Users\Public\Desktop\TuxGuitar.lnk

2013-05-21 16:19 - 2013-05-21 16:19 - 00000000 ____D C:\Program Files (x86)\TuxGuitar

2013-05-21 16:18 - 2013-05-21 16:17 - 07715210 ____A (Herac) C:\Users\Sarah\Downloads\tuxguitar-1.2-windows-x86-installer.exe

2013-05-21 12:41 - 2013-05-21 12:41 - 00309752 ____A C:\Windows\System32\FNTCACHE.DAT

2013-05-20 19:47 - 2013-01-05 19:07 - 00000000 ____D C:\Users\Sarah\Documents\Youcam

2013-05-20 16:29 - 2013-05-20 16:29 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone.ppt

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\WebApp

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Lenovo

2013-05-19 14:43 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\CyberLink

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\Lenovo

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\ProgramData\Lenovo

2013-05-19 14:42 - 2013-02-15 17:07 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\CyberLink

2013-05-19 14:25 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ToastData

2013-05-19 14:25 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\WinStore

2013-05-17 19:52 - 2013-02-18 19:49 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-05-17 19:52 - 2013-02-18 19:49 - 00000000 ____D C:\ProgramData\Skype

2013-05-17 19:06 - 2013-02-21 20:28 - 00000000 ____D C:\ProgramData\BrowserProtect

2013-05-17 19:06 - 2012-09-13 20:32 - 00106688 ____A C:\Windows\PFRO.log

2013-05-17 18:09 - 2013-02-08 17:11 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe

2013-05-15 15:09 - 2013-05-15 15:09 - 00013658 ____A C:\Users\Sarah\Documents\In The Mourning.odt

2013-05-14 20:08 - 2013-05-14 18:20 - 00023905 ____A C:\Users\Sarah\Documents\BIUK-Geburt.odt

2013-05-14 20:05 - 2013-05-14 18:50 - 03351024 ____A C:\Users\Sarah\Documents\Geburten.odp

2013-05-14 18:33 - 2013-05-14 18:33 - 00222253 ____A C:\Users\Sarah\Downloads\Geburten.pptx

2013-05-13 21:02 - 2013-05-13 12:43 - 00021118 ____A C:\Users\Sarah\Documents\Frankreich- Jahresbericht!.odt

2013-05-13 08:05 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Documents\GWK.odt

2013-05-13 08:05 - 2013-05-12 20:39 - 00021195 ____A C:\Users\Sarah\Downloads\GWK.odt

2013-05-13 08:03 - 2013-05-12 21:12 - 00018534 ____A C:\Users\Sarah\Documents\GWK Handout.odt

2013-05-12 21:42 - 2013-05-12 20:59 - 01952043 ____A C:\Users\Sarah\Documents\GWK PPP.odp

2013-05-12 19:48 - 2013-05-12 19:48 - 00164636 ____A C:\Users\Sarah\Downloads\Alte Industrieregionen.pptx

2013-05-09 21:37 - 2013-05-09 21:37 - 00010094 ____A C:\Users\Sarah\Downloads\Unbenannt 1.odt

2013-05-09 21:13 - 2013-05-09 21:13 - 00049103 ____A C:\Users\Sarah\Downloads\Daydreamer.odt

2013-05-08 21:23 - 2013-05-08 21:23 - 00083160 ____A (Avira GmbH) C:\Windows\System32\Drivers\avnetflt.sys

2013-05-07 22:07 - 2013-03-03 08:06 - 00693112 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-05-07 22:07 - 2013-03-03 08:06 - 00078200 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-05-05 17:12 - 2013-05-05 17:12 - 00000000 ___HD C:\ProgramData\CanonBJ

2013-05-05 17:11 - 2012-07-26 10:12 - 00000000 __RSD C:\Windows\Media

2013-05-05 15:59 - 2013-05-05 15:59 - 00012684 ____A C:\Users\Sarah\Documents\English Presentation.odt

2013-05-04 00:43 - 2013-05-04 00:43 - 00001250 ____A C:\Users\Sarah\Desktop\League of Legends.lnk
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

Last Boot: 2013-06-02 08:11
 

==================== End Of Log ============================

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2013 03

Ran by Sarah at 2013-06-03 22:00:13 Run:

Running from C:\Users\Sarah\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

7-Zip 9.20

Adobe AIR (Version: 2.6.0.19140)

AION Free-to-Play Version 1.0 (Version: 1.0)

Amazon Browser App (Version: 1.0.0.0)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 2.1.0.7)

Avira Free Antivirus (Version: 13.0.0.3640)

Bamboo Dock (Version: 4.1)

Bamboo Dock (Version: 4.1.0)

Benutzerhandbuch (Version: 1.0.0.9)

BrowserProtect

Delta Chrome Toolbar (Version: 1.0.0.0)

Delta toolbar   (Version: 1.8.10.0)

Dolby Home Theater v4 (Version: 7.2.8000.16)

Energy Management (Version: 8.0.2.4)

Free YouTube to MP3 Converter version 3.12.0.128 (Version: 3.12.0.128)

Gameforge Live 1.2.1734 "Legend" (Version: 1.2.1734)

GIMP 2.8.4 (Version: 2.8.4)

Google Chrome (Version: 27.0.1453.94)

Google Update Helper (Version: 1.3.21.145)

Inkscape 0.48.4 (Version: 0.48.4)

Intel AppUp(SM) center (Version: 3.6.1.33057.10)

Intel PROSet Wireless

Intel(R) Control Center (Version: 1.2.1.1008)

Intel(R) Management Engine Components (Version: 8.1.0.1252)

Intel(R) Processor Graphics (Version: 9.17.10.2843)

Intel(R) Rapid Storage Technology (Version: 11.5.4.1001)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (Version: 2.0.0.37149)

Intel(R) WiDi (Version: 3.5.34.0)

Intel® PROSet/Wireless WiFi-Software (Version: 15.05.2000.1462)

Intel® Trusted Connect Service Client (Version: 1.24.388.1)

Intelligent Touchpad (Version: 2.00.0012.0723)

Java 7 Update 21 (Version: 7.0.210)

Java Auto Updater (Version: 2.1.9.5)

JMicron Flash Media Controller Driver (Version: 1.0.71.1)

Lenovo Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.2200)

Lenovo EasyCamera (Version: 13.12.824.1)

Lenovo OneKey Recovery (Version: 8.0.0.0828)

Lenovo PowerDVD10 (Version: 10.0.4331.52)

Lenovo YouCam (Version: 4.1.3127)

Microsoft Office (Version: 14.0.6120.5004)

Microsoft PowerPoint Viewer (Version: 14.0.6029.1000)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)

NVIDIA Grafiktreiber 314.07 (Version: 314.07)

NVIDIA Install Application (Version: 2.1002.109.706)

NVIDIA Optimus 1.12.12 (Version: 1.12.12)

NVIDIA PhysX (Version: 9.12.1031)

NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)

NVIDIA Systemsteuerung 314.07 (Version: 314.07)

NVIDIA Update 1.12.12 (Version: 1.12.12)

NVIDIA Update Components (Version: 1.12.12)

Onekey Theater (Version: 3.0.0.9)

OpenOffice.org 3.4.1 (Version: 3.41.9593)

Orange Mobiles Internet (Version: 1.0.0.1)

PaintTool SAI Ver.1

Pando Media Booster (Version: 2.6.0.8)

Power2Go (Version: 5.6.0.9109)

Realtek High Definition Audio Driver (Version: 6.0.1.6680)

Shared C Run-time for x64 (Version: 10.0.0)

Skype™ 6.3 (Version: 6.3.107)

Softonic toolbar  on IE and Chrome (Version: 1.8.8.11)

SugarSync Manager (Version: 1.9.61.90905)

Synaptics Pointing Device Driver (Version: 16.2.10.13)

TuxGuitar (Version: 1.2)

UserGuide (Version: 1.0.0.9)

Wacom (Version: 5.3.2-1)

WebTablet FB Plugin 32 bit (Version: 2.1.0.2)

WebTablet FB Plugin 64 bit (Version: 2.1.0.2)

Windows-Treiberpaket - Lenovo (ACPIVPC) System  (06/15/2012 8.1.0.1) (Version: 06/15/2012 8.1.0.1)

Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid  (06/19/2012 10.13.29.733) (Version: 06/19/2012 10.13.29.733)
 

==================== Restore Points  =========================
 

15-05-2013 18:10:02 Windows Update

19-05-2013 12:21:06 Windows Update

21-05-2013 14:18:32 Installed TuxGuitar

02-06-2013 10:43:18 Geplanter Prüfpunkt
 

==================== Faulty Device Manager Devices =============
 

Name: USB-IF xHCI USB Host Controller

Description: USB-IF xHCI USB Host Controller

Class Guid: {8a2edc79-c759-46f2-88af-9d4efe3b5eee}

Manufacturer: Intel Corporation

Service: XHCIPort

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 

Name: UMDF HID minidriver Device

Description: UMDF HID minidriver Device

Class Guid: {177b1d2a-679c-4093-98bf-fd6999695d3b}

Manufacturer: Lenovo

Service: mshidumdf

Problem: : Windows has stopped this device because it has reported problems. (Code 43)

Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (06/03/2013 08:42:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Moonpie)

Description: Die App „DefaultBrowser_NOPUBLISHERID!Chrome“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 

Error: (06/02/2013 04:46:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Moonpie)

Description: Die App „DefaultBrowser_NOPUBLISHERID!Chrome“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 

Error: (06/02/2013 04:25:33 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: AssistantServices.exe, Version: 0.0.0.0, Zeitstempel: 0x4f34e4ff

Name des fehlerhaften Moduls: AssistantServices.exe, Version: 0.0.0.0, Zeitstempel: 0x4f34e4ff

Ausnahmecode: 0xc0000417

Fehleroffset: 0x0000f4ca

ID des fehlerhaften Prozesses: 0x958

Startzeit der fehlerhaften Anwendung: 0xAssistantServices.exe0

Pfad der fehlerhaften Anwendung: AssistantServices.exe1

Pfad des fehlerhaften Moduls: AssistantServices.exe2

Berichtskennung: AssistantServices.exe3

Vollständiger Name des fehlerhaften Pakets: AssistantServices.exe4

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AssistantServices.exe5
 

Error: (06/02/2013 04:02:45 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Moonpie)

Description: Die App „Microsoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideo“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 

Error: (06/02/2013 11:51:08 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Moonpie)

Description: Die App „DefaultBrowser_NOPUBLISHERID!Chrome“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 

Error: (06/02/2013 07:56:09 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Moonpie)

Description: Die App „DefaultBrowser_NOPUBLISHERID!Chrome“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 

Error: (06/01/2013 07:34:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Moonpie)

Description: Die App „DefaultBrowser_NOPUBLISHERID!Chrome“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 

Error: (06/01/2013 01:23:42 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Moonpie)

Description: Die App „DefaultBrowser_NOPUBLISHERID!Chrome“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 

Error: (05/31/2013 09:54:31 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Moonpie)

Description: Die App „DefaultBrowser_NOPUBLISHERID!Chrome“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 

Error: (05/31/2013 09:27:29 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Moonpie)

Description: Die App „DefaultBrowser_NOPUBLISHERID!Chrome“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
 
 

System errors:

=============

Error: (06/03/2013 09:01:18 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (06/03/2013 04:51:28 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (06/02/2013 04:51:09 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (06/02/2013 04:25:37 PM) (Source: Service Control Manager) (User: )

Description: Dienst "UI Assistant Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (06/02/2013 03:47:05 PM) (Source: JMCR) (User: )

Description: Das Gerät \Device\Scsi\JMCR1 ist für den Zugriff noch nicht bereit.
 

Error: (06/02/2013 02:15:15 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (06/02/2013 10:08:47 AM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (06/02/2013 07:28:00 AM) (Source: DCOM) (User: Moonpie)

Description: Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.1
 

Error: (06/02/2013 07:27:54 AM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 

Error: (06/01/2013 09:10:50 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
 
 

Microsoft Office Sessions:

=========================

Error: (06/03/2013 08:42:12 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Moonpie)

Description: DefaultBrowser_NOPUBLISHERID!Chrome
 

Error: (06/02/2013 04:46:25 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Moonpie)

Description: DefaultBrowser_NOPUBLISHERID!Chrome
 

Error: (06/02/2013 04:25:33 PM) (Source: Application Error)(User: )

Description: AssistantServices.exe0.0.0.04f34e4ffAssistantServices.exe0.0.0.04f34e4ffc00004170000f4ca95801ce5ae8493ca737C:\Program Files (x86)\Orange Mobiles Internet\AssistantServices.exeC:\Program Files (x86)\Orange Mobiles Internet\AssistantServices.exe4848d605-cb90-11e2-be9b-20689d7b2506
 

Error: (06/02/2013 04:02:45 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Moonpie)

Description: Microsoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideo
 

Error: (06/02/2013 11:51:08 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Moonpie)

Description: DefaultBrowser_NOPUBLISHERID!Chrome
 

Error: (06/02/2013 07:56:09 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Moonpie)

Description: DefaultBrowser_NOPUBLISHERID!Chrome
 

Error: (06/01/2013 07:34:52 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Moonpie)

Description: DefaultBrowser_NOPUBLISHERID!Chrome
 

Error: (06/01/2013 01:23:42 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Moonpie)

Description: DefaultBrowser_NOPUBLISHERID!Chrome
 

Error: (05/31/2013 09:54:31 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Moonpie)

Description: DefaultBrowser_NOPUBLISHERID!Chrome
 

Error: (05/31/2013 09:27:29 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Moonpie)

Description: DefaultBrowser_NOPUBLISHERID!Chrome
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-06-03 21:19:59.157

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-06-03 15:54:19.198

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-06-02 08:33:35.012

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-06-02 06:59:17.102

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-06-01 20:53:30.780

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-06-01 20:01:31.502

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-05-30 08:35:01.125

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-05-28 15:51:32.302

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-05-27 18:48:08.380

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-05-27 16:49:27.624

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 51%

Total physical RAM: 8057.77 MB

Available physical RAM: 3934.82 MB

Total Pagefile: 9273.77 MB

Available Pagefile: 4769.4 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (Windows8_OS) (Fixed) (Total:884.18 GB) (Free:764.92 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:21.97 GB) NTFS

Drive f: (Mobiles Internet) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 932 GB) (Disk ID: 6D4E643B)
 

Partition: GPT Partition Type

==================== End Of Log ============================

Oh mann, glatt vergessen es so zu posten. Ich werde die erste Antwort mal löschen ...
Das Danke gilt trotzdem noch ^^

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool

Setze einen Haken bei folgenden Einträgen

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset IE Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Minidump Files

Klicke Go und poste den Inhalt der Result.txt.

Downloade dir bitte Farbar's Service Scanner

Starte das Tool mit Doppelklick auf die FSS.exe
Gehe sicher, dass folgende Optionen angehakt sind.
- Internet Services
- Windows Firewall
- System Restore
- Security Center/Action Center
- Windows Update
- Windows Defender
- Other Services
Klicke auf Scan.
Wenn das Tool fertig ist, wird es eine FSS.txt in dem Verzeichnis erstellen, wo das Tool gelaufen ist.

Poste bitte den Inhalt hier.

Und ein frisches FRST Logfile.

Hier die Datei von ADW:

Code:

# AdwCleaner v2.301 - Datei am 03/06/2013 um 22:12:50 erstellt

# Aktualisiert am 16/05/2013 von Xplode

# Betriebssystem : Windows 8  (64 bits)

# Benutzer : Sarah - MOONPIE

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Sarah\Desktop\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 

Gestoppt & Gelöscht : BrowserProtect
 

***** [Dateien / Ordner] *****
 

Datei Gelöscht : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data

Datei Gelöscht : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences

Datei Gelöscht : C:\Users\Sarah\AppData\Roaming\BabMaint.exe

Ordner Gelöscht : C:\Program Files (x86)\Delta

Ordner Gelöscht : C:\Program Files (x86)\Softonic

Ordner Gelöscht : C:\ProgramData\Babylon

Ordner Gelöscht : C:\ProgramData\BrowserProtect

Ordner Gelöscht : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde

Ordner Gelöscht : C:\Users\Sarah\AppData\LocalLow\Delta

Ordner Gelöscht : C:\Users\Sarah\AppData\LocalLow\Softonic

Ordner Gelöscht : C:\Users\Sarah\AppData\Roaming\BabSolution

Ordner Gelöscht : C:\Users\Sarah\AppData\Roaming\Babylon

Ordner Gelöscht : C:\Users\Sarah\AppData\Roaming\Delta

Ordner Gelöscht : C:\Users\Sarah\AppData\Roaming\dvdvideosoftiehelpers

Ordner Gelöscht : C:\Users\Sarah\AppData\Roaming\Softonic
 

***** [Registrierungsdatenbank] *****
 

Daten Gelöscht : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261249~1.132\{c16c1~1\browse~1.dll

Schlüssel Gelöscht : HKCU\Software\BabylonToolbar

Schlüssel Gelöscht : HKCU\Software\DataMngr

Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar

Schlüssel Gelöscht : HKCU\Software\Delta

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E87806B5-E908-45FD-AF5E-957D83E58E68}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E87806B5-E908-45FD-AF5E-957D83E58E68}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : HKCU\Software\5808ad9e568bd47

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gelöscht : HKLM\Software\Babylon

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B15F118E-AF21-45E8-A809-29FDD7362565}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaappCore

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaappCore.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltadskBnd

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaHlpr

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.deltaESrvc

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1

Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\7E685771E24E83F4381D1DB5A45F7B41

Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\7E685771E24E83F4381D1DB5A45F7B41

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\S

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Softonic.dskBnd

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Softonic.dskBnd.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Softonic.SoftonicHlpr

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Softonic.SoftonicHlpr.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SoftonicApp.appCore

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SoftonicApp.appCore.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\srv.SoftonicSrvc

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\srv.SoftonicSrvc.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11D9E165-B8C1-4734-A56C-BC4FCACA966B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B15F118E-AF21-45E8-A809-29FDD7362565}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Schlüssel Gelöscht : HKLM\Software\DataMngr

Schlüssel Gelöscht : HKLM\Software\Delta

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\Software\Softonic

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\5808ad9e568bd47

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{44B50C01-4993-48E2-ADEE-D812BAE2E9A2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5018CFD2-804D-4C99-9F81-25EAEA2769DE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A3E2F089-DDBB-4CBF-B06C-5D44DA316ED3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A5679AB0-C59E-49E7-83C4-5289F844A6E0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CA0167C2-6295-41B8-9BDA-704B2F5E4CD9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E87806B5-E908-45FD-AF5E-957D83E58E68}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9CF034EA-7B46-48D3-8895-8A14B32AE445}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E87806B5-E908-45FD-AF5E-957D83E58E68}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{177586E7-E42E-4F38-83D1-D15B4AF5B714}

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Softonic

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]

Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{5018CFD2-804D-4C99-9F81-25EAEA2769DE}]

Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v10.0.9200.16537
 

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119528&babsrc=HP_ss&mntrId=36d0ada6000000000000024bffb3753b --> hxxp://www.google.com

Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.softonic.com/MOY00006/tb_v1?SearchSource=15&cc= --> hxxp://www.google.com
 

-\\ Google Chrome v27.0.1453.94
 

Datei : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Preferences
 

Gelöscht [l.2355] : homepage = "hxxp://www.delta-search.com/?affID=119528&babsrc=HP_ss&mntrId=36d0ada600000000000002[...]
 

*************************
 

AdwCleaner[S1].txt - [16190 octets] - [03/06/2013 22:12:50]
 

########## EOF - C:\AdwCleaner[S1].txt - [16251 octets] ##########

und weiter im Text :)

Dann JRT:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 4.9.4 (05.06.2013:1)

OS: Windows 8 x64

Ran by Sarah on 03.06.2013 at 22:24:34,05

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{72066460-5C40-4AE7-A020-48DB00411009}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 03.06.2013 at 22:26:44,47

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

MiniToolBox:

Code:

MiniToolBox by Farbar  Version:21-04-2013

Ran by Sarah (administrator) on 03-06-2013 at 22:35:02

Running from "C:\Users\Sarah\Desktop"

Windows 8  (X64)

Boot Mode: Normal

***************************************************************************
 

========================= Flush DNS: ===================================
 

Windows-IP-Konfiguration
 

Der DNS-Aufl”sungscache wurde geleert.
 

========================= IE Proxy Settings: ============================== 
 

Proxy is not enabled.

ProxyServer: proxy:8080
 

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= Hosts content: =================================
 
 
 

========================= IP Configuration: ================================
 

ZTE Mobile Connect Network Device = LAN-Verbindung (Connected)

Intel(R) Centrino(R) Wireless-N 2200 = WiFi (Media disconnected)

Qualcomm Atheros AR8161 PCI-E Gigabit Ethernet Controller (NDIS 6.30) = Ethernet (Media disconnected)

Bluetooth-Gerät (PAN) = Bluetooth-Netzwerkverbindung (Media disconnected)
 
 

# ----------------------------------

# IPv4-Konfiguration

# ----------------------------------

pushd interface ipv4
 

reset

set global icmpredirects=enabled

set interface interface="LAN-Verbindung* 9" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="WiFi" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="Bluetooth-Netzwerkverbindung" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="LAN-Verbindung* 2" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="LAN-Verbindung" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="LAN-Verbindung 2" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set interface interface="LAN-Verbindung* 4" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled

set subinterface interface=?V subinterface=ethernet_11 mtu=1477
 
 

popd

# Ende der IPv4-Konfiguration
 
 
 

Windows-IP-Konfiguration
 

   Hostname  . . . . . . . . . . . . : Moonpie

   Prim„res DNS-Suffix . . . . . . . : 

   Knotentyp . . . . . . . . . . . . : Hybrid

   IP-Routing aktiviert  . . . . . . : Nein

   WINS-Proxy aktiviert  . . . . . . : Nein
 

Unbekannter Adapter LAN-Verbindung:
 

   Verbindungsspezifisches DNS-Suffix: 

   Beschreibung. . . . . . . . . . . : ZTE Mobile Connect Network Device

   Physische Adresse . . . . . . . . : 02-4B-FF-B3-75-3B

   DHCP aktiviert. . . . . . . . . . : Ja

   Autokonfiguration aktiviert . . . : Ja

   Verbindungslokale IPv6-Adresse  . : fe80::6589:4d09:c485:7c2a%19(Bevorzugt) 

   IPv4-Adresse  . . . . . . . . . . : 46.57.25.216(Bevorzugt) 

   Subnetzmaske  . . . . . . . . . . : 255.255.255.0

   Lease erhalten. . . . . . . . . . : Montag, 03. Juni 2013 22:32:03

   Lease l„uft ab. . . . . . . . . . : Dienstag, 04. Juni 2013 22:32:02

   Standardgateway . . . . . . . . . : 46.57.25.217

   DHCP-Server . . . . . . . . . . . : 46.57.25.217

   DHCPv6-IAID . . . . . . . . . . . : 570575871

   DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-18-13-99-0D-9C-4E-36-6C-38-B4

   DNS-Server  . . . . . . . . . . . : 213.94.78.26

                                       213.94.78.27

   NetBIOS ber TCP/IP . . . . . . . : Aktiviert
 

Drahtlos-LAN-Adapter LAN-Verbindung* 2:
 

   Medienstatus. . . . . . . . . . . : Medium getrennt

   Verbindungsspezifisches DNS-Suffix: 

   Beschreibung. . . . . . . . . . . : Virtueller Microsoft-Adapter fr direktes WiFi

   Physische Adresse . . . . . . . . : 9C-4E-36-6C-38-B5

   DHCP aktiviert. . . . . . . . . . : Ja

   Autokonfiguration aktiviert . . . : Ja
 

Ethernet-Adapter Bluetooth-Netzwerkverbindung:
 

   Medienstatus. . . . . . . . . . . : Medium getrennt

   Verbindungsspezifisches DNS-Suffix: 

   Beschreibung. . . . . . . . . . . : Bluetooth-Ger„t (PAN)

   Physische Adresse . . . . . . . . : 20-68-9D-7B-25-06

   DHCP aktiviert. . . . . . . . . . : Ja

   Autokonfiguration aktiviert . . . : Ja
 

Ethernet-Adapter Ethernet:
 

   Medienstatus. . . . . . . . . . . : Medium getrennt

   Verbindungsspezifisches DNS-Suffix: 

   Beschreibung. . . . . . . . . . . : Qualcomm Atheros AR8161 PCI-E Gigabit Ethernet Controller (NDIS 6.30)

   Physische Adresse . . . . . . . . : B8-88-E3-86-AD-D1

   DHCP aktiviert. . . . . . . . . . : Ja

   Autokonfiguration aktiviert . . . : Ja
 

Drahtlos-LAN-Adapter WiFi:
 

   Medienstatus. . . . . . . . . . . : Medium getrennt

   Verbindungsspezifisches DNS-Suffix: bgstockerau.ac.at

   Beschreibung. . . . . . . . . . . : Intel(R) Centrino(R) Wireless-N 2200

   Physische Adresse . . . . . . . . : 9C-4E-36-6C-38-B4

   DHCP aktiviert. . . . . . . . . . : Ja

   Autokonfiguration aktiviert . . . : Ja
 

Tunneladapter 6TO4 Adapter:
 

   Verbindungsspezifisches DNS-Suffix: 

   Beschreibung. . . . . . . . . . . : Microsoft-6zu4-Adapter

   Physische Adresse . . . . . . . . : 00-00-00-00-00-00-00-E0

   DHCP aktiviert. . . . . . . . . . : Nein

   Autokonfiguration aktiviert . . . : Ja

   IPv6-Adresse. . . . . . . . . . . : 2002:2e39:19d8::2e39:19d8(Bevorzugt) 

   Standardgateway . . . . . . . . . : 

   DNS-Server  . . . . . . . . . . . : 213.94.78.26

                                       213.94.78.27

   NetBIOS ber TCP/IP . . . . . . . : Deaktiviert
 

Tunneladapter Teredo Tunneling Pseudo-Interface:
 

   Verbindungsspezifisches DNS-Suffix: 

   Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface

   Physische Adresse . . . . . . . . : 00-00-00-00-00-00-00-E0

   DHCP aktiviert. . . . . . . . . . : Nein

   Autokonfiguration aktiviert . . . : Ja

   IPv6-Adresse. . . . . . . . . . . : 2001:0:5ef5:79fd:20fa:68f:d1c6:e627(Bevorzugt) 

   Verbindungslokale IPv6-Adresse  . : fe80::20fa:68f:d1c6:e627%20(Bevorzugt) 

   Standardgateway . . . . . . . . . : 

   DHCPv6-IAID . . . . . . . . . . . : 637534208

   DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-18-13-99-0D-9C-4E-36-6C-38-B4

   NetBIOS ber TCP/IP . . . . . . . : Deaktiviert
 

Tunneladapter isatap.{2E086ACB-FF14-4F6F-A825-3E4D618A46E0}:
 

   Medienstatus. . . . . . . . . . . : Medium getrennt

   Verbindungsspezifisches DNS-Suffix: 

   Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #2

   Physische Adresse . . . . . . . . : 00-00-00-00-00-00-00-E0

   DHCP aktiviert. . . . . . . . . . : Nein

   Autokonfiguration aktiviert . . . : Ja

Server:  pdnsvip1-optout.drei.com

Address:  213.94.78.26
 

Name:    google.com

Addresses:  2a00:1450:4001:801::1002

          173.194.112.33

          173.194.112.35

          173.194.112.32

          173.194.112.41

          173.194.112.40

          173.194.112.39

          173.194.112.46

          173.194.112.34

          173.194.112.37

          173.194.112.36

          173.194.112.38
 
 

Ping wird ausgefhrt fr google.com [173.194.112.33] mit 32 Bytes Daten:

Antwort von 173.194.112.33: Bytes=32 Zeit=355ms TTL=54

Antwort von 173.194.112.33: Bytes=32 Zeit=304ms TTL=54
 

Ping-Statistik fr 173.194.112.33:

    Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0

    (0% Verlust),

Ca. Zeitangaben in Millisek.:

    Minimum = 304ms, Maximum = 355ms, Mittelwert = 329ms

Server:  pdnsvip1-optout.drei.com

Address:  213.94.78.26
 

Name:    yahoo.com

Addresses:  98.139.183.24

          206.190.36.45

          98.138.253.109
 
 

Ping wird ausgefhrt fr yahoo.com [98.139.183.24] mit 32 Bytes Daten:

Antwort von 98.139.183.24: Bytes=32 Zeit=649ms TTL=47

Antwort von 98.139.183.24: Bytes=32 Zeit=772ms TTL=47
 

Ping-Statistik fr 98.139.183.24:

    Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0

    (0% Verlust),

Ca. Zeitangaben in Millisek.:

    Minimum = 649ms, Maximum = 772ms, Mittelwert = 710ms
 

Ping wird ausgefhrt fr 127.0.0.1 mit 32 Bytes Daten:

Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128

Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128
 

Ping-Statistik fr 127.0.0.1:

    Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0

    (0% Verlust),

Ca. Zeitangaben in Millisek.:

    Minimum = 0ms, Maximum = 0ms, Mittelwert = 0ms

===========================================================================

Schnittstellenliste

 19...02 4b ff b3 75 3b ......ZTE Mobile Connect Network Device

 18...9c 4e 36 6c 38 b5 ......Virtueller Microsoft-Adapter fr direktes WiFi

 17...20 68 9d 7b 25 06 ......Bluetooth-Ger„t (PAN)

 13...b8 88 e3 86 ad d1 ......Qualcomm Atheros AR8161 PCI-E Gigabit Ethernet Controller (NDIS 6.30)

 12...9c 4e 36 6c 38 b4 ......Intel(R) Centrino(R) Wireless-N 2200

  1...........................Software Loopback Interface 1

 15...00 00 00 00 00 00 00 e0 Microsoft-6zu4-Adapter

 20...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface

 22...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #2

===========================================================================
 

IPv4-Routentabelle

===========================================================================

Aktive Routen:

     Netzwerkziel    Netzwerkmaske          Gateway    Schnittstelle Metrik

          0.0.0.0          0.0.0.0     46.57.25.217     46.57.25.216     25

       46.57.25.0    255.255.255.0   Auf Verbindung      46.57.25.216    281

     46.57.25.216  255.255.255.255   Auf Verbindung      46.57.25.216    281

     46.57.25.255  255.255.255.255   Auf Verbindung      46.57.25.216    281

        127.0.0.0        255.0.0.0   Auf Verbindung         127.0.0.1    306

        127.0.0.1  255.255.255.255   Auf Verbindung         127.0.0.1    306

  127.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306

        224.0.0.0        240.0.0.0   Auf Verbindung         127.0.0.1    306

        224.0.0.0        240.0.0.0   Auf Verbindung      46.57.25.216    281

  255.255.255.255  255.255.255.255   Auf Verbindung         127.0.0.1    306

  255.255.255.255  255.255.255.255   Auf Verbindung      46.57.25.216    281

===========================================================================

St„ndige Routen:

  Keine
 

IPv6-Routentabelle

===========================================================================

Aktive Routen:

 If Metrik Netzwerkziel             Gateway

  1    306 ::1/128                  Auf Verbindung

 20    306 2001::/32                Auf Verbindung

 20    306 2001:0:5ef5:79fd:20fa:68f:d1c6:e627/128

                                    Auf Verbindung

 15   1030 2002::/16                Auf Verbindung

 15    286 2002:2e39:19d8::2e39:19d8/128

                                    Auf Verbindung

 19    281 fe80::/64                Auf Verbindung

 20    306 fe80::/64                Auf Verbindung

 20    306 fe80::20fa:68f:d1c6:e627/128

                                    Auf Verbindung

 19    281 fe80::6589:4d09:c485:7c2a/128

                                    Auf Verbindung

  1    306 ff00::/8                 Auf Verbindung

 20    306 ff00::/8                 Auf Verbindung

 19    281 ff00::/8                 Auf Verbindung

===========================================================================

St„ndige Routen:

  Keine

========================= Winsock entries =====================================
 

Catalog5 01 C:\WINDOWS\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)

Catalog5 02 C:\WINDOWS\SysWOW64\pnrpnsp.dll [67584] (Microsoft Corporation)

Catalog5 03 C:\WINDOWS\SysWOW64\pnrpnsp.dll [67584] (Microsoft Corporation)

Catalog5 04 C:\WINDOWS\SysWOW64\NLAapi.dll [55296] (Microsoft Corporation)

Catalog5 05 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

Catalog5 06 C:\WINDOWS\SysWOW64\winrnr.dll [21504] (Microsoft Corporation)

Catalog5 07 C:\WINDOWS\SysWOW64\wshbth.dll [50688] (Microsoft Corporation)

Catalog9 01 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

Catalog9 02 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

Catalog9 03 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

Catalog9 04 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

Catalog9 05 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

Catalog9 06 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

Catalog9 07 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

Catalog9 08 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

Catalog9 09 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

Catalog9 10 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

Catalog9 11 C:\WINDOWS\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)

x64-Catalog5 01 C:\Windows\System32\napinsp.dll [66560] (Microsoft Corporation)

x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [85504] (Microsoft Corporation)

x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [85504] (Microsoft Corporation)

x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [72192] (Microsoft Corporation)

x64-Catalog5 05 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

x64-Catalog5 06 C:\Windows\System32\winrnr.dll [53760] (Microsoft Corporation)

x64-Catalog5 07 C:\Windows\System32\wshbth.dll [64000] (Microsoft Corporation)

x64-Catalog9 01 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

x64-Catalog9 02 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

x64-Catalog9 03 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

x64-Catalog9 04 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

x64-Catalog9 05 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

x64-Catalog9 06 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

x64-Catalog9 07 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

x64-Catalog9 08 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

x64-Catalog9 09 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

x64-Catalog9 10 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

x64-Catalog9 11 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
 

========================= Event log errors: ===============================
 

Application errors:

==================
 

System errors:

=============

Error: (06/03/2013 10:32:59 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
 

Error: (06/03/2013 10:32:29 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
 

Error: (06/03/2013 10:31:59 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
 

Error: (06/03/2013 10:31:29 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
 
 

Microsoft Office Sessions:

=========================
 

CodeIntegrity Errors:

===================================

  Date: 2013-06-03 21:19:59.157

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-06-03 15:54:19.198

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-06-02 08:33:35.012

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-06-02 06:59:17.102

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-06-01 20:53:30.780

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-06-01 20:01:31.502

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-05-30 08:35:01.125

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-05-28 15:51:32.302

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-05-27 18:48:08.380

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2013-05-27 16:49:27.624

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\dsound.dll because the set of per-page image hashes could not be found on the system.
 
 

=========================== Installed Programs ============================
 

7-Zip 9.20

Adobe AIR (Version: 2.6.0.19140)

AION Free-to-Play Version 1.0 (Version: 1.0)

Amazon Browser App (Version: 1.0.0.0)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 2.1.0.7)

Avira Free Antivirus (Version: 13.0.0.3640)

Bamboo Dock (Version: 4.1)

Bamboo Dock (Version: 4.1.0)

Benutzerhandbuch (Version: 1.0.0.9)

Dolby Home Theater v4 (Version: 7.2.8000.16)

Energy Management (Version: 8.0.2.4)

Free YouTube to MP3 Converter version 3.12.0.128 (Version: 3.12.0.128)

Gameforge Live 1.2.1734 "Legend" (Version: 1.2.1734)

GIMP 2.8.4 (Version: 2.8.4)

Google Chrome (Version: 27.0.1453.94)

Google Update Helper (Version: 1.3.21.145)

Inkscape 0.48.4 (Version: 0.48.4)

Intel AppUp(SM) center (Version: 3.6.1.33057.10)

Intel PROSet Wireless

Intel(R) Control Center (Version: 1.2.1.1008)

Intel(R) Management Engine Components (Version: 8.1.0.1252)

Intel(R) Processor Graphics (Version: 9.17.10.2843)

Intel(R) Rapid Storage Technology (Version: 11.5.4.1001)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (Version: 2.0.0.37149)

Intel(R) WiDi (Version: 3.5.34.0)

Intel® PROSet/Wireless WiFi-Software (Version: 15.05.2000.1462)

Intel® Trusted Connect Service Client (Version: 1.24.388.1)

Intelligent Touchpad (Version: 2.00.0012.0723)

Java 7 Update 21 (Version: 7.0.210)

Java Auto Updater (Version: 2.1.9.5)

JMicron Flash Media Controller Driver (Version: 1.0.71.1)

Lenovo Bluetooth with Enhanced Data Rate Software (Version: 12.0.0.2200)

Lenovo EasyCamera (Version: 13.12.824.1)

Lenovo OneKey Recovery (Version: 8.0.0.0828)

Lenovo PowerDVD10 (Version: 10.0.4331.52)

Lenovo YouCam (Version: 4.1.3127)

Microsoft Office (Version: 14.0.6120.5004)

Microsoft PowerPoint Viewer (Version: 14.0.6029.1000)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)

NVIDIA Grafiktreiber 314.07 (Version: 314.07)

NVIDIA Install Application (Version: 2.1002.109.706)

NVIDIA Optimus 1.12.12 (Version: 1.12.12)

NVIDIA PhysX (Version: 9.12.1031)

NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)

NVIDIA Systemsteuerung 314.07 (Version: 314.07)

NVIDIA Update 1.12.12 (Version: 1.12.12)

NVIDIA Update Components (Version: 1.12.12)

Onekey Theater (Version: 3.0.0.9)

OpenOffice.org 3.4.1 (Version: 3.41.9593)

Orange Mobiles Internet (Version: 1.0.0.1)

PaintTool SAI Ver.1

Pando Media Booster (Version: 2.6.0.8)

Power2Go (Version: 5.6.0.9109)

Realtek High Definition Audio Driver (Version: 6.0.1.6680)

Shared C Run-time for x64 (Version: 10.0.0)

Skype™ 6.3 (Version: 6.3.107)

SugarSync Manager (Version: 1.9.61.90905)

Synaptics Pointing Device Driver (Version: 16.2.10.13)

TuxGuitar (Version: 1.2)

UserGuide (Version: 1.0.0.9)

Wacom (Version: 5.3.2-1)

WebTablet FB Plugin 32 bit (Version: 2.1.0.2)

WebTablet FB Plugin 64 bit (Version: 2.1.0.2)

Windows-Treiberpaket - Lenovo (ACPIVPC) System  (06/15/2012 8.1.0.1) (Version: 06/15/2012 8.1.0.1)

Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid  (06/19/2012 10.13.29.733) (Version: 06/19/2012 10.13.29.733)
 

========================= Memory info: ===================================
 

Percentage of memory in use: 24%

Total physical RAM: 8057.77 MB

Available physical RAM: 6115.32 MB

Total Pagefile: 9273.77 MB

Available Pagefile: 7217.29 MB

Total Virtual: 4095.88 MB

Available Virtual: 3956.03 MB
 

========================= Partitions: =====================================
 

1 Drive c: (Windows8_OS) (Fixed) (Total:884.18 GB) (Free:764.96 GB) NTFS

2 Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:21.97 GB) NTFS

4 Drive f: (Mobiles Internet) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS
 

========================= Users: ========================================
 

Benutzerkonten fr \\MOONPIE
 

Administrator            Gast                     Sarah                    

UpdatusUser              

Der Befehl wurde erfolgreich ausgefhrt.
 

========================= Minidump Files ==================================
 

No minidump file found
 
 

**** End of log ****

FSS:

Code:

Farbar Service Scanner Version: 31-05-2013 01

Ran by Sarah (administrator) on 03-06-2013 at 22:38:15

Running from "C:\Users\Sarah\Desktop"

Windows 8  (X64)

Boot Mode: Normal

****************************************************************
 

Internet Services:

============
 

Connection Status:

==============

Localhost is accessible.

LAN connected.

Google IP is accessible.

Google.com is accessible.

Attempt to access Yahoo IP returned error. Yahoo IP is offline

Yahoo.com is accessible.
 
 

Windows Firewall:

=============
 

Firewall Disabled Policy: 

==================
 
 

System Restore:

============
 

System Restore Disabled Policy: 

========================
 
 

Action Center:

============
 
 

Windows Update:

============
 

Windows Autoupdate Disabled Policy: 

============================
 
 

Windows Defender:

==============

WinDefend Service is not running. Checking service configuration:

The start type of WinDefend service is set to Demand. The default start type is Auto.

The ImagePath of WinDefend: ""%ProgramFiles%\Windows Defender\MsMpEng.exe"".
 
 

Windows Defender Disabled Policy: 

==========================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]

"DisableAntiSpyware"=DWORD:1
 
 

Other Services:

==============
 
 

File Check:

========

C:\Windows\System32\nsisvc.dll => MD5 is legit

C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit

C:\Windows\System32\dhcpcore.dll => MD5 is legit

C:\Windows\System32\drivers\afd.sys => MD5 is legit

C:\Windows\System32\drivers\tdx.sys => MD5 is legit

C:\Windows\System32\Drivers\tcpip.sys

[2013-04-15 10:26] - [2013-03-02 11:59] - 2231528 ____A (Microsoft Corporation) B6D52E2C38B49A156E58FF5B9C6CA8BE
 

C:\Windows\System32\dnsrslvr.dll => MD5 is legit

C:\Windows\System32\mpssvc.dll => MD5 is legit

C:\Windows\System32\bfe.dll => MD5 is legit

C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit

C:\Windows\System32\SDRSVC.dll => MD5 is legit

C:\Windows\System32\vssvc.exe => MD5 is legit

C:\Windows\System32\wscsvc.dll

[2013-05-18 08:57] - [2013-04-09 06:51] - 0099840 ____A (Microsoft Corporation) 012CFE7F0F95266F554EE3B91EE2128A
 

C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit

C:\Windows\System32\wuaueng.dll

[2013-04-15 10:26] - [2013-03-02 04:45] - 3240448 ____A (Microsoft Corporation) 79F95469604B77296346DE7DB463EA2A
 

C:\Windows\System32\qmgr.dll => MD5 is legit

C:\Windows\System32\es.dll => MD5 is legit

C:\Windows\System32\cryptsvc.dll => MD5 is legit

C:\Program Files\Windows Defender\MpSvc.dll

[2013-04-01 19:56] - [2013-01-29 01:08] - 1555920 ____A (Microsoft Corporation) 905601FFF40D8DA9FA82CBE77D1F5EB1
 

C:\Program Files\Windows Defender\MsMpEng.exe

[2013-04-01 19:56] - [2013-01-29 03:57] - 0014920 ____A (Microsoft Corporation) 473B9548568BA927ACE0B77EC208A561
 

C:\Windows\System32\ipnathlp.dll => MD5 is legit

C:\Windows\System32\iphlpsvc.dll => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit
 
 

**** End of log ****

Und das neue FRST:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-06-2013 01

Ran by Sarah (administrator) on 03-06-2013 22:44:25

Running from C:\Users\Sarah\Desktop

Windows 8 (X64) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe

(Microsoft Corporation) C:\WINDOWS\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

() C:\Program Files (x86)\Orange Mobiles Internet\AssistantServices.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe

(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe

(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe

(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe

() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE

(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe

(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe

(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe

() C:\Program Files (x86)\Orange Mobiles Internet\UIExec.exe

() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\Orange Mobiles Internet\UIMain.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

() C:\Program Files (x86)\Orange Mobiles Internet\CMUpdater.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\WINDOWS\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.2.9200.16455_none_624a7aa150f57306\TiWorker.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-27] (Synaptics Incorporated)

HKLM\...\Run: [SynLenovoGestureMgr] "%ProgramFiles%\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m [665400 2012-08-27] (Synaptics)

HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12921488 2012-09-14] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4  [1214608 2012-09-14] (Realtek Semiconductor)

HKLM\...\Run: [OnekeyStudio] C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-08-10] (Lenovo)

HKLM\...\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2012-10-20] (Lenovo (Beijing) Limited)

HKLM\...\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2012-10-20] (Lenovo(beijing) Limited)

HKCU\...\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-16] ()

HKCU\...\Run: [GoogleChromeAutoLaunch_3AA6F76B1F039D21D0A8ED450CE79138] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window [825808 2013-05-23] (Google Inc.)

MountPoints2: {3cc730bf-4c58-11e2-be76-20689d7b2506} - "F:\AutoRun.exe" 

HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60 [277504 2012-08-16] (Intel Corporation)

HKLM-x32\...\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-05-02] (Vimicro)

HKLM-x32\...\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart [508656 2012-07-25] (Dolby Laboratories Inc.)

HKLM-x32\...\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" [136488 2012-07-27] (CyberLink)

HKLM-x32\...\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s [167024 2012-07-27] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0" [217088 2012-04-18] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" [91432 2012-03-28] (CyberLink Corp.)

HKLM-x32\...\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [155488 2012-07-12] (Intel Corporation)

HKLM-x32\...\Run: [UIExec] "C:\Program Files (x86)\Orange Mobiles Internet\UIExec.exe" [153424 2012-02-11] ()

HKLM-x32\...\Run: [BambooCore] C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] ()

HKLM-x32\...\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345312 2013-05-08] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)

AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll [250504 2013-02-10] (NVIDIA Corporation)

Startup: C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk

ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com

HKCU SearchScopes: DefaultScope {B4001FFC-49CA-4047-BA64-2DA345FE8A83} URL = 

SearchScopes: HKCU - {B4001FFC-49CA-4047-BA64-2DA345FE8A83} URL = 

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 213.94.78.26 213.94.78.27
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/

CHR RestoreOnStartup: "hxxp://www.google.at/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\pdf.dll ()

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File

CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File

CHR Extension: (Google Docs) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Nuvi Collection) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbjcghmcibkemiabpnofapahcpjjpefe\5_0

CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0

CHR Extension: (Gmail) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752 2013-04-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816 2013-04-02] (Avira Operations GmbH & Co. KG)

R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252088 2012-08-25] (Broadcom Corporation.)

R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [957304 2012-09-06] (Broadcom Corporation.)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-07-18] ()

R2 UI Assistant Service; C:\Program Files (x86)\Orange Mobiles Internet\AssistantServices.exe [270672 2012-02-11] ()

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)

R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568 2012-07-18] (Intel® Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [165688 2012-08-25] (Broadcom Corporation.)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4273192 2012-08-19] (Intel Corporation)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated)

S3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [48096 2012-08-09] (Windows (R) Win 7 DDK provider)

R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [975104 2012-08-24] (Vimicro Corporation)

S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

R3 WUDFSensorLP; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)

R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)

S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-09] (Windows (R) Win 7 DDK provider)

R3 zte_cdc_acm; C:\Windows\system32\DRIVERS\zte_cdc_acm.sys [79872 2011-05-23] (ZTE)

R3 zte_cdc_ecm; C:\Windows\system32\DRIVERS\zte_cdc_ecm.sys [36864 2011-05-23] (ZTE)

S3 zte_cpo; C:\Windows\system32\DRIVERS\zte_cpo.sys [14336 2011-05-23] (ZTE)

R3 zte_ecm_enum; C:\Windows\System32\drivers\zte_ecm_enum.sys [56320 2011-05-23] (ZTE)

R3 zte_ecm_enum_filter; C:\Windows\System32\drivers\zte_ecm_enum_filter.sys [56320 2011-05-23] (ZTE)

R2 avgntflt; system32\DRIVERS\avgntflt.sys [x]

R1 avipbb; \SystemRoot\system32\DRIVERS\avipbb.sys [x]

R1 avkmgr; \SystemRoot\system32\DRIVERS\avkmgr.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-06-03 22:41 - 2013-06-03 22:43 - 01916754 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64.exe

2013-06-03 22:38 - 2013-06-03 22:38 - 00003064 ____A C:\Users\Sarah\Desktop\FSS.txt

2013-06-03 22:37 - 2013-06-03 22:37 - 00355651 ____A (Farbar) C:\Users\Sarah\Downloads\FSS (1).exe

2013-06-03 22:36 - 2013-06-03 22:36 - 00355651 ____A (Farbar) C:\Users\Sarah\Desktop\FSS.exe

2013-06-03 22:35 - 2013-06-03 22:35 - 00021951 ____A C:\Users\Sarah\Desktop\Result.txt

2013-06-03 22:33 - 2013-06-03 22:33 - 00760723 ____A (Farbar) C:\Users\Sarah\Desktop\MiniToolBox.exe

2013-06-03 22:26 - 2013-06-03 22:26 - 00000759 ____A C:\Users\Sarah\Desktop\JRT.txt

2013-06-03 22:22 - 2013-06-03 22:22 - 00000000 ____D C:\Windows\ERUNT

2013-06-03 22:21 - 2013-06-03 22:24 - 00000000 ____D C:\JRT

2013-06-03 22:21 - 2013-06-03 22:21 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Sarah\Desktop\JRT.exe

2013-06-03 22:12 - 2013-06-03 22:13 - 00016259 ____A C:\AdwCleaner[S1].txt

2013-06-03 22:10 - 2013-06-03 22:10 - 00632031 ____A C:\Users\Sarah\Desktop\adwcleaner.exe

2013-06-03 22:00 - 2013-06-03 22:00 - 00015388 ____A C:\Users\Sarah\Desktop\Addition.txt

2013-06-03 21:58 - 2013-06-03 21:58 - 00000000 ____D C:\FRST

2013-06-03 21:57 - 2013-06-03 21:57 - 01356197 ____A (Farbar) C:\Users\Sarah\Downloads\FRST.exe

2013-06-02 15:27 - 2013-06-02 15:27 - 00000000 ____D C:\Users\Sarah\Documents\Neuer Ordner

2013-05-28 18:51 - 2013-05-28 18:51 - 00008454 ____A C:\Users\Sarah\AppData\Local\recently-used.xbel

2013-05-27 13:59 - 2013-05-27 13:59 - 00009565 ____A C:\Users\Sarah\Documents\songs.zip

2013-05-27 13:59 - 2013-05-27 13:59 - 00000000 ____D C:\Users\Sarah\Documents\songs

2013-05-24 20:08 - 2013-05-24 20:08 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2013-05-22 22:33 - 2013-05-23 19:20 - 00027999 ____A C:\Users\Sarah\Documents\Handout-Referat-Deutsch.odt

2013-05-22 21:06 - 2013-05-22 21:09 - 00009511 ____A C:\Users\Sarah\Documents\Unbenannt 1.odt

2013-05-22 20:40 - 2013-05-22 20:40 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone (1).ppt

2013-05-21 17:16 - 2013-05-21 17:16 - 00009688 ____A C:\Users\Sarah\Documents\song.tg

2013-05-21 16:35 - 2013-05-21 16:35 - 00866720 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00788896 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Users\Sarah\.tuxguitar-1.2

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\ProgramData\Sun

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Program Files (x86)\Java

2013-05-21 16:31 - 2013-05-21 16:31 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (2).exe

2013-05-21 16:27 - 2013-05-21 16:27 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (1).exe

2013-05-21 16:26 - 2013-05-21 16:26 - 00008299 ____A C:\Users\Sarah\Documents\Untitled.tg

2013-05-21 16:19 - 2013-05-21 16:19 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21.exe

2013-05-21 16:19 - 2013-05-21 16:19 - 00000960 ____A C:\Users\Public\Desktop\TuxGuitar.lnk

2013-05-21 16:19 - 2013-05-21 16:19 - 00000000 ____D C:\Program Files (x86)\TuxGuitar

2013-05-21 16:17 - 2013-05-21 16:18 - 07715210 ____A (Herac) C:\Users\Sarah\Downloads\tuxguitar-1.2-windows-x86-installer.exe

2013-05-21 12:41 - 2013-05-21 12:41 - 00309752 ____A C:\Windows\System32\FNTCACHE.DAT

2013-05-20 17:30 - 2013-04-10 01:17 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 00915968 ____A (Microsoft Corporation) C:\Windows\System32\uxtheme.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2013-05-20 17:29 - 2013-04-10 01:16 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-05-20 17:29 - 2013-04-10 01:16 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-05-20 17:29 - 2013-04-10 01:16 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-05-20 17:29 - 2013-04-10 01:16 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-05-20 17:29 - 2013-04-10 00:30 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-05-20 17:29 - 2013-04-10 00:30 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-05-20 16:29 - 2013-05-20 16:29 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone.ppt

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\WebApp

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Lenovo

2013-05-19 14:42 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\Documents\CyberLink

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\Lenovo

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\ProgramData\Lenovo

2013-05-19 14:22 - 2013-04-16 04:34 - 01455368 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys

2013-05-18 16:44 - 2013-03-06 08:31 - 19758592 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll

2013-05-18 16:44 - 2013-03-06 07:03 - 17561600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-05-18 16:43 - 2013-03-06 09:10 - 00112872 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe

2013-05-18 16:43 - 2013-03-06 08:31 - 00222208 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll

2013-05-18 16:43 - 2013-03-06 08:29 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll

2013-05-18 16:43 - 2013-03-06 07:03 - 00199168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-05-18 16:09 - 2013-03-15 02:17 - 00861184 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\http.sys

2013-05-18 13:08 - 2013-03-22 05:49 - 02382336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2013-05-18 13:08 - 2013-03-22 00:47 - 02851840 ____A (Microsoft Corporation) C:\Windows\System32\esent.dll

2013-05-18 08:58 - 2013-04-09 06:51 - 14267904 ____A (Microsoft Corporation) C:\Windows\System32\wmp.dll

2013-05-18 08:58 - 2013-04-09 06:51 - 13648384 ____A (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll

2013-05-18 08:58 - 2013-04-09 06:51 - 03552768 ____A (Microsoft Corporation) C:\Windows\System32\tquery.dll

2013-05-18 08:58 - 2013-04-09 06:50 - 02107904 ____A (Microsoft Corporation) C:\Windows\System32\mssrch.dll

2013-05-18 08:58 - 2013-04-08 23:52 - 11878912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-05-18 08:58 - 2013-04-08 23:51 - 10789888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2013-05-18 08:58 - 2013-04-08 23:51 - 02767360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2013-05-18 08:58 - 2013-04-08 23:51 - 01593344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2013-05-18 08:57 - 2013-04-09 07:33 - 00489576 ____A (Microsoft Corporation) C:\Windows\System32\AudioEng.dll

2013-05-18 08:57 - 2013-04-09 07:33 - 00446792 ____A (Microsoft Corporation) C:\Windows\System32\AudioSes.dll

2013-05-18 08:57 - 2013-04-09 07:33 - 00253544 ____A (Microsoft Corporation) C:\Windows\System32\audiodg.exe

2013-05-18 08:57 - 2013-04-09 07:27 - 00284424 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys

2013-05-18 08:57 - 2013-04-09 07:20 - 00306952 ____A (Microsoft Corporation) C:\Windows\System32\kd_02_10ec.dll

2013-05-18 08:57 - 2013-04-09 07:20 - 00086280 ____A (Microsoft Corporation) C:\Windows\System32\kdnet.dll

2013-05-18 08:57 - 2013-04-09 07:18 - 00077960 ____A (Microsoft Corporation) C:\Windows\System32\kdvm.dll

2013-05-18 08:57 - 2013-04-09 07:17 - 01829408 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll

2013-05-18 08:57 - 2013-04-09 06:52 - 00816128 ____A (Microsoft Corporation) C:\Windows\System32\SearchIndexer.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00804352 ____A (Microsoft Corporation) C:\Windows\System32\RecoveryDrive.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00373760 ____A (Microsoft Corporation) C:\Windows\System32\SearchProtocolHost.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\SearchFilterHost.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00126464 ____A (Microsoft Corporation) C:\Windows\System32\Robocopy.exe

2013-05-18 08:57 - 2013-04-09 06:51 - 10116096 ____A (Microsoft Corporation) C:\Windows\System32\twinui.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00595456 ____A (Microsoft Corporation) C:\Windows\System32\Windows.Networking.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00523264 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00456704 ____A (Microsoft Corporation) C:\Windows\System32\wpncore.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\Windows.Networking.BackgroundTransfer.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00367616 ____A (Microsoft Corporation) C:\Windows\System32\conhost.exe

2013-05-18 08:57 - 2013-04-09 06:51 - 00099840 ____A (Microsoft Corporation) C:\Windows\System32\wscsvc.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 01285632 ____A (Microsoft Corporation) C:\Windows\System32\schedsvc.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00745984 ____A (Microsoft Corporation) C:\Windows\System32\mssvp.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00435200 ____A (Microsoft Corporation) C:\Windows\System32\mssph.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00422400 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00414720 ____A (Microsoft Corporation) C:\Windows\System32\GenuineCenter.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00096256 ____A (Microsoft Corporation) C:\Windows\System32\mssprxy.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\msscntrs.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\msshooks.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 01444864 ____A (Microsoft Corporation) C:\Windows\System32\MSAudDecMFT.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00817152 ____A (Microsoft Corporation) C:\Windows\System32\kerberos.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00468992 ____A (Microsoft Corporation) C:\Windows\System32\MFMediaEngine.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00281088 ____A (Microsoft Corporation) C:\Windows\System32\mfreadwrite.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\fhengine.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00210432 ____A (Microsoft Corporation) C:\Windows\System32\iuilp.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00196096 ____A (Microsoft Corporation) C:\Windows\System32\dmvdsitf.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00172544 ____A (Microsoft Corporation) C:\Windows\System32\dwmredir.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00050176 ____A (Microsoft Corporation) C:\Windows\System32\fmifs.dll

2013-05-18 08:57 - 2013-04-09 06:48 - 02303488 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll

2013-05-18 08:57 - 2013-04-09 06:48 - 00785408 ____A (Microsoft Corporation) C:\Windows\System32\audiosrv.dll

2013-05-18 08:57 - 2013-04-09 06:48 - 00419840 ____A (Microsoft Corporation) C:\Windows\System32\intl.cpl

2013-05-18 08:57 - 2013-04-09 06:48 - 00169472 ____A (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll

2013-05-18 08:57 - 2013-04-09 04:35 - 04038144 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys

2013-05-18 08:57 - 2013-04-09 04:34 - 00095744 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidbth.sys

2013-05-18 08:57 - 2013-04-09 04:34 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys

2013-05-18 08:57 - 2013-04-09 04:34 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidusb.sys

2013-05-18 08:57 - 2013-04-09 04:33 - 00623104 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys

2013-05-18 08:57 - 2013-04-09 04:33 - 00060416 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ndproxy.sys

2013-05-18 08:57 - 2013-04-09 04:32 - 00805376 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\PEAuth.sys

2013-05-18 08:57 - 2013-04-09 04:31 - 00247808 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys

2013-05-18 08:57 - 2013-04-09 04:31 - 00083456 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\wanarp.sys

2013-05-18 08:57 - 2013-04-09 01:44 - 00123880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll

2013-05-18 08:57 - 2013-04-09 01:39 - 01408896 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-05-18 08:57 - 2013-04-09 01:37 - 00426024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2013-05-18 08:57 - 2013-04-09 01:37 - 00324368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2013-05-18 08:57 - 2013-04-08 23:52 - 00670208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2013-05-18 08:57 - 2013-04-08 23:52 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2013-05-18 08:57 - 2013-04-08 23:52 - 00302592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2013-05-18 08:57 - 2013-04-08 23:52 - 00171008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2013-05-18 08:57 - 2013-04-08 23:52 - 00106496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe

2013-05-18 08:57 - 2013-04-08 23:51 - 08857088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 02035200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 01113600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSAudDecMFT.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00659456 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00656896 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00411136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00403968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00389632 ____A (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl

2013-05-18 08:57 - 2013-04-08 23:51 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00324096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00268800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00214528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00186880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00155648 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\fmifs.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00035328 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00010752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll

2013-05-18 08:57 - 2013-04-05 01:30 - 00503080 ____A (Microsoft Corporation) C:\Windows\System32\ci.dll

2013-05-18 08:57 - 2013-04-03 00:08 - 00387688 ____A C:\Windows\System32\ApnDatabase.xml

2013-05-18 08:57 - 2013-03-30 20:16 - 01403784 ____A (Microsoft Corporation) C:\Windows\System32\winload.efi

2013-05-18 08:57 - 2013-03-30 20:16 - 01267424 ____A (Microsoft Corporation) C:\Windows\System32\winload.exe

2013-05-18 08:57 - 2013-03-29 00:09 - 01217328 ____A (Microsoft Corporation) C:\Windows\System32\winresume.efi

2013-05-18 08:57 - 2013-03-29 00:09 - 01093880 ____A (Microsoft Corporation) C:\Windows\System32\winresume.exe

2013-05-18 08:57 - 2013-03-16 00:05 - 00298456 ____A (Microsoft Corporation) C:\Windows\System32\rsaenh.dll

2013-05-18 08:57 - 2013-03-16 00:05 - 00252928 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll

2013-05-18 08:57 - 2012-12-13 06:00 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll

2013-05-18 08:57 - 2012-12-13 05:59 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-05-15 19:21 - 2013-04-11 08:40 - 06987528 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2013-05-15 15:09 - 2013-05-15 15:09 - 00013658 ____A C:\Users\Sarah\Documents\In The Mourning.odt

2013-05-14 20:09 - 2013-01-15 23:06 - 03662237 ____A C:\Users\Sarah\Documents\Dublin pp.pptx

2013-05-14 20:09 - 2012-11-21 18:29 - 01249251 ____A C:\Users\Sarah\Documents\Die spätbyzantinische Zeit-PPP.pptx

2013-05-14 18:50 - 2013-05-14 20:05 - 03351024 ____A C:\Users\Sarah\Documents\Geburten.odp

2013-05-14 18:33 - 2013-05-14 18:33 - 00222253 ____A C:\Users\Sarah\Downloads\Geburten.pptx

2013-05-14 18:20 - 2013-05-14 20:08 - 00023905 ____A C:\Users\Sarah\Documents\BIUK-Geburt.odt

2013-05-13 12:43 - 2013-05-13 21:02 - 00021118 ____A C:\Users\Sarah\Documents\Frankreich- Jahresbericht!.odt

2013-05-13 08:05 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Documents\GWK.odt

2013-05-12 21:12 - 2013-05-13 08:03 - 00018534 ____A C:\Users\Sarah\Documents\GWK Handout.odt

2013-05-12 20:59 - 2013-05-12 21:42 - 01952043 ____A C:\Users\Sarah\Documents\GWK PPP.odp

2013-05-12 20:39 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Downloads\GWK.odt

2013-05-12 19:48 - 2013-05-12 19:48 - 00164636 ____A C:\Users\Sarah\Downloads\Alte Industrieregionen.pptx

2013-05-09 21:37 - 2013-05-09 21:37 - 00010094 ____A C:\Users\Sarah\Downloads\Unbenannt 1.odt

2013-05-09 21:13 - 2013-05-09 21:13 - 00049103 ____A C:\Users\Sarah\Downloads\Daydreamer.odt

2013-05-08 21:23 - 2013-05-08 21:23 - 00083160 ____A (Avira GmbH) C:\Windows\System32\Drivers\avnetflt.sys

2013-05-05 17:12 - 2013-05-05 17:12 - 00000000 ___HD C:\ProgramData\CanonBJ

2013-05-05 17:11 - 2012-03-14 05:00 - 00385024 ____A (CANON INC.) C:\Windows\System32\CNMLMAR.DLL

2013-05-05 17:11 - 2011-04-27 11:01 - 00373248 ____A (CANON INC.) C:\Windows\System32\CNC_ARL.dll

2013-05-05 17:11 - 2011-04-27 11:00 - 00323584 ____A (CANON INC.) C:\Windows\SysWOW64\CNC_ARL.dll

2013-05-05 17:11 - 2011-03-31 10:07 - 00302080 ____A (CANON INC.) C:\Windows\System32\CNC_ARC.dll

2013-05-05 17:11 - 2011-03-31 10:07 - 00114688 ____A (CANON INC.) C:\Windows\SysWOW64\CNC_ARU.dll

2013-05-05 17:11 - 2011-03-31 10:06 - 00112128 ____A (CANON INC.) C:\Windows\System32\CNC_ARI.dll

2013-05-05 17:11 - 2010-11-29 09:17 - 00063744 ____A C:\Windows\SysWOW64\CNC1752D.TBL

2013-05-05 17:11 - 2008-08-25 18:02 - 00017920 ____A (CANON INC.) C:\Windows\System32\CNHMCA6.dll

2013-05-05 17:11 - 2008-08-25 18:02 - 00015872 ____A (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll

2013-05-05 15:59 - 2013-05-05 15:59 - 00012684 ____A C:\Users\Sarah\Documents\English Presentation.odt

2013-05-04 00:43 - 2013-05-04 00:43 - 00001250 ____A C:\Users\Sarah\Desktop\League of Legends.lnk
 

==================== One Month Modified Files and Folders =======
 

2013-06-03 22:44 - 2013-02-16 16:33 - 00000000 ____D C:\Users\Sarah\AppData\Local\PMB Files

2013-06-03 22:43 - 2013-06-03 22:41 - 01916754 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64.exe

2013-06-03 22:42 - 2012-10-20 02:10 - 01200621 ____A C:\Windows\WindowsUpdate.log

2013-06-03 22:38 - 2013-06-03 22:38 - 00003064 ____A C:\Users\Sarah\Desktop\FSS.txt

2013-06-03 22:37 - 2013-06-03 22:37 - 00355651 ____A (Farbar) C:\Users\Sarah\Downloads\FSS (1).exe

2013-06-03 22:36 - 2013-06-03 22:36 - 00355651 ____A (Farbar) C:\Users\Sarah\Desktop\FSS.exe

2013-06-03 22:35 - 2013-06-03 22:35 - 00021951 ____A C:\Users\Sarah\Desktop\Result.txt

2013-06-03 22:33 - 2013-06-03 22:33 - 00760723 ____A (Farbar) C:\Users\Sarah\Desktop\MiniToolBox.exe

2013-06-03 22:33 - 2012-10-20 11:17 - 00754172 ____A C:\Windows\System32\perfh007.dat

2013-06-03 22:33 - 2012-10-20 11:17 - 00156362 ____A C:\Windows\System32\perfc007.dat

2013-06-03 22:33 - 2012-07-26 09:28 - 01748838 ____A C:\Windows\System32\PerfStringBackup.INI

2013-06-03 22:26 - 2013-06-03 22:26 - 00000759 ____A C:\Users\Sarah\Desktop\JRT.txt

2013-06-03 22:24 - 2013-06-03 22:21 - 00000000 ____D C:\JRT

2013-06-03 22:22 - 2013-06-03 22:22 - 00000000 ____D C:\Windows\ERUNT

2013-06-03 22:21 - 2013-06-03 22:21 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Sarah\Desktop\JRT.exe

2013-06-03 22:15 - 2013-02-03 18:41 - 00001120 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-06-03 22:14 - 2012-07-26 09:22 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-06-03 22:13 - 2013-06-03 22:12 - 00016259 ____A C:\AdwCleaner[S1].txt

2013-06-03 22:13 - 2012-07-26 07:26 - 00262144 __ASH C:\Windows\System32\config\BBI

2013-06-03 22:12 - 2013-02-18 19:49 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Skype

2013-06-03 22:10 - 2013-06-03 22:10 - 00632031 ____A C:\Users\Sarah\Desktop\adwcleaner.exe

2013-06-03 22:01 - 2013-02-03 18:41 - 00001124 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-06-03 22:00 - 2013-06-03 22:00 - 00015388 ____A C:\Users\Sarah\Desktop\Addition.txt

2013-06-03 22:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\System32\sru

2013-06-03 21:58 - 2013-06-03 21:58 - 00000000 ____D C:\FRST

2013-06-03 21:57 - 2013-06-03 21:57 - 01356197 ____A (Farbar) C:\Users\Sarah\Downloads\FRST.exe

2013-06-02 16:01 - 2012-12-25 14:44 - 00000000 ____D C:\Users\Sarah\Documents\Fortsetzungsstorys

2013-06-02 15:27 - 2013-06-02 15:27 - 00000000 ____D C:\Users\Sarah\Documents\Neuer Ordner

2013-06-02 12:20 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent

2013-06-01 13:23 - 2012-07-26 09:21 - 00051373 ____A C:\Windows\setupact.log

2013-05-28 18:51 - 2013-05-28 18:51 - 00008454 ____A C:\Users\Sarah\AppData\Local\recently-used.xbel

2013-05-27 13:59 - 2013-05-27 13:59 - 00009565 ____A C:\Users\Sarah\Documents\songs.zip

2013-05-27 13:59 - 2013-05-27 13:59 - 00000000 ____D C:\Users\Sarah\Documents\songs

2013-05-26 17:14 - 2013-02-16 16:33 - 00000000 ____D C:\ProgramData\PMB Files

2013-05-26 15:12 - 2013-05-03 14:26 - 00001082 ____A C:\Users\Public\Desktop\Gameforge Live.lnk

2013-05-26 15:12 - 2013-05-03 14:26 - 00000000 ____D C:\Users\Sarah\Downloads\Gameforge Live

2013-05-26 15:12 - 2013-05-03 14:26 - 00000000 ____D C:\Program Files (x86)\GameforgeLive

2013-05-24 20:08 - 2013-05-24 20:08 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2013-05-24 19:32 - 2013-02-20 21:58 - 00000000 ____D C:\Users\Sarah\Documents\Story-Ib

2013-05-24 18:11 - 2013-02-03 18:45 - 00002194 ____A C:\Users\Public\Desktop\Google Chrome.lnk

2013-05-23 19:20 - 2013-05-22 22:33 - 00027999 ____A C:\Users\Sarah\Documents\Handout-Referat-Deutsch.odt

2013-05-22 21:09 - 2013-05-22 21:06 - 00009511 ____A C:\Users\Sarah\Documents\Unbenannt 1.odt

2013-05-22 20:40 - 2013-05-22 20:40 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone (1).ppt

2013-05-22 19:50 - 2013-01-11 17:41 - 00000000 ____D C:\Users\Sarah\.gimp-2.8

2013-05-21 17:16 - 2013-05-21 17:16 - 00009688 ____A C:\Users\Sarah\Documents\song.tg

2013-05-21 16:35 - 2013-05-21 16:35 - 00866720 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00788896 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Users\Sarah\.tuxguitar-1.2

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\ProgramData\Sun

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Program Files (x86)\Java

2013-05-21 16:35 - 2013-02-03 18:22 - 00000000 ____D C:\users\Sarah

2013-05-21 16:31 - 2013-05-21 16:31 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (2).exe

2013-05-21 16:27 - 2013-05-21 16:27 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (1).exe

2013-05-21 16:26 - 2013-05-21 16:26 - 00008299 ____A C:\Users\Sarah\Documents\Untitled.tg

2013-05-21 16:19 - 2013-05-21 16:19 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21.exe

2013-05-21 16:19 - 2013-05-21 16:19 - 00000960 ____A C:\Users\Public\Desktop\TuxGuitar.lnk

2013-05-21 16:19 - 2013-05-21 16:19 - 00000000 ____D C:\Program Files (x86)\TuxGuitar

2013-05-21 16:18 - 2013-05-21 16:17 - 07715210 ____A (Herac) C:\Users\Sarah\Downloads\tuxguitar-1.2-windows-x86-installer.exe

2013-05-21 12:41 - 2013-05-21 12:41 - 00309752 ____A C:\Windows\System32\FNTCACHE.DAT

2013-05-20 19:47 - 2013-01-05 19:07 - 00000000 ____D C:\Users\Sarah\Documents\Youcam

2013-05-20 16:29 - 2013-05-20 16:29 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone.ppt

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\WebApp

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Lenovo

2013-05-19 14:43 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\CyberLink

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\Lenovo

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\ProgramData\Lenovo

2013-05-19 14:42 - 2013-02-15 17:07 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\CyberLink

2013-05-19 14:25 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ToastData

2013-05-19 14:25 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\WinStore

2013-05-17 19:52 - 2013-02-18 19:49 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-05-17 19:52 - 2013-02-18 19:49 - 00000000 ____D C:\ProgramData\Skype

2013-05-17 19:06 - 2012-09-13 20:32 - 00106688 ____A C:\Windows\PFRO.log

2013-05-17 18:09 - 2013-02-08 17:11 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe

2013-05-15 15:09 - 2013-05-15 15:09 - 00013658 ____A C:\Users\Sarah\Documents\In The Mourning.odt

2013-05-14 20:08 - 2013-05-14 18:20 - 00023905 ____A C:\Users\Sarah\Documents\BIUK-Geburt.odt

2013-05-14 20:05 - 2013-05-14 18:50 - 03351024 ____A C:\Users\Sarah\Documents\Geburten.odp

2013-05-14 18:33 - 2013-05-14 18:33 - 00222253 ____A C:\Users\Sarah\Downloads\Geburten.pptx

2013-05-13 21:02 - 2013-05-13 12:43 - 00021118 ____A C:\Users\Sarah\Documents\Frankreich- Jahresbericht!.odt

2013-05-13 08:05 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Documents\GWK.odt

2013-05-13 08:05 - 2013-05-12 20:39 - 00021195 ____A C:\Users\Sarah\Downloads\GWK.odt

2013-05-13 08:03 - 2013-05-12 21:12 - 00018534 ____A C:\Users\Sarah\Documents\GWK Handout.odt

2013-05-12 21:42 - 2013-05-12 20:59 - 01952043 ____A C:\Users\Sarah\Documents\GWK PPP.odp

2013-05-12 19:48 - 2013-05-12 19:48 - 00164636 ____A C:\Users\Sarah\Downloads\Alte Industrieregionen.pptx

2013-05-09 21:37 - 2013-05-09 21:37 - 00010094 ____A C:\Users\Sarah\Downloads\Unbenannt 1.odt

2013-05-09 21:13 - 2013-05-09 21:13 - 00049103 ____A C:\Users\Sarah\Downloads\Daydreamer.odt

2013-05-08 21:23 - 2013-05-08 21:23 - 00083160 ____A (Avira GmbH) C:\Windows\System32\Drivers\avnetflt.sys

2013-05-07 22:07 - 2013-03-03 08:06 - 00693112 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-05-07 22:07 - 2013-03-03 08:06 - 00078200 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-05-05 17:12 - 2013-05-05 17:12 - 00000000 ___HD C:\ProgramData\CanonBJ

2013-05-05 17:11 - 2012-07-26 10:12 - 00000000 __RSD C:\Windows\Media

2013-05-05 15:59 - 2013-05-05 15:59 - 00012684 ____A C:\Users\Sarah\Documents\English Presentation.odt

2013-05-04 00:43 - 2013-05-04 00:43 - 00001250 ____A C:\Users\Sarah\Desktop\League of Legends.lnk
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

Last Boot: 2013-06-02 08:11
 

==================== End Of Log ============================

Dann noch FRST. Wie läuft der Rechner?

Der FRST ist da ^^
Also der Rechner läuft, so weit ich das bemerkt habe, eigentlich wie sonst auch.

Ey, rumeditieren zählt nit :D

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Ist es normal, dass ESET sehr lange dauert?
(nach 12 min bei 25 %)

Danke für alles bis jetzt ^^

Ja der dauert schon manchmal 2h oder so :)

Wäre es dann eigentlich in Ordnung wenn ich ihn über Nacht laufen lasse und morgen erst den Rest erledige, da ich früh raus muss. Oder wäre das ein Risiko?

Und kaum habe ich das gefragt ist er bei 99%

Hier ESET:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=0cfae7dbdd7796498c431542a3269dd0

# engine=13985

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-06-03 10:11:59

# local_time=2013-06-04 12:11:59 (+0100, Mitteleuropäische Sommerzeit)

# country="Austria"

# lang=1033

# osver=6.2.9200 NT 

# compatibility_mode=1799 16775165 100 96 7072 235720809 1719 0

# compatibility_mode=5893 16776574 100 94 5073521 29803630 0 0

# scanned=216708

# found=0

# cleaned=0

# scan_time=4309

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=0cfae7dbdd7796498c431542a3269dd0

# engine=13985

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-06-03 11:37:29

# local_time=2013-06-04 01:37:29 (+0100, Mitteleuropäische Sommerzeit)

# country="Austria"

# lang=1033

# osver=6.2.9200 NT 

# compatibility_mode=1799 16775165 100 96 12202 235725939 0 0

# compatibility_mode=5893 16776574 100 94 5078651 29808760 0 0

# scanned=232705

# found=0

# cleaned=0

# scan_time=4687

Sobald ich SecurityCheck starten will, steht da das mein Betriebssystem nicht unterstützt wird (habe windows 8)

Frisches FRST Log bitte. Noch Probleme?

Sobald ich SecurityCheck starten will, steht da das mein Betriebssystem nicht unterstützt wird (habe windows 8)

Das neue FRST kommt gleich :)

Hier der neue FRST:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-06-2013 02

Ran by Sarah (administrator) on 04-06-2013 14:16:08

Running from C:\Users\Sarah\Desktop

Windows 8 (X64) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe

(Microsoft Corporation) C:\WINDOWS\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Broadcom Corporation.) C:\WINDOWS\system32\BtwRSupportService.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

() C:\Program Files (x86)\Orange Mobiles Internet\AssistantServices.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe

(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe

(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE

(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe

(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe

(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe

(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe

(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(CyberLink Corp.) C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe

() C:\Program Files (x86)\Orange Mobiles Internet\UIExec.exe

() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Microsoft Corporation) C:\WINDOWS\splwow64.exe

() C:\Program Files (x86)\Orange Mobiles Internet\UIMain.exe

() C:\Program Files (x86)\Orange Mobiles Internet\CMUpdater.exe

() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Farbar) C:\Users\Sarah\Desktop\FRST64 (1).exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-27] (Synaptics Incorporated)

HKLM\...\Run: [SynLenovoGestureMgr] "%ProgramFiles%\Synaptics\SynTP\SynLenovoGestureMgr.exe" /m [665400 2012-08-27] (Synaptics)

HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12921488 2012-09-14] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE4  [1214608 2012-09-14] (Realtek Semiconductor)

HKLM\...\Run: [OnekeyStudio] C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-08-10] (Lenovo)

HKLM\...\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2012-10-20] (Lenovo (Beijing) Limited)

HKLM\...\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2012-10-20] (Lenovo(beijing) Limited)

HKCU\...\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-02-16] ()

HKCU\...\Run: [GoogleChromeAutoLaunch_3AA6F76B1F039D21D0A8ED450CE79138] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window [825808 2013-05-23] (Google Inc.)

MountPoints2: {3cc730bf-4c58-11e2-be76-20689d7b2506} - "F:\AutoRun.exe" 

HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60 [277504 2012-08-16] (Intel Corporation)

HKLM-x32\...\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2012-05-02] (Vimicro)

HKLM-x32\...\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart [508656 2012-07-25] (Dolby Laboratories Inc.)

HKLM-x32\...\Run: [YouCam Mirage] "C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe" [136488 2012-07-27] (CyberLink)

HKLM-x32\...\Run: [YouCam Tray] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s [167024 2012-07-27] (CyberLink Corp.)

HKLM-x32\...\Run: [UpdateP2GShortCut] "C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\5.0" [217088 2012-04-18] (CyberLink Corp.)

HKLM-x32\...\Run: [RemoteControl10] "C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe" [91432 2012-03-28] (CyberLink Corp.)

HKLM-x32\...\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4 [155488 2012-07-12] (Intel Corporation)

HKLM-x32\...\Run: [UIExec] "C:\Program Files (x86)\Orange Mobiles Internet\UIExec.exe" [153424 2012-02-11] ()

HKLM-x32\...\Run: [BambooCore] C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] ()

HKLM-x32\...\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345312 2013-05-08] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)

AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll [250504 2013-02-10] (NVIDIA Corporation)

Startup: C:\Users\Sarah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk

ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com

HKCU SearchScopes: DefaultScope {B4001FFC-49CA-4047-BA64-2DA345FE8A83} URL = 

SearchScopes: HKCU - {B4001FFC-49CA-4047-BA64-2DA345FE8A83} URL = 

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 213.94.78.27 213.94.78.26
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com/

CHR RestoreOnStartup: "hxxp://www.google.at/"

CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}

CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.94\pdf.dll ()

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File

CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

CHR Plugin: (McAfee SecurityCenter) - c:\progra~2\mcafee\msc\npmcsn~1.dll No File

CHR Extension: (Google Docs) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0

CHR Extension: (Google Drive) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0

CHR Extension: (YouTube) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0

CHR Extension: (Google Search) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0

CHR Extension: (Nuvi Collection) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbjcghmcibkemiabpnofapahcpjjpefe\5_0

CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.2_0

CHR Extension: (Gmail) - C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752 2013-04-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816 2013-04-02] (Avira Operations GmbH & Co. KG)

R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252088 2012-08-25] (Broadcom Corporation.)

R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [957304 2012-09-06] (Broadcom Corporation.)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-07-18] ()

R2 UI Assistant Service; C:\Program Files (x86)\Orange Mobiles Internet\AssistantServices.exe [270672 2012-02-11] ()

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)

R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568 2012-07-18] (Intel® Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [165688 2012-08-25] (Broadcom Corporation.)

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)

R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [4273192 2012-08-19] (Intel Corporation)

R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated)

S3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [48096 2012-08-09] (Windows (R) Win 7 DDK provider)

R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [975104 2012-08-24] (Vimicro Corporation)

S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)

R3 WUDFSensorLP; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)

R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)

S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-09] (Windows (R) Win 7 DDK provider)

R3 zte_cdc_acm; C:\Windows\system32\DRIVERS\zte_cdc_acm.sys [79872 2011-05-23] (ZTE)

R3 zte_cdc_ecm; C:\Windows\system32\DRIVERS\zte_cdc_ecm.sys [36864 2011-05-23] (ZTE)

S3 zte_cpo; C:\Windows\system32\DRIVERS\zte_cpo.sys [14336 2011-05-23] (ZTE)

R3 zte_ecm_enum; C:\Windows\System32\drivers\zte_ecm_enum.sys [56320 2011-05-23] (ZTE)

R3 zte_ecm_enum_filter; C:\Windows\System32\drivers\zte_ecm_enum_filter.sys [56320 2011-05-23] (ZTE)

R2 avgntflt; system32\DRIVERS\avgntflt.sys [x]

R1 avipbb; \SystemRoot\system32\DRIVERS\avipbb.sys [x]

R1 avkmgr; \SystemRoot\system32\DRIVERS\avkmgr.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-06-04 14:15 - 2013-06-04 14:15 - 01916714 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64 (1).exe

2013-06-04 14:14 - 2013-06-04 14:14 - 01916714 ____A (Farbar) C:\Users\Sarah\Downloads\FRST64.exe

2013-06-04 06:07 - 2013-06-04 06:07 - 00890839 ____A C:\Users\Sarah\Desktop\SecurityCheck.exe

2013-06-04 00:22 - 2013-06-04 12:40 - 00026064 ____A C:\Users\Sarah\Documents\Parfüm - Deutsch.odt

2013-06-04 00:17 - 2013-06-04 00:17 - 02347384 ____A (ESET) C:\Users\Sarah\Downloads\esetsmartinstaller_enu (1).exe

2013-06-03 22:52 - 2013-06-03 22:53 - 02347384 ____A (ESET) C:\Users\Sarah\Downloads\esetsmartinstaller_enu.exe

2013-06-03 22:41 - 2013-06-03 22:43 - 01916754 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64.exe

2013-06-03 22:38 - 2013-06-03 22:38 - 00003064 ____A C:\Users\Sarah\Desktop\FSS.txt

2013-06-03 22:37 - 2013-06-03 22:37 - 00355651 ____A (Farbar) C:\Users\Sarah\Downloads\FSS (1).exe

2013-06-03 22:36 - 2013-06-03 22:36 - 00355651 ____A (Farbar) C:\Users\Sarah\Desktop\FSS.exe

2013-06-03 22:35 - 2013-06-03 22:35 - 00021951 ____A C:\Users\Sarah\Desktop\Result.txt

2013-06-03 22:33 - 2013-06-03 22:33 - 00760723 ____A (Farbar) C:\Users\Sarah\Desktop\MiniToolBox.exe

2013-06-03 22:26 - 2013-06-03 22:26 - 00000759 ____A C:\Users\Sarah\Desktop\JRT.txt

2013-06-03 22:22 - 2013-06-03 22:22 - 00000000 ____D C:\Windows\ERUNT

2013-06-03 22:21 - 2013-06-03 22:24 - 00000000 ____D C:\JRT

2013-06-03 22:21 - 2013-06-03 22:21 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Sarah\Desktop\JRT.exe

2013-06-03 22:12 - 2013-06-03 22:13 - 00016259 ____A C:\AdwCleaner[S1].txt

2013-06-03 22:10 - 2013-06-03 22:10 - 00632031 ____A C:\Users\Sarah\Desktop\adwcleaner.exe

2013-06-03 22:00 - 2013-06-03 22:00 - 00015388 ____A C:\Users\Sarah\Desktop\Addition.txt

2013-06-03 21:58 - 2013-06-03 21:58 - 00000000 ____D C:\FRST

2013-06-03 21:57 - 2013-06-03 21:57 - 01356197 ____A (Farbar) C:\Users\Sarah\Downloads\FRST.exe

2013-06-02 15:27 - 2013-06-02 15:27 - 00000000 ____D C:\Users\Sarah\Documents\Neuer Ordner

2013-05-28 18:51 - 2013-05-28 18:51 - 00008454 ____A C:\Users\Sarah\AppData\Local\recently-used.xbel

2013-05-27 13:59 - 2013-05-27 13:59 - 00009565 ____A C:\Users\Sarah\Documents\songs.zip

2013-05-27 13:59 - 2013-05-27 13:59 - 00000000 ____D C:\Users\Sarah\Documents\songs

2013-05-24 20:08 - 2013-05-24 20:08 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2013-05-22 22:33 - 2013-05-23 19:20 - 00027999 ____A C:\Users\Sarah\Documents\Handout-Referat-Deutsch.odt

2013-05-22 21:06 - 2013-05-22 21:09 - 00009511 ____A C:\Users\Sarah\Documents\Unbenannt 1.odt

2013-05-22 20:40 - 2013-05-22 20:40 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone (1).ppt

2013-05-21 17:16 - 2013-05-21 17:16 - 00009688 ____A C:\Users\Sarah\Documents\song.tg

2013-05-21 16:35 - 2013-05-21 16:35 - 00866720 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00788896 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Users\Sarah\.tuxguitar-1.2

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\ProgramData\Sun

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Program Files (x86)\Java

2013-05-21 16:31 - 2013-05-21 16:31 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (2).exe

2013-05-21 16:27 - 2013-05-21 16:27 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (1).exe

2013-05-21 16:26 - 2013-05-21 16:26 - 00008299 ____A C:\Users\Sarah\Documents\Untitled.tg

2013-05-21 16:19 - 2013-05-21 16:19 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21.exe

2013-05-21 16:19 - 2013-05-21 16:19 - 00000960 ____A C:\Users\Public\Desktop\TuxGuitar.lnk

2013-05-21 16:19 - 2013-05-21 16:19 - 00000000 ____D C:\Program Files (x86)\TuxGuitar

2013-05-21 16:17 - 2013-05-21 16:18 - 07715210 ____A (Herac) C:\Users\Sarah\Downloads\tuxguitar-1.2-windows-x86-installer.exe

2013-05-21 12:41 - 2013-05-21 12:41 - 00309752 ____A C:\Windows\System32\FNTCACHE.DAT

2013-05-20 17:30 - 2013-04-10 01:17 - 19231232 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 02242048 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 00915968 ____A (Microsoft Corporation) C:\Windows\System32\uxtheme.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-05-20 17:29 - 2013-04-10 01:17 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2013-05-20 17:29 - 2013-04-10 01:16 - 15404032 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-05-20 17:29 - 2013-04-10 01:16 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-05-20 17:29 - 2013-04-10 01:16 - 02647552 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-05-20 17:29 - 2013-04-10 01:16 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-05-20 17:29 - 2013-04-10 00:30 - 01767424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-05-20 17:29 - 2013-04-10 00:30 - 01130496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 14323712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-05-20 17:29 - 2013-04-10 00:29 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-05-20 16:29 - 2013-05-20 16:29 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone.ppt

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\WebApp

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Lenovo

2013-05-19 14:42 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\Documents\CyberLink

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\Lenovo

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\ProgramData\Lenovo

2013-05-19 14:22 - 2013-04-16 04:34 - 01455368 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys

2013-05-18 16:44 - 2013-03-06 08:31 - 19758592 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll

2013-05-18 16:44 - 2013-03-06 07:03 - 17561600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-05-18 16:43 - 2013-03-06 09:10 - 00112872 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe

2013-05-18 16:43 - 2013-03-06 08:31 - 00222208 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll

2013-05-18 16:43 - 2013-03-06 08:29 - 00070144 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll

2013-05-18 16:43 - 2013-03-06 07:03 - 00199168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-05-18 16:09 - 2013-03-15 02:17 - 00861184 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\http.sys

2013-05-18 13:08 - 2013-03-22 05:49 - 02382336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2013-05-18 13:08 - 2013-03-22 00:47 - 02851840 ____A (Microsoft Corporation) C:\Windows\System32\esent.dll

2013-05-18 08:58 - 2013-04-09 06:51 - 14267904 ____A (Microsoft Corporation) C:\Windows\System32\wmp.dll

2013-05-18 08:58 - 2013-04-09 06:51 - 13648384 ____A (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll

2013-05-18 08:58 - 2013-04-09 06:51 - 03552768 ____A (Microsoft Corporation) C:\Windows\System32\tquery.dll

2013-05-18 08:58 - 2013-04-09 06:50 - 02107904 ____A (Microsoft Corporation) C:\Windows\System32\mssrch.dll

2013-05-18 08:58 - 2013-04-08 23:52 - 11878912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-05-18 08:58 - 2013-04-08 23:51 - 10789888 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll

2013-05-18 08:58 - 2013-04-08 23:51 - 02767360 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2013-05-18 08:58 - 2013-04-08 23:51 - 01593344 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2013-05-18 08:57 - 2013-04-09 07:33 - 00489576 ____A (Microsoft Corporation) C:\Windows\System32\AudioEng.dll

2013-05-18 08:57 - 2013-04-09 07:33 - 00446792 ____A (Microsoft Corporation) C:\Windows\System32\AudioSes.dll

2013-05-18 08:57 - 2013-04-09 07:33 - 00253544 ____A (Microsoft Corporation) C:\Windows\System32\audiodg.exe

2013-05-18 08:57 - 2013-04-09 07:27 - 00284424 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\spaceport.sys

2013-05-18 08:57 - 2013-04-09 07:20 - 00306952 ____A (Microsoft Corporation) C:\Windows\System32\kd_02_10ec.dll

2013-05-18 08:57 - 2013-04-09 07:20 - 00086280 ____A (Microsoft Corporation) C:\Windows\System32\kdnet.dll

2013-05-18 08:57 - 2013-04-09 07:18 - 00077960 ____A (Microsoft Corporation) C:\Windows\System32\kdvm.dll

2013-05-18 08:57 - 2013-04-09 07:17 - 01829408 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll

2013-05-18 08:57 - 2013-04-09 06:52 - 00816128 ____A (Microsoft Corporation) C:\Windows\System32\SearchIndexer.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00804352 ____A (Microsoft Corporation) C:\Windows\System32\RecoveryDrive.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00373760 ____A (Microsoft Corporation) C:\Windows\System32\SearchProtocolHost.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00197120 ____A (Microsoft Corporation) C:\Windows\System32\SearchFilterHost.exe

2013-05-18 08:57 - 2013-04-09 06:52 - 00126464 ____A (Microsoft Corporation) C:\Windows\System32\Robocopy.exe

2013-05-18 08:57 - 2013-04-09 06:51 - 10116096 ____A (Microsoft Corporation) C:\Windows\System32\twinui.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00595456 ____A (Microsoft Corporation) C:\Windows\System32\Windows.Networking.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00523264 ____A (Microsoft Corporation) C:\Windows\System32\XpsGdiConverter.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00456704 ____A (Microsoft Corporation) C:\Windows\System32\wpncore.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\Windows.Networking.BackgroundTransfer.dll

2013-05-18 08:57 - 2013-04-09 06:51 - 00367616 ____A (Microsoft Corporation) C:\Windows\System32\conhost.exe

2013-05-18 08:57 - 2013-04-09 06:51 - 00099840 ____A (Microsoft Corporation) C:\Windows\System32\wscsvc.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 01285632 ____A (Microsoft Corporation) C:\Windows\System32\schedsvc.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00745984 ____A (Microsoft Corporation) C:\Windows\System32\mssvp.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00435200 ____A (Microsoft Corporation) C:\Windows\System32\mssph.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00422400 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00414720 ____A (Microsoft Corporation) C:\Windows\System32\GenuineCenter.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00096256 ____A (Microsoft Corporation) C:\Windows\System32\mssprxy.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\msscntrs.dll

2013-05-18 08:57 - 2013-04-09 06:50 - 00013824 ____A (Microsoft Corporation) C:\Windows\System32\msshooks.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 01444864 ____A (Microsoft Corporation) C:\Windows\System32\MSAudDecMFT.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00817152 ____A (Microsoft Corporation) C:\Windows\System32\kerberos.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00468992 ____A (Microsoft Corporation) C:\Windows\System32\MFMediaEngine.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00281088 ____A (Microsoft Corporation) C:\Windows\System32\mfreadwrite.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\fhengine.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00210432 ____A (Microsoft Corporation) C:\Windows\System32\iuilp.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00196096 ____A (Microsoft Corporation) C:\Windows\System32\dmvdsitf.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00172544 ____A (Microsoft Corporation) C:\Windows\System32\dwmredir.dll

2013-05-18 08:57 - 2013-04-09 06:49 - 00050176 ____A (Microsoft Corporation) C:\Windows\System32\fmifs.dll

2013-05-18 08:57 - 2013-04-09 06:48 - 02303488 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll

2013-05-18 08:57 - 2013-04-09 06:48 - 00785408 ____A (Microsoft Corporation) C:\Windows\System32\audiosrv.dll

2013-05-18 08:57 - 2013-04-09 06:48 - 00419840 ____A (Microsoft Corporation) C:\Windows\System32\intl.cpl

2013-05-18 08:57 - 2013-04-09 06:48 - 00169472 ____A (Microsoft Corporation) C:\Windows\System32\AudioEndpointBuilder.dll

2013-05-18 08:57 - 2013-04-09 04:35 - 04038144 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys

2013-05-18 08:57 - 2013-04-09 04:34 - 00095744 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidbth.sys

2013-05-18 08:57 - 2013-04-09 04:34 - 00083968 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidclass.sys

2013-05-18 08:57 - 2013-04-09 04:34 - 00027648 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\hidusb.sys

2013-05-18 08:57 - 2013-04-09 04:33 - 00623104 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srv2.sys

2013-05-18 08:57 - 2013-04-09 04:33 - 00060416 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ndproxy.sys

2013-05-18 08:57 - 2013-04-09 04:32 - 00805376 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\PEAuth.sys

2013-05-18 08:57 - 2013-04-09 04:31 - 00247808 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\srvnet.sys

2013-05-18 08:57 - 2013-04-09 04:31 - 00083456 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\wanarp.sys

2013-05-18 08:57 - 2013-04-09 01:44 - 00123880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll

2013-05-18 08:57 - 2013-04-09 01:39 - 01408896 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-05-18 08:57 - 2013-04-09 01:37 - 00426024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll

2013-05-18 08:57 - 2013-04-09 01:37 - 00324368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll

2013-05-18 08:57 - 2013-04-08 23:52 - 00670208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2013-05-18 08:57 - 2013-04-08 23:52 - 00364544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2013-05-18 08:57 - 2013-04-08 23:52 - 00302592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2013-05-18 08:57 - 2013-04-08 23:52 - 00171008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2013-05-18 08:57 - 2013-04-08 23:52 - 00106496 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe

2013-05-18 08:57 - 2013-04-08 23:51 - 08857088 ____A (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 02035200 ____A (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 01113600 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MSAudDecMFT.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00659456 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00656896 ____A (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00411136 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00403968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00389632 ____A (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl

2013-05-18 08:57 - 2013-04-08 23:51 - 00361984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00324096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00268800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00214528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00186880 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00155648 ____A (Microsoft Corporation) C:\Windows\SysWOW64\dmvdsitf.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00041984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\fmifs.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00035328 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll

2013-05-18 08:57 - 2013-04-08 23:51 - 00010752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll

2013-05-18 08:57 - 2013-04-05 01:30 - 00503080 ____A (Microsoft Corporation) C:\Windows\System32\ci.dll

2013-05-18 08:57 - 2013-04-03 00:08 - 00387688 ____A C:\Windows\System32\ApnDatabase.xml

2013-05-18 08:57 - 2013-03-30 20:16 - 01403784 ____A (Microsoft Corporation) C:\Windows\System32\winload.efi

2013-05-18 08:57 - 2013-03-30 20:16 - 01267424 ____A (Microsoft Corporation) C:\Windows\System32\winload.exe

2013-05-18 08:57 - 2013-03-29 00:09 - 01217328 ____A (Microsoft Corporation) C:\Windows\System32\winresume.efi

2013-05-18 08:57 - 2013-03-29 00:09 - 01093880 ____A (Microsoft Corporation) C:\Windows\System32\winresume.exe

2013-05-18 08:57 - 2013-03-16 00:05 - 00298456 ____A (Microsoft Corporation) C:\Windows\System32\rsaenh.dll

2013-05-18 08:57 - 2013-03-16 00:05 - 00252928 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll

2013-05-18 08:57 - 2012-12-13 06:00 - 00002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll

2013-05-18 08:57 - 2012-12-13 05:59 - 00002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-05-15 19:21 - 2013-04-11 08:40 - 06987528 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe

2013-05-15 15:09 - 2013-05-15 15:09 - 00013658 ____A C:\Users\Sarah\Documents\In The Mourning.odt

2013-05-14 20:09 - 2013-01-15 23:06 - 03662237 ____A C:\Users\Sarah\Documents\Dublin pp.pptx

2013-05-14 20:09 - 2012-11-21 18:29 - 01249251 ____A C:\Users\Sarah\Documents\Die spätbyzantinische Zeit-PPP.pptx

2013-05-14 18:50 - 2013-05-14 20:05 - 03351024 ____A C:\Users\Sarah\Documents\Geburten.odp

2013-05-14 18:33 - 2013-05-14 18:33 - 00222253 ____A C:\Users\Sarah\Downloads\Geburten.pptx

2013-05-14 18:20 - 2013-05-14 20:08 - 00023905 ____A C:\Users\Sarah\Documents\BIUK-Geburt.odt

2013-05-13 12:43 - 2013-05-13 21:02 - 00021118 ____A C:\Users\Sarah\Documents\Frankreich- Jahresbericht!.odt

2013-05-13 08:05 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Documents\GWK.odt

2013-05-12 21:12 - 2013-05-13 08:03 - 00018534 ____A C:\Users\Sarah\Documents\GWK Handout.odt

2013-05-12 20:59 - 2013-05-12 21:42 - 01952043 ____A C:\Users\Sarah\Documents\GWK PPP.odp

2013-05-12 20:39 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Downloads\GWK.odt

2013-05-12 19:48 - 2013-05-12 19:48 - 00164636 ____A C:\Users\Sarah\Downloads\Alte Industrieregionen.pptx

2013-05-09 21:37 - 2013-05-09 21:37 - 00010094 ____A C:\Users\Sarah\Downloads\Unbenannt 1.odt

2013-05-09 21:13 - 2013-05-09 21:13 - 00049103 ____A C:\Users\Sarah\Downloads\Daydreamer.odt

2013-05-08 21:23 - 2013-05-08 21:23 - 00083160 ____A (Avira GmbH) C:\Windows\System32\Drivers\avnetflt.sys

2013-05-05 17:12 - 2013-05-05 17:12 - 00000000 ___HD C:\ProgramData\CanonBJ

2013-05-05 17:11 - 2012-03-14 05:00 - 00385024 ____A (CANON INC.) C:\Windows\System32\CNMLMAR.DLL

2013-05-05 17:11 - 2011-04-27 11:01 - 00373248 ____A (CANON INC.) C:\Windows\System32\CNC_ARL.dll

2013-05-05 17:11 - 2011-04-27 11:00 - 00323584 ____A (CANON INC.) C:\Windows\SysWOW64\CNC_ARL.dll

2013-05-05 17:11 - 2011-03-31 10:07 - 00302080 ____A (CANON INC.) C:\Windows\System32\CNC_ARC.dll

2013-05-05 17:11 - 2011-03-31 10:07 - 00114688 ____A (CANON INC.) C:\Windows\SysWOW64\CNC_ARU.dll

2013-05-05 17:11 - 2011-03-31 10:06 - 00112128 ____A (CANON INC.) C:\Windows\System32\CNC_ARI.dll

2013-05-05 17:11 - 2010-11-29 09:17 - 00063744 ____A C:\Windows\SysWOW64\CNC1752D.TBL

2013-05-05 17:11 - 2008-08-25 18:02 - 00017920 ____A (CANON INC.) C:\Windows\System32\CNHMCA6.dll

2013-05-05 17:11 - 2008-08-25 18:02 - 00015872 ____A (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll

2013-05-05 15:59 - 2013-05-05 15:59 - 00012684 ____A C:\Users\Sarah\Documents\English Presentation.odt
 

==================== One Month Modified Files and Folders =======
 

2013-06-04 14:15 - 2013-06-04 14:15 - 01916714 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64 (1).exe

2013-06-04 14:14 - 2013-06-04 14:14 - 01916714 ____A (Farbar) C:\Users\Sarah\Downloads\FRST64.exe

2013-06-04 14:10 - 2012-10-20 11:17 - 00754172 ____A C:\Windows\System32\perfh007.dat

2013-06-04 14:10 - 2012-10-20 11:17 - 00156362 ____A C:\Windows\System32\perfc007.dat

2013-06-04 14:10 - 2012-07-26 09:28 - 01748838 ____A C:\Windows\System32\PerfStringBackup.INI

2013-06-04 14:07 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\System32\sru

2013-06-04 12:40 - 2013-06-04 00:22 - 00026064 ____A C:\Users\Sarah\Documents\Parfüm - Deutsch.odt

2013-06-04 11:41 - 2013-02-16 16:33 - 00000000 ____D C:\Users\Sarah\AppData\Local\PMB Files

2013-06-04 09:52 - 2013-02-03 18:41 - 00001120 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-06-04 06:07 - 2013-06-04 06:07 - 00890839 ____A C:\Users\Sarah\Desktop\SecurityCheck.exe

2013-06-04 06:01 - 2013-02-03 18:41 - 00001124 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-06-04 01:04 - 2012-10-20 02:10 - 01309209 ____A C:\Windows\WindowsUpdate.log

2013-06-04 01:02 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache

2013-06-04 00:17 - 2013-06-04 00:17 - 02347384 ____A (ESET) C:\Users\Sarah\Downloads\esetsmartinstaller_enu (1).exe

2013-06-03 22:53 - 2013-06-03 22:52 - 02347384 ____A (ESET) C:\Users\Sarah\Downloads\esetsmartinstaller_enu.exe

2013-06-03 22:43 - 2013-06-03 22:41 - 01916754 ____A (Farbar) C:\Users\Sarah\Desktop\FRST64.exe

2013-06-03 22:38 - 2013-06-03 22:38 - 00003064 ____A C:\Users\Sarah\Desktop\FSS.txt

2013-06-03 22:37 - 2013-06-03 22:37 - 00355651 ____A (Farbar) C:\Users\Sarah\Downloads\FSS (1).exe

2013-06-03 22:36 - 2013-06-03 22:36 - 00355651 ____A (Farbar) C:\Users\Sarah\Desktop\FSS.exe

2013-06-03 22:35 - 2013-06-03 22:35 - 00021951 ____A C:\Users\Sarah\Desktop\Result.txt

2013-06-03 22:33 - 2013-06-03 22:33 - 00760723 ____A (Farbar) C:\Users\Sarah\Desktop\MiniToolBox.exe

2013-06-03 22:26 - 2013-06-03 22:26 - 00000759 ____A C:\Users\Sarah\Desktop\JRT.txt

2013-06-03 22:24 - 2013-06-03 22:21 - 00000000 ____D C:\JRT

2013-06-03 22:22 - 2013-06-03 22:22 - 00000000 ____D C:\Windows\ERUNT

2013-06-03 22:21 - 2013-06-03 22:21 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Sarah\Desktop\JRT.exe

2013-06-03 22:14 - 2012-07-26 09:22 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-06-03 22:13 - 2013-06-03 22:12 - 00016259 ____A C:\AdwCleaner[S1].txt

2013-06-03 22:13 - 2012-07-26 07:26 - 00262144 __ASH C:\Windows\System32\config\BBI

2013-06-03 22:12 - 2013-02-18 19:49 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Skype

2013-06-03 22:10 - 2013-06-03 22:10 - 00632031 ____A C:\Users\Sarah\Desktop\adwcleaner.exe

2013-06-03 22:00 - 2013-06-03 22:00 - 00015388 ____A C:\Users\Sarah\Desktop\Addition.txt

2013-06-03 21:58 - 2013-06-03 21:58 - 00000000 ____D C:\FRST

2013-06-03 21:57 - 2013-06-03 21:57 - 01356197 ____A (Farbar) C:\Users\Sarah\Downloads\FRST.exe

2013-06-02 16:01 - 2012-12-25 14:44 - 00000000 ____D C:\Users\Sarah\Documents\Fortsetzungsstorys

2013-06-02 15:27 - 2013-06-02 15:27 - 00000000 ____D C:\Users\Sarah\Documents\Neuer Ordner

2013-06-02 12:20 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent

2013-06-01 13:23 - 2012-07-26 09:21 - 00051373 ____A C:\Windows\setupact.log

2013-05-28 18:51 - 2013-05-28 18:51 - 00008454 ____A C:\Users\Sarah\AppData\Local\recently-used.xbel

2013-05-27 13:59 - 2013-05-27 13:59 - 00009565 ____A C:\Users\Sarah\Documents\songs.zip

2013-05-27 13:59 - 2013-05-27 13:59 - 00000000 ____D C:\Users\Sarah\Documents\songs

2013-05-26 17:14 - 2013-02-16 16:33 - 00000000 ____D C:\ProgramData\PMB Files

2013-05-26 15:12 - 2013-05-03 14:26 - 00001082 ____A C:\Users\Public\Desktop\Gameforge Live.lnk

2013-05-26 15:12 - 2013-05-03 14:26 - 00000000 ____D C:\Users\Sarah\Downloads\Gameforge Live

2013-05-26 15:12 - 2013-05-03 14:26 - 00000000 ____D C:\Program Files (x86)\GameforgeLive

2013-05-24 20:08 - 2013-05-24 20:08 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf

2013-05-24 19:32 - 2013-02-20 21:58 - 00000000 ____D C:\Users\Sarah\Documents\Story-Ib

2013-05-24 18:11 - 2013-02-03 18:45 - 00002194 ____A C:\Users\Public\Desktop\Google Chrome.lnk

2013-05-23 19:20 - 2013-05-22 22:33 - 00027999 ____A C:\Users\Sarah\Documents\Handout-Referat-Deutsch.odt

2013-05-22 21:09 - 2013-05-22 21:06 - 00009511 ____A C:\Users\Sarah\Documents\Unbenannt 1.odt

2013-05-22 20:40 - 2013-05-22 20:40 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone (1).ppt

2013-05-22 19:50 - 2013-01-11 17:41 - 00000000 ____D C:\Users\Sarah\.gimp-2.8

2013-05-21 17:16 - 2013-05-21 17:16 - 00009688 ____A C:\Users\Sarah\Documents\song.tg

2013-05-21 16:35 - 2013-05-21 16:35 - 00866720 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00788896 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00263584 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00174496 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-05-21 16:35 - 2013-05-21 16:35 - 00095648 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Users\Sarah\.tuxguitar-1.2

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\ProgramData\Sun

2013-05-21 16:35 - 2013-05-21 16:35 - 00000000 ____D C:\Program Files (x86)\Java

2013-05-21 16:35 - 2013-02-03 18:22 - 00000000 ____D C:\users\Sarah

2013-05-21 16:31 - 2013-05-21 16:31 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (2).exe

2013-05-21 16:27 - 2013-05-21 16:27 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21 (1).exe

2013-05-21 16:26 - 2013-05-21 16:26 - 00008299 ____A C:\Users\Sarah\Documents\Untitled.tg

2013-05-21 16:19 - 2013-05-21 16:19 - 00903072 ____A (Oracle Corporation) C:\Users\Sarah\Downloads\chromeinstall-7u21.exe

2013-05-21 16:19 - 2013-05-21 16:19 - 00000960 ____A C:\Users\Public\Desktop\TuxGuitar.lnk

2013-05-21 16:19 - 2013-05-21 16:19 - 00000000 ____D C:\Program Files (x86)\TuxGuitar

2013-05-21 16:18 - 2013-05-21 16:17 - 07715210 ____A (Herac) C:\Users\Sarah\Downloads\tuxguitar-1.2-windows-x86-installer.exe

2013-05-21 12:41 - 2013-05-21 12:41 - 00309752 ____A C:\Windows\System32\FNTCACHE.DAT

2013-05-20 19:47 - 2013-01-05 19:07 - 00000000 ____D C:\Users\Sarah\Documents\Youcam

2013-05-20 16:29 - 2013-05-20 16:29 - 00330240 ____A C:\Users\Sarah\Downloads\decamerone.ppt

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\WebApp

2013-05-19 14:43 - 2013-05-19 14:43 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\Lenovo

2013-05-19 14:43 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\CyberLink

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\Users\Sarah\Documents\Lenovo

2013-05-19 14:42 - 2013-05-19 14:42 - 00000000 ____D C:\ProgramData\Lenovo

2013-05-19 14:42 - 2013-02-15 17:07 - 00000000 ____D C:\Users\Sarah\AppData\Roaming\CyberLink

2013-05-19 14:25 - 2012-07-26 10:12 - 00000000 ___RD C:\Windows\ToastData

2013-05-19 14:25 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\WinStore

2013-05-17 19:52 - 2013-02-18 19:49 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-05-17 19:52 - 2013-02-18 19:49 - 00000000 ____D C:\ProgramData\Skype

2013-05-17 19:06 - 2012-09-13 20:32 - 00106688 ____A C:\Windows\PFRO.log

2013-05-17 18:09 - 2013-02-08 17:11 - 75016696 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe

2013-05-15 15:09 - 2013-05-15 15:09 - 00013658 ____A C:\Users\Sarah\Documents\In The Mourning.odt

2013-05-14 20:08 - 2013-05-14 18:20 - 00023905 ____A C:\Users\Sarah\Documents\BIUK-Geburt.odt

2013-05-14 20:05 - 2013-05-14 18:50 - 03351024 ____A C:\Users\Sarah\Documents\Geburten.odp

2013-05-14 18:33 - 2013-05-14 18:33 - 00222253 ____A C:\Users\Sarah\Downloads\Geburten.pptx

2013-05-13 21:02 - 2013-05-13 12:43 - 00021118 ____A C:\Users\Sarah\Documents\Frankreich- Jahresbericht!.odt

2013-05-13 08:05 - 2013-05-13 08:05 - 00021195 ____A C:\Users\Sarah\Documents\GWK.odt

2013-05-13 08:05 - 2013-05-12 20:39 - 00021195 ____A C:\Users\Sarah\Downloads\GWK.odt

2013-05-13 08:03 - 2013-05-12 21:12 - 00018534 ____A C:\Users\Sarah\Documents\GWK Handout.odt

2013-05-12 21:42 - 2013-05-12 20:59 - 01952043 ____A C:\Users\Sarah\Documents\GWK PPP.odp

2013-05-12 19:48 - 2013-05-12 19:48 - 00164636 ____A C:\Users\Sarah\Downloads\Alte Industrieregionen.pptx

2013-05-09 21:37 - 2013-05-09 21:37 - 00010094 ____A C:\Users\Sarah\Downloads\Unbenannt 1.odt

2013-05-09 21:13 - 2013-05-09 21:13 - 00049103 ____A C:\Users\Sarah\Downloads\Daydreamer.odt

2013-05-08 21:23 - 2013-05-08 21:23 - 00083160 ____A (Avira GmbH) C:\Windows\System32\Drivers\avnetflt.sys

2013-05-07 22:07 - 2013-03-03 08:06 - 00693112 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-05-07 22:07 - 2013-03-03 08:06 - 00078200 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-05-05 17:12 - 2013-05-05 17:12 - 00000000 ___HD C:\ProgramData\CanonBJ

2013-05-05 17:11 - 2012-07-26 10:12 - 00000000 __RSD C:\Windows\Media

2013-05-05 15:59 - 2013-05-05 15:59 - 00012684 ____A C:\Users\Sarah\Documents\English Presentation.odt
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

Last Boot: 2013-06-02 08:11
 

==================== End Of Log ============================

Und meine Frage? :) Noch Probleme?

Mit dem Computer? Naja, Probleme hatte ich ja nicht gerade, nur war ich mir unsicher ob nicht irgendetwas auf dem Laptop gelandet ist wegen der Mail.
Was aber seit gestern passiert ist, ist dass der Laptop meinen Internet Stick vom Mobilen Internet dauernd auswirft, könnte das was damit zu tun haben ? Außerdem wollte er mir ein paar mal die Verwendung der Programme zur Diagnose verbieten, da sie angeblich gefährlich waren.

Danke nochmal für die Hilfe bis jetzt :)

Glaubst du denn das etwas auf dem Rechner sein könnte?

Zitat:

Glaubst du denn das etwas auf dem Rechner sein könnte?

jetzt nicht mehr, aber es war was drauf, Adware :)

Aber wir sind fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob/Kritik loswerden möchtest:
http://www.trojaner-board.de/lob-kritik-wuensche/

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Alles erledigt! Puh, bin ich froh, dass nichts schlimmes oben war.
Ich danke dir nochmal ganz herzlich für die Hilfe :)