Trojaner-Board - Einfrieren des Systems bei (intensiver) Internetnutzung (Notebook, Win7)

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Einfrieren des Systems bei (intensiver) Internetnutzung (Notebook, Win7) (https://www.trojaner-board.de/137188-einfrieren-systems-intensiver-internetnutzung-notebook-win7.html)

Einfrieren des Systems bei (intensiver) Internetnutzung (Notebook, Win7)

Hallo liebe Leute des Trojaner-Boards!

Zunächst einmal vielen Dank im Voraus für diese tolle Seite und alle womöglich folgenden Ratschläge!

Die Regeln des Trojaner-Boards habe ich mir zwar durchgelesen und werde versuchen, sie so gut es geht zu befolgen, dennoch ist dies das erste Mal, dass ich einen derartigen Post verfasse. Darum bitte ich, mir mögliche Verständnisprobleme und fehlerhafte Begrifflichkeiten zu verzeihen ;-).

Die drei Schritte für den Überblick über mein System habe ich bis auf 3. erledigt, bei dem Ausführen der gmer.exe erhalte ich die Fehlernachricht "C:\Windows\system32\config\system: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird." Hätte den Scan dann zwar anklicken können, da das Problem jedoch in der Anleitung nicht beschrieben wurde, habe ich zunächst darauf verzichtet. Avira Antivir hatte ich dabei über Expertenmodus soweit deaktiviert, dass keine Prozessüberwachung etc mehr stattfinden sollte, Antivir war zumindest per Taskmanager schließbar.

Da nicht vollständig vorhanden und nicht sicher, ob überhaupt benötigt, hänge ich die Logfiles erstmal nicht an.

Zu dem Problem (endlich):
Seit etwa einer Woche friert mein Notebook in unregelmäßigen Abständen ein, wenn
- ich in das WLan des Heimnetzes eingewählt
- und mittelmäßig intensiv im Internet
unterwegs bin.

Bisheriges Auftreten:
- zB (beim Verfassen von Nachrichten) auf FB
- beim Anschauen von Videos (youtube)
- vorhin gerade wieder beim Runterladen einiger Bilddateien aus einem DropBox-Ordner
Das erste Mal trat das Einfrieren beim Ansehen eines Adobe-Videos mit Tips zur Anwendung von Illustrator auf.

Weitere Symptome/Informarionen:
- (Bisher) ist das Problem ausschließlich dann aufgetreten, wenn ich in das WLan meiner Wg eingewählt und der Browser aktiv war, andere Netzwerke (Uni, Nachbar) verursachen kein Einfrieren.
- Auch das Netbook meiner Mitbewohnerin leidet unter exakt den gleichen Symptomen, seit Einwahl in unser anderes WgNetz hat auch sie keine Probleme mehr.
- Ein Neustarten des Routers behebt das Problem für ein paar Tage, andere WLans funktionieren problemlos(!).
- Ein kompletter Systemcheck mit aktuellem AntiVir hat rein gar nichts gefunden.

Exakte Beschreibung des Einfrierens:
Das Einfrieren stoppt jegliche Aktivität des Notebooks und ist (mit meinen Fähigkeiten) nur durch langes Drücken des On/Off-Knopfes zu lösen. Der Rechner fängt beim Aufhängen sofort an, langsam (über eine Minute etwa) den Lüfter bis auf Höchstdrehzahl zu stellen, die Lüfterluft wird auch sofort warm. Ich habe noch nicht getestet, was letztendlich passiert, da das Notebook eigentlich immer sehr kühl bleibt und mir sofortiges Erhitzen bei eingefrorenem Bildschirm nicht ganz koscher ist.

Beim anschließenden Hochfahren wird dann der Bildschirm mit "System konnte nicht ordentlich Heruntergefahren werden" angezeigt und Firefox hat keine Tabs mehr gespeichert (eigentlich werden immer alle Tabs, die beim Schließen noch geöffnet waren, wieder geladen).

Die involvierten Geräte:
Notebook:
hxxp://www.amazon.de/gp/product/B007RLLPVI/ref=oh_details_o06_s00_i00?ie=UTF8&psc=1
(Netbook:
hxxp://www.amazon.de/gp/product/B006NYDISI/ref=noref?ie=UTF8&psc=1&s=computers (mit Win7))
Router:
hxxp://www.amazon.de/gp/product/B0019EQ1RW/ref=oh_details_o01_s00_i00?ie=UTF8&psc=1 (läuft über eine KabelDeutschland Leitung, also ist noch so ein Zwischengerät zwischen Wandanschluss und Router geschaltet)

Ziemlich viel Text jetzt, aber hoffentlich decken die Informationen alles nötige ab.

Mit besten Grüßen,
Mario

Hi,

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Scan.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo und Danke für die schnelle Antwort!

Hier einmal die FRST-Datei:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-06-2013 01

Ran by Mario E** (administrator) on 25-06-2013 21:55:38

Running from C:\Users\Mario E**\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe

(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE

(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe

(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

() C:\Program Files\Plantronics\GameCom780\GameCom780.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ASUS) C:\Windows\AsScrPro.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12452456 2012-02-21] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3  [1158248 2012-02-08] (Realtek Semiconductor)

HKLM\...\Run: [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe [2661672 2012-02-19] (ELAN Microelectronics Corp.)

HKLM\...\Run: [AtherosBtStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" [984224 2011-10-28] (Atheros Communications)

HKLM\...\Run: [AthBtTray] "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" [800416 2011-10-28] (Atheros Commnucations)

HKLM\...\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-17] (Alcor Micro Corp.)

HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [2184520 2009-03-24] (CANON INC.)

HKLM\...\Run: [CanonSolutionMenu] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe /logon [767312 2009-03-18] (CANON INC.)

HKLM\...\Run: [GamecomSound] C:\Program Files\Plantronics\GameCom780\GameCom780.exe [777448 2011-12-01] ()

HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [446392 2012-04-04] (Adobe Systems Incorporated)

HKCU\...\Run: [AdobeBridge]  [x]

HKLM-x32\...\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE" [3331312 2012-02-24] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-02-07] (Intel Corporation)

HKLM-x32\...\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322176 2012-02-16] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174720 2011-10-25] (ASUS)

HKLM-x32\...\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [ASUS InstantKey] C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [20456 2012-02-21] (ASUS)

HKLM-x32\...\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2319536 2011-10-19] (ASUS)

HKLM-x32\...\Run: [ACMON] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [102568 2012-02-21] (ASUS)

HKLM-x32\...\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe [3058304 2012-05-12] (ASUS)

HKLM-x32\...\Run: [RemoteControl10] "C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe" [87336 2011-03-30] (CyberLink Corp.)

HKLM-x32\...\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-09-28] (cyberlink)

HKLM-x32\...\Run: [UpdatePSTShortCut] "C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" [222504 2011-12-31] (CyberLink Corp.)

HKLM-x32\...\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [107816 2010-08-20] (CyberLink)

HKLM-x32\...\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [348664 2012-08-16] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [136544 2009-05-19] (CANON INC.)

HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [1073312 2012-03-09] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-10-11] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)

AppInit_DLLs: C:\Windows\system32\nvinitx.dll [260928 2012-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [215360 2012-03-04] (NVIDIA Corporation)

Startup: C:\Users\Mario Ewe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk

ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com

HKCU SearchScopes: DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\Mario Ewe\AppData\Roaming\Mozilla\Firefox\Profiles\037hvyj7.default

FF SelectedSearchEngine: Wikipedia (de)

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Extension: No Name - C:\Users\Mario Ewe\AppData\Roaming\Mozilla\Firefox\Profiles\037hvyj7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [86224 2012-05-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [110032 2012-05-02] (Avira Operations GmbH & Co. KG)

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-02-17] (ASUS)

S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] ()

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()

R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2011-10-28] (Atheros)
 

==================== Drivers (Whitelisted) ====================
 

R3 AiCharger; C:\Windows\SysWow64\DRIVERS\AiCharger.sys [17152 2012-02-29] (ASUSTek Computer Inc.)

R3 AsusVBus; C:\Windows\System32\DRIVERS\AsusVBus.sys [35968 2011-12-21] (Windows (R) Win 7 DDK provider)

R3 AsusVTouch; C:\Windows\System32\DRIVERS\AsusVTouch.sys [16512 2011-11-08] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-04-25] (Avira GmbH)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-04-27] (Avira GmbH)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2012-05-02] (Avira GmbH)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )

R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [249152 2012-03-04] (NVIDIA Corporation)

S3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1327104 2011-11-05] (C-Media Electronics Inc)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-06-25 21:55 - 2013-06-25 21:55 - 00000000 ____D C:\FRST

2013-06-25 21:54 - 2013-06-25 21:54 - 01931854 ____A (Farbar) C:\Users\Mario Ewe\Desktop\FRST64.exe

2013-06-25 19:04 - 2013-06-25 19:04 - 00377856 ____A C:\Users\Mario Ewe\Desktop\gmer_2.1.19163.exe

2013-06-25 19:03 - 2013-06-25 19:14 - 00001960 ____A C:\Users\Mario Ewe\Desktop\schritt 3 anleitung.txt

2013-06-25 19:01 - 2013-06-25 19:01 - 00105270 ____A C:\Users\Mario Ewe\Desktop\Extras.Txt

2013-06-25 19:00 - 2013-06-25 19:00 - 00094242 ____A C:\Users\Mario Ewe\Desktop\OTL.Txt

2013-06-25 18:50 - 2013-06-25 18:50 - 00000480 ____A C:\Users\Mario Ewe\Desktop\defogger_disable.log

2013-06-25 18:50 - 2013-06-25 18:50 - 00000000 ____A C:\Users\Mario Ewe\defogger_reenable

2013-06-25 18:46 - 2013-06-25 18:46 - 00602112 ____A (OldTimer Tools) C:\Users\Mario Ewe\Desktop\OTL.exe

2013-06-25 18:46 - 2013-06-25 18:46 - 00050477 ____A C:\Users\Mario Ewe\Desktop\Defogger.exe

2013-06-25 18:14 - 2013-06-25 18:20 - 00000772 ____A C:\Users\Mario Ewe\Downloads\Buchseiten.zip

2013-06-24 01:21 - 2013-06-24 01:21 - 09387488 ____A C:\Users\Mario Ewe\Downloads\15877_3624_3624_k_ccmb_nds_or.tif

2013-06-21 18:06 - 2013-06-25 19:09 - 00001637 ____A C:\Users\Mario Ewe\Desktop\Illustrator.lnk

2013-06-21 17:54 - 2013-06-21 17:54 - 00000000 ____D C:\ProgramData\ALM

2013-06-21 16:20 - 2013-06-21 16:20 - 00000000 ____D C:\Program Files (x86)\Adobe Download Assistant

2013-06-20 20:14 - 2013-06-20 20:14 - 00011591 ____A C:\Users\Mario Ewe\Desktop\Naturschutz Referat Kartenübersicht.odt

2013-06-20 08:20 - 2013-06-20 19:22 - 00647168 ____A C:\Users\Mario Ewe\Desktop\Lebenslauf.indd

2013-06-20 01:20 - 2013-06-20 01:20 - 00012734 ____A C:\Users\Mario Ewe\Desktop\Lebenslauf.odt

2013-06-20 01:11 - 2013-06-20 02:04 - 00015659 ____A C:\Users\Mario Ewe\Desktop\Bewerbung.odt

2013-06-15 21:36 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-06-15 21:36 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-06-15 21:36 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-06-15 21:36 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-06-15 21:36 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-06-15 21:36 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-06-15 21:36 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-06-15 21:36 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-06-14 00:55 - 2013-06-21 23:20 - 00007609 ____A C:\Users\Mario Ewe\AppData\Local\Resmon.ResmonCfg

2013-06-13 16:21 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-06-13 16:21 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-06-13 16:21 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2013-06-13 16:21 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll

2013-06-13 16:21 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe

2013-06-13 16:21 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-06-12 19:16 - 2013-06-12 19:19 - 00012014 ____A C:\Users\Mario Ewe\Downloads\2010-2012 anerkannte Auslandspraktika von BC_LaUm_Studies_NEU.xlsx

2013-06-12 18:46 - 2013-06-12 18:46 - 00000420 ____A C:\Users\Mario Ewe\Downloads\auslandspraktika.xlsx

2013-06-12 17:59 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll

2013-06-12 17:59 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll

2013-06-12 17:59 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll

2013-06-12 17:59 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll

2013-06-12 17:59 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-06-12 17:59 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-06-12 17:59 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-06-12 17:59 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe

2013-06-12 17:59 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-06-12 17:59 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-06-12 17:59 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2013-06-12 17:59 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll

2013-06-12 17:59 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-06-09 23:46 - 2013-06-09 23:43 - 10162176 ____N C:\Users\Mario Ewe\Downloads\Interview.indd

2013-06-06 13:26 - 2013-06-06 13:26 - 00020209 ____A C:\Users\Mario Ewe\Downloads\OpenDocument Tabellendokument (neu).ods

2013-06-04 14:04 - 2013-06-04 14:04 - 00025786 ____A C:\Users\Mario Ewe\Downloads\Praktikumsadressen Hannover 03.06.2013.xlsx

2013-05-29 22:33 - 2013-05-29 22:33 - 00000466 ____A C:\Users\Mario Ewe\Desktop\Router-Einstellungen.txt

2013-05-29 19:03 - 2013-06-22 16:19 - 00009575 ____A C:\Users\Mario Ewe\Desktop\Herbarium Deckblatt.odt
 

==================== One Month Modified Files and Folders =======
 

2013-06-25 21:55 - 2013-06-25 21:55 - 00000000 ____D C:\FRST

2013-06-25 21:54 - 2013-06-25 21:54 - 01931854 ____A (Farbar) C:\Users\Mario Ewe\Desktop\FRST64.exe

2013-06-25 21:49 - 2012-07-02 12:51 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-06-25 21:41 - 2012-02-24 04:29 - 00001124 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-06-25 19:52 - 2011-02-19 06:24 - 00697534 ____A C:\Windows\System32\perfh007.dat

2013-06-25 19:52 - 2011-02-19 06:24 - 00148540 ____A C:\Windows\System32\perfc007.dat

2013-06-25 19:52 - 2009-07-14 07:13 - 01614892 ____A C:\Windows\System32\PerfStringBackup.INI

2013-06-25 19:24 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-06-25 19:24 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-06-25 19:16 - 2012-06-02 16:01 - 00000387 ____A C:\Users\Mario Ewe\AppData\Roaming\sp_data.sys

2013-06-25 19:16 - 2012-05-12 00:40 - 00000000 ____D C:\ProgramData\NVIDIA

2013-06-25 19:16 - 2012-05-12 00:35 - 00000828 ____A C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job

2013-06-25 19:16 - 2012-02-24 04:29 - 00001120 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-06-25 19:16 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-06-25 19:16 - 2009-07-14 06:51 - 00117191 ____A C:\Windows\setupact.log

2013-06-25 19:15 - 2012-05-12 00:29 - 01095554 ____A C:\Windows\WindowsUpdate.log

2013-06-25 19:14 - 2013-06-25 19:03 - 00001960 ____A C:\Users\Mario Ewe\Desktop\schritt 3 anleitung.txt

2013-06-25 19:09 - 2013-06-21 18:06 - 00001637 ____A C:\Users\Mario Ewe\Desktop\Illustrator.lnk

2013-06-25 19:04 - 2013-06-25 19:04 - 00377856 ____A C:\Users\Mario Ewe\Desktop\gmer_2.1.19163.exe

2013-06-25 19:01 - 2013-06-25 19:01 - 00105270 ____A C:\Users\Mario Ewe\Desktop\Extras.Txt

2013-06-25 19:00 - 2013-06-25 19:00 - 00094242 ____A C:\Users\Mario Ewe\Desktop\OTL.Txt

2013-06-25 18:50 - 2013-06-25 18:50 - 00000480 ____A C:\Users\Mario Ewe\Desktop\defogger_disable.log

2013-06-25 18:50 - 2013-06-25 18:50 - 00000000 ____A C:\Users\Mario Ewe\defogger_reenable

2013-06-25 18:50 - 2012-06-02 15:59 - 00000000 ____D C:\users\Mario Ewe

2013-06-25 18:46 - 2013-06-25 18:46 - 00602112 ____A (OldTimer Tools) C:\Users\Mario Ewe\Desktop\OTL.exe

2013-06-25 18:46 - 2013-06-25 18:46 - 00050477 ____A C:\Users\Mario Ewe\Desktop\Defogger.exe

2013-06-25 18:21 - 2012-06-02 16:01 - 00000000 ____D C:\Users\Mario Ewe\Documents\Bluetooth Folder

2013-06-25 18:20 - 2013-06-25 18:14 - 00000772 ____A C:\Users\Mario Ewe\Downloads\Buchseiten.zip

2013-06-25 17:57 - 2012-05-12 00:35 - 00000830 ____A C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job

2013-06-24 02:16 - 2013-04-16 17:41 - 00000000 ____D C:\Program Files (x86)\Vectorworks2013

2013-06-24 02:11 - 2013-04-18 13:02 - 00000287 ____A C:\Users\Mario Ewe\AppData\Local\VersionChecker_18.xml

2013-06-24 01:21 - 2013-06-24 01:21 - 09387488 ____A C:\Users\Mario Ewe\Downloads\15877_3624_3624_k_ccmb_nds_or.tif

2013-06-23 21:03 - 2013-01-31 21:11 - 00000000 ____D C:\ProgramData\CanonIJ

2013-06-23 21:02 - 2012-07-03 15:19 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-06-23 18:34 - 2013-05-03 15:19 - 00000000 ____D C:\Users\Mario Ewe\Desktop\Sonstiges

2013-06-22 16:19 - 2013-05-29 19:03 - 00009575 ____A C:\Users\Mario Ewe\Desktop\Herbarium Deckblatt.odt

2013-06-22 12:40 - 2009-07-14 06:45 - 05010320 ____A C:\Windows\System32\FNTCACHE.DAT

2013-06-21 23:20 - 2013-06-14 00:55 - 00007609 ____A C:\Users\Mario Ewe\AppData\Local\Resmon.ResmonCfg

2013-06-21 22:11 - 2012-07-24 23:07 - 00000000 ____D C:\Users\Mario Ewe\AppData\Roaming\vlc

2013-06-21 18:06 - 2012-06-02 19:36 - 00000000 ____D C:\Users\Mario Ewe\AppData\Roaming\Adobe

2013-06-21 18:06 - 2012-06-02 16:00 - 00111400 ____A C:\Users\Mario Ewe\AppData\Local\GDIPFONTCACHEV1.DAT

2013-06-21 18:06 - 2012-02-24 04:28 - 00000000 ____D C:\ProgramData\Adobe

2013-06-21 17:55 - 2013-01-10 19:25 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2013-06-21 17:54 - 2013-06-21 17:54 - 00000000 ____D C:\ProgramData\ALM

2013-06-21 17:54 - 2013-01-10 19:24 - 00000000 ____D C:\Program Files\Common Files\Adobe

2013-06-21 17:53 - 2013-01-10 19:24 - 00000000 ____D C:\Program Files\Adobe

2013-06-21 16:20 - 2013-06-21 16:20 - 00000000 ____D C:\Program Files (x86)\Adobe Download Assistant

2013-06-21 16:20 - 2013-01-10 18:39 - 00001033 ____A C:\Users\Public\Desktop\Adobe Download Assistant.lnk

2013-06-20 20:14 - 2013-06-20 20:14 - 00011591 ____A C:\Users\Mario Ewe\Desktop\Naturschutz Referat Kartenübersicht.odt

2013-06-20 19:22 - 2013-06-20 08:20 - 00647168 ____A C:\Users\Mario Ewe\Desktop\Lebenslauf.indd

2013-06-20 02:04 - 2013-06-20 01:11 - 00015659 ____A C:\Users\Mario Ewe\Desktop\Bewerbung.odt

2013-06-20 01:20 - 2013-06-20 01:20 - 00012734 ____A C:\Users\Mario Ewe\Desktop\Lebenslauf.odt

2013-06-20 01:20 - 2012-07-09 13:38 - 00012734 ____A C:\Users\Mario Ewe\Documents\Lebenslauf.odt

2013-06-13 17:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-06-13 16:38 - 2012-08-15 23:09 - 00000000 ____D C:\Users\Mario Ewe\AppData\Roaming\SoftGrid Client

2013-06-13 16:21 - 2012-06-23 13:52 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe

2013-06-12 19:19 - 2013-06-12 19:16 - 00012014 ____A C:\Users\Mario Ewe\Downloads\2010-2012 anerkannte Auslandspraktika von BC_LaUm_Studies_NEU.xlsx

2013-06-12 18:46 - 2013-06-12 18:46 - 00000420 ____A C:\Users\Mario Ewe\Downloads\auslandspraktika.xlsx

2013-06-12 17:49 - 2012-06-05 01:24 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-06-12 17:49 - 2012-06-05 01:24 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-06-09 23:43 - 2013-06-09 23:46 - 10162176 ____N C:\Users\Mario Ewe\Downloads\Interview.indd

2013-06-08 16:08 - 2013-06-15 21:36 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-06-08 16:07 - 2013-06-15 21:36 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-06-08 16:06 - 2013-06-15 21:36 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-06-08 16:06 - 2013-06-15 21:36 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-06-08 16:06 - 2013-06-15 21:36 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-06-08 14:28 - 2013-06-15 21:36 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-06-08 13:42 - 2013-06-15 21:36 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-06-08 13:13 - 2013-06-15 21:36 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-06-06 13:26 - 2013-06-06 13:26 - 00020209 ____A C:\Users\Mario Ewe\Downloads\OpenDocument Tabellendokument (neu).ods

2013-06-04 14:04 - 2013-06-04 14:04 - 00025786 ____A C:\Users\Mario Ewe\Downloads\Praktikumsadressen Hannover 03.06.2013.xlsx

2013-05-29 22:33 - 2013-05-29 22:33 - 00000466 ____A C:\Users\Mario Ewe\Desktop\Router-Einstellungen.txt

2013-05-27 09:12 - 2013-04-12 17:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-05-26 12:44 - 2013-04-12 17:10 - 00000000 ____D C:\Program Files\Mozilla Firefox
 

Files to move or delete:

====================

C:\ProgramData\FullRemove.exe
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-06-23 17:11
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Und die Addition-Datei:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-06-2013 01

Ran by Mario E** at 2013-06-25 21:56:57

Running from C:\Users\Mario E**\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

??? ActiveX ?? Windows Live Mesh ???? ??????? ??????? (x32 Version: 15.4.5722.2)

???? ??? Windows Live (x32 Version: 15.4.3502.0922)

???? ???? ActiveX ????? ?? Windows Live Mesh ????????? ??????? (x32 Version: 15.4.5722.2)

???? Windows Live (x32 Version: 15.4.3502.0922)

?????? ??????? ?? Windows Live (x32 Version: 15.4.3502.0922)

??????? ?????????? Windows Live Mesh ActiveX ??? ????????? ??????????? (x32 Version: 15.4.5722.2)

???????? ?????????? Windows Live (x32 Version: 15.4.3502.0922)

?????????? Windows Live (x32 Version: 15.4.3502.0922)

Adobe AIR (x32 Version: 3.7.0.2090)

Adobe Download Assistant (x32 Version: 1.2.6)

Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)

Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)

Adobe Help Manager (x32 Version: 4.0.244)

Adobe Illustrator CS6 (x32 Version: 16.0)

Adobe InDesign CS6 (x32 Version: 8.0)

Adobe Photoshop CS6 (x32 Version: 13.0)

Adobe Photoshop Lightroom 4.4 64-bit (Version: 4.4.1)

Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7)

Alcor Micro USB Card Reader (x32 Version: 1.2.0142.68441)

Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17)

Apple Application Support (x32 Version: 2.3)

ASUS AI Recovery (x32 Version: 1.0.23)

ASUS FaceLogon (x32 Version: 1.0.0014)

ASUS Instant Key (x32 Version: 1.0.5)

ASUS LifeFrame3 (x32 Version: 3.0.30)

ASUS Music Maker (x32 Version: 17.0.2.22)

ASUS Photo Designer (x32 Version: 7.0.1.2)

ASUS Photo Manager (x32 Version: 8.0.3.217)

ASUS Power4Gear Hybrid (Version: 1.2.1)

ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0041)

ASUS USB Charger Plus (x32 Version: 2.0.9)

ASUS Video Magic (x32 Version: 6.0.4710)

ASUS Virtual Camera (x32 Version: 1.0.25)

ASUS Virtual Touch (x32 Version: 1.0.9)

ASUSDVD (x32 Version: 10.0.3622.52)

AsusScr_N6 Series_ENG (x32 Version: 1.0.0002)

Atheros Bluetooth Suite (64) (Version: 7.4.0.103)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 2.0.12.13)

ATK Package (x32 Version: 1.0.0016)

Avira Free Antivirus (x32 Version: 12.1.9.1236)

Bing Bar (x32 Version: 7.0.610.0)

Canon IJ Network Scan Utility (x32)

Canon IJ Network Tool (x32)

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32)

Canon MP Navigator EX 3.0 (x32)

Canon MP560 series Benutzerregistrierung (x32)

Canon MP560 series MP Drivers

Canon Utilities Easy-PhotoPrint EX (x32)

Canon Utilities My Printer (x32)

Canon Utilities Solution Menu (x32)

Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)

Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)

Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)

CyberLink LabelPrint (x32 Version: 2.5.3624)

CyberLink MediaEspresso (x32 Version: 6.5.2128_41515)

CyberLink Power2Go (x32 Version: 7.0.0.1126)

CyberLink PowerDirector (x32 Version: 8.0.4702a)

D3DX10 (x32 Version: 15.4.2368.0902)

Dota 2 (x32)

ETDWare PS/2-X64 10.5.9.0 (Version: 10.5.9.0)

Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.31.0)

Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)

Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)

Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)

Google Chrome (x32 Version: 15.0.874.120)

Google Earth (x32 Version: 7.0.3.8542)

Google Update Helper (x32 Version: 1.3.21.145)

Guild Wars 2 (x32)

Half-Life: Counter-Strike (x32)

InstantOn for NB (x32 Version: 2.2.0)

Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.35342)

Intel(R) Management Engine Components (x32 Version: 8.0.3.1427)

Intel(R) OpenCL CPU Runtime (x32)

Intel(R) Processor Graphics (x32 Version: 8.15.10.2653)

Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.3.214)

Intel® Trusted Connect Service Client (Version: 1.23.605.1)

Junk Mail filter update (x32 Version: 15.4.3502.0922)

Mahjong Memoirs (x32)

Mesh Runtime (x32 Version: 15.4.5722.2)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Office 2010 (x32 Version: 14.0.4763.1000)

Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)

Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)

Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)

Microsoft Silverlight (Version: 5.1.20125.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)

Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0)

Mozilla Maintenance Service (x32 Version: 21.0)

MSVCRT (x32 Version: 15.4.2862.0708)

MSVCRT_amd64 (x32 Version: 15.4.2862.0708)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

NVIDIA 3D Vision Driver 296.16 (Version: 296.16)

NVIDIA Control Panel 296.16 (Version: 296.16)

NVIDIA Graphics Driver 296.16 (Version: 296.16)

NVIDIA HD-Audiotreiber 1.3.12.0 (Version: 1.3.12.0)

NVIDIA Install Application (Version: 2.1002.62.312)

NVIDIA Optimus 1.7.12 (Version: 1.7.12)

NVIDIA PhysX (x32 Version: 9.11.1111)

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.9616)

NVIDIA Update 1.7.12 (Version: 1.7.12)

NVIDIA Update Components (Version: 1.7.12)

OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)

PDF Settings CS6 (x32 Version: 11.0)

Plantronics® GameCom 780 Software for Dolby® Headphone (x32 Version: 1.00.0001)

Plants vs Zombies (x32)

Qualcomm Atheros WiFi Driver Installation (x32 Version: 9.2)

QuickTime (x32 Version: 7.73.80.64)

Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6586)

S?????? f?t???af??? t?? Windows Live (x32 Version: 15.4.3502.0922)

SketchUp 8 (x32 Version: 3.0.16846)

St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?µa???sµ??e? s??d?se?? (x32 Version: 15.4.5722.2)

Steam (x32 Version: 1.0.0.0)

TeamSpeak 3 Client (Version: 3.0.6)

Turbo Fiesta (x32)

Vectorworks 2013 Hilfe (x32 Version: 1.1)

VLC media player 2.0.2 (Version: 2.0.2)

VLC media player 2.0.3 (x32 Version: 2.0.3)

Warcraft III (x32)

Windows Live ??? (x32 Version: 15.4.3502.0922)

Windows Live ???? (x32 Version: 15.4.3502.0922)

Windows Live Communications Platform (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 15.4.3538.0513)

Windows Live Family Safety (Version: 15.4.3538.0513)

Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)

Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)

Windows Live Installer (x32 Version: 15.4.3502.0922)

Windows Live Language Selector (Version: 15.4.3538.0513)

Windows Live Mail (x32 Version: 15.4.3502.0922)

Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)

Windows Live Mesh (x32 Version: 15.4.3502.0922)

Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)

Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)

Windows Live Messenger (x32 Version: 15.4.3538.0513)

Windows Live MIME IFilter (Version: 15.4.3502.0922)

Windows Live Movie Maker (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 15.4.3502.0922)

Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)

Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)

Windows Live Remote Client (Version: 15.4.5722.2)

Windows Live Remote Client Resources (Version: 15.4.5722.2)

Windows Live Remote Service (Version: 15.4.5722.2)

Windows Live Remote Service Resources (Version: 15.4.5722.2)

Windows Live SOXE (x32 Version: 15.4.3502.0922)

Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)

Windows Live UX Platform (x32 Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)

Windows Live Writer (x32 Version: 15.4.3502.0922)

Windows Live Writer Resources (x32 Version: 15.4.3502.0922)

WinFlash (x32 Version: 2.41.0)

WinRAR 4.20 (32-Bit) (x32 Version: 4.20.0)

Wireless Console 3 (x32 Version: 3.0.25)

World of Tanks (x32)
 

==================== Restore Points  =========================
 

23-06-2013 15:18:51 Geplanter Prüfpunkt
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0B3022E3-1822-42D2-853B-060D9B16FE85} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-24] (Google Inc.)

Task: {2EC5F803-E63F-41B2-845A-D6C43BDC2D35} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)

Task: {2F1244A1-1986-418E-97EB-019D592DC5C9} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2012-02-16] (ASUSTek Computer Inc.)

Task: {394C6319-B932-4F7F-9BC5-70828B0E53B8} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)

Task: {546A1D9D-C606-4CC2-857F-09F699EF574E} - System32\Tasks\ASUS Quick Gesture (x64) => C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe [2011-12-21] (ASUSTeK Computer Inc.)

Task: {59A2D932-FBFE-4733-9A8E-CBDEF265CDA5} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task

Task: {654D5C8E-BB26-4FFC-90EB-4BB9561A75B2} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe No File

Task: {6BFC306C-153D-4A35-91CB-3E30334BDC56} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-02-16] (ASUS)

Task: {6C15BCFC-795C-42BA-B5A6-8127E3C78966} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)

Task: {823C6DDB-81D3-4074-A36E-11DAD404FF99} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2011-09-28] (CyberLink)

Task: {8439DCE5-98FF-4B34-B910-92AC84153483} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe [2012-02-17] (ASUSTek Computer Inc.)

Task: {8BDDB50A-894A-44C8-8F18-AC996B599520} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-24] (Google Inc.)

Task: {8F333369-06B5-46CC-BB54-4F355918967C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)

Task: {BF1E196D-9DD7-46F0-9322-5B7393E933A5} - System32\Tasks\ASUS Quick Gesture => C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe [2011-12-21] (ASUSTeK Computer Inc.)

Task: {C4DEFD93-9B04-4B12-9526-5BF829ED8D2C} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)

Task: {D282F71A-025C-4B28-8E3E-DE0AA48F8FD2} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-02-29] (ASUSTek Computer Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe

Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (06/25/2013 07:27:03 PM) (Source: CVHSVC) (User: )

Description: Nur zur Information.

(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
 

Error: (06/25/2013 00:03:00 PM) (Source: Desktop Window Manager) (User: )

Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x80070008) festgestellt.
 

Error: (06/21/2013 04:20:23 PM) (Source: MsiInstaller) (User: shipwreck)

Description: Product: Adobe Download Assistant -- Error 1730. You must be an Administrator to remove this application. To remove this application, you can log on as an Administrator, or contact your technical support group for assistance.
 

Error: (05/07/2013 09:35:19 AM) (Source: CVHSVC) (User: )

Description: Nur zur Information.

(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.
 

Error: (05/07/2013 00:03:19 AM) (Source: Application Hang) (User: )

Description: Programm Vectorworks2013E.exe, Version 18.0.3.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1b70
 

Startzeit: 01ce4a5418c0c393
 

Endzeit: 18
 

Anwendungspfad: C:\Program Files (x86)\Vectorworks2013\Vectorworks2013E.exe
 

Berichts-ID: bd32c0ad-b698-11e2-a9b3-10bf481b7f92
 

Error: (05/02/2013 01:20:40 PM) (Source: CVHSVC) (User: )

Description: Nur zur Information.

(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
 

Error: (04/30/2013 10:26:46 AM) (Source: CVHSVC) (User: )

Description: Nur zur Information.

(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
 

Error: (04/30/2013 08:26:46 AM) (Source: CVHSVC) (User: )

Description: Nur zur Information.

(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
 

Error: (04/28/2013 09:48:11 PM) (Source: Application Hang) (User: )

Description: Programm VECTOR~2.EXE, Version 18.0.3.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 1904
 

Startzeit: 01ce4425cf783f35
 

Endzeit: 47
 

Anwendungspfad: C:\PROGRA~2\VECTOR~1\VECTOR~2.EXE
 

Berichts-ID: 8a9f2f19-b03c-11e2-aa0f-10bf481b7f92
 

Error: (04/25/2013 08:04:32 AM) (Source: CVHSVC) (User: )

Description: Nur zur Information.

(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.
 
 

System errors:

=============

Error: (06/25/2013 06:17:30 PM) (Source: EventLog) (User: )

Description: Das System wurde zuvor am ?25.?06.?2013 um 18:15:13 unerwartet heruntergefahren.
 

Error: (06/25/2013 01:12:26 PM) (Source: BTHUSB) (User: )

Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
 

Error: (06/24/2013 11:26:55 PM) (Source: BTHUSB) (User: )

Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
 

Error: (06/24/2013 10:17:14 PM) (Source: BTHUSB) (User: )

Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
 

Error: (06/24/2013 09:34:41 PM) (Source: BTHUSB) (User: )

Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
 

Error: (06/24/2013 07:17:31 PM) (Source: BTHUSB) (User: )

Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
 

Error: (06/24/2013 03:26:06 PM) (Source: BTHUSB) (User: )

Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
 

Error: (06/23/2013 00:03:23 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Fehlerberichterstattungsdienst erreicht.
 

Error: (06/22/2013 03:16:37 PM) (Source: BTHUSB) (User: )

Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
 

Error: (06/21/2013 04:01:26 PM) (Source: BTHUSB) (User: )

Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.
 
 

Microsoft Office Sessions:

=========================

Error: (06/25/2013 07:27:03 PM) (Source: CVHSVC)(User: )

Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
 

Error: (06/25/2013 00:03:00 PM) (Source: Desktop Window Manager)(User: )

Description: 0x80070008
 

Error: (06/21/2013 04:20:23 PM) (Source: MsiInstaller)(User: shipwreck)

Description: Product: Adobe Download Assistant -- Error 1730. You must be an Administrator to remove this application. To remove this application, you can log on as an Administrator, or contact your technical support group for assistance.(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (05/07/2013 09:35:19 AM) (Source: CVHSVC)(User: )

Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.
 

Error: (05/07/2013 00:03:19 AM) (Source: Application Hang)(User: )

Description: Vectorworks2013E.exe18.0.3.01b7001ce4a5418c0c39318C:\Program Files (x86)\Vectorworks2013\Vectorworks2013E.exebd32c0ad-b698-11e2-a9b3-10bf481b7f92
 

Error: (05/02/2013 01:20:40 PM) (Source: CVHSVC)(User: )

Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
 

Error: (04/30/2013 10:26:46 AM) (Source: CVHSVC)(User: )

Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
 

Error: (04/30/2013 08:26:46 AM) (Source: CVHSVC)(User: )

Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.
 

Error: (04/28/2013 09:48:11 PM) (Source: Application Hang)(User: )

Description: VECTOR~2.EXE18.0.3.0190401ce4425cf783f3547C:\PROGRA~2\VECTOR~1\VECTOR~2.EXE8a9f2f19-b03c-11e2-aa0f-10bf481b7f92
 

Error: (04/25/2013 08:04:32 AM) (Source: CVHSVC)(User: )

Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 24%

Total physical RAM: 8077.86 MB

Available physical RAM: 6060.65 MB

Total Pagefile: 16153.89 MB

Available Pagefile: 14007.49 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: (OS) (Fixed) (Total:372.61 GB) (Free:307.12 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]

Drive d: (DATA) (Fixed) (Total:534.17 GB) (Free:440.44 GB) NTFS (Disk=0 Partition=4)

Drive e: () (Removable) (Total:7.45 GB) (Free:3.58 GB) FAT32 (Disk=1 Partition=1)
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 932 GB) (Disk ID: 2902CC6D)
 

Partition: GPT Partition Type

========================================================

Disk: 1 (Size: 7 GB) (Disk ID: 00000000)

Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)
 

==================== End Of Log ============================

Grüße!

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Guten Abend,

habe ComboFix mal durchlaufen lassen, nach dem Neustart gab es keine Probleme!
Hier das Ergebnis:

Code:

ComboFix 13-06-26.01 - Mario E** 26.06.2013  19:37:43.2.8 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8078.5655 [GMT 2:00]

ausgeführt von:: c:\users\Mario E**\Desktop\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-05-26 bis 2013-06-26  ))))))))))))))))))))))))))))))

.

.

2013-06-26 17:44 . 2013-06-26 17:44        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp

2013-06-26 17:44 . 2013-06-26 17:44        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-06-25 19:55 . 2013-06-25 19:55        --------        d-----w-        C:\FRST

2013-06-21 15:54 . 2013-06-21 15:54        --------        d-----w-        c:\programdata\ALM

2013-06-21 14:20 . 2013-06-21 14:20        --------        d-----w-        c:\program files (x86)\Adobe Download Assistant

2013-06-13 14:21 . 2013-05-17 01:25        61440        ----a-w-        c:\windows\SysWow64\iesetup.dll

2013-06-12 15:59 . 2013-05-08 06:39        1910632        ----a-w-        c:\windows\system32\drivers\tcpip.sys

2013-06-12 15:59 . 2013-04-26 05:51        751104        ----a-w-        c:\windows\system32\win32spl.dll

2013-06-12 15:59 . 2013-04-26 04:55        492544        ----a-w-        c:\windows\SysWow64\win32spl.dll

2013-06-12 15:59 . 2013-05-13 05:51        184320        ----a-w-        c:\windows\system32\cryptsvc.dll

2013-06-12 15:59 . 2013-05-13 05:51        1464320        ----a-w-        c:\windows\system32\crypt32.dll

2013-06-12 15:59 . 2013-05-13 05:51        139776        ----a-w-        c:\windows\system32\cryptnet.dll

2013-06-12 15:59 . 2013-05-13 05:50        52224        ----a-w-        c:\windows\system32\certenc.dll

2013-06-12 15:59 . 2013-05-13 04:45        140288        ----a-w-        c:\windows\SysWow64\cryptsvc.dll

2013-06-12 15:59 . 2013-05-13 04:45        1160192        ----a-w-        c:\windows\SysWow64\crypt32.dll

2013-06-12 15:59 . 2013-05-13 04:45        103936        ----a-w-        c:\windows\SysWow64\cryptnet.dll

2013-06-12 15:59 . 2013-05-13 03:43        1192448        ----a-w-        c:\windows\system32\certutil.exe

2013-06-12 15:59 . 2013-05-13 03:08        903168        ----a-w-        c:\windows\SysWow64\certutil.exe

2013-06-12 15:59 . 2013-05-13 03:08        43008        ----a-w-        c:\windows\SysWow64\certenc.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-06-26 16:28 . 2012-06-02 14:01        387        ----a-w-        c:\users\Mario Ewe\AppData\Roaming\sp_data.sys

2013-06-13 14:21 . 2012-06-23 11:52        75825640        ----a-w-        c:\windows\system32\MRT.exe

2013-06-12 15:49 . 2012-06-04 23:24        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-06-12 15:49 . 2012-06-04 23:24        692104        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-05-22 23:29 . 2013-05-22 23:29        73728        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe

2013-05-22 23:29 . 2013-05-22 23:29        719360        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll

2013-05-22 23:29 . 2013-05-22 23:29        61952        ----a-w-        c:\windows\SysWow64\tdc.ocx

2013-05-22 23:29 . 2013-05-22 23:29        523264        ----a-w-        c:\windows\SysWow64\vbscript.dll

2013-05-22 23:29 . 2013-05-22 23:29        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll

2013-05-22 23:29 . 2013-05-22 23:29        441856        ----a-w-        c:\windows\system32\html.iec

2013-05-22 23:29 . 2013-05-22 23:29        38400        ----a-w-        c:\windows\SysWow64\imgutil.dll

2013-05-22 23:29 . 2013-05-22 23:29        361984        ----a-w-        c:\windows\SysWow64\html.iec

2013-05-22 23:29 . 2013-05-22 23:29        281600        ----a-w-        c:\windows\system32\dxtrans.dll

2013-05-22 23:29 . 2013-05-22 23:29        23040        ----a-w-        c:\windows\SysWow64\licmgr10.dll

2013-05-22 23:29 . 2013-05-22 23:29        226304        ----a-w-        c:\windows\system32\elshyph.dll

2013-05-22 23:29 . 2013-05-22 23:29        216064        ----a-w-        c:\windows\system32\msls31.dll

2013-05-22 23:29 . 2013-05-22 23:29        197120        ----a-w-        c:\windows\system32\msrating.dll

2013-05-22 23:29 . 2013-05-22 23:29        185344        ----a-w-        c:\windows\SysWow64\elshyph.dll

2013-05-22 23:29 . 2013-05-22 23:29        158720        ----a-w-        c:\windows\SysWow64\msls31.dll

2013-05-22 23:29 . 2013-05-22 23:29        150528        ----a-w-        c:\windows\SysWow64\iexpress.exe

2013-05-22 23:29 . 2013-05-22 23:29        1441280        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2013-05-22 23:29 . 2013-05-22 23:29        138752        ----a-w-        c:\windows\SysWow64\wextract.exe

2013-05-22 23:29 . 2013-05-22 23:29        137216        ----a-w-        c:\windows\SysWow64\ieUnatt.exe

2013-05-22 23:29 . 2013-05-22 23:29        12800        ----a-w-        c:\windows\SysWow64\mshta.exe

2013-05-22 23:29 . 2013-05-22 23:29        110592        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll

2013-05-22 23:29 . 2013-05-22 23:29        1054720        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe

2013-05-22 23:29 . 2013-05-22 23:29        97280        ----a-w-        c:\windows\system32\mshtmled.dll

2013-05-22 23:29 . 2013-05-22 23:29        92160        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe

2013-05-22 23:29 . 2013-05-22 23:29        905728        ----a-w-        c:\windows\system32\mshtmlmedia.dll

2013-05-22 23:29 . 2013-05-22 23:29        81408        ----a-w-        c:\windows\system32\icardie.dll

2013-05-22 23:29 . 2013-05-22 23:29        77312        ----a-w-        c:\windows\system32\tdc.ocx

2013-05-22 23:29 . 2013-05-22 23:29        762368        ----a-w-        c:\windows\system32\ieapfltr.dll

2013-05-22 23:29 . 2013-05-22 23:29        62976        ----a-w-        c:\windows\system32\pngfilt.dll

2013-05-22 23:29 . 2013-05-22 23:29        599552        ----a-w-        c:\windows\system32\vbscript.dll

2013-05-22 23:29 . 2013-05-22 23:29        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll

2013-05-22 23:29 . 2013-05-22 23:29        51200        ----a-w-        c:\windows\system32\imgutil.dll

2013-05-22 23:29 . 2013-05-22 23:29        48640        ----a-w-        c:\windows\system32\mshtmler.dll

2013-05-22 23:29 . 2013-05-22 23:29        452096        ----a-w-        c:\windows\system32\dxtmsft.dll

2013-05-22 23:29 . 2013-05-22 23:29        27648        ----a-w-        c:\windows\system32\licmgr10.dll

2013-05-22 23:29 . 2013-05-22 23:29        270848        ----a-w-        c:\windows\system32\iedkcs32.dll

2013-05-22 23:29 . 2013-05-22 23:29        247296        ----a-w-        c:\windows\system32\webcheck.dll

2013-05-22 23:29 . 2013-05-22 23:29        235008        ----a-w-        c:\windows\system32\url.dll

2013-05-22 23:29 . 2013-05-22 23:29        173568        ----a-w-        c:\windows\system32\ieUnatt.exe

2013-05-22 23:29 . 2013-05-22 23:29        167424        ----a-w-        c:\windows\system32\iexpress.exe

2013-05-22 23:29 . 2013-05-22 23:29        1509376        ----a-w-        c:\windows\system32\inetcpl.cpl

2013-05-22 23:29 . 2013-05-22 23:29        149504        ----a-w-        c:\windows\system32\occache.dll

2013-05-22 23:29 . 2013-05-22 23:29        144896        ----a-w-        c:\windows\system32\wextract.exe

2013-05-22 23:29 . 2013-05-22 23:29        1400416        ----a-w-        c:\windows\system32\ieapfltr.dat

2013-05-22 23:29 . 2013-05-22 23:29        13824        ----a-w-        c:\windows\system32\mshta.exe

2013-05-22 23:29 . 2013-05-22 23:29        136192        ----a-w-        c:\windows\system32\iepeers.dll

2013-05-22 23:29 . 2013-05-22 23:29        135680        ----a-w-        c:\windows\system32\IEAdvpack.dll

2013-05-22 23:29 . 2013-05-22 23:29        12800        ----a-w-        c:\windows\system32\msfeedssync.exe

2013-05-22 23:29 . 2013-05-22 23:29        102912        ----a-w-        c:\windows\system32\inseng.dll

2013-05-22 23:27 . 2013-05-22 23:27        9728        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        9728        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        5632        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        5632        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        5632        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        5632        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        522752        ----a-w-        c:\windows\system32\XpsGdiConverter.dll

2013-05-22 23:27 . 2013-05-22 23:27        465920        ----a-w-        c:\windows\system32\WMPhoto.dll

2013-05-22 23:27 . 2013-05-22 23:27        417792        ----a-w-        c:\windows\SysWow64\WMPhoto.dll

2013-05-22 23:27 . 2013-05-22 23:27        4096        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        4096        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        3928064        ----a-w-        c:\windows\system32\d2d1.dll

2013-05-22 23:27 . 2013-05-22 23:27        364544        ----a-w-        c:\windows\SysWow64\XpsGdiConverter.dll

2013-05-22 23:27 . 2013-05-22 23:27        363008        ----a-w-        c:\windows\system32\dxgi.dll

2013-05-22 23:27 . 2013-05-22 23:27        3584        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        3584        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        3072        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        3072        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        3072        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        2776576        ----a-w-        c:\windows\system32\msmpeg2vdec.dll

2013-05-22 23:27 . 2013-05-22 23:27        2565120        ----a-w-        c:\windows\system32\d3d10warp.dll

2013-05-22 23:27 . 2013-05-22 23:27        2560        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        2560        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        249856        ----a-w-        c:\windows\SysWow64\d3d10_1core.dll

2013-05-22 23:27 . 2013-05-22 23:27        2284544        ----a-w-        c:\windows\SysWow64\msmpeg2vdec.dll

2013-05-22 23:27 . 2013-05-22 23:27        220160        ----a-w-        c:\windows\SysWow64\d3d10core.dll

2013-05-22 23:27 . 2013-05-22 23:27        207872        ----a-w-        c:\windows\SysWow64\WindowsCodecsExt.dll

2013-05-22 23:27 . 2013-05-22 23:27        1682432        ----a-w-        c:\windows\system32\XpsPrint.dll

2013-05-22 23:27 . 2013-05-22 23:27        1643520        ----a-w-        c:\windows\system32\DWrite.dll

2013-05-22 23:27 . 2013-05-22 23:27        161792        ----a-w-        c:\windows\SysWow64\d3d10_1.dll

2013-05-22 23:27 . 2013-05-22 23:27        1504768        ----a-w-        c:\windows\SysWow64\d3d11.dll

2013-05-22 23:27 . 2013-05-22 23:27        1247744        ----a-w-        c:\windows\SysWow64\DWrite.dll

2013-05-22 23:27 . 2013-05-22 23:27        1230336        ----a-w-        c:\windows\SysWow64\WindowsCodecs.dll

2013-05-22 23:27 . 2013-05-22 23:27        1175552        ----a-w-        c:\windows\system32\FntCache.dll

2013-05-22 23:27 . 2013-05-22 23:27        1158144        ----a-w-        c:\windows\SysWow64\XpsPrint.dll

2013-05-22 23:27 . 2013-05-22 23:27        1080832        ----a-w-        c:\windows\SysWow64\d3d10.dll

2013-05-22 23:27 . 2013-05-22 23:27        10752        ---ha-w-        c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:27        10752        ---ha-w-        c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-05-22 23:27 . 2013-05-22 23:26        604160        ----a-w-        c:\windows\SysWow64\d3d10level9.dll

2013-05-22 23:26 . 2013-05-22 23:26        648192        ----a-w-        c:\windows\system32\d3d10level9.dll

2013-05-22 23:26 . 2013-05-22 23:26        3419136        ----a-w-        c:\windows\SysWow64\d2d1.dll

2013-05-22 23:26 . 2013-05-22 23:26        333312        ----a-w-        c:\windows\system32\d3d10_1core.dll

2013-05-22 23:26 . 2013-05-22 23:26        296960        ----a-w-        c:\windows\system32\d3d10core.dll

2013-05-22 23:26 . 2013-05-22 23:26        293376        ----a-w-        c:\windows\SysWow64\dxgi.dll

2013-05-22 23:26 . 2013-05-22 23:26        245248        ----a-w-        c:\windows\system32\WindowsCodecsExt.dll

2013-05-22 23:26 . 2013-05-22 23:26        221184        ----a-w-        c:\windows\system32\UIAnimation.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"ASUSPRP"="c:\program files (x86)\ASUS\APRP\APRP.EXE" [2012-02-24 3331312]

"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-02-07 291608]

"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2012-02-16 322176]

"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2011-10-25 174720]

"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]

"ASUS InstantKey"="c:\program files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe" [2012-02-20 20456]

"Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2011-10-19 2319536]

"ACMON"="c:\program files (x86)\ASUS\Splendid\ACMON.exe" [2012-02-21 102568]

"ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2012-05-11 3058304]

"RemoteControl10"="c:\program files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe" [2011-03-30 87336]

"BDRegion"="c:\program files (x86)\Cyberlink\Shared files\brs.exe" [2011-09-28 75048]

"UpdatePSTShortCut"="c:\program files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" [2011-12-30 222504]

"CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2010-08-20 107816]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-08-15 348664]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]

"IJNetworkScanUtility"="c:\program files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" [2009-05-19 136544]

"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]

"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-11 59280]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-10-25 421888]

.

c:\users\Mario Ewe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OpenOffice.org 3.4.1.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-8-13 1199104]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

R2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe;c:\program files\Avira\AntiVir Desktop\sched.exe [x]

R2 CLKMSVC10_38F51D56;CyberLink Product - 2012/05/11 15:55;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x]

R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [x]

R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x]

R3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x]

R3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x]

R3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x]

R3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x]

R3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x]

R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [x]

R3 PlantronicsGC;PLTGC Interface;c:\windows\system32\drivers\PLTGC.sys;c:\windows\SYSNATIVE\drivers\PLTGC.sys [x]

R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x]

R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]

S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]

S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]

S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]

S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x]

S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]

S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe;c:\program files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [x]

S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]

S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]

S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [x]

S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]

S2 Intel(R) ME Service;Intel(R) ME Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [x]

S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]

S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]

S2 ZAtheros Bt&Wlan Coex Agent;ZAtheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x]

S3 AiCharger;ASUS Charger Driver;c:\windows\system32\DRIVERS\AiCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AiCharger.sys [x]

S3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x]

S3 AsusVBus;AsusVBus;c:\windows\system32\DRIVERS\AsusVBus.sys;c:\windows\SYSNATIVE\DRIVERS\AsusVBus.sys [x]

S3 AsusVTouch;AsusVTouch;c:\windows\system32\DRIVERS\AsusVTouch.sys;c:\windows\SYSNATIVE\DRIVERS\AsusVTouch.sys [x]

S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]

S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]

S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]

S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]

S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]

S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]

S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]

S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]

S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]

S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*Deregistered* - CLKMDRV10_38F51D56

.

Inhalt des "geplante Tasks" Ordners

.

2013-06-26 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-04 15:49]

.

2013-06-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-24 02:28]

.

2013-06-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-24 02:28]

.

2013-06-25 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job

- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 20:41]

.

2013-06-26 c:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job

- c:\program files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25 20:41]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-02-22 170264]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-02-22 398616]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-02-21 12452456]

"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2012-02-08 1158248]

"ETDCtrl"="c:\program files (x86)\Elantech\ETDCtrl.exe" [BU]

"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-10-28 984224]

"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-10-28 800416]

"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2011-03-17 361984]

"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-03-24 2184520]

"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312]

"GamecomSound"="c:\program files\Plantronics\GameCom780\GameCom780.exe" [2011-12-01 777448]

"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=c:\windows\System32\nvinitx.dll

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

TCP: DhcpNameServer = 192.168.0.1

FF - ProfilePath - c:\users\Mario Ewe\AppData\Roaming\Mozilla\Firefox\Profiles\037hvyj7.default\

FF - prefs.js: browser.search.selectedEngine - Wikipedia (de)

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Toolbar-Locked - (no file)

AddRemove-Half-Life: Counter-Strike - d:\games\COUNTE~1\UNWISE.EXE

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.alb\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="PhotoManagerDeluxe.8.alb"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2013-06-26  19:47:16

ComboFix-quarantined-files.txt  2013-06-26 17:47

ComboFix2.txt  2013-06-26 17:34

.

Vor Suchlauf: 13 Verzeichnis(se), 330.196.647.936 Bytes frei

Nach Suchlauf: 14 Verzeichnis(se), 330.124.812.288 Bytes frei

.

- - End Of File - - B53544EC1132C259C4615650A1B1A2F4

D41D8CD98F00B204E9800998ECF8427E

Beste Grüße!

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST Log bitte.

Alles erledigt, hier die drei Logs:

Code:

# AdwCleaner v2.303 - Datei am 27/06/2013 um 13:36:39 erstellt

# Aktualisiert am 08/06/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzer : Mario E** - SHIP*****

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\Mario E**\Desktop\adwcleaner.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 
 

***** [Registrierungsdatenbank] *****
 
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v10.0.9200.16611
 

[OK] Die Registrierungsdatenbank ist sauber.
 

-\\ Mozilla Firefox v21.0 (de)
 

Datei : C:\Users\Mario E**\AppData\Roaming\Mozilla\Firefox\Profiles\037hvyj7.default\prefs.js
 

[OK] Die Datei ist sauber.
 

*************************
 

AdwCleaner[S1].txt - [737 octets] - [27/06/2013 13:36:39]
 

########## EOF - C:\AdwCleaner[S1].txt - [796 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 4.9.4 (05.06.2013:1)

OS: Windows 7 Home Premium x64

Ran by Mario E** on 27.06.2013 at 13:43:13,20

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\Users\Mario E**\AppData\Roaming\goforfiles"

Successfully deleted: [Empty Folder] C:\Users\Mario E**\appdata\local\{528AC1D6-9CC2-4B70-9D90-7A212FE8B755}

Successfully deleted: [Empty Folder] C:\Users\Mario E**\appdata\local\{55089EE7-6ED3-4030-AE17-61C4BFB9E171}
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 27.06.2013 at 13:46:23,30

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-06-2013 01

Ran by Mario E** (administrator) on 27-06-2013 13:47:35

Running from C:\Users\Mario E**\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe

(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe

() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe

(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

() C:\Program Files\Plantronics\GameCom780\GameCom780.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ASUS) C:\Windows\AsScrPro.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12452456 2012-02-21] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3  [1158248 2012-02-08] (Realtek Semiconductor)

HKLM\...\Run: [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe [2661672 2012-02-19] (ELAN Microelectronics Corp.)

HKLM\...\Run: [AtherosBtStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" [984224 2011-10-28] (Atheros Communications)

HKLM\...\Run: [AthBtTray] "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" [800416 2011-10-28] (Atheros Commnucations)

HKLM\...\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-17] (Alcor Micro Corp.)

HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [2184520 2009-03-24] (CANON INC.)

HKLM\...\Run: [CanonSolutionMenu] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe /logon [767312 2009-03-18] (CANON INC.)

HKLM\...\Run: [GamecomSound] C:\Program Files\Plantronics\GameCom780\GameCom780.exe [777448 2011-12-01] ()

HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [446392 2012-04-04] (Adobe Systems Incorporated)

HKCU\...\Policies\system: [DisableRegistryTools] 0

HKCU\...\Policies\system: [DisableTaskMgr] 0

HKLM-x32\...\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE" [3331312 2012-02-24] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-02-07] (Intel Corporation)

HKLM-x32\...\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322176 2012-02-16] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174720 2011-10-25] (ASUS)

HKLM-x32\...\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [ASUS InstantKey] C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [20456 2012-02-21] (ASUS)

HKLM-x32\...\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2319536 2011-10-19] (ASUS)

HKLM-x32\...\Run: [ACMON] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [102568 2012-02-21] (ASUS)

HKLM-x32\...\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe [3058304 2012-05-12] (ASUS)

HKLM-x32\...\Run: [RemoteControl10] "C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe" [87336 2011-03-30] (CyberLink Corp.)

HKLM-x32\...\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-09-28] (cyberlink)

HKLM-x32\...\Run: [UpdatePSTShortCut] "C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" [222504 2011-12-31] (CyberLink Corp.)

HKLM-x32\...\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [107816 2010-08-20] (CyberLink)

HKLM-x32\...\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [348664 2012-08-16] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [136544 2009-05-19] (CANON INC.)

HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [1073312 2012-03-09] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-10-11] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)

AppInit_DLLs: C:\Windows\System32\nvinitx.dll [260928 2012-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [215360 2012-03-04] (NVIDIA Corporation)

Startup: C:\Users\Mario Ewe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk

ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\Mario Ewe\AppData\Roaming\Mozilla\Firefox\Profiles\037hvyj7.default

FF SelectedSearchEngine: Wikipedia (de)

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Extension: No Name - C:\Users\Mario Ewe\AppData\Roaming\Mozilla\Firefox\Profiles\037hvyj7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [86224 2012-05-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [110032 2012-05-02] (Avira Operations GmbH & Co. KG)

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-02-17] (ASUS)

S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] ()

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()

R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2011-10-28] (Atheros)
 

==================== Drivers (Whitelisted) ====================
 

R3 AiCharger; C:\Windows\SysWow64\DRIVERS\AiCharger.sys [17152 2012-02-29] (ASUSTek Computer Inc.)

R3 AsusVBus; C:\Windows\System32\DRIVERS\AsusVBus.sys [35968 2011-12-21] (Windows (R) Win 7 DDK provider)

R3 AsusVTouch; C:\Windows\System32\DRIVERS\AsusVTouch.sys [16512 2011-11-08] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-04-25] (Avira GmbH)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-04-27] (Avira GmbH)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2012-05-02] (Avira GmbH)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )

R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [249152 2012-03-04] (NVIDIA Corporation)

S3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1327104 2011-11-05] (C-Media Electronics Inc)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-06-27 13:46 - 2013-06-27 13:46 - 00000931 ____A C:\Users\Mario Ewe\Desktop\JRT.txt

2013-06-27 13:43 - 2013-06-27 13:43 - 00000000 ____D C:\Windows\ERUNT

2013-06-27 13:42 - 2013-06-27 13:42 - 00000000 ____D C:\JRT

2013-06-27 13:40 - 2013-06-27 13:40 - 00000864 ____A C:\Users\Mario Ewe\Desktop\AdwCleaner[S1].txt

2013-06-27 13:36 - 2013-06-27 13:36 - 00000864 ____A C:\AdwCleaner[S1].txt

2013-06-27 13:34 - 2013-06-27 13:34 - 00001133 ____A C:\Users\Mario Ewe\Desktop\Schritt 3.txt

2013-06-27 13:33 - 2013-06-27 13:33 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Mario Ewe\Desktop\JRT.exe

2013-06-27 13:32 - 2013-06-27 13:32 - 00648201 ____A C:\Users\Mario Ewe\Desktop\adwcleaner.exe

2013-06-26 22:31 - 2013-06-26 22:31 - 00014002 ____A C:\Users\Mario Ewe\Downloads\Formblatt_Vegetationsaufnahme.odt

2013-06-26 21:51 - 2013-06-26 21:51 - 00029869 ____A C:\Users\Mario Ewe\Documents\ComboFix.txt

2013-06-26 19:47 - 2013-06-26 19:47 - 00029869 ____A C:\ComboFix.txt

2013-06-26 18:35 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe

2013-06-26 18:35 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe

2013-06-26 18:35 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe

2013-06-26 18:35 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe

2013-06-26 18:35 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe

2013-06-26 18:35 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe

2013-06-26 18:35 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe

2013-06-26 18:35 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe

2013-06-26 18:33 - 2013-06-26 19:47 - 00000000 ____D C:\Qoobox

2013-06-26 18:33 - 2013-06-26 19:32 - 00000000 ____D C:\Windows\erdnt

2013-06-26 18:30 - 2013-06-26 18:30 - 05083236 ____R (Swearware) C:\Users\Mario Ewe\Desktop\ComboFix.exe

2013-06-25 21:55 - 2013-06-25 21:55 - 00000000 ____D C:\FRST

2013-06-25 21:54 - 2013-06-25 21:54 - 01931854 ____A (Farbar) C:\Users\Mario Ewe\Desktop\FRST64.exe

2013-06-25 18:50 - 2013-06-25 18:50 - 00000000 ____A C:\Users\Mario Ewe\defogger_reenable

2013-06-24 01:21 - 2013-06-24 01:21 - 09387488 ____A C:\Users\Mario Ewe\Downloads\15877_3624_3624_k_ccmb_nds_or.tif

2013-06-21 18:06 - 2013-06-25 19:09 - 00001637 ____A C:\Users\Mario Ewe\Desktop\Illustrator.lnk

2013-06-21 17:54 - 2013-06-21 17:54 - 00000000 ____D C:\ProgramData\ALM

2013-06-21 16:20 - 2013-06-21 16:20 - 00000000 ____D C:\Program Files (x86)\Adobe Download Assistant

2013-06-20 20:14 - 2013-06-20 20:14 - 00011591 ____A C:\Users\Mario Ewe\Desktop\Landschaftsbilder Referat Kartenübersicht.odt

2013-06-15 21:36 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-06-15 21:36 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-06-15 21:36 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-06-15 21:36 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-06-15 21:36 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-06-15 21:36 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-06-15 21:36 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-06-15 21:36 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-06-14 00:55 - 2013-06-21 23:20 - 00007609 ____A C:\Users\Mario Ewe\AppData\Local\Resmon.ResmonCfg

2013-06-13 16:21 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-06-13 16:21 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-06-13 16:21 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2013-06-13 16:21 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll

2013-06-13 16:21 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe

2013-06-13 16:21 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-06-12 19:16 - 2013-06-12 19:19 - 00012014 ____A C:\Users\Mario Ewe\Downloads\2010-2012 anerkannte Auslandspraktika von BC_LaUm_Studies_NEU.xlsx

2013-06-12 18:46 - 2013-06-12 18:46 - 00000420 ____A C:\Users\Mario Ewe\Downloads\auslandspraktika.xlsx

2013-06-12 17:59 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll

2013-06-12 17:59 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll

2013-06-12 17:59 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll

2013-06-12 17:59 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll

2013-06-12 17:59 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-06-12 17:59 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-06-12 17:59 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-06-12 17:59 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe

2013-06-12 17:59 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-06-12 17:59 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-06-12 17:59 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2013-06-12 17:59 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll

2013-06-12 17:59 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-06-09 23:46 - 2013-06-09 23:43 - 10162176 ____N C:\Users\Mario Ewe\Downloads\Interview.indd

2013-06-06 13:26 - 2013-06-06 13:26 - 00020209 ____A C:\Users\Mario Ewe\Downloads\OpenDocument Tabellendokument (neu).ods

2013-06-04 14:04 - 2013-06-04 14:04 - 00025786 ____A C:\Users\Mario Ewe\Downloads\Praktikumsadressen Hannover 03.06.2013.xlsx

2013-05-29 19:03 - 2013-06-22 16:19 - 00009575 ____A C:\Users\Mario Ewe\Desktop\Herbarium Deckblatt.odt
 

==================== One Month Modified Files and Folders =======
 

2013-06-27 13:46 - 2013-06-27 13:46 - 00000931 ____A C:\Users\Mario Ewe\Desktop\JRT.txt

2013-06-27 13:45 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-06-27 13:45 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-06-27 13:43 - 2013-06-27 13:43 - 00000000 ____D C:\Windows\ERUNT

2013-06-27 13:42 - 2013-06-27 13:42 - 00000000 ____D C:\JRT

2013-06-27 13:41 - 2012-02-24 04:29 - 00001124 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-06-27 13:40 - 2013-06-27 13:40 - 00000864 ____A C:\Users\Mario Ewe\Desktop\AdwCleaner[S1].txt

2013-06-27 13:38 - 2012-06-02 16:01 - 00000387 ____A C:\Users\Mario Ewe\AppData\Roaming\sp_data.sys

2013-06-27 13:38 - 2012-05-12 00:40 - 00000000 ____D C:\ProgramData\NVIDIA

2013-06-27 13:38 - 2012-05-12 00:35 - 00000828 ____A C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job

2013-06-27 13:38 - 2012-02-24 04:29 - 00001120 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-06-27 13:38 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-06-27 13:38 - 2009-07-14 06:51 - 00117303 ____A C:\Windows\setupact.log

2013-06-27 13:37 - 2012-05-12 00:29 - 01142943 ____A C:\Windows\WindowsUpdate.log

2013-06-27 13:36 - 2013-06-27 13:36 - 00000864 ____A C:\AdwCleaner[S1].txt

2013-06-27 13:36 - 2012-08-15 23:09 - 00000000 ____D C:\Users\Mario Ewe\AppData\Roaming\SoftGrid Client

2013-06-27 13:34 - 2013-06-27 13:34 - 00001133 ____A C:\Users\Mario Ewe\Desktop\Schritt 3.txt

2013-06-27 13:33 - 2013-06-27 13:33 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Mario Ewe\Desktop\JRT.exe

2013-06-27 13:32 - 2013-06-27 13:32 - 00648201 ____A C:\Users\Mario Ewe\Desktop\adwcleaner.exe

2013-06-27 13:06 - 2012-07-02 12:51 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-06-26 22:31 - 2013-06-26 22:31 - 00014002 ____A C:\Users\Mario Ewe\Downloads\Formblatt_Vegetationsaufnahme.odt

2013-06-26 21:51 - 2013-06-26 21:51 - 00029869 ____A C:\Users\Mario Ewe\Documents\ComboFix.txt

2013-06-26 21:51 - 2011-02-19 06:24 - 00697534 ____A C:\Windows\System32\perfh007.dat

2013-06-26 21:51 - 2011-02-19 06:24 - 00148540 ____A C:\Windows\System32\perfc007.dat

2013-06-26 21:51 - 2009-07-14 07:13 - 01614892 ____A C:\Windows\System32\PerfStringBackup.INI

2013-06-26 21:33 - 2012-06-02 16:01 - 00000000 ____D C:\Users\Mario Ewe\Documents\Bluetooth Folder

2013-06-26 21:32 - 2012-02-24 03:34 - 00093778 ____A C:\Windows\PFRO.log

2013-06-26 19:47 - 2013-06-26 19:47 - 00029869 ____A C:\ComboFix.txt

2013-06-26 19:47 - 2013-06-26 18:33 - 00000000 ____D C:\Qoobox

2013-06-26 19:44 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini

2013-06-26 19:34 - 2009-07-14 05:20 - 00000000 __RHD C:\users\Default

2013-06-26 19:32 - 2013-06-26 18:33 - 00000000 ____D C:\Windows\erdnt

2013-06-26 18:30 - 2013-06-26 18:30 - 05083236 ____R (Swearware) C:\Users\Mario Ewe\Desktop\ComboFix.exe

2013-06-26 18:27 - 2012-05-12 00:35 - 00000830 ____A C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job

2013-06-26 09:10 - 2012-02-24 04:28 - 00000000 ____D C:\ProgramData\Adobe

2013-06-26 08:23 - 2013-05-03 15:19 - 00000000 ____D C:\Users\Mario Ewe\Desktop\Sonstiges

2013-06-25 21:55 - 2013-06-25 21:55 - 00000000 ____D C:\FRST

2013-06-25 21:54 - 2013-06-25 21:54 - 01931854 ____A (Farbar) C:\Users\Mario Ewe\Desktop\FRST64.exe

2013-06-25 19:09 - 2013-06-21 18:06 - 00001637 ____A C:\Users\Mario Ewe\Desktop\Illustrator.lnk

2013-06-25 18:50 - 2013-06-25 18:50 - 00000000 ____A C:\Users\Mario Ewe\defogger_reenable

2013-06-25 18:50 - 2012-06-02 15:59 - 00000000 ____D C:\users\Mario Ewe

2013-06-24 02:16 - 2013-04-16 17:41 - 00000000 ____D C:\Program Files (x86)\Vectorworks2013

2013-06-24 02:11 - 2013-04-18 13:02 - 00000287 ____A C:\Users\Mario Ewe\AppData\Local\VersionChecker_18.xml

2013-06-24 01:21 - 2013-06-24 01:21 - 09387488 ____A C:\Users\Mario Ewe\Downloads\15877_3624_3624_k_ccmb_nds_or.tif

2013-06-23 21:03 - 2013-01-31 21:11 - 00000000 ____D C:\ProgramData\CanonIJ

2013-06-23 21:02 - 2012-07-03 15:19 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-06-22 16:19 - 2013-05-29 19:03 - 00009575 ____A C:\Users\Mario Ewe\Desktop\Herbarium Deckblatt.odt

2013-06-22 12:40 - 2009-07-14 06:45 - 05010320 ____A C:\Windows\System32\FNTCACHE.DAT

2013-06-21 23:20 - 2013-06-14 00:55 - 00007609 ____A C:\Users\Mario Ewe\AppData\Local\Resmon.ResmonCfg

2013-06-21 22:11 - 2012-07-24 23:07 - 00000000 ____D C:\Users\Mario Ewe\AppData\Roaming\vlc

2013-06-21 18:06 - 2012-06-02 19:36 - 00000000 ____D C:\Users\Mario Ewe\AppData\Roaming\Adobe

2013-06-21 18:06 - 2012-06-02 16:00 - 00111400 ____A C:\Users\Mario Ewe\AppData\Local\GDIPFONTCACHEV1.DAT

2013-06-21 17:55 - 2013-01-10 19:25 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2013-06-21 17:54 - 2013-06-21 17:54 - 00000000 ____D C:\ProgramData\ALM

2013-06-21 17:54 - 2013-01-10 19:24 - 00000000 ____D C:\Program Files\Common Files\Adobe

2013-06-21 17:53 - 2013-01-10 19:24 - 00000000 ____D C:\Program Files\Adobe

2013-06-21 16:20 - 2013-06-21 16:20 - 00000000 ____D C:\Program Files (x86)\Adobe Download Assistant

2013-06-21 16:20 - 2013-01-10 18:39 - 00001033 ____A C:\Users\Public\Desktop\Adobe Download Assistant.lnk

2013-06-20 20:14 - 2013-06-20 20:14 - 00011591 ____A C:\Users\Mario Ewe\Desktop\Landschaftsbilder Referat Kartenübersicht.odt

2013-06-20 01:20 - 2012-07-09 13:38 - 00012734 ____A C:\Users\Mario Ewe\Documents\Lebenslauf.odt

2013-06-13 17:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-06-13 16:21 - 2012-06-23 13:52 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe

2013-06-12 19:19 - 2013-06-12 19:16 - 00012014 ____A C:\Users\Mario Ewe\Downloads\2010-2012 anerkannte Auslandspraktika von BC_LaUm_Studies_NEU.xlsx

2013-06-12 18:46 - 2013-06-12 18:46 - 00000420 ____A C:\Users\Mario Ewe\Downloads\auslandspraktika.xlsx

2013-06-12 17:49 - 2012-06-05 01:24 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-06-12 17:49 - 2012-06-05 01:24 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-06-09 23:43 - 2013-06-09 23:46 - 10162176 ____N C:\Users\Mario Ewe\Downloads\Interview.indd

2013-06-08 16:08 - 2013-06-15 21:36 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-06-08 16:07 - 2013-06-15 21:36 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-06-08 16:06 - 2013-06-15 21:36 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-06-08 16:06 - 2013-06-15 21:36 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-06-08 16:06 - 2013-06-15 21:36 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-06-08 14:28 - 2013-06-15 21:36 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-06-08 13:42 - 2013-06-15 21:36 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-06-08 13:13 - 2013-06-15 21:36 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-06-06 13:26 - 2013-06-06 13:26 - 00020209 ____A C:\Users\Mario Ewe\Downloads\OpenDocument Tabellendokument (neu).ods

2013-06-04 14:04 - 2013-06-04 14:04 - 00025786 ____A C:\Users\Mario Ewe\Downloads\Praktikumsadressen Hannover 03.06.2013.xlsx
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-06-23 17:11
 

==================== End Of Log ============================

--- --- ---

Grüße! :)

Supi :)

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST Log bitte. Noch Probleme? :)

Guten Abend, dieses mal hat das ganze eine Weile gedauert. Scheinbar wurden ausschließlich auf der externen Festplatte Gefahrenquellen gefunden, wobei der Ordner "$RECYCLE.BIN" jetzt plötzlich auch auf meiner D: Partition auftaucht! Aber die genaue Beurteilung überlasse ich lieber Dir!

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=b44aa106040ba54baeb4cb055b71fb40

# engine=14185

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-06-28 06:25:45

# local_time=2013-06-28 08:25:45 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=1799 16775165 100 98 0 237867235 52386 0

# compatibility_mode=5893 16776573 100 94 27791 124073795 0 0

# scanned=310427

# found=3

# cleaned=0

# scan_time=17781

sh=17C01D30CEDD843A8245B5414C20D22511498F2C ft=0 fh=0000000000000000 vn="probably a variant of Java/TrojanDownloader.Agent.AB trojan" ac=I fn="H:\$RECYCLE.BIN\S-1-5-21-190254467-2400985615-727421875-1001\$ROYB0K8\Backup Set 2009-11-02 204647\Backup Files 2010-02-21 190001\Backup files 1.zip"

sh=F85ACC6D44ED37D5C487581495CD52F644911B2B ft=1 fh=b11cb89f3457cf6c vn="Win32/Virut.NBP virus" ac=I fn="H:\chicken\fallout3d\FalloutLauncher.exe"

sh=C057F33AB33F78758EBDDD4E6FB9DE514ADD920C ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="H:\MARIO-PC\Backup Set 2010-08-22 190000\Backup Files 2010-08-22 190000\Backup files 2.zip"

Code:

 Results of screen317's Security Check version 0.99.68  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 10  
 ``````````````Antivirus/Firewall Check:`````````````` 

Avira Desktop   

 Antivirus up to date!   
 `````````Anti-malware/Other Utilities Check:````````` 

 Adobe Flash Player 11.7.700.224  

 Adobe Reader 10.1.7 Adobe Reader out of Date!  

 Mozilla Firefox 21.0 Firefox out of Date!  

 Google Chrome 15.0.874.120  
 ````````Process Check: objlist.exe by Laurent````````  

 Avira Antivir avguard.exe 
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-06-2013

Ran by Mario E** (administrator) on 28-06-2013 20:37:48

Running from C:\Users\Mario E**\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE

(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe

() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnWMI.exe

(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe

(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe

(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe

(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe

(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE

() C:\Program Files\Plantronics\GameCom780\GameCom780.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe

(ASUS) C:\Windows\AsScrPro.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe

(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe

(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe

(CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe

(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [12452456 2012-02-21] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX3  [1158248 2012-02-08] (Realtek Semiconductor)

HKLM\...\Run: [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe [2661672 2012-02-19] (ELAN Microelectronics Corp.)

HKLM\...\Run: [AtherosBtStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" [984224 2011-10-28] (Atheros Communications)

HKLM\...\Run: [AthBtTray] "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" [800416 2011-10-28] (Atheros Commnucations)

HKLM\...\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-17] (Alcor Micro Corp.)

HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [2184520 2009-03-24] (CANON INC.)

HKLM\...\Run: [CanonSolutionMenu] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe /logon [767312 2009-03-18] (CANON INC.)

HKLM\...\Run: [GamecomSound] C:\Program Files\Plantronics\GameCom780\GameCom780.exe [777448 2011-12-01] ()

HKLM\...\Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [446392 2012-04-04] (Adobe Systems Incorporated)

HKCU\...\Policies\system: [DisableRegistryTools] 0

HKCU\...\Policies\system: [DisableTaskMgr] 0

HKLM-x32\...\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE" [3331312 2012-02-24] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-02-07] (Intel Corporation)

HKLM-x32\...\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322176 2012-02-16] (ASUSTek Computer Inc.)

HKLM-x32\...\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174720 2011-10-25] (ASUS)

HKLM-x32\...\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)

HKLM-x32\...\Run: [ASUS InstantKey] C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [20456 2012-02-21] (ASUS)

HKLM-x32\...\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2319536 2011-10-19] (ASUS)

HKLM-x32\...\Run: [ACMON] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [102568 2012-02-21] (ASUS)

HKLM-x32\...\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe [3058304 2012-05-12] (ASUS)

HKLM-x32\...\Run: [RemoteControl10] "C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe" [87336 2011-03-30] (CyberLink Corp.)

HKLM-x32\...\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-09-28] (cyberlink)

HKLM-x32\...\Run: [UpdatePSTShortCut] "C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" [222504 2011-12-31] (CyberLink Corp.)

HKLM-x32\...\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [107816 2010-08-20] (CyberLink)

HKLM-x32\...\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [348664 2012-08-16] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [IJNetworkScanUtility] C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [136544 2009-05-19] (CANON INC.)

HKLM-x32\...\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [1073312 2012-03-09] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59280 2012-10-11] (Apple Inc.)

HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.)

AppInit_DLLs: C:\Windows\System32\nvinitx.dll [260928 2012-03-04] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [215360 2012-03-04] (NVIDIA Corporation)

Startup: C:\Users\Mario Ewe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk

ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\Mario Ewe\AppData\Roaming\Mozilla\Firefox\Profiles\037hvyj7.default

FF SelectedSearchEngine: Wikipedia (de)

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Extension: No Name - C:\Users\Mario Ewe\AppData\Roaming\Mozilla\Firefox\Profiles\037hvyj7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF HKLM-x32\...\Mozilla Firefox 21.0\Extensions: [Components] C:\Program Files\Mozilla Firefox\components

FF Extension: No Name - C:\Program Files\Mozilla Firefox\components

FF HKLM-x32\...\Mozilla Firefox 21.0\Extensions: [Plugins] C:\Program Files\Mozilla Firefox\plugins
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [86224 2012-05-02] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [110032 2012-05-02] (Avira Operations GmbH & Co. KG)

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-02-17] (ASUS)

S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink)

R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] ()

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] ()

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation)

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()

R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2011-10-28] (Atheros)
 

==================== Drivers (Whitelisted) ====================
 

R3 AiCharger; C:\Windows\SysWow64\DRIVERS\AiCharger.sys [17152 2012-02-29] (ASUSTek Computer Inc.)

R3 AsusVBus; C:\Windows\System32\DRIVERS\AsusVBus.sys [35968 2011-12-21] (Windows (R) Win 7 DDK provider)

R3 AsusVTouch; C:\Windows\System32\DRIVERS\AsusVTouch.sys [16512 2011-11-08] (Windows (R) Win 7 DDK provider)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [98848 2012-04-25] (Avira GmbH)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132832 2012-04-27] (Avira GmbH)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [27760 2012-05-02] (Avira GmbH)

R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )

R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [249152 2012-03-04] (NVIDIA Corporation)

S3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1327104 2011-11-05] (C-Media Electronics Inc)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-06-28 20:37 - 2013-06-28 20:37 - 01933484 ____A (Farbar) C:\Users\Mario Ewe\Desktop\FRST64.exe

2013-06-28 20:35 - 2013-06-28 20:35 - 00000808 ____A C:\Users\Mario Ewe\Desktop\checkup.txt

2013-06-28 15:27 - 2013-06-28 15:27 - 00000000 ____D C:\Program Files (x86)\ESET

2013-06-27 17:47 - 2013-06-27 17:48 - 00001398 ____A C:\Users\Mario Ewe\Desktop\Schritt 4.txt

2013-06-27 17:46 - 2013-06-27 17:46 - 02347384 ____A (ESET) C:\Users\Mario Ewe\Desktop\esetsmartinstaller_enu.exe

2013-06-27 17:46 - 2013-06-27 17:46 - 00890988 ____A C:\Users\Mario Ewe\Desktop\SecurityCheck.exe

2013-06-27 16:38 - 2013-05-02 02:06 - 00278800 ____N (Microsoft Corporation) C:\Windows\System32\MpSigStub.exe

2013-06-27 13:46 - 2013-06-27 13:46 - 00000931 ____A C:\Users\Mario Ewe\Desktop\JRT.txt

2013-06-27 13:43 - 2013-06-27 13:43 - 00000000 ____D C:\Windows\ERUNT

2013-06-27 13:42 - 2013-06-27 13:42 - 00000000 ____D C:\JRT

2013-06-27 13:40 - 2013-06-27 13:40 - 00000864 ____A C:\Users\Mario Ewe\Desktop\AdwCleaner[S1].txt

2013-06-27 13:36 - 2013-06-27 13:36 - 00000864 ____A C:\AdwCleaner[S1].txt

2013-06-27 13:34 - 2013-06-27 13:34 - 00001133 ____A C:\Users\Mario Ewe\Desktop\Schritt 3.txt

2013-06-27 13:33 - 2013-06-27 13:33 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Mario Ewe\Desktop\JRT.exe

2013-06-27 13:32 - 2013-06-27 13:32 - 00648201 ____A C:\Users\Mario Ewe\Desktop\adwcleaner.exe

2013-06-26 22:31 - 2013-06-26 22:31 - 00014002 ____A C:\Users\Mario Ewe\Downloads\Formblatt_Vegetationsaufnahme.odt

2013-06-26 21:51 - 2013-06-26 21:51 - 00029869 ____A C:\Users\Mario Ewe\Documents\ComboFix.txt

2013-06-26 19:47 - 2013-06-26 19:47 - 00029869 ____A C:\ComboFix.txt

2013-06-26 18:35 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe

2013-06-26 18:35 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe

2013-06-26 18:35 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe

2013-06-26 18:35 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe

2013-06-26 18:35 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe

2013-06-26 18:35 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe

2013-06-26 18:35 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe

2013-06-26 18:35 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe

2013-06-26 18:33 - 2013-06-26 19:47 - 00000000 ____D C:\Qoobox

2013-06-26 18:33 - 2013-06-26 19:32 - 00000000 ____D C:\Windows\erdnt

2013-06-26 18:30 - 2013-06-26 18:30 - 05083236 ____R (Swearware) C:\Users\Mario Ewe\Desktop\ComboFix.exe

2013-06-25 21:55 - 2013-06-25 21:55 - 00000000 ____D C:\FRST

2013-06-25 18:50 - 2013-06-25 18:50 - 00000000 ____A C:\Users\Mario Ewe\defogger_reenable

2013-06-24 01:21 - 2013-06-24 01:21 - 09387488 ____A C:\Users\Mario Ewe\Downloads\15877_3624_3624_k_ccmb_nds_or.tif

2013-06-21 18:06 - 2013-06-25 19:09 - 00001637 ____A C:\Users\Mario Ewe\Desktop\Illustrator.lnk

2013-06-21 17:54 - 2013-06-21 17:54 - 00000000 ____D C:\ProgramData\ALM

2013-06-21 16:20 - 2013-06-21 16:20 - 00000000 ____D C:\Program Files (x86)\Adobe Download Assistant

2013-06-20 20:14 - 2013-06-20 20:14 - 00011591 ____A C:\Users\Mario Ewe\Desktop\Landschaftsbilder Referat Kartenübersicht.odt

2013-06-15 21:36 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-06-15 21:36 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-06-15 21:36 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-06-15 21:36 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-06-15 21:36 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-06-15 21:36 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-06-15 21:36 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-06-15 21:36 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-06-15 21:36 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-06-14 00:55 - 2013-06-21 23:20 - 00007609 ____A C:\Users\Mario Ewe\AppData\Local\Resmon.ResmonCfg

2013-06-13 16:21 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-06-13 16:21 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-06-13 16:21 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-06-13 16:21 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2013-06-13 16:21 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2013-06-13 16:21 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll

2013-06-13 16:21 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe

2013-06-13 16:21 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-06-12 19:16 - 2013-06-12 19:19 - 00012014 ____A C:\Users\Mario Ewe\Downloads\2010-2012 anerkannte Auslandspraktika von BC_LaUm_Studies_NEU.xlsx

2013-06-12 18:46 - 2013-06-12 18:46 - 00000420 ____A C:\Users\Mario Ewe\Downloads\auslandspraktika.xlsx

2013-06-12 17:59 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll

2013-06-12 17:59 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll

2013-06-12 17:59 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll

2013-06-12 17:59 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll

2013-06-12 17:59 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-06-12 17:59 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-06-12 17:59 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-06-12 17:59 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe

2013-06-12 17:59 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-06-12 17:59 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-06-12 17:59 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2013-06-12 17:59 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll

2013-06-12 17:59 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-06-09 23:46 - 2013-06-09 23:43 - 10162176 ____N C:\Users\Mario Ewe\Downloads\Interview.indd

2013-06-06 13:26 - 2013-06-06 13:26 - 00020209 ____A C:\Users\Mario Ewe\Downloads\OpenDocument Tabellendokument (neu).ods

2013-06-04 14:04 - 2013-06-04 14:04 - 00025786 ____A C:\Users\Mario Ewe\Downloads\Praktikumsadressen Hannover 03.06.2013.xlsx

2013-05-29 19:03 - 2013-06-22 16:19 - 00009575 ____A C:\Users\Mario Ewe\Desktop\Herbarium Deckblatt.odt
 

==================== One Month Modified Files and Folders =======
 

2013-06-28 20:37 - 2013-06-28 20:37 - 01933484 ____A (Farbar) C:\Users\Mario Ewe\Desktop\FRST64.exe

2013-06-28 20:35 - 2013-06-28 20:35 - 00000808 ____A C:\Users\Mario Ewe\Desktop\checkup.txt

2013-06-28 19:49 - 2012-07-02 12:51 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-06-28 19:41 - 2012-02-24 04:29 - 00001124 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-06-28 15:27 - 2013-06-28 15:27 - 00000000 ____D C:\Program Files (x86)\ESET

2013-06-28 15:27 - 2012-05-12 00:29 - 01201869 ____A C:\Windows\WindowsUpdate.log

2013-06-28 15:27 - 2011-02-19 06:24 - 00697534 ____A C:\Windows\System32\perfh007.dat

2013-06-28 15:27 - 2011-02-19 06:24 - 00148540 ____A C:\Windows\System32\perfc007.dat

2013-06-28 15:27 - 2009-07-14 07:13 - 01614892 ____A C:\Windows\System32\PerfStringBackup.INI

2013-06-28 15:23 - 2012-07-24 23:07 - 00000000 ____D C:\Users\Mario Ewe\AppData\Roaming\vlc

2013-06-28 14:24 - 2012-05-12 00:35 - 00000830 ____A C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job

2013-06-28 13:26 - 2009-07-14 06:51 - 00117415 ____A C:\Windows\setupact.log

2013-06-28 12:00 - 2012-02-24 04:29 - 00001120 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-06-28 11:54 - 2012-06-02 16:01 - 00000387 ____A C:\Users\Mario Ewe\AppData\Roaming\sp_data.sys

2013-06-27 17:48 - 2013-06-27 17:47 - 00001398 ____A C:\Users\Mario Ewe\Desktop\Schritt 4.txt

2013-06-27 17:46 - 2013-06-27 17:46 - 02347384 ____A (ESET) C:\Users\Mario Ewe\Desktop\esetsmartinstaller_enu.exe

2013-06-27 17:46 - 2013-06-27 17:46 - 00890988 ____A C:\Users\Mario Ewe\Desktop\SecurityCheck.exe

2013-06-27 15:52 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-06-27 15:52 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-06-27 15:45 - 2012-05-12 00:40 - 00000000 ____D C:\ProgramData\NVIDIA

2013-06-27 15:45 - 2012-05-12 00:35 - 00000828 ____A C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job

2013-06-27 15:45 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-06-27 13:46 - 2013-06-27 13:46 - 00000931 ____A C:\Users\Mario Ewe\Desktop\JRT.txt

2013-06-27 13:43 - 2013-06-27 13:43 - 00000000 ____D C:\Windows\ERUNT

2013-06-27 13:42 - 2013-06-27 13:42 - 00000000 ____D C:\JRT

2013-06-27 13:40 - 2013-06-27 13:40 - 00000864 ____A C:\Users\Mario Ewe\Desktop\AdwCleaner[S1].txt

2013-06-27 13:36 - 2013-06-27 13:36 - 00000864 ____A C:\AdwCleaner[S1].txt

2013-06-27 13:36 - 2012-08-15 23:09 - 00000000 ____D C:\Users\Mario Ewe\AppData\Roaming\SoftGrid Client

2013-06-27 13:34 - 2013-06-27 13:34 - 00001133 ____A C:\Users\Mario Ewe\Desktop\Schritt 3.txt

2013-06-27 13:33 - 2013-06-27 13:33 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Mario Ewe\Desktop\JRT.exe

2013-06-27 13:32 - 2013-06-27 13:32 - 00648201 ____A C:\Users\Mario Ewe\Desktop\adwcleaner.exe

2013-06-26 22:31 - 2013-06-26 22:31 - 00014002 ____A C:\Users\Mario Ewe\Downloads\Formblatt_Vegetationsaufnahme.odt

2013-06-26 21:51 - 2013-06-26 21:51 - 00029869 ____A C:\Users\Mario Ewe\Documents\ComboFix.txt

2013-06-26 21:33 - 2012-06-02 16:01 - 00000000 ____D C:\Users\Mario Ewe\Documents\Bluetooth Folder

2013-06-26 21:32 - 2012-02-24 03:34 - 00093778 ____A C:\Windows\PFRO.log

2013-06-26 19:47 - 2013-06-26 19:47 - 00029869 ____A C:\ComboFix.txt

2013-06-26 19:47 - 2013-06-26 18:33 - 00000000 ____D C:\Qoobox

2013-06-26 19:44 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini

2013-06-26 19:34 - 2009-07-14 05:20 - 00000000 __RHD C:\users\Default

2013-06-26 19:32 - 2013-06-26 18:33 - 00000000 ____D C:\Windows\erdnt

2013-06-26 18:30 - 2013-06-26 18:30 - 05083236 ____R (Swearware) C:\Users\Mario Ewe\Desktop\ComboFix.exe

2013-06-26 09:10 - 2012-02-24 04:28 - 00000000 ____D C:\ProgramData\Adobe

2013-06-26 08:23 - 2013-05-03 15:19 - 00000000 ____D C:\Users\Mario Ewe\Desktop\Sonstiges

2013-06-25 21:55 - 2013-06-25 21:55 - 00000000 ____D C:\FRST

2013-06-25 19:09 - 2013-06-21 18:06 - 00001637 ____A C:\Users\Mario Ewe\Desktop\Illustrator.lnk

2013-06-25 18:50 - 2013-06-25 18:50 - 00000000 ____A C:\Users\Mario Ewe\defogger_reenable

2013-06-25 18:50 - 2012-06-02 15:59 - 00000000 ____D C:\users\Mario Ewe

2013-06-24 02:16 - 2013-04-16 17:41 - 00000000 ____D C:\Program Files (x86)\Vectorworks2013

2013-06-24 02:11 - 2013-04-18 13:02 - 00000287 ____A C:\Users\Mario Ewe\AppData\Local\VersionChecker_18.xml

2013-06-24 01:21 - 2013-06-24 01:21 - 09387488 ____A C:\Users\Mario Ewe\Downloads\15877_3624_3624_k_ccmb_nds_or.tif

2013-06-23 21:03 - 2013-01-31 21:11 - 00000000 ____D C:\ProgramData\CanonIJ

2013-06-23 21:02 - 2012-07-03 15:19 - 00000000 ____D C:\ProgramData\CanonIJPLM

2013-06-22 16:19 - 2013-05-29 19:03 - 00009575 ____A C:\Users\Mario Ewe\Desktop\Herbarium Deckblatt.odt

2013-06-22 12:40 - 2009-07-14 06:45 - 05010320 ____A C:\Windows\System32\FNTCACHE.DAT

2013-06-21 23:20 - 2013-06-14 00:55 - 00007609 ____A C:\Users\Mario Ewe\AppData\Local\Resmon.ResmonCfg

2013-06-21 18:06 - 2012-06-02 19:36 - 00000000 ____D C:\Users\Mario Ewe\AppData\Roaming\Adobe

2013-06-21 18:06 - 2012-06-02 16:00 - 00111400 ____A C:\Users\Mario Ewe\AppData\Local\GDIPFONTCACHEV1.DAT

2013-06-21 17:55 - 2013-01-10 19:25 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2013-06-21 17:54 - 2013-06-21 17:54 - 00000000 ____D C:\ProgramData\ALM

2013-06-21 17:54 - 2013-01-10 19:24 - 00000000 ____D C:\Program Files\Common Files\Adobe

2013-06-21 17:53 - 2013-01-10 19:24 - 00000000 ____D C:\Program Files\Adobe

2013-06-21 16:20 - 2013-06-21 16:20 - 00000000 ____D C:\Program Files (x86)\Adobe Download Assistant

2013-06-21 16:20 - 2013-01-10 18:39 - 00001033 ____A C:\Users\Public\Desktop\Adobe Download Assistant.lnk

2013-06-20 20:14 - 2013-06-20 20:14 - 00011591 ____A C:\Users\Mario Ewe\Desktop\Landschaftsbilder Referat Kartenübersicht.odt

2013-06-20 01:20 - 2012-07-09 13:38 - 00012734 ____A C:\Users\Mario Ewe\Documents\Lebenslauf.odt

2013-06-13 17:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-06-13 16:21 - 2012-06-23 13:52 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe

2013-06-12 19:19 - 2013-06-12 19:16 - 00012014 ____A C:\Users\Mario Ewe\Downloads\2010-2012 anerkannte Auslandspraktika von BC_LaUm_Studies_NEU.xlsx

2013-06-12 18:46 - 2013-06-12 18:46 - 00000420 ____A C:\Users\Mario Ewe\Downloads\auslandspraktika.xlsx

2013-06-12 17:49 - 2012-06-05 01:24 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-06-12 17:49 - 2012-06-05 01:24 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-06-09 23:43 - 2013-06-09 23:46 - 10162176 ____N C:\Users\Mario Ewe\Downloads\Interview.indd

2013-06-08 16:08 - 2013-06-15 21:36 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-06-08 16:07 - 2013-06-15 21:36 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-06-08 16:06 - 2013-06-15 21:36 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-06-08 16:06 - 2013-06-15 21:36 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-06-08 16:06 - 2013-06-15 21:36 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-06-08 14:28 - 2013-06-15 21:36 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-06-08 13:42 - 2013-06-15 21:36 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-06-08 13:40 - 2013-06-15 21:36 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-06-08 13:13 - 2013-06-15 21:36 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-06-06 13:26 - 2013-06-06 13:26 - 00020209 ____A C:\Users\Mario Ewe\Downloads\OpenDocument Tabellendokument (neu).ods

2013-06-04 14:04 - 2013-06-04 14:04 - 00025786 ____A C:\Users\Mario Ewe\Downloads\Praktikumsadressen Hannover 03.06.2013.xlsx
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-06-23 17:11
 

==================== End Of Log ============================

--- --- ---

--- --- ---

Schöne Grüße!

Adobe und FIrefox bitte updaten. Auf Laufwerk H den Papierkorb leeren und am Besten das Backup das dort liegt löschen.

Noch Probleme mit dem System?

Entschuldigung für die späte Rückmeldung, die Woche war recht hektisch.

Vielen Dank für die Hilfe! :)

Das System läuft soweit ausgezeichnet.

Gibt es etwas, das ich nebenbei tun kann, um solcherlei Vorfälle in Zukunft zu vermeiden?
Zum Beispiel einen der zahlreichen Scanner ab und zu mal drüber laufen lassen? Oder neben Antivir noch etwas zusätzliches oder ganz anderes installieren?

Beste Grüße
Mario

Dann räumen wir auf und Lesestoff gibt es auch :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Prüfungsphase durch, jetzt habe ich mich da rangesetzt und alle letzten Schritte befolgt.

Funktioniert alles wunderbar und ComboFix und DelFix konnten bei ihrem letzten Durchlauf auch keinerlei Probleme mehr feststellen!

FireFox (mit Adblock), Windows und AntiVir habe ich auf dem aktuellsten Stand und MalwareBytes Anti-Malware zusätzlich installiert.

Die restlichen Tipps zum sicheren Browsen habe ich immer schon beachtet und mich auch von merkwürdigen Datentransfers fern gehalten, insofern dürfte ich da jetzt auf der sicheren Seite stehen! :)

Bleibt nur noch zu sagen: Einen riesen fetten Dank für die Hilfe und die Geduld! :Boogie: