Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   IBUpdaterService-->Trojaner? Virus? (https://www.trojaner-board.de/137267-ibupdaterservice-trojaner-virus.html)

R4M1N 27.06.2013 09:44
IBUpdaterService-->Trojaner? Virus?
 
Hallo, als erstes entschuldigt mich falls ich was vergessen habe zu posten, ich weiß nicht so genau was ich hier alles posten muss..

So zum Problem: Wie in der Überschrift schon zu sehen geht es um "IBUpdaterService". Ich habe mein System mit Malwarebytes Anti-Malware gecheckt, und hatte 8 Befunde! So siehts aus:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.06.27.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Admin :: ***** [Administrator]

27.06.2013 08:19:45
MBAM-log-2013-06-27 (08-27-26).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 242228
Laufzeit: 6 Minute(n), 28 Sekunde(n)

Infizierte Speicherprozesse: 1
C:\ProgramData\IBUpdaterService\ibsvc.exe (PUP.InstallBrain) -> 2200 -> Keine Aktion durchgeführt.

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 2
HKLM\SYSTEM\CurrentControlSet\Services\IBUpdaterService (PUP.InstallBrain) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Updater Service (PUP.InstallBrain) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|bak_Application (Hijacker.Application) -> Daten: hxxp://go.microsoft.com/fwlink/?LinkId=57426&Ext=%s -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|Application (Hijacker.Application) -> Bösartig: (hxxp://www.helpmeopen.com/?n=app&ext=%s) Gut: (hxxp://shell.windows.com/fileassoc/%04x/xml/redir.asp?Ext=%s) -> Keine Aktion durchgeführt.

Infizierte Verzeichnisse: 1
C:\ProgramData\IBUpdaterService (PUP.InstallBrain) -> Keine Aktion durchgeführt.

Infizierte Dateien: 2
C:\ProgramData\IBUpdaterService\ibsvc.exe (PUP.InstallBrain) -> Keine Aktion durchgeführt.
C:\ProgramData\IBUpdaterService\repository.xml (PUP.InstallBrain) -> Keine Aktion durchgeführt.

(Ende)

So dann bin ich nach dieser Anleitung: http://www.trojaner-board.de/69886-a...-beachten.html vorgegangen, also hier die Logfiles, als Anhang.

Ich hoffe ihr könnt mir helfen. Wenn ihr noch was braucht oder ich was machen soll, sagt bescheid! Und schonmal :dankeschoen:

schrauber 27.06.2013 10:51
Hi,

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Scan.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

R4M1N 27.06.2013 11:07
Hi, danke für die schnelle Antwort! Hier die Logfiles:


FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-06-2013 02
Ran by Admin (administrator) on 27-06-2013 11:59:41
Running from D:\Eigene Datein\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~2\AVG\AVG2012\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgemca.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
() C:\ProgramData\IBUpdaterService\ibsvc.exe
() C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe
(Script Soft eK) C:\Program Files (x86)\LOADSTREET\WinSpeedUp 3\CleanRAMService.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\loggingserver.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\system32\UI0Detect.exe
(ASUS) C:\Windows\AsScrPro.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
() C:\Program Files (x86)\AVG Secure Search\vprot.exe
(ROCCAT) C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\cvh.exe
() C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Enigma Software Group USA, LLC.) C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe
(Neuber Software) C:\Program Files (x86)\Security Task Manager\TaskMan.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /SF3  [2278504 2011-10-14] (Realtek Semiconductor)
HKCU\...\Run: [ISUSPM Startup] c:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup [221184 2004-06-14] (InstallShield Software Corporation)
MountPoints2: F - F:\AutoRun.exe
MountPoints2: G - G:\AutoRun.exe
MountPoints2: {20a40e19-dc64-11e1-beac-00030d000001} - F:\AutoRun.exe
MountPoints2: {2c16113d-c1d5-11e1-a1ee-9cb70d31ebfc} - F:\AutoRun.exe
MountPoints2: {2f484b07-c8cc-11e1-ac1a-9cb70d31ebfc} - F:\AutoRun.exe
MountPoints2: {2f484b1b-c8cc-11e1-ac1a-9cb70d31ebfc} - F:\AutoRun.exe
MountPoints2: {334a52ca-dd6d-11e1-99e6-001e101f1ed9} - F:\AutoRun.exe
MountPoints2: {526e1049-c8da-11e1-ad2c-9cb70d31ebfc} - F:\AutoRun.exe
MountPoints2: {7b653c04-c69b-11e1-80af-001e101f2500} - F:\AutoRun.exe
MountPoints2: {8ee19da6-c2b1-11e1-a7a8-001e101fabdd} - F:\AutoRun.exe
MountPoints2: {94432e37-c810-11e1-83ae-001e101f8ed0} - F:\AutoRun.exe
MountPoints2: {9587526e-c5dc-11e1-a098-001e101f859f} - F:\AutoRun.exe
MountPoints2: {95875281-c5dc-11e1-a098-001e101f859f} - F:\AutoRun.exe
MountPoints2: {958752ac-c5dc-11e1-a098-001e101f859f} - F:\AutoRun.exe
MountPoints2: {cf57b3ff-cb49-11e1-90fd-9cb70d31ebfc} - F:\AutoRun.exe
MountPoints2: {d0caa543-3d24-11e1-a606-806e6f6e6963} - E:\Autorun.exe
MountPoints2: {e2e39618-c0de-11e1-823e-9cb70d31ebfc} - F:\AutoRun.exe
HKLM-x32\...\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2317312 2011-09-13] (ASUS)
HKLM-x32\...\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5716608 2011-07-22] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-08] (ASUS)
HKLM-x32\...\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S [737104 2011-07-29] (ecareme)
HKLM-x32\...\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE" [3331312 2011-10-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" [2598520 2012-11-19] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" [2236080 2013-06-26] ()
HKLM-x32\...\Run: [ROCCAT Pyra Mouse] "C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.EXE" [532480 2010-09-07] (ROCCAT)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [TkBellExe] "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot [295512 2013-06-16] (RealNetworks, Inc.)
HKU\Administrator\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe"  /PROMPT /CMPID=JUNE2013_TB [1266712 2013-06-05] (AVG Secure Search)
Startup: C:\ProgramData\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.)
BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKCU SearchScopes: DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=119777&tt=gc_&babsrc=SP_ss&mntrId=6459988866001B04
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={88B0BA0D-A058-4723-A661-5763C75FBB5C}&mid=a0540456422447d08fdfd15756fb6b53-8a9eaab5b926fa27619e660f0061f215914bbccf&lang=de&ds=AVG&pr=fr&d=2012-12-22 10:53:41&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll (AVG Technologies CZ, s.r.o.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Speed Analysis 2 - {18DBB6CE-3148-4FEC-B481-103CB3290427} - C:\Program Files (x86)\Speed Analysis 2\ScriptHost.dll (SpeedAnalysis.com)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.3.0.11\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: Preispilot - {C4415769-1588-4AD6-9624-B2E69DB78D1A} - C:\Program Files (x86)\preispilot\Internet Explorer\preispilot.dll ()
BHO-x32: No Name - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC)
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.3.0.11\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - No Name - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} -  No File
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler: msdaipp - No CLSID Value -
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler-x32: msdaipp - No CLSID Value -
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.3.0\ViProtocol.dll (AVG Secure Search)
Tcpip\..\Interfaces\{577A6469-348A-400E-9ADF-55F0368C09DF}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{9C7178F1-B9A8-4E94-A311-55779E9F4971}: [NameServer]193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{CB56EDD6-BF4B-46E0-814C-E753482E405A}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Tcpip\..\Interfaces\{E557479C-4C23-4962-99CE-F58DAB4A570E}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{F3541CCE-820B-4A60-BF64-A21C3CC64E0A}: [NameServer]193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{F3C9A186-484B-4B09-BACB-011EEF623785}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{F58468F4-4D78-4FBB-8E05-6DBD6146FDE5}: [NameServer]193.189.244.225 193.189.244.206

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\extensions
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\info@d.sl
FF Extension: Speed Analysis 2 - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com
FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\sz@mast.er

Chrome:
=======
CHR Extension: () - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf\1.0.0.0

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-11-02] (Advanced Micro Devices, Inc.)
S3 AppBoosterService; C:\Program Files (x86)\Common Files\PCSUITE Common\BoostService.exe [1556360 2012-01-09] (MARKEMENT)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [5174392 2012-11-02] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [100864 2012-09-07] (Freemake)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 IBUpdaterService; C:\ProgramData\IBUpdaterService\ibsvc.exe [701216 2013-05-18] ()
S2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [239968 2012-07-04] ()
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [559168 2013-03-12] (RealNetworks, Inc.)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
R2 SpyHunter 4 Service; C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [1025408 2013-05-07] (Enigma Software Group USA, LLC.)
R2 vToolbarUpdater15.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe [1598128 2013-06-26] (AVG Secure Search)
R2 WLCleanRAM; C:\Program Files (x86)\LOADSTREET\WinSpeedUp 3\CleanRAMService.exe [20480 2007-12-04] (Script Soft eK)
S4 Yontoo Desktop Updater; C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe [23552 2013-05-17] (Microsoft)
S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [x]

==================== Drivers (Whitelisted) ====================

R3 AiCharger; C:\Windows\SysWow64\DRIVERS\AiCharger.sys [17152 2011-10-15] (ASUSTek Computer Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-06-21] ()
R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [127328 2012-12-10] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [307040 2012-11-08] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384800 2013-04-11] (AVG Technologies CZ, s.r.o.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-06-26] (AVG Technologies)
R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [38160 2007-05-11] (IVT Corporation.)
R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37648 2007-03-05] (IVT Corporation.)
R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)
R3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [44688 2007-05-09] (IVT Corporation.)
R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)
R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37464 2010-09-07] (Abelssoft GmbH)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-06-21] ()
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [12288 2009-08-22] ()
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [12288 2009-08-22] ()
S0 sfdrv01a; C:\Windows\System32\drivers\sfdrv01a.sys [77688 2006-07-05] (Protection Technology (StarForce))
S0 sfsync04; C:\Windows\System32\drivers\sfsync04.sys [78208 2006-08-11] (Protection Technology (StarForce))
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [765288 2011-10-01] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [268648 2011-10-01] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [25960 2011-10-01] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [22376 2011-10-01] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [828912 2012-12-22] ()
R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)
R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)
S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [x]
S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S1 hwinterface; System32\Drivers\hwinterface.sys [x]
S4 InCDfs; No ImagePath
S1 InCDPass; System32\DRIVERS\InCDPass.sys [x]
U1 InCDrec; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-27 11:59 - 2013-06-27 11:59 - 00000000 ___DC C:\FRST
2013-06-27 11:40 - 2013-06-27 11:40 - 00002260 ____A C:\Users\Admin\Desktop\SpyHunter.lnk
2013-06-27 11:40 - 2013-06-27 11:40 - 00000000 ___DC C:\sh4ldr
2013-06-27 11:40 - 2013-06-27 11:40 - 00000000 ___AC C:\autoexec.bat
2013-06-27 11:40 - 2013-06-27 11:40 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-06-27 11:40 - 2012-06-22 12:01 - 00022704 ____A C:\Windows\System32\Drivers\EsgScanner.sys
2013-06-27 11:38 - 2013-06-27 11:54 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-06-27 11:38 - 2013-06-27 11:40 - 00000000 ____D C:\Windows\E63D89610BA94CF39E94407ACA42846C.TMP
2013-06-27 11:38 - 2013-06-27 11:38 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-06-27 10:45 - 2013-06-27 10:46 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner
2013-06-27 10:23 - 2013-06-27 10:23 - 00481464 ____A C:\Windows\Minidump\062713-33150-01.dmp
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Malwarebytes
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-27 08:18 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-06-27 08:09 - 2013-06-27 08:09 - 00000000 ____D C:\Users\Admin\AppData\Local\{741502FA-B419-45C1-A6FE-CCDBBD7734B7}
2013-06-26 12:10 - 2013-06-26 12:10 - 00000000 ____D C:\Users\Admin\AppData\Local\{38F5C2D1-50C4-427A-A222-23CBECCA7EF6}
2013-06-26 06:53 - 2013-06-27 10:23 - 00000168 ____A C:\Windows\setupact.log
2013-06-26 06:53 - 2013-06-26 06:53 - 00000000 ____A C:\Windows\setuperr.log
2013-06-25 19:33 - 2013-06-25 19:34 - 00000000 ____D C:\Users\Admin\AppData\Local\{3E271160-8DB1-44DF-BA25-88E11B9699B9}
2013-06-25 15:21 - 2013-06-25 15:21 - 00000000 ___DC C:\tmp
2013-06-25 07:31 - 2013-06-25 07:31 - 00000000 ____D C:\Users\Admin\AppData\Local\{54B3A109-FB5B-4565-9A0A-EF0148A54F6A}
2013-06-24 16:38 - 2013-06-27 11:08 - 00000000 ____D C:\Users\Admin\Desktop\em bl mo
2013-06-24 06:56 - 2013-06-24 06:56 - 00000000 ____D C:\Users\Admin\AppData\Local\{853FF0C2-B04E-4AD2-BAE7-8B336055683A}
2013-06-23 15:42 - 2013-06-23 18:55 - 00000000 ____D C:\Users\Admin\AppData\Local\FT Software Updates
2013-06-23 14:29 - 2013-06-23 14:30 - 00000000 ____D C:\Users\Admin\AppData\Local\{C165F348-41F3-49E2-BC68-F2BF0C8457BD}
2013-06-22 17:48 - 2013-06-22 17:50 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2
2013-06-22 07:26 - 2013-06-22 07:26 - 00000000 ____D C:\Users\Admin\AppData\Local\{5C94D7B6-87E9-49B6-87DF-74D34D63D5A0}
2013-06-21 15:40 - 2013-06-21 15:40 - 00000000 ____D C:\Users\Admin\AppData\Local\{81276DE7-A3CE-4AFD-9976-F9A1A55C62D3}
2013-06-21 14:26 - 2013-06-21 14:26 - 00000000 ____D C:\Users\Admin\AppData\Local\{62F00203-0462-4341-B0D9-BC2AE390B33B}
2013-06-21 14:22 - 2013-06-21 14:22 - 00000000 ____D C:\Users\Admin\AppData\Local\{AD547284-E286-42A9-9130-73E616F6EC91}
2013-06-20 12:43 - 2013-06-20 12:43 - 00000000 ____D C:\Users\Admin\AppData\Local\{0415D29E-B810-4148-8854-041D9BE2C900}
2013-06-20 11:33 - 2013-06-12 21:47 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-20 11:33 - 2013-06-12 21:43 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-20 11:33 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-20 11:33 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-20 11:32 - 2013-06-20 11:33 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-19 20:18 - 2013-06-19 20:18 - 00000000 ____D C:\Users\Admin\AppData\Local\{5BDE95CC-D724-41B4-A78E-68E88A230158}
2013-06-19 16:13 - 2013-06-19 16:17 - 00000000 ____D C:\Program Files (x86)\Der Bahngigant
2013-06-19 08:16 - 2013-06-19 08:16 - 00000000 ____D C:\Users\Admin\AppData\Local\{CFE6E86A-8EAD-4E78-A539-ABF44BD12152}
2013-06-19 07:47 - 2013-06-27 11:38 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype
2013-06-19 07:47 - 2013-06-19 07:47 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-19 07:47 - 2013-06-19 07:47 - 00000000 ____D C:\ProgramData\Skype
2013-06-18 18:46 - 2013-06-18 18:46 - 00000000 ____D C:\Users\Admin\AppData\Local\{C2DA5721-FA21-486D-A2AC-365FDBDAE159}
2013-06-18 07:30 - 2013-06-18 07:30 - 00000000 ____D C:\Users\Admin\AppData\Local\{C8312CD7-E2D3-48DE-855A-AB0A646CB48E}
2013-06-17 14:03 - 2013-06-17 14:03 - 00000000 ____D C:\Users\Admin\AppData\Roaming\dvdcss
2013-06-17 07:14 - 2013-06-17 07:14 - 00000000 ____D C:\Users\Admin\AppData\Local\{11CFD17F-1DDA-4F0D-B6C0-90AC0A98FA9E}
2013-06-16 16:26 - 2013-06-16 16:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\RealNetworks
2013-06-16 16:25 - 2013-06-16 16:25 - 00272896 ____A (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00201872 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00006656 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00005632 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00000000 ____D C:\ProgramData\RealNetworks
2013-06-16 16:25 - 2013-06-16 16:25 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ___DC C:\Multimedia Files
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ____D C:\Users\Admin\AppData\Roaming\IrfanView
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-06-16 14:28 - 2013-06-16 14:29 - 00000000 ____D C:\Program Files (x86)\Microsoft GIF Animator
2013-06-16 10:02 - 2013-06-16 10:02 - 00000000 ____D C:\Users\Admin\AppData\Local\{2FB794B6-09D5-4E13-810D-520FA430BD7E}
2013-06-14 07:30 - 2013-06-14 07:30 - 00000000 ____D C:\Users\Admin\AppData\Local\{708B1D8F-75A7-4099-9A0E-3798394036BE}
2013-06-13 13:31 - 2013-06-13 13:32 - 00000000 ____D C:\Users\Admin\AppData\Local\{69ECCB1F-90E7-4512-8BF1-980FF42A7B99}
2013-06-12 15:41 - 2013-06-12 15:41 - 00000000 ____D C:\Users\Admin\AppData\Local\{F3065388-8E0B-49F7-8AA9-C074DFA46D4D}
2013-06-11 13:16 - 2013-06-11 13:16 - 00000000 ____D C:\Users\Admin\AppData\Local\{15B492AE-AA1D-47B6-BF58-CEAE3B0F1229}
2013-06-10 15:41 - 2013-06-10 15:41 - 00000000 ____D C:\Program Files (x86)\preispilot
2013-06-10 15:40 - 2013-06-10 15:41 - 00000000 ____D C:\Users\Admin\AppData\Roaming\DesktopIconForAmazon
2013-06-10 07:06 - 2013-06-10 07:06 - 00000000 ____D C:\Users\Admin\AppData\Local\{8172463F-1501-4BEC-8F4B-C9E1BCA5D41C}
2013-06-09 15:48 - 2013-06-09 15:49 - 00000000 ____D C:\Users\Admin\AppData\Local\{E5B471A2-64D6-4BF7-9AAC-060974D44891}
2013-06-09 08:28 - 2013-06-09 08:28 - 00000000 ____D C:\Users\Admin\AppData\Local\{098B2053-E3F7-4F54-B989-FADE975E75A5}
2013-06-08 14:38 - 2013-06-08 14:39 - 00000000 ____D C:\Program Files (x86)\Rescue2013
2013-06-08 08:24 - 2013-06-08 08:24 - 00000000 ____D C:\Users\Admin\AppData\Local\{9E55D4A0-DE33-4A1C-9472-1618F4FE4290}
2013-06-07 13:21 - 2013-06-07 13:22 - 00000000 ____D C:\Users\Admin\AppData\Local\{1F03C339-6663-45D5-97C9-5C60AAEF417A}
2013-06-06 13:52 - 2013-06-06 13:52 - 00000000 ____D C:\Users\Admin\AppData\Local\{D4A4FA49-BF60-4513-905C-958E8E0F4620}
2013-06-05 19:42 - 2013-06-05 19:42 - 00000000 ____D C:\Users\Admin\AppData\Local\{17DF8754-5BF7-435F-ADC8-ABFE08009442}
2013-06-05 18:38 - 2013-06-27 10:26 - 00000350 ____A C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-06-05 07:32 - 2013-06-05 07:32 - 00000000 ____D C:\Users\Admin\AppData\Local\{3EEF9C47-AA70-407B-83DE-5E9C5952479C}
2013-06-04 12:35 - 2013-06-04 12:35 - 00000000 ____D C:\Users\Admin\AppData\Local\{93ECB55A-F260-42CB-8952-2A2F2A8CE8CF}
2013-06-03 20:11 - 2013-06-24 15:37 - 00000000 ___DC C:\Fraps
2013-06-03 20:11 - 2013-06-03 20:11 - 00000568 ____A C:\Users\Administrator\Desktop\Fraps.lnk
2013-06-03 20:11 - 2013-06-03 20:11 - 00000568 ____A C:\Users\Admin\Desktop\Fraps.lnk
2013-06-03 13:38 - 2013-06-03 13:39 - 00000000 ____D C:\Users\Admin\AppData\Local\{844A830D-CAD3-4DA6-9E11-0599D864CF0A}
2013-06-02 08:48 - 2013-06-02 08:48 - 00000000 ____D C:\Users\Admin\AppData\Local\{17E39024-226D-4DFC-B1EE-F8826893B01A}
2013-06-01 08:25 - 2013-06-01 08:25 - 00000000 ____D C:\Users\Admin\AppData\Local\{FB6AE66D-C1AC-44A5-9C07-290B6C3F3A07}
2013-05-31 15:04 - 2013-05-31 15:04 - 00000000 ____D C:\Users\Admin\AppData\Local\{736D3E93-2848-417E-B9B4-28982D0B1CD4}
2013-05-31 13:14 - 2013-05-31 13:14 - 00000000 ____D C:\Users\Admin\AppData\Local\{161E475C-E660-47BF-87B5-8BA1075212EC}
2013-05-30 21:40 - 2013-05-30 21:40 - 00000000 ____D C:\Users\Admin\AppData\Local\{219540F9-45A1-487E-8469-000643F97AB5}
2013-05-30 07:28 - 2013-05-30 07:28 - 00000000 ____D C:\Users\Admin\AppData\Local\{0E2B48DA-301E-415E-9C46-3585ECFD7A03}
2013-05-30 07:10 - 2013-05-30 07:10 - 00000000 ____D C:\Users\Admin\AppData\Local\{599115B8-B188-4E60-B84A-DE2159DCAAF8}
2013-05-29 15:42 - 2013-05-29 15:44 - 00000000 ____D C:\Users\Admin\AppData\Local\{D0DBB1D7-40E6-4405-BF5D-31E8BE17BB86}
2013-05-29 13:30 - 2013-05-29 13:38 - 00000000 ____D C:\Users\Admin\AppData\Local\{10B671B7-72E6-4543-9B35-A82DAF3850EE}
2013-05-28 20:27 - 2013-05-28 20:28 - 00000000 ____D C:\Users\Admin\AppData\Local\{5B6CB987-A651-41FB-AC87-0C270CA6E1CF}
2013-05-28 07:32 - 2013-05-28 07:32 - 00000000 ____D C:\Users\Admin\AppData\Local\{34F87B67-A479-407B-AA98-2E1063D686C4}

==================== One Month Modified Files and Folders =======

2013-06-27 11:59 - 2013-06-27 11:59 - 00000000 ___DC C:\FRST
2013-06-27 11:54 - 2013-06-27 11:38 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-06-27 11:40 - 2013-06-27 11:40 - 00002260 ____A C:\Users\Admin\Desktop\SpyHunter.lnk
2013-06-27 11:40 - 2013-06-27 11:40 - 00000000 ___DC C:\sh4ldr
2013-06-27 11:40 - 2013-06-27 11:40 - 00000000 ___AC C:\autoexec.bat
2013-06-27 11:40 - 2013-06-27 11:40 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-06-27 11:40 - 2013-06-27 11:38 - 00000000 ____D C:\Windows\E63D89610BA94CF39E94407ACA42846C.TMP
2013-06-27 11:38 - 2013-06-27 11:38 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-06-27 11:38 - 2013-06-19 07:47 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype
2013-06-27 11:08 - 2013-06-24 16:38 - 00000000 ____D C:\Users\Admin\Desktop\em bl mo
2013-06-27 11:08 - 2012-06-30 15:42 - 00001120 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001UA.job
2013-06-27 10:46 - 2013-06-27 10:45 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner
2013-06-27 10:31 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-27 10:31 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-27 10:29 - 2012-01-12 15:48 - 01592399 ____A C:\Windows\WindowsUpdate.log
2013-06-27 10:26 - 2013-06-05 18:38 - 00000350 ____A C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-06-27 10:26 - 2012-08-05 20:34 - 00000326 ____A C:\Windows\Tasks\GlaryInitialize.job
2013-06-27 10:23 - 2013-06-27 10:23 - 00481464 ____A C:\Windows\Minidump\062713-33150-01.dmp
2013-06-27 10:23 - 2013-06-26 06:53 - 00000168 ____A C:\Windows\setupact.log
2013-06-27 10:23 - 2012-11-25 10:48 - 00000000 ____D C:\Windows\Minidump
2013-06-27 10:23 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-27 10:11 - 2012-06-28 08:43 - 00000000 ____D C:\Users\Admin\AppData\Roaming\SoftGrid Client
2013-06-27 09:08 - 2012-06-30 15:42 - 00001068 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001Core.job
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Malwarebytes
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-27 08:09 - 2013-06-27 08:09 - 00000000 ____D C:\Users\Admin\AppData\Local\{741502FA-B419-45C1-A6FE-CCDBBD7734B7}
2013-06-27 07:44 - 2012-06-09 10:50 - 00045056 ____A C:\Windows\SysWOW64\acovcnt.exe
2013-06-27 07:44 - 2012-01-12 16:04 - 00001702 ____A C:\Windows\System32\ServiceFilter.ini
2013-06-26 18:54 - 2013-05-18 16:04 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Yontoo
2013-06-26 14:54 - 2012-12-24 12:11 - 00045856 ____A (AVG Technologies) C:\Windows\System32\Drivers\avgtpx64.sys
2013-06-26 14:54 - 2012-12-24 11:58 - 00000000 ____D C:\ProgramData\AVG Secure Search
2013-06-26 14:54 - 2012-12-22 11:53 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search
2013-06-26 14:36 - 2012-12-22 11:52 - 00000000 ____D C:\Windows\System32\Drivers\AVG
2013-06-26 13:26 - 2011-02-19 06:24 - 00719560 ____A C:\Windows\System32\perfh007.dat
2013-06-26 13:26 - 2011-02-19 06:24 - 00157202 ____A C:\Windows\System32\perfc007.dat
2013-06-26 13:26 - 2009-07-14 07:13 - 01674918 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-26 12:10 - 2013-06-26 12:10 - 00000000 ____D C:\Users\Admin\AppData\Local\{38F5C2D1-50C4-427A-A222-23CBECCA7EF6}
2013-06-26 06:53 - 2013-06-26 06:53 - 00000000 ____A C:\Windows\setuperr.log
2013-06-25 19:34 - 2013-06-25 19:33 - 00000000 ____D C:\Users\Admin\AppData\Local\{3E271160-8DB1-44DF-BA25-88E11B9699B9}
2013-06-25 15:21 - 2013-06-25 15:21 - 00000000 ___DC C:\tmp
2013-06-25 15:03 - 2012-06-09 10:49 - 00000000 ____D C:\users\Admin
2013-06-25 07:31 - 2013-06-25 07:31 - 00000000 ____D C:\Users\Admin\AppData\Local\{54B3A109-FB5B-4565-9A0A-EF0148A54F6A}
2013-06-24 15:37 - 2013-06-03 20:11 - 00000000 ___DC C:\Fraps
2013-06-24 07:11 - 2012-06-28 08:16 - 00000000 ___RD C:\Users\Admin\Desktop\Spiele
2013-06-24 06:56 - 2013-06-24 06:56 - 00000000 ____D C:\Users\Admin\AppData\Local\{853FF0C2-B04E-4AD2-BAE7-8B336055683A}
2013-06-23 18:55 - 2013-06-23 15:42 - 00000000 ____D C:\Users\Admin\AppData\Local\FT Software Updates
2013-06-23 14:30 - 2013-06-23 14:29 - 00000000 ____D C:\Users\Admin\AppData\Local\{C165F348-41F3-49E2-BC68-F2BF0C8457BD}
2013-06-22 19:11 - 2013-04-15 18:09 - 00000000 ____D C:\Users\Admin\AppData\Local\FT_Software
2013-06-22 17:50 - 2013-06-22 17:48 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2
2013-06-22 14:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF
2013-06-22 13:15 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-06-22 07:26 - 2013-06-22 07:26 - 00000000 ____D C:\Users\Admin\AppData\Local\{5C94D7B6-87E9-49B6-87DF-74D34D63D5A0}
2013-06-21 17:42 - 2012-07-03 16:50 - 00000000 ____D C:\Program Files (x86)\Anno 1701
2013-06-21 16:27 - 2012-07-03 17:05 - 00088480 ____A C:\Windows\System32\Drivers\atksgt.sys
2013-06-21 16:27 - 2012-07-03 17:04 - 00046400 ____A C:\Windows\System32\Drivers\lirsgt.sys
2013-06-21 16:15 - 2012-01-12 15:54 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-21 15:40 - 2013-06-21 15:40 - 00000000 ____D C:\Users\Admin\AppData\Local\{81276DE7-A3CE-4AFD-9976-F9A1A55C62D3}
2013-06-21 14:36 - 2012-06-28 08:52 - 00000000 ____D C:\ProgramData\DatacardService
2013-06-21 14:27 - 2013-01-13 10:33 - 00007598 ____A C:\Users\Admin\AppData\Local\resmon.resmoncfg
2013-06-21 14:26 - 2013-06-21 14:26 - 00000000 ____D C:\Users\Admin\AppData\Local\{62F00203-0462-4341-B0D9-BC2AE390B33B}
2013-06-21 14:22 - 2013-06-21 14:22 - 00000000 ____D C:\Users\Admin\AppData\Local\{AD547284-E286-42A9-9130-73E616F6EC91}
2013-06-20 12:43 - 2013-06-20 12:43 - 00000000 ____D C:\Users\Admin\AppData\Local\{0415D29E-B810-4148-8854-041D9BE2C900}
2013-06-20 11:33 - 2013-06-20 11:32 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-20 11:33 - 2013-05-19 14:00 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-19 20:18 - 2013-06-19 20:18 - 00000000 ____D C:\Users\Admin\AppData\Local\{5BDE95CC-D724-41B4-A78E-68E88A230158}
2013-06-19 16:17 - 2013-06-19 16:13 - 00000000 ____D C:\Program Files (x86)\Der Bahngigant
2013-06-19 13:56 - 2013-04-15 18:10 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2013-06-19 08:16 - 2013-06-19 08:16 - 00000000 ____D C:\Users\Admin\AppData\Local\{CFE6E86A-8EAD-4E78-A539-ABF44BD12152}
2013-06-19 08:06 - 2012-06-28 08:16 - 00000000 ___RD C:\Users\Admin\Desktop\Büro
2013-06-19 07:47 - 2013-06-19 07:47 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-19 07:47 - 2013-06-19 07:47 - 00000000 ____D C:\ProgramData\Skype
2013-06-18 18:46 - 2013-06-18 18:46 - 00000000 ____D C:\Users\Admin\AppData\Local\{C2DA5721-FA21-486D-A2AC-365FDBDAE159}
2013-06-18 14:46 - 2012-08-05 20:34 - 00000000 ____D C:\Program Files\Blender Foundation
2013-06-18 07:30 - 2013-06-18 07:30 - 00000000 ____D C:\Users\Admin\AppData\Local\{C8312CD7-E2D3-48DE-855A-AB0A646CB48E}
2013-06-17 14:04 - 2013-05-08 17:15 - 00000000 ____D C:\Users\Admin\AppData\Roaming\vlc
2013-06-17 14:03 - 2013-06-17 14:03 - 00000000 ____D C:\Users\Admin\AppData\Roaming\dvdcss
2013-06-17 14:02 - 2012-06-30 15:50 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Real
2013-06-17 07:14 - 2013-06-17 07:14 - 00000000 ____D C:\Users\Admin\AppData\Local\{11CFD17F-1DDA-4F0D-B6C0-90AC0A98FA9E}
2013-06-16 16:30 - 2012-06-30 16:38 - 00000000 ____D C:\ProgramData\Real
2013-06-16 16:26 - 2013-06-16 16:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\RealNetworks
2013-06-16 16:25 - 2013-06-16 16:25 - 00272896 ____A (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00201872 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00006656 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00005632 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00000000 ____D C:\ProgramData\RealNetworks
2013-06-16 16:25 - 2013-06-16 16:25 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-06-16 16:25 - 2012-06-30 15:52 - 00499712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-06-16 16:25 - 2012-06-30 15:52 - 00348160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-06-16 16:25 - 2012-06-30 15:51 - 00000000 ____D C:\Program Files (x86)\Real
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ___DC C:\Multimedia Files
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ____D C:\Users\Admin\AppData\Roaming\IrfanView
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-06-16 14:29 - 2013-06-16 14:28 - 00000000 ____D C:\Program Files (x86)\Microsoft GIF Animator
2013-06-16 10:02 - 2013-06-16 10:02 - 00000000 ____D C:\Users\Admin\AppData\Local\{2FB794B6-09D5-4E13-810D-520FA430BD7E}
2013-06-14 07:30 - 2013-06-14 07:30 - 00000000 ____D C:\Users\Admin\AppData\Local\{708B1D8F-75A7-4099-9A0E-3798394036BE}
2013-06-14 06:52 - 2012-09-30 11:52 - 00000000 ___RD C:\Users\Admin\Desktop\Ordner für alles mögliche
2013-06-13 13:32 - 2013-06-13 13:31 - 00000000 ____D C:\Users\Admin\AppData\Local\{69ECCB1F-90E7-4512-8BF1-980FF42A7B99}
2013-06-12 21:48 - 2013-05-19 14:00 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-12 21:48 - 2013-05-19 14:00 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-12 21:47 - 2013-06-20 11:33 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-12 21:43 - 2013-06-20 11:33 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-12 21:43 - 2013-06-20 11:33 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-12 21:43 - 2013-06-20 11:33 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-12 15:41 - 2013-06-12 15:41 - 00000000 ____D C:\Users\Admin\AppData\Local\{F3065388-8E0B-49F7-8AA9-C074DFA46D4D}
2013-06-11 13:16 - 2013-06-11 13:16 - 00000000 ____D C:\Users\Admin\AppData\Local\{15B492AE-AA1D-47B6-BF58-CEAE3B0F1229}
2013-06-10 20:25 - 2012-10-03 08:46 - 00000000 ____D C:\Program Files (x86)\BitZipper
2013-06-10 15:41 - 2013-06-10 15:41 - 00000000 ____D C:\Program Files (x86)\preispilot
2013-06-10 15:41 - 2013-06-10 15:40 - 00000000 ____D C:\Users\Admin\AppData\Roaming\DesktopIconForAmazon
2013-06-10 07:06 - 2013-06-10 07:06 - 00000000 ____D C:\Users\Admin\AppData\Local\{8172463F-1501-4BEC-8F4B-C9E1BCA5D41C}
2013-06-09 15:49 - 2013-06-09 15:48 - 00000000 ____D C:\Users\Admin\AppData\Local\{E5B471A2-64D6-4BF7-9AAC-060974D44891}
2013-06-09 08:28 - 2013-06-09 08:28 - 00000000 ____D C:\Users\Admin\AppData\Local\{098B2053-E3F7-4F54-B989-FADE975E75A5}
2013-06-08 14:39 - 2013-06-08 14:38 - 00000000 ____D C:\Program Files (x86)\Rescue2013
2013-06-08 08:24 - 2013-06-08 08:24 - 00000000 ____D C:\Users\Admin\AppData\Local\{9E55D4A0-DE33-4A1C-9472-1618F4FE4290}
2013-06-07 13:22 - 2013-06-07 13:21 - 00000000 ____D C:\Users\Admin\AppData\Local\{1F03C339-6663-45D5-97C9-5C60AAEF417A}
2013-06-06 13:52 - 2013-06-06 13:52 - 00000000 ____D C:\Users\Admin\AppData\Local\{D4A4FA49-BF60-4513-905C-958E8E0F4620}
2013-06-05 19:42 - 2013-06-05 19:42 - 00000000 ____D C:\Users\Admin\AppData\Local\{17DF8754-5BF7-435F-ADC8-ABFE08009442}
2013-06-05 07:32 - 2013-06-05 07:32 - 00000000 ____D C:\Users\Admin\AppData\Local\{3EEF9C47-AA70-407B-83DE-5E9C5952479C}
2013-06-04 12:35 - 2013-06-04 12:35 - 00000000 ____D C:\Users\Admin\AppData\Local\{93ECB55A-F260-42CB-8952-2A2F2A8CE8CF}
2013-06-03 20:11 - 2013-06-03 20:11 - 00000568 ____A C:\Users\Administrator\Desktop\Fraps.lnk
2013-06-03 20:11 - 2013-06-03 20:11 - 00000568 ____A C:\Users\Admin\Desktop\Fraps.lnk
2013-06-03 13:39 - 2013-06-03 13:38 - 00000000 ____D C:\Users\Admin\AppData\Local\{844A830D-CAD3-4DA6-9E11-0599D864CF0A}
2013-06-02 08:48 - 2013-06-02 08:48 - 00000000 ____D C:\Users\Admin\AppData\Local\{17E39024-226D-4DFC-B1EE-F8826893B01A}
2013-06-01 08:25 - 2013-06-01 08:25 - 00000000 ____D C:\Users\Admin\AppData\Local\{FB6AE66D-C1AC-44A5-9C07-290B6C3F3A07}
2013-06-01 08:10 - 2013-05-18 16:04 - 00000000 ____D C:\Program Files (x86)\Yontoo
2013-05-31 15:04 - 2013-05-31 15:04 - 00000000 ____D C:\Users\Admin\AppData\Local\{736D3E93-2848-417E-B9B4-28982D0B1CD4}
2013-05-31 13:14 - 2013-05-31 13:14 - 00000000 ____D C:\Users\Admin\AppData\Local\{161E475C-E660-47BF-87B5-8BA1075212EC}
2013-05-30 21:40 - 2013-05-30 21:40 - 00000000 ____D C:\Users\Admin\AppData\Local\{219540F9-45A1-487E-8469-000643F97AB5}
2013-05-30 07:28 - 2013-05-30 07:28 - 00000000 ____D C:\Users\Admin\AppData\Local\{0E2B48DA-301E-415E-9C46-3585ECFD7A03}
2013-05-30 07:10 - 2013-05-30 07:10 - 00000000 ____D C:\Users\Admin\AppData\Local\{599115B8-B188-4E60-B84A-DE2159DCAAF8}
2013-05-29 15:44 - 2013-05-29 15:42 - 00000000 ____D C:\Users\Admin\AppData\Local\{D0DBB1D7-40E6-4405-BF5D-31E8BE17BB86}
2013-05-29 13:38 - 2013-05-29 13:30 - 00000000 ____D C:\Users\Admin\AppData\Local\{10B671B7-72E6-4543-9B35-A82DAF3850EE}
2013-05-28 20:28 - 2013-05-28 20:27 - 00000000 ____D C:\Users\Admin\AppData\Local\{5B6CB987-A651-41FB-AC87-0C270CA6E1CF}
2013-05-28 07:32 - 2013-05-28 07:32 - 00000000 ____D C:\Users\Admin\AppData\Local\{34F87B67-A479-407B-AA98-2E1063D686C4}

Files to move or delete:
====================
C:\ProgramData\FullRemove.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-23 16:34

==================== End Of Log ============================
--- --- ---


Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-06-2013 02
Ran by Admin at 2013-06-27 12:01:09
Running from D:\Eigene Datein\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

??? ActiveX ?? Windows Live Mesh ???? ??????? ??????? (x32 Version: 15.4.5722.2)
???? ??? Windows Live (x32 Version: 15.4.3502.0922)
???? ???? ActiveX ????? ?? Windows Live Mesh ????????? ??????? (x32 Version: 15.4.5722.2)
???? Windows Live (x32 Version: 15.4.3502.0922)
?????? ??????? ?? Windows Live (x32 Version: 15.4.3502.0922)
??????? ?????????? Windows Live Mesh ActiveX ??? ????????? ??????????? (x32 Version: 15.4.5722.2)
??????? Windows Live Mesh ActiveX ??? (x32 Version: 15.4.5722.2)
???????? ?????????? Windows Live (x32 Version: 15.4.3502.0922)
?????????? Windows Live (x32 Version: 15.4.3502.0922)
18 WoS Across America (x32 Version: 0.2.0000)
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
7-Zip 9.22 (x32 Version: 9.22.00.0)
Adobe AIR (x32 Version: 3.4.0.2540)
Adobe Flash Player 10 ActiveX (x32 Version: 10.1.85.3)
Adobe Flash Player 10 Plugin (x32 Version: 10.0.32.18)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
Ahead InCD (x32)
Ahead NeroVision Express (x32)
AMD APP SDK Runtime (Version: 2.5.775.2)
AMD Catalyst Install Manager (Version: 3.0.847.0)
AMD Fuel (Version: 2011.1102.8.41498)
AMD Media Foundation Decoders (Version: 1.0.61101.2304)
AMD System Monitor (x32 Version: 1.0.8)
AMD VISION Engine Control Center (x32 Version: 2011.1102.8.41498)
AnalogX AutoTune (x32)
Anno 1701 (x32 Version: 1.00)
AquaSoft DiaShow Deluxe 6 (HKCU Version: 6.6.03)
AquaSoft DiaShow Deluxe 6 (x32 Version: 6.6.03)
AquaSoft Earth Pilot (HKCU Version: 6.5.02)
AquaSoft Earth Pilot (x32 Version: 6.5.02)
ArtMoney SE v7.35.1 (x32 Version: 7.35)
ASUS AI Recovery (x32 Version: 1.0.19)
ASUS FaceLogon (x32 Version: 1.0.0012)
ASUS LifeFrame3 (x32 Version: 3.0.27)
ASUS Live Update (x32 Version: 3.0.8)
ASUS Power4Gear Hybrid (Version: 1.1.50)
ASUS Sonic Focus (x32 Version: 1.0.0.5)
ASUS Splendid Video Enhancement Technology (x32 Version: 1.02.0036)
ASUS USB Charger Plus (x32 Version: 2.0.5)
ASUS Virtual Camera (x32 Version: 1.0.24)
ASUS WebStorage (x32 Version: 3.0.108.222)
ASUS_Screensaver (x32)
AsusVibe2.0 (x32 Version: 2.0.7.142)
ATK Package (x32 Version: 1.0.0014)
AVG 2012 (Version: 12.0.3204)
AVG 2012 (Version: 12.1.2242)
AVG 2012 (Version: 2012.1.2242)
AVG Security Toolbar (x32 Version: 15.3.0.11)
Berlin Taxi (x32)
Blender (remove only) (x32)
Blender (Version: 2.67b)
Blue Byte Game Channel (x32)
Bluesoleil2.6.0.8 Release 070517 (x32 Version: 2.6.0.8 Release 070517)
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.1102.8.41498)
Catalyst Control Center InstallProxy (x32 Version: 2011.1102.8.41498)
Catalyst Control Center Localization All (x32 Version: 2011.1102.8.41498)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.1102.8.41498)
CCC Help Chinese Standard (x32 Version: 2011.1102.0007.41498)
CCC Help Chinese Traditional (x32 Version: 2011.1102.0007.41498)
CCC Help Czech (x32 Version: 2011.1102.0007.41498)
CCC Help Danish (x32 Version: 2011.1102.0007.41498)
CCC Help Dutch (x32 Version: 2011.1102.0007.41498)
CCC Help English (x32 Version: 2011.1102.0007.41498)
CCC Help Finnish (x32 Version: 2011.1102.0007.41498)
CCC Help French (x32 Version: 2011.1102.0007.41498)
CCC Help German (x32 Version: 2011.1102.0007.41498)
CCC Help Greek (x32 Version: 2011.1102.0007.41498)
CCC Help Hungarian (x32 Version: 2011.1102.0007.41498)
CCC Help Italian (x32 Version: 2011.1102.0007.41498)
CCC Help Japanese (x32 Version: 2011.1102.0007.41498)
CCC Help Korean (x32 Version: 2011.1102.0007.41498)
CCC Help Norwegian (x32 Version: 2011.1102.0007.41498)
CCC Help Polish (x32 Version: 2011.1102.0007.41498)
CCC Help Portuguese (x32 Version: 2011.1102.0007.41498)
CCC Help Russian (x32 Version: 2011.1102.0007.41498)
CCC Help Spanish (x32 Version: 2011.1102.0007.41498)
CCC Help Swedish (x32 Version: 2011.1102.0007.41498)
CCC Help Thai (x32 Version: 2011.1102.0007.41498)
CCC Help Turkish (x32 Version: 2011.1102.0007.41498)
ccc-utility64 (Version: 2011.1102.8.41498)
CCleaner (remove only) (x32)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
CoolNovo (HKCU Version: 2.0.8.33)
CPUID CPU-Z 1.61.5
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink Media Suite (x32 Version: 8.0.2926)
CyberLink Power2Go (x32 Version: 7.0.0.1126)
D3DX10 (x32 Version: 15.4.2368.0902)
Deadtime Stories (x32)
Delta Chrome Toolbar (x32)
Der Bahngigant (x32)
Desktop Icon für Amazon (Version: 1.0.1 (de))
Dev-C++ 5 beta 9 release (4.9.9.2) (x32)
Die Polizei 2013 (x32)
DIE SIEDLER - Aufstieg eines Königreichs (x32 Version: 1.00.0000)
Die Siedler III Gold Edition (x32)
Die Siedler IV (x32)
Dream Day First Home (x32)
Dream Vacation Solitaire (x32)
Driver San Francisco (x32 Version: 1.4.0.0)
EasyCleaner (x32 Version: 2.0.6.380)
Emergency 2012 Deluxe (x32)
Emergency4 (x32 Version: 1.03.001)
ERS Berlin 2 Beta (x32 Version: 0.2011.12.04)
Euro Truck Simulator 2 (x32 Version: 1.2.5)
Fachzug 22 Version 1.2 (x32)
Fast Boot (Version: 1.0.10)
Feuer- und Notfallsimulation Wegberg Version 5.0 (x32 Version: 5.0)
Feuer- und Notfallsimulation Wegberg Version 6.0 (x32 Version: 6.0)
ffdshow v1.2.4422 [2012-04-09] (x32 Version: 1.2.4422.0)
FFN  (x32 Version: 1.00.0000)
FlatOut2 (x32 Version: 1.00.0000)
Flughafen-Feuerwehr-Simulator 2013 Version 1.0 (x32)
Flughafen-Feuerwehr-Simulator PATCH 1.1 (x32)
FormatFactory 2.80 (x32 Version: 2.80)
Fraps (remove only) (x32)
Free Video to MP3 Converter version 5.0.15.706 (x32 Version: 5.0.15.706)
FreeArc 0.67 alpha (x32 Version: 0.67 alpha)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Game Park Console (x32 Version: 1.2.4.431)
GIMP 2.6.10 (x32 Version: 2.6.10)
Glary Utilities 2.47.0.1539 (x32 Version: 2.47.0.1539)
Google Chrome (HKCU Version: 27.0.1453.116)
Graph paper printer (x32)
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (Version: 22.0.334.0)
HP Deskjet 2050 J510 series Hilfe (x32 Version: 140.0.61.61)
HP Photo Creations (x32 Version: 1.0.0.3341)
HP Update (x32 Version: 5.002.005.003)
Inpaint 3.0 (x32)
IrfanView (remove only) (x32 Version: 4.35)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 29 (64-bit) (Version: 6.0.290)
JetDrive (x32 Version: 5.4)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
L&H TTS3000 Deutsch (x32)
L&H TTS3000 Español (x32)
L&H TTS3000 Français (x32)
L&H TTS3000 Russian (x32)
Landwirtschafts Simulator 2011 (x32 Version: 1.0)
Leitstelle (HKCU Version: 1.0.4.10)
Lernout & Hauspie TruVoice American English TTS Engine (x32)
LibreOffice 3.5 (x32 Version: 3.5.4.2)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft AutoRoute 2002 (x32 Version: 9.00.17.0200)
Microsoft Encarta Enzyklopädie 2003 (x32 Version: 2003)
Microsoft GIF Animator (x32)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.6122.5000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.6122.5000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.6137.5001)
Microsoft Silverlight (x32 Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Word 2002 (x32 Version: 10.0.6626.0)
Microsoft Works 2003-Setup-Start (x32)
Microsoft Works 7.0  (x32 Version: 07.02.0702)
Microsoft Works Suite-Add-Ins für Microsoft Word (x32 Version: 2.0.0.0000)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Microsoft_VC100_CRT_x64 (Version: 1.0.0)
Mobile Partner (x32 Version: 21.005.15.02.382)
Movavi Video Converter 10 (x32 Version: 10.05.000)
Movavi Video Converter 3D SE (x32 Version: 1.04.000)
Mozilla Maintenance Service (x32 Version: 16.0.1)
MP3Cover (x32)
Mp3tag v2.55a (x32 Version: v2.55a)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0)
Need for Speed™ Most Wanted (x32)
Notepad++ (x32 Version: 6.3.2)
Notification Center (x32 Version: 0.7.7.813)
Nuance PDF Reader (x32 Version: 6.00.0041)
NVIDIA PhysX (x32 Version: 9.10.0513)
OGL-FMS Uninstall (x32 Version: 0.1.4)
Online Games Manager v1.20 (x32 Version: 1.20.13)
OpenAL (x32)
PCSUITE BOOSTER (x32)
Picasa 3 (x32 Version: 3.9)
Plants vs Zombies (x32)
PlayReady PC Runtime amd64 (Version: 1.3.0)
PosteRazor (x32 Version: 1.5.2)
PowerOff XP V.0.9.4 (x32)
Preispilot (x32 Version: 1.4.6)
PROMT Translation Agent (x32 Version: 8.00.00020)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 9.2)
QuickTime (x32 Version: 7.0.3)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Real Heroes Firefighter (x32)
RealDownloader (x32 Version: 1.3.2)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
RealPlayer (x32 Version: 16.0.2)
Realtek Ethernet Controller Driver (x32 Version: 7.43.321.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6482)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30127)
RealUpgrade 1.1 (x32 Version: 1.1.0)
RESCUE 2013 (HKCU Version: 1.10.00.00)
RESCUE 2013 DEMO (HKCU Version: 1.00.00.00)
RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition (x32 Version: v2.24 MSI Master Overclocking Arena 2009 edition)
ROCCAT Pyra Mouse Driver (x32)
S?????? f?t???af??? t?? Windows Live (x32 Version: 15.4.3502.0922)
schlaegerei.de ComputerSchock 4.00 (x32 Version: 4.00)
schlaegerei.de mouseScherz 4.00 (x32 Version: 4.00)
Security Task Manager 1.8g (x32 Version: 1.8g)
Shockwave (x32)
Sid Meier's Civilization 4 Complete (x32 Version: 1.74)
Sid Meier's Civilization IV Colonization (x32 Version: 1.00)
Simulationsprogramm Integrierte Leitstelle V4 (x32 Version: 4.0.14)
Skype™ 6.5 (x32 Version: 6.5.158)
SmartSound Quicktracks Plugin (x32 Version: 3.0.2.7)
Snagit 11 (x32 Version: 11.1.0)
Speed Analysis 2 (x32 Version: 1.0.0.0)
Spezialfahrzeuge-Simulator Version 1.45 (x32 Version: 1.45)
SpyHunter (Version: 4.13.6.4253)
St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?µa???sµ??e? s??d?se?? (x32 Version: 15.4.5722.2)
Studie zur Verbesserung von HP Deskjet 2050 J510 series Produkten (Version: 22.0.334.0)
Synfig Studio (x32 Version: 0.62.01)
TeamViewer 8 (x32 Version: 8.0.18051)
TI Connect 1.6 (x32 Version: 1.6)
Ubisoft Game Launcher (x32 Version: 1.0.0.0)
Ulead VideoStudio SE DVD (x32 Version: 10.0)
uMedia uTV (x32 Version: 1.00.000)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Updater Service (x32 Version: 15,9,28,27)
Verkehrsplaner - Die Simulation (x32)
Visual Studio 2008 x64 Redistributables (x32 Version: 10.0.0.2)
VLC media player 1.0.1 (x32 Version: 1.0.1)
Werksfeuerwehr-Simulator Version 1.0 (x32)
Wildlife Park 2 (x32 Version: 1.24)
WinDirStat 1.1.2 (HKCU)
Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB  (06/11/2009 1.0.0.0) (Version: 06/11/2009 1.0.0.0)
Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB  (09/02/2009 1.0.0.1) (Version: 09/02/2009 1.0.0.1)
Windows Live ??? (x32 Version: 15.4.3502.0922)
Windows Live ???? (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Family Safety (Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinFehler 4.0 (x32 Version: 4.0)
WinFlash (x32 Version: 2.32.0)
WinHTTrack Website Copier 3.43-9C (x32 Version: 3.43.9)
WinSpeedUp 3.0 (x32)
Winterberg Configurator Version WEM Confi 8.8 (x32 Version: WEM Confi 8.8)
Wireless Console 3 (x32 Version: 3.0.24)
Works Suite-Betriebssystem-Pack (x32 Version: 3.0.0.0000)
Xilisoft Video Maker 6 (HKCU Version: 6.5.2.0907)
Xvid Video Codec (x32 Version: 1.3.1)
Yontoo 2.053 (Version: 2.053)
Zeta Producer 11 11.2.3 (nur entfernen) (HKCU Version: 11.2.3)
zoneLINK SystemUp 2009 Internet Tuner (x32 Version: 1.5)
Zoo Tycoon 2 - Zoodirektor-Sammlung (x32 Version: 1.00.0000)

==================== Restore Points  =========================

27-06-2013 09:38:40 Installed SpyHunter
27-06-2013 09:41:47 "delta.dll" deinstallieren

==================== Scheduled Tasks (whitelisted) =============

Task: {07078F74-CA74-4A10-86D5-A09B40D0EB99} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {15D6B625-D1DB-439D-9DAC-D8656EFC405E} - System32\Tasks\{7EFE0034-5466-4270-B25A-6AA02014AEC3} => C:\Program Files (x86)\Ahead\Nero StartSmart\NeroStartSmart.exe No File
Task: {181A7D7E-5668-42DF-A9D4-AB282848EFAB} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe [2011-10-03] (ASUS)
Task: {19D1C9EC-8B00-4C90-8B77-86B4515EC2D6} - System32\Tasks\{3C08B103-CE73-4D94-AA54-34DA3CBD549E} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {1AE4138F-5BC5-4DF3-8B55-7DFD81F2051F} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{A30775D2-5461-4C0D-A5A1-0DA34E081542}.exe No File
Task: {1B962729-0931-445B-9BD2-910228854FED} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3025859492-1826490741-3861217815-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {2064FE1E-489E-40B4-80E0-480A0FFC78AD} - System32\Tasks\{B0E5BD34-0074-4D86-9C34-5C6399EDBAF5} => C:\Program Files (x86)\Der Paketdienst\DerPaketdienst.exe No File
Task: {20BED05B-CE00-48C0-A095-FF04F637A7B9} - System32\Tasks\{D0311224-9410-4440-9123-10793A4157A8} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {26DF2776-83D1-4BF9-B25A-C3E5B17329D2} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3025859492-1826490741-3861217815-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-04-16] (RealNetworks, Inc.)
Task: {28E63B86-2F70-47F5-BBCD-52DCA7058F07} - System32\Tasks\ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2011-11-23] (ASUS)
Task: {295E95B3-1607-4961-8D7C-95E0B2CB534F} - System32\Tasks\ASUS Live Update => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2011-11-17] (ASUSTeK Computer Inc.)
Task: {2D1BE826-0FEE-449A-9889-3AF0806DB0A9} - System32\Tasks\EPUpdater => C:\Users\Admin\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-04-07] ()
Task: {32669C18-1B1F-4D84-8DC9-15E4A01A97CB} - System32\Tasks\{6478F502-1F97-40B8-AD77-2844539294EF} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {337FA8B9-C436-4787-8E4E-4B11CD41AE1A} - System32\Tasks\{DF904FA4-4F08-4F03-885B-5FDF220EB900} => C:\Users\Admin\Downloads\ffn_isaver.exe No File
Task: {34EA8CCE-CBB0-4A88-A03C-2522D78B6EE8} - System32\Tasks\{0AA1DFCC-EFD0-4422-9AF7-991C623333FB} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {3FF8DC52-7969-406B-8E5B-2AD34215B3C8} - System32\Tasks\{9E6490F7-1983-49A7-91BD-8ECCBCB0240D} => C:\Users\Admin\Desktop\System\Spiele\Knight rider 2\KR2.exe [2004-10-31] ()
Task: {484DBBB7-A5CB-4F6B-9C7D-32E6CB821B60} - System32\Tasks\{CC1BEF7E-0C7C-4D34-B4F0-CE1E206AC653} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {49A75E7A-15CA-4402-B15D-D5BE51276B01} - System32\Tasks\{189B7997-6138-481A-AB70-5D88EE5EE310} => C:\Program Files (x86)\Ahead\Nero StartSmart\NeroStartSmart.exe No File
Task: {4BCBB227-D90B-4968-B758-EC07632820EA} - System32\Tasks\USBChargerPlus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2011-10-15] (ASUSTek Computer Inc.)
Task: {4C4264DC-54F9-4122-A68A-89DF5AA9F988} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {4D15C3D9-583C-4869-9005-CE7E2E056907} - System32\Tasks\{700095D7-23B3-4500-9308-0288B2F9CAFE} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {516D65F9-A672-4FFC-BE93-19350D3E01AA} - System32\Tasks\{16D291CC-89D2-4ADA-B622-848291C0A784} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {5348A994-FAD1-4581-AA2C-C4E3DD5C74BF} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3025859492-1826490741-3861217815-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {59228EF4-C726-4F30-98A5-C67198D9AAFE} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001Core => C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-30] (Google Inc.)
Task: {598C84DF-1CD5-4D36-832A-C44CE841173F} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {61918864-04DF-49D2-A030-89822D41AF1B} - System32\Tasks\{68ACA6C6-CB1A-4F09-8925-CFE69AB93494} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {63D82A72-5C2A-4DEC-9121-64F4C9048D31} - System32\Tasks\{D3B4AD64-4631-4A50-8C25-E89F2FC5A378} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {6819B303-5473-4B9C-ACB0-5BB6901C74A0} - System32\Tasks\{E9D0A766-E92E-4FC9-9286-7E4D70321FC6} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {6BB68C3E-D0E6-4F9B-A50D-178FE9751D4E} - System32\Tasks\{AFE665BF-E2BF-4231-A0F9-F46C419BD245} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {6DED0103-990F-4F06-83FD-4340BC4B0893} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-22] (ASUS)
Task: {707E97A6-A8AF-4241-BD5E-F18A02B54107} - System32\Tasks\{AABC9C36-F757-4F65-9A8F-5E0C4FE57BA0} => C:\Program Files (x86)\astragon\Kehrmaschinen-Simulator 2011\Bin\Launcher.exe No File
Task: {72385F5B-73E1-4AF4-B0D3-4FDDCA1A93C1} - System32\Tasks\Google Updater and Installer => C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-30] (Google Inc.)
Task: {787CCD11-45F4-4845-BD8C-952FF9494551} - System32\Tasks\GlaryInitialize => C:\Program Files (x86)\Glary Utilities\initialize.exe [2012-07-05] (Glarysoft Ltd)
Task: {7AF9F1C6-268B-4736-9C21-9585FCC05C76} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2010-03-12] (Hewlett-Packard)
Task: {7D80E2B1-0F9B-45DA-BBA5-9AB58B00455A} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3025859492-1826490741-3861217815-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {8C68CC35-5C85-4ECD-A9D0-8C9A39C9758C} - System32\Tasks\{C19292D8-B660-4316-A003-D4BB83BB3218} => C:\Program Files (x86)\astragon\Kehrmaschinen-Simulator 2011\Bin\Launcher.exe No File
Task: {9070B6A0-AA23-4C21-ADA0-87BE4CACE5AA} - System32\Tasks\{88167CD5-268A-413A-8994-BE1CE0ADEB70} => C:\Program Files (x86)\Ubisoft\Funatics\Die Siedler II - Die nächste Generation\bin\S2DNG.exe No File
Task: {932A6E8E-FFD2-4774-B3DC-33C5385C348A} - System32\Tasks\Games\UpdateCheck_S-1-5-21-3025859492-1826490741-3861217815-1001
Task: {960C9274-2261-4EC3-8A75-F054618D02A8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001UA => C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-30] (Google Inc.)
Task: {A054CE36-C43A-41B7-A72F-DF76C11FD535} - System32\Tasks\Physik machen!!!!!!!! => C:\Windows\Installer\{911B0407-6000-11D3-8CFE-0050048383C9}\wordicon.exe [2012-09-20] ()
Task: {B3282299-4C16-42F0-BB70-AED9ED8687AE} - System32\Tasks\{D1DB4C5B-3FA7-4911-9A6A-813A725C3430} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {B4625A58-4064-4BF4-A8B5-98009FD9B8ED} - System32\Tasks\preispilotSWU => C:\Windows\System32\cscript.exe [2009-07-14] (Microsoft Corporation)
Task: {B54096A7-07A8-49F1-841E-84FFAC3B7781} - System32\Tasks\{9AE307A5-AA10-475E-B9E9-DE8F6B5BF138} => C:\Users\Admin\Desktop\System\Spiele\Knight rider 2\KR2.exe [2004-10-31] ()
Task: {B9BFD7E8-3B68-4173-81ED-D05E88644622} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2011-11-16] (ASUS)
Task: {BA0C3AA8-F393-4248-8F97-1EF9DEFC979D} - System32\Tasks\{ED1092E0-0FB3-4D36-9256-84DE53FE014D} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {BA0C6530-9705-4201-8ADD-F87E0377306D} - System32\Tasks\{94A8FE2C-8FB2-4A6D-B29E-E899F248CE32} => C:\Program Files (x86)\Ubisoft\Funatics\Die Siedler II - Die nächste Generation\bin\S2DNG.exe No File
Task: {BEBCCFA0-B188-459F-A085-122360FA9756} - System32\Tasks\{304C0A34-E0BC-429B-A622-E31671BEE438} => C:\Program Files (x86)\EA GAMES\Need for Speed Underground 2\speed2.exe No File
Task: {CB1086C5-7416-4223-BE29-886969E37424} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2013-05-07] (Enigma Software Group USA, LLC.)
Task: {CC21E7BD-9D6E-4807-8EC8-8D99D31307B8} - System32\Tasks\InstallShield Software-Online-Aktualisierungsprogramm => C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-06-14] (InstallShield Software Corporation)
Task: {CC4B204C-B5EE-4ABB-8F29-D8359C0C1FE5} - System32\Tasks\{8156BA6C-0F10-4ED2-A691-3EAE9702BA7C} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {CC6892BB-9F02-4465-AB69-802E05F09770} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {D80CBBB4-0D00-4359-ACC4-14885DF020F9} - System32\Tasks\{2CA502C3-6294-4761-ABD8-414C7CF67E54} => C:\Program Files (x86)\Ubisoft\Funatics\Die Siedler II - Die nächste Generation\bin\S2DNG.exe No File
Task: {D84BB5BA-394B-4AC2-934B-CDDBADBA803F} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3025859492-1826490741-3861217815-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {E13FBE9C-9E69-4D84-8E2A-4F5636B5DCB3} - System32\Tasks\{354628F6-64B9-480D-87E3-2823F9965BD8} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: {E2E0FDB0-FB1A-4853-8D23-2530F981D34F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: {E524F317-6E1D-42F3-BDFE-B221F8E491C5} - System32\Tasks\{09D89357-90F8-477F-82E0-6FDD32266319} => C:\Users\Admin\Desktop\System\Spiele\Knight rider 2\KR2.exe [2004-10-31] ()
Task: {E74B60C7-8353-4F6F-97B0-283C15F510AE} - System32\Tasks\{DD4A68A7-4B60-4BB1-898A-9F120DDB9B29} => C:\Users\Admin\Desktop\System\Programme\HyperCam 3\SMM_HyperCam.exe [2011-11-10] (Solveig Multimedia, Hyperionics)
Task: {E7C9570E-411D-4B25-9A44-96B016857E8C} - System32\Tasks\HPCustParticipation HP Deskjet 2050 J510 series => C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPCustPartic.exe [2010-06-14] (Hewlett-Packard Co.)
Task: {F7BBABE4-D978-4AB5-B894-9DE6BE4F2E7B} - System32\Tasks\{5CE4BF69-82C1-4F8C-8B7E-0C150ECAA8AD} => C:\Program Files (x86)\Ahead\Nero StartSmart\NeroStartSmart.exe No File
Task: {F8FDC989-66FB-4B2A-A308-0F8A04D2D7CA} - System32\Tasks\{95E8E553-5CA4-46EA-A9E3-0B39E3B1CC03} => C:\Users\Admin\Downloads\bdcamsetup.exe No File
Task: {FBB360E3-2707-40D4-B0BC-459CA8DEDA1F} - System32\Tasks\{7CCE9FCA-1EB0-4C38-B8D1-60337A5CFDFB} => C:\Games\icytower151\icytower15.exe No File
Task: {FFA3F17C-1FE9-4149-BEAE-C9D008EA50E5} - System32\Tasks\{6C10FE00-A67B-4F1A-9333-348EED471C96} => C:\Users\Admin\Desktop\Spiele\Simulation\Police\HoG_Police+4trn.exe No File
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{A30775D2-5461-4C0D-A5A1-0DA34E081542}.exe
Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001Core.job => C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001UA.job => C:\Users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: BlueStacks Hypervisor
Description: BlueStacks Hypervisor
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: BstHdDrv
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/27/2013 10:24:05 AM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/27/2013 07:43:47 AM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/26/2013 06:53:27 AM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/25/2013 00:47:54 PM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/25/2013 07:04:42 AM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/24/2013 08:34:25 PM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/24/2013 00:24:26 PM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/24/2013 06:53:32 AM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/23/2013 07:17:16 AM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/22/2013 03:44:15 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (06/27/2013 10:24:17 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
hwinterface
InCDPass
sfdrv01a
sfsync04

Error: (06/27/2013 10:24:03 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mobile Partner. OUC" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (06/27/2013 10:24:03 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Mobile Partner. OUC erreicht.

Error: (06/27/2013 10:23:49 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Log Rotator Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error: (06/27/2013 10:23:49 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BlueStacks Hypervisor" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3

Error: (06/27/2013 10:23:46 AM) (Source: BugCheck) (User: )
Description: 0x0000009f (0x0000000000000004, 0x0000000000000258, 0xfffffa8003fb6040, 0xfffff80004e1e510)C:\Windows\MEMORY.DMP062713-33150-01

Error: (06/27/2013 10:23:33 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\InCDPass.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (06/27/2013 10:23:20 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\InCDPass.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (06/27/2013 10:23:16 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\hwinterface.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (06/27/2013 10:23:16 AM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\InCDPass.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.


Microsoft Office Sessions:
=========================
Error: (06/27/2013 10:24:05 AM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/27/2013 07:43:47 AM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/26/2013 06:53:27 AM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/25/2013 00:47:54 PM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/25/2013 07:04:42 AM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/24/2013 08:34:25 PM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/24/2013 00:24:26 PM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/24/2013 06:53:32 AM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/23/2013 07:17:16 AM) (Source: Service1)(User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (06/22/2013 03:44:15 PM) (Source: SideBySide)(User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{3DC873BB-FFE3-46BF-9701-26B9AE371F9F}\recordingmanager.exe


CodeIntegrity Errors:
===================================
  Date: 2013-06-21 16:26:41.920
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-21 16:26:41.880
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-21 16:25:53.197
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-21 16:25:53.150
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-21 16:25:48.321
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-21 16:25:48.290
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-21 16:22:31.605
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-21 16:22:31.559
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-21 16:14:00.507
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-21 16:14:00.476
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info ===========================

Percentage of memory in use: 61%
Total physical RAM: 3560.85 MB
Available physical RAM: 1354.29 MB
Total Pagefile: 7119.89 MB
Available Pagefile: 4347.39 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:128.18 GB) (Free:10.16 GB) NTFS (Disk=0 Partition=2) ==>[Drive with boot components (obtained from BCD)]
Drive d: (DATA) (Fixed) (Total:144.91 GB) (Free:10.57 GB) NTFS (Disk=0 Partition=3)
Drive f: (Mobile Partner) (CDROM) (Total:0.03 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 125FC5E1)
Partition 1: (Not Active) - (Size=25 GB) - (Type=1C)
Partition 2: (Active) - (Size=128 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=145 GB) - (Type=07 NTFS)

==================== End Of Log ============================


Code 1=FRST
Code 2=Addition

Bei mir öffneten sich dann aber nochmal 2 Logfiles, nochmal FRST und Addition. Sind von einer Minute später obwohl ich nur ein mal auf Scan geklickt habe. Soll ich die auch posten?

schrauber 27.06.2013 11:23
Nee past schon :)
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

R4M1N 27.06.2013 11:48
Code:
ComboFix 13-06-27.01 - Admin 27.06.2013  12:32:22.1.2 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.3561.1862 [GMT 2:00]
ausgeführt von:: d:\eigene datein\Downloads\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\FullRemove.exe
c:\users\Admin\AppData\Local\{D7F92D9D-FA52-4C12-8EB4-0B108C358CC7}
c:\users\Admin\AppData\Local\assembly\tmp
c:\windows\IsUn0407.exe
c:\windows\SysWow64\frapsvid.dll
D:\install.exe
.
.
(((((((((((((((((((((((  Dateien erstellt von 2013-05-27 bis 2013-06-27  ))))))))))))))))))))))))))))))
.
.
2013-06-27 10:44 . 2013-06-27 10:44        --------        d-----w-        c:\users\Default\AppData\Local\temp
2013-06-27 10:44 . 2013-06-27 10:44        --------        d-----w-        c:\users\Administrator\AppData\Local\temp
2013-06-27 09:59 . 2013-06-27 09:59        --------        dc----w-        C:\FRST
2013-06-27 09:40 . 2013-06-27 09:40        --------        d-----w-        c:\program files\Enigma Software Group
2013-06-27 09:38 . 2013-06-27 10:37        --------        d-----w-        c:\programdata\SecTaskMan
2013-06-27 09:38 . 2013-06-27 09:38        --------        d-----w-        c:\program files (x86)\Security Task Manager
2013-06-27 09:38 . 2013-06-27 10:33        --------        d-----w-        c:\windows\E63D89610BA94CF39E94407ACA42846C.TMP
2013-06-27 06:18 . 2013-06-27 06:18        --------        d-----w-        c:\users\Admin\AppData\Roaming\Malwarebytes
2013-06-27 06:18 . 2013-06-27 06:18        --------        d-----w-        c:\programdata\Malwarebytes
2013-06-27 06:18 . 2013-06-27 06:18        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware
2013-06-27 06:18 . 2013-04-04 12:50        25928        ----a-w-        c:\windows\system32\drivers\mbam.sys
2013-06-25 13:21 . 2013-06-25 13:21        --------        dc----w-        C:\tmp
2013-06-23 13:42 . 2013-06-23 16:55        --------        d-----w-        c:\users\Admin\AppData\Local\FT Software Updates
2013-06-22 15:48 . 2013-06-22 15:50        --------        d-----w-        c:\program files (x86)\Euro Truck Simulator 2
2013-06-20 09:33 . 2013-06-12 19:47        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-06-19 14:13 . 2013-06-19 14:17        --------        d-----w-        c:\program files (x86)\Der Bahngigant
2013-06-19 05:47 . 2013-06-27 09:38        --------        d-----w-        c:\users\Admin\AppData\Roaming\Skype
2013-06-19 05:47 . 2013-06-19 05:47        --------        d-----w-        c:\program files (x86)\Common Files\Skype
2013-06-19 05:47 . 2013-06-19 05:47        --------        d-----r-        c:\program files (x86)\Skype
2013-06-19 05:47 . 2013-06-19 05:47        --------        d-----w-        c:\programdata\Skype
2013-06-17 12:03 . 2013-06-17 12:03        --------        d-----w-        c:\users\Admin\AppData\Roaming\dvdcss
2013-06-16 14:26 . 2013-06-16 14:26        --------        d-----w-        c:\users\Admin\AppData\Roaming\RealNetworks
2013-06-16 14:25 . 2013-06-16 14:25        --------        d-----w-        c:\program files (x86)\RealNetworks
2013-06-16 14:25 . 2013-06-16 14:25        --------        d-----w-        c:\programdata\RealNetworks
2013-06-16 14:25 . 2013-06-16 14:25        --------        d-----w-        c:\program files (x86)\Common Files\xing shared
2013-06-16 12:29 . 2013-06-16 12:29        --------        d-----w-        c:\users\Admin\AppData\Roaming\IrfanView
2013-06-16 12:29 . 2013-06-16 12:29        --------        d-----w-        c:\program files (x86)\IrfanView
2013-06-16 12:29 . 2013-06-16 12:29        --------        dc----w-        C:\Multimedia Files
2013-06-16 12:28 . 2013-06-16 12:29        --------        d-----w-        c:\program files (x86)\Microsoft GIF Animator
2013-06-10 13:40 . 2013-06-10 13:41        --------        d-----w-        c:\users\Admin\AppData\Roaming\DesktopIconForAmazon
2013-06-08 12:38 . 2013-06-08 12:39        --------        d-----w-        c:\program files (x86)\Rescue2013
2013-06-03 18:11 . 2013-06-24 13:37        --------        dc----w-        C:\Fraps
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-27 05:44 . 2012-06-09 08:50        45056        ----a-w-        c:\windows\SysWow64\acovcnt.exe
2013-06-21 14:27 . 2012-07-03 15:05        88480        ----a-w-        c:\windows\system32\drivers\atksgt.sys
2013-06-21 14:27 . 2012-07-03 15:04        46400        ----a-w-        c:\windows\system32\drivers\lirsgt.sys
2013-06-16 14:25 . 2012-06-30 13:52        499712        ----a-w-        c:\windows\SysWow64\msvcp71.dll
2013-06-16 14:25 . 2012-06-30 13:52        348160        ----a-w-        c:\windows\SysWow64\msvcr71.dll
2013-06-12 19:48 . 2013-05-19 12:00        867240        ----a-w-        c:\windows\SysWow64\npDeployJava1.dll
2013-06-12 19:48 . 2013-05-19 12:00        789416        ----a-w-        c:\windows\SysWow64\deployJava1.dll
2013-05-10 10:44 . 2013-05-10 10:44        230352        ----a-w-        c:\windows\system32\drivers\truecrypt.sys
2013-05-08 14:17 . 2013-05-08 14:17        495104        ----a-w-        c:\windows\SysWow64\sqlite3.dll
2013-05-02 05:25 . 2011-03-29 01:36        22240        ----a-w-        c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-04-11 01:18 . 2013-04-11 01:18        384800        ----a-w-        c:\windows\system32\drivers\avgtdia.sys
2013-04-02 14:09 . 2013-04-02 14:09        4550656        ----a-w-        c:\windows\SysWow64\GPhotos.scr
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"="c:\progra~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-06-14 221184]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2011-09-13 2317312]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2011-07-21 5716608]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-10-07 170624]
"ASUSWebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe" [2011-07-29 737104]
"ASUSPRP"="c:\program files (x86)\ASUS\APRP\APRP.EXE" [2011-10-19 3331312]
"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-11-19 2598520]
"ROCCAT Pyra Mouse"="c:\program files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.EXE" [2010-09-07 532480]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" [2013-06-16 295512]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AsusVibeLauncher.lnk - c:\program files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe /start [2011-10-19 549040]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Nuance PDF Reader-reminder"="c:\program files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "c:\programdata\Nuance\PDF Reader\Ereg\Ereg.ini"
"HP Software Update"=c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe
.
R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\System32\drivers\sfdrv01a.sys;c:\windows\SYSNATIVE\drivers\sfdrv01a.sys [x]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe [x]
R2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
R2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Freemake Improver;Freemake Improver;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [x]
R2 JetDrive WindowsClosingService;JetDrive WindowsClosingService;c:\windows\System32\WindowsClosingService;c:\windows\SYSNATIVE\WindowsClosingService [x]
R2 Mobile Partner. RunOuc;Mobile Partner. OUC;c:\program files (x86)\Mobile Partner\UpdateDog\ouc.exe;c:\program files (x86)\Mobile Partner\UpdateDog\ouc.exe [x]
R3 AppBoosterService;AppBooster Service;c:\program files (x86)\Common Files\PCSUITE Common\BoostService.exe;c:\program files (x86)\Common Files\PCSUITE Common\BoostService.exe [x]
R3 atillk64;atillk64;c:\program files (x86)\AMD\System Monitor\atillk64.sys;c:\program files (x86)\AMD\System Monitor\atillk64.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ew_hwusbdev.sys [x]
R3 InputFilter_Hid_FlexDef2b;Siliten HID Devices(FlexDef2b) Driver Service;c:\windows\system32\DRIVERS\InputFilter_FlexDef2b.sys;c:\windows\SYSNATIVE\DRIVERS\InputFilter_FlexDef2b.sys [x]
R3 jetdrive;jddrv;c:\windows\system32\DRIVERS\jddrv.sys;c:\windows\SYSNATIVE\DRIVERS\jddrv.sys [x]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
R3 RivaTuner64;RivaTuner64;c:\program files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys;c:\program files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys;c:\windows\SYSNATIVE\DRIVERS\SiSG664.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
R4 Yontoo Desktop Updater;Yontoo Desktop Updater;c:\program files (x86)\Yontoo\Y2Desktop.Updater.exe;c:\program files (x86)\Yontoo\Y2Desktop.Updater.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe;c:\windows\SYSNATIVE\FBAgent.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 HWDeviceService64.exe;HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe [x]
S2 IBUpdaterService;Updater Service;c:\programdata\IBUpdaterService\ibsvc.exe;c:\programdata\IBUpdaterService\ibsvc.exe [x]
S2 ogmservice;Online Games Manager;c:\program files (x86)\Online Games Manager\ogmservice.exe;c:\program files (x86)\Online Games Manager\ogmservice.exe [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 WLCleanRAM;WinLube memory clean up scheduler;c:\program files (x86)\LOADSTREET\WinSpeedUp 3\CleanRAMService.exe;c:\program files (x86)\LOADSTREET\WinSpeedUp 3\CleanRAMService.exe [x]
S3 AiCharger;ASUS Charger Driver;c:\windows\system32\DRIVERS\AiCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AiCharger.sys [x]
S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys;c:\windows\SYSNATIVE\DRIVERS\amdhub30.sys [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]
S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys;c:\windows\SYSNATIVE\DRIVERS\amdxhc.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfiltera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsfiltera.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 ewusbmbb;HUAWEI USB-WWAN miniport;c:\windows\system32\DRIVERS\ewusbwwan.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbwwan.sys [x]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jubusenum.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfswin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfswin7.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaywin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaywin7.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirwin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirwin7.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvolwin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvolwin7.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - avgtp
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-27 c:\windows\Tasks\GlaryInitialize.job
- c:\program files (x86)\Glary Utilities\initialize.exe [2012-08-05 20:16]
.
2013-06-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001Core.job
- c:\users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-30 13:41]
.
2013-06-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001UA.job
- c:\users\Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2012-06-30 13:41]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2011-05-25 07:09        227840        ----a-w-        c:\program files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2011-05-25 07:09        227840        ----a-w-        c:\program files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-10-14 2278504]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.google.com/
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://asus.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Alles mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlall.htm
IE: Auswahl mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlselected.htm
IE: Datei mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dllink.htm
IE: Videos mit FDM herunterladen - file://c:\program files (x86)\Free Download Manager\dlfvideo.htm
IE: {{27A5FCCD-399F-48AF-A7E6-95FDC5DC05DD} - c:\program files (x86)\FreshDevices\FreshDownload\fd.exe
TCP: Interfaces\{577A6469-348A-400E-9ADF-55F0368C09DF}: NameServer = 193.189.244.206 193.189.244.225
TCP: Interfaces\{9C7178F1-B9A8-4E94-A311-55779E9F4971}: NameServer = 193.189.244.225 193.189.244.206
TCP: Interfaces\{CB56EDD6-BF4B-46E0-814C-E753482E405A}: NameServer = 193.189.244.225 193.189.244.206
TCP: Interfaces\{E557479C-4C23-4962-99CE-F58DAB4A570E}: NameServer = 193.189.244.206 193.189.244.225
TCP: Interfaces\{F3541CCE-820B-4A60-BF64-A21C3CC64E0A}: NameServer = 193.189.244.225 193.189.244.206
TCP: Interfaces\{F3C9A186-484B-4B09-BACB-011EEF623785}: NameServer = 193.189.244.206 193.189.244.225
TCP: Interfaces\{F58468F4-4D78-4FBB-8E05-6DBD6146FDE5}: NameServer = 193.189.244.225 193.189.244.206
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
BHO-{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - c:\program files (x86)\Yontoo\YontooIEClient.dll
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-ASUS_Screensaver - c:\windows\system32\ASUS_Screensaver.scr
AddRemove-S3 - c:\windows\IsUn0407.exe
AddRemove-S4Uninst - c:\windows\IsUn0407.exe
AddRemove-Shockwave - c:\windows\System32\Macromed\SHOCKW~1\UNWISE.EXE
AddRemove-RESCUE 2013 DEMO - c:\program files (x86)\Rescue2013Demo\uninstall.exe
AddRemove-WinDirStat - c:\program files (x86)\WinDirStat\Uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\JetDrive WindowsClosingService]
"ImagePath"="c:\windows\System32\WindowsClosingService"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3025859492-1826490741-3861217815-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:73,05,6c,81,08,2d,43,5f,79,25,7e,23,c5,08,34,c4,d8,50,af,cb,6f,a3,63,
  e9,b9,b6,c8,f5,35,7f,fe,a0,c8,37,5a,79,3c,73,7b,e8,c4,44,5c,7c,33,c9,8e,68,\
"??"=hex:8d,8e,5c,32,e2,6c,6d,40,35,3e,da,8e,c8,4a,a1,b4
.
[HKEY_USERS\S-1-5-21-3025859492-1826490741-3861217815-1001\Software\SecuROM\License information*]
"datasecu"=hex:73,c5,76,3e,04,99,ff,27,d3,3a,69,87,71,a5,da,ad,46,3c,14,f0,d7,
  1a,e8,24,65,56,27,2d,90,71,d1,3a,be,0f,b9,ab,b0,e4,18,a6,66,2e,55,51,65,86,\
"rkeysecu"=hex:73,4f,05,b6,1c,ae,1b,17,45,89,c5,a5,3a,0c,53,fd
.
[HKEY_LOCAL_MACHINE\SOFTWARE\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
  00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0011\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-06-27  12:47:22
ComboFix-quarantined-files.txt  2013-06-27 10:47
.
Vor Suchlauf: 24 Verzeichnis(se), 10.522.636.288 Bytes frei
Nach Suchlauf: 28 Verzeichnis(se), 10.381.258.752 Bytes frei
.
- - End Of File - - B44AB27B9B29BF87726F7CC1F64F188E
A36C5E4F47E84449FF07ED3517B43A31

schrauber 27.06.2013 12:20
Combofix-Skript
WARNUNG für die MITLESER:
Folgendes ComboFix Skript ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!

  • Lösche die vorhandene Combofix.exe von deinem Desktop und lade das Programm von folgenden Download-Spiegel neu herunter: Link
  • Speichere es erneut auf dem Desktop (nicht woanders hin, das ist wichtig)!
  • Drücke die Windows + R Taste --> notepad (hinein schreiben) --> OK
  • Kopiere nun den Text aus der folgenden Codebox komplett in das leere Textdokument.
    Code:
    Driver::
    IBUpdaterService
    File::
    c:\programdata\IBUpdaterService\ibsvc.exe
  • Speichere dies als CFScript.txt auf deinem Desktop.
  • Wichtig: Stelle deine Anti Viren Software temporär ab. Dies kann ComboFix nämlich bei der Arbeit behindern.
    Danach wieder anstellen nicht vergessen!
  • Schließe alle laufenden Programme damit ComboFix ungehindert arbeiten kann.
  • Ziehe CFScript.txt in die ComboFix.exe wie in diesem Bild:
  • Mache nichts am Computer, bewege nicht die Maus über das ComboFix-Fenster oder klicke in dieses hinein. Dies kann dazu führen, dass ComboFix sich aufhängt.
  • Wenn ComboFix fertig ist wird es ein Log erstellen: C:\ComboFix.txt
    Bitte füge es hier als Antwort (in CODE-Tags mit dem #-Button des Editors) ein.

Hinweis:
Suspect:: und Collect::
Falls im Skript diese Anweisungen enthalten sind, sollen Dateien zur Analyse eingeschickt werden. Es erscheint eine Message-Box, nachdem Combofix fertig ist. Klicke OK und folge den Aufforderungen/Anweisungen, um die Dateien hochzuladen. Teile mir unbedingt mit, ob der Upload geklappt hat!



Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


R4M1N 27.06.2013 15:19
Also ich habe Alles gemacht, bis zu der Aktion wo ich die txt Datei in Combofix ziehen sollte...

Ich habe die Datei reingezogen. Alles funktionierte. Der PC startete sich neu. So als aber nach 40 Minuten sich das Fenster immernoch nicht geschlossn hat, habe ich den PC neugestartet. Soll ich das jetzt nochmal machen? weil ich hab nirgens noch ein Logfile gefunden.. Oder soll ich jetzt noch die letzten 2 Schritte ausführen, also das mit AdwCleaner und Junkware Removal Tool?

schrauber 27.06.2013 16:18
Mach mit dem rest weiter.

R4M1N 27.06.2013 16:52
AdwCleaner:

Code:
# AdwCleaner v2.303 - Datei am 27/06/2013 um 17:32:26 erstellt
# Aktualisiert am 08/06/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Admin - RAMIN
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Admin\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : Yontoo Desktop Updater

***** [Dateien / Ordner] *****

Ordner Gelöscht : C:\Program Files (x86)\AVG Secure Search
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\ProgramData\~0
Ordner Gelöscht : C:\ProgramData\APN
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\IBUpdaterService
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\ProgramData\Trymedia
Ordner Gelöscht : C:\Users\Admin\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
Ordner Gelöscht : C:\Users\Admin\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Admin\AppData\Local\PutLockerDownloader
Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\DesktopIconForAmazon
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\file scout
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\SpeedAnalysis2
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\Yontoo

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ImInstaller
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Freeze.com
Schlüssel Gelöscht : HKLM\Software\InstallIQ
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Updater Service
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16457

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Google Chrome v27.0.1453.116

Datei : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [7332 octets] - [27/06/2013 17:32:26]

########## EOF - C:\AdwCleaner[S1].txt - [7392 octets] ##########
JRT.txt:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by Admin on 27.06.2013 at 17:46:33,91
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{00604C7E-94B1-4425-9C35-D6BFCFDF2B9C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{006E2D01-8D93-46D6-BA27-930455F95B7A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{007060FE-2CDF-4795-9F50-A49DFE800FC3}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{00DF4EB0-0CC4-4B26-A11A-63FFF7D22219}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{019EBD01-7930-48F0-B8FC-100F6BC71192}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0207CA50-3248-48E4-B404-289760094599}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{02DA6A51-15F0-4A1F-8252-D2BBDA23095D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{03CF4F4F-C3D3-4321-9294-7E2AE01BFCB9}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{03F903C7-956D-455C-ACC6-D0B09A6E1048}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0415D29E-B810-4148-8854-041D9BE2C900}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0425F133-CB63-480A-AB01-8DCA184E7E06}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{04B518C2-5F9D-4CDC-A0B4-9E322C203AAD}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0561E923-04EC-4D6E-BC14-A92F6AB1072B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0621266B-136B-4F95-BBE9-8E5482E762FD}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{075E6984-BF77-4B5D-BF75-D6BE18DFB884}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0763B30E-B182-4CB1-B1B4-6E1663E87516}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0782875C-5B6B-42CE-9E89-8608073B56FE}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{083D75DC-B717-4F18-8D82-C70E3EB86C3C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0899BECC-7B7A-4A29-A921-15B047006B3E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{08C4008D-0522-487F-80EA-2716C086E46E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{09037821-B5B3-4415-BC58-B1EBBBF6211C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{090FB847-6097-49BE-BE53-74FB37C755C6}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{09125A6B-CB5A-4300-BAAE-1530CB35BC1A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{098B2053-E3F7-4F54-B989-FADE975E75A5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0A5F8629-D0CD-434C-B344-816C316BF97C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0CBF8C06-D4BF-4D49-B5F1-D95C93BCA737}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0DD166DF-67A7-42E2-A7E5-70010D130963}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0E2B48DA-301E-415E-9C46-3585ECFD7A03}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{10B671B7-72E6-4543-9B35-A82DAF3850EE}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1191598A-F2C0-4C17-B008-402709E728C6}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{11CFD17F-1DDA-4F0D-B6C0-90AC0A98FA9E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{120B9620-FEF7-4B85-8E3E-535BE45A8E6F}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{12FE78F6-09E7-4F71-AA1F-B7EA53E44564}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1365AFA5-5F18-4E58-88EB-2BFBF9805EE6}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1398D75F-3095-437F-AACA-643443812CAC}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1490ADCC-857D-4564-94F4-A57B1A2828CD}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{154B3055-C88E-430B-9AF2-D1E301673102}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{15B492AE-AA1D-47B6-BF58-CEAE3B0F1229}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{15F5C912-A7FF-45DB-9696-785DBAF20E69}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{161E475C-E660-47BF-87B5-8BA1075212EC}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{16E5350A-4639-4CBE-95E0-8FCF6A214AA9}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{17ACD66E-A1E0-4FF6-A7BC-4EB681CC96B2}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{17DF8754-5BF7-435F-ADC8-ABFE08009442}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{17E39024-226D-4DFC-B1EE-F8826893B01A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{19ED05A6-F0A6-401C-AE90-2E363932EBC0}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1A36BFEF-A329-40A2-AB27-598D27BDCCE1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1A750E6B-4906-4BFC-AE0D-616C4E295701}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1AA158EE-16D3-4D52-AEA0-3C2D44EA1780}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1B94C798-AE9B-4134-98B6-51D098A91BD8}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1C22C3AA-4EF9-4356-AA5E-52FF2133A70E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1C642CBA-1FCE-40AA-AEDE-8122491CBB3A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1DE9A604-1B49-4AA5-B7FF-A1E241FC201F}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1E244460-1E97-4934-BECB-F8165D2D93A5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1ECAB877-B6FA-4F25-9361-A5D42A427B8D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1F03C339-6663-45D5-97C9-5C60AAEF417A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1FDA0301-76FC-43B5-9368-DAC03CC706B9}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{20371B76-2D10-4C18-BA5C-181A4C6E577E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{20C04A51-B2D7-4F6B-88EE-28F1108799E4}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{20CE281B-D0E9-4208-890A-E9E5E3C07B8A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{219540F9-45A1-487E-8469-000643F97AB5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{220D6BC6-9AE7-45D0-99C1-8E13D962BC1B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{23BD217B-5085-494F-8271-AA8F4F421BBB}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{258C238E-3569-4A77-82EA-09F297F141D5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{25D2734A-B93E-4A2B-9C47-D012DC5B1C60}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{26405B4B-1201-42C0-B0A7-86F537AB132E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{26859934-89F2-44F3-B4F5-2808215E64DA}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{27759020-23D9-43BD-BECB-4DDD5C800095}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{280CB5BE-63C1-49EA-8657-7A038D323B36}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{28E819D8-C006-4D72-B789-D18F5BAE5F84}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{291E91B2-58E8-445E-9BDA-75E6B08B0D5E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2B44CE5A-FDE1-4CC3-A805-EB3633F35FB0}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2CAEC91E-ACC9-4AC7-9F7E-6335C8F564BC}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2DB654F0-21CC-43E7-A03B-671C9EF71058}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2E3C4064-4B7A-4EFD-B24B-104A76E31B78}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2E8A0DCA-271D-4FEE-93BB-677EEADBDA11}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2FB794B6-09D5-4E13-810D-520FA430BD7E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{302D4769-BAAD-4DE6-9F30-F518B907A3F1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3078B909-B240-44E5-A9BC-2D6F3DBB9F96}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{310565AB-60A5-47B7-B78D-A43C0DA4E9B8}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{317CD56C-2C50-458C-B444-CEFF1D5655CD}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{319E5BF2-C2CF-4EE5-9644-9769A92CAFAD}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3318F4F5-F012-4C77-9B1E-E83CED36F412}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{343F4519-8171-4EAB-AF0B-E041E47C1796}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{347ED595-0D2A-4E88-AC88-C3CBE1B557E8}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{34F87B67-A479-407B-AA98-2E1063D686C4}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{353DF0AC-4917-42E2-92C6-417BFEE63455}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{35865977-04B9-44CA-9AA2-1EDCC21AC78C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{35A29869-A18C-4378-AAA9-CB5BB2E786F4}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3608E85C-1FFA-453F-99AD-E228711D3B8D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{378170B1-F4F9-4FAF-91BF-56530BA803E1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3854F98A-B6A5-4C8F-ADE5-33FC4D7A48A9}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{38F5C2D1-50C4-427A-A222-23CBECCA7EF6}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{393FA888-06AB-4B59-8708-C97ACE630EB3}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{39EA66D8-C8DA-4BA5-A9FF-2959F23E4E72}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3A819DA7-0B16-4308-A3FE-A6575F1837F0}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3BFB08F3-3A67-4361-96DD-8B56319E5E46}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3C4C0FBC-5E34-4BB4-8710-9E39CA3F8CA5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3D4A6545-C0A4-4C4D-8C54-FB7454062AEF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3E271160-8DB1-44DF-BA25-88E11B9699B9}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3EEF9C47-AA70-407B-83DE-5E9C5952479C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3F5D56D6-C818-4212-8BA1-19A58DEB301B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3FCA0642-1F05-42F7-B417-3C45D116459A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{416AC801-8C71-4C4A-B49C-34159B0871F2}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{418A7A54-28CA-4AD9-818D-C9E38B87E3F7}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{426A0414-993A-4B58-843A-AC84C67744C5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{427914DA-E756-4276-BFCA-5F91486816FA}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{42AE7486-97B8-4D5D-91B6-46035A65E332}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{438512F0-C3B9-4FB4-8C9A-508506CEB70A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4454F4C6-3F81-401A-A05F-AB8AC8341E38}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{44EA813C-360B-41B3-B3F6-EEBDB6A8B2AF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{46FF6F6E-5803-425F-B8C8-BDD744B8702D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{47197A54-AC47-4A10-A152-CB18A1FD9157}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{487C84E5-1480-4166-9947-D16810B63234}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4882D883-704D-4DBE-B6A6-16EDD10EEAE7}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{49139EAF-A2F6-43C1-A64D-91EF71466237}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4990258C-07F3-49A6-B706-5DDAE27F1A76}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{49AACE91-83E1-477C-8FB1-A4988BF87066}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4A5E9943-26E4-4D96-BB0E-41F76FB665D1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4E3DA469-FF19-4E39-BA66-44ED41211F50}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4F04F9BC-B08C-4233-BD06-30DB416357CA}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{50A5B5BD-AC1C-4753-9881-025D149748ED}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{50C50448-F8B3-459F-990B-CDE7AAA7B6CE}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{51F87920-1FD0-4355-AE78-3211A5B9EDF0}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{52656667-F9F3-4DF8-8CD0-F839889FAB4B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{52B6B4FF-92ED-41C5-8318-4349FB1158E7}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{52EF0C5D-95A4-4B15-AE75-805B76B64580}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{539F41FC-48FE-42B5-AC3A-29653891F86F}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{53A3F1D4-452E-4A51-A368-D57B00CBF839}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{54B3A109-FB5B-4565-9A0A-EF0148A54F6A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{556D4756-70BF-4C13-9558-F80D35037AC0}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{55F0F610-406F-4C20-95A5-AC99F0FF8E70}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{58887255-6327-4716-B3C3-7195C48189A5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{599115B8-B188-4E60-B84A-DE2159DCAAF8}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{59CDC8C2-4A13-4326-B7B6-A8AC0D25C221}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{59ECDF58-6DB5-43B2-B603-75F26EA4CF73}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5A65E0E3-E75A-4DC8-835B-2BEEBFDDC4CF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5A8AE451-3952-49A8-AD7A-656B5A18365A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5AAB34CF-416C-41DC-988C-F3362764C5B5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5B475157-5874-428D-89F9-105CC2A5DA9E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5B5C7616-023D-4C52-8645-4BE7307E93AF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5B6CB987-A651-41FB-AC87-0C270CA6E1CF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5BDE95CC-D724-41B4-A78E-68E88A230158}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5C94D7B6-87E9-49B6-87DF-74D34D63D5A0}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5D020E05-BB38-43E8-8850-F956BF3FCCF3}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5DA55A8C-C505-44C6-81A7-6FFBFA25E31A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5E6F5F29-3F0C-4990-82CE-881F1F4D1C8F}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5EF103D1-2179-4774-900C-AAF1609EC8F1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6001288A-5DB0-4EB3-ABAA-D491F94A34C9}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{602A9484-138C-4E9B-8122-6F61A120CAB6}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{62086F35-49BB-4682-A8CD-BF54BFEA6A00}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{62A9C001-90C5-44DA-8FAE-4C59812AE436}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{62E71BCB-C5F5-4BD5-AB98-47898AE367CE}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{62E7D981-A12C-4BD8-894B-3EEC1EC96FCC}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{62F00203-0462-4341-B0D9-BC2AE390B33B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{647D9D1C-5482-46EF-AF6F-0D880D80A48B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6512113A-7E4F-47EE-BBB8-B78588DEB1D0}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{65761799-38C1-4140-AEEF-80CC55D679F4}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6594C818-CD62-4220-BB9A-21CBFB89BE76}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{671A1597-4051-4F5C-9A00-C76BDA405EFE}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{691275F4-35EA-401F-8C13-E2C8BB41B932}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{69A0C6FB-AC06-4F1D-BD7B-A62D869EB6EE}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{69ECCB1F-90E7-4512-8BF1-980FF42A7B99}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6A37C799-8E78-47A3-8CB3-B5E492B3FA20}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6CE5563F-0409-486B-8A25-1A59BE36E33D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6D8CF961-1AC5-4F3F-92CB-387A4C6F5D44}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6E17A069-5336-4AA8-AF39-5E3FDB3B371E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6F373D85-76E2-46C3-8B98-8400C19A5FBD}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{707C43C0-C029-4AFE-A84B-04A6878DC511}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{707FCCCB-7875-4441-B24B-45301BBB1229}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{708B1D8F-75A7-4099-9A0E-3798394036BE}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7288DF30-1C15-4EE0-B0F8-8E0E6492AB5C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{72A44D20-16C1-4E6B-9E78-C5BFB55AC225}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{736D3E93-2848-417E-B9B4-28982D0B1CD4}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{73B0B245-2BA8-415E-B08D-00E98E5D2B57}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{73F39A05-9E32-4B30-8816-A77C8DDCE7CA}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{741502FA-B419-45C1-A6FE-CCDBBD7734B7}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{750D52A6-1D91-4AAF-9C9A-2EB5CD995DCE}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{75B0A894-2493-4C77-AAC3-E7D1A1DB290D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{768B1663-DF14-423C-A29D-13733C20A936}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{76A537B7-E325-462F-BC5E-9FD52A477BE1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{770F2360-E0FD-4232-8005-767633619D06}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{77636400-4CD3-4F71-B9F6-2755979FAA9E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7800D5FB-0FED-43D0-9E3D-81A4E6556F62}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{785A7F69-4BDB-45E5-89B1-ED8074E180AB}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{78C3228C-5872-48B2-B323-62137CDD5882}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7ADE8258-EBDC-4332-A352-04D8D5317B40}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7B0B591B-4149-4422-A5EF-FEB794162072}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7B1D4113-0EBA-4F54-A3E6-56ED31E8B895}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7C978B2A-DD73-4E3B-9262-6C708ADB9DCF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7D479097-67C3-48B4-93F7-291CE444E087}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7DD0A430-F006-4494-AC07-761983D397D3}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7E194937-AC61-4F1A-A612-7F0D8649506D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7F062405-3FC5-4C83-8F50-F42249209E51}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7FC06A06-6313-4D6D-A970-A8F92AB94CFF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7FCF357A-2B67-4950-A289-DA9B2572202E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8036D139-545A-4635-871C-CDE87E3F3CF3}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{81276DE7-A3CE-4AFD-9976-F9A1A55C62D3}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8172463F-1501-4BEC-8F4B-C9E1BCA5D41C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{81B56A00-7646-48C6-9E87-206B631BE873}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{822E036B-C021-4852-9BFC-D8D4151A4B5E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{82CCBE37-7ACD-425A-8667-8314A9394587}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{82FCF808-903F-4B0E-B111-E99790A8A0BD}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{836FD85D-43C9-41AF-BA8A-DC97290F3216}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{844A830D-CAD3-4DA6-9E11-0599D864CF0A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{84CA5362-9B4E-403C-8593-9EF60D57EF9A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{84E165BA-1E47-4041-BF87-B83E85382143}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{853FF0C2-B04E-4AD2-BAE7-8B336055683A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{860C1C2B-3A0D-4C09-9522-4C0E1C96829F}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8800064D-F44C-4AD4-82A9-F89D03142C10}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8AEEF93C-A3D0-4E00-8631-7432B668E26D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8C351C8C-913C-4D6A-A636-F8CC65802E71}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8C560A9E-9E50-4BA9-A5FF-C1F820A80FB1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8C645A9B-37CD-4C35-AFA1-212F34622DA5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8C8BEEA3-D487-43DB-8EEB-30385C1A47AB}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8D71AAC5-7208-4F87-AA0F-2A4CB9131A4C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8E87CC64-6723-44FE-95C6-F095004109C1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8ED8AF3D-4243-4075-99B0-8BD75BB83874}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8FB2AA62-6E58-4949-90EE-DEEF831746C7}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8FBEF96E-F948-4084-9FF7-83D1893A4BEF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8FC28957-0871-423B-9B57-E219FC1DE5D4}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9058294A-1485-4D64-B4C9-10A16E7084F6}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9243354D-E438-426F-9171-629F43B84B6F}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{939EC0D5-CD28-4E93-ACC1-EA2D5C33C263}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{93ECB55A-F260-42CB-8952-2A2F2A8CE8CF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{94CE915E-28F5-41EA-93E1-9B2F2B42E733}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9554E210-28CB-44F4-8BEE-F6897B998B0A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{96888CC5-8293-4D92-875F-73FB6A654A20}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{96DDB9D4-36A8-4195-B4DC-5EDCBCC38266}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{990C83CB-2A6C-447A-8EFD-089D26620E3E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9992CB59-6B54-44CB-A611-1D61D192AE92}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9C61F555-5E3B-4225-80E1-9515F7132921}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9CB7CC5E-50CE-47DE-A6F7-72C99413A9BB}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9DD203A4-5426-494E-838E-AA87A28BDEC7}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9E0D3CD8-40BD-4902-8D49-70DD4113695A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9E55D4A0-DE33-4A1C-9472-1618F4FE4290}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9ECC6993-1FDB-49C1-AF30-F9B6A386BBE2}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9FB98BAF-DCFE-4251-9952-3C9528C5789D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A15FC4EB-BDDE-49E4-A6D8-59D1F1EEBDDE}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A1607076-E032-4076-9CF2-72DC274317B0}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A1BFC66D-C964-4353-8AC6-AB3809413CA1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A24965F7-C873-4EF3-806C-778224280887}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A24DEF5B-37FD-4E98-9245-006351579E90}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A3970B6C-5256-44C1-9398-97DB4EA5A8CC}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A5DC033A-F022-45A3-8955-C4985AEC330F}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A7B6BC6B-FE0C-48AB-BBDB-3226C69E6937}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A90A0DAD-09E5-4476-8975-A7DD2578CB4A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A9A43EDC-CB47-4EBE-BA27-1688E6CC883B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AA1776A6-EFE0-42C3-89F2-7D0C4A0614B6}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AA786547-791B-4B41-86CE-2032A91693F5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AA8FA0E5-8BF4-4AD0-BE9E-8E5BC8B5A132}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{ACFD8E1E-968C-40AE-89AC-19CF2C1D47D9}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AD547284-E286-42A9-9130-73E616F6EC91}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AE9A89F2-F324-4A86-B480-A30FADEB806D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AF846108-964C-48C4-ADDE-AE4742D20268}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AFA425D8-0D48-4E7F-8DC8-C96F0EE978D1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B0B165E6-E6E9-4111-A188-9C1589354510}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B1325429-6E08-4FEB-85E4-F74B5EE95131}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B1DC31F9-5E81-4A18-AF3F-94933431D8A0}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B2111427-BB57-4B3B-8B91-C9F96F106438}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B230339A-5407-46C2-9E01-67ED876FC22B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B2E9ECCA-4495-4E67-8D3A-4392BFF6FE6C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B37EE605-9F4C-4BB0-A1DB-268DE3E31FF8}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B4A62799-C5A2-4EEF-B65B-F866513C948C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B4D3EE83-4C95-4D1F-AA0E-2A1DE8ECBF5C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B6CC180B-1FC8-4852-BF2D-531236FF601E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B887E52F-0381-46CB-8177-39DC1687B848}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B9F7F3F4-DDA1-496C-86E5-D4FFB36294D4}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BB68CC3A-8C33-41D4-B077-A22444A9C773}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BB80250D-39FE-4DED-B845-B947CF418820}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BC475488-D222-49C1-9C88-DA397A89BD33}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BD66863A-67B4-4917-B5E8-C80F66AD3E6F}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BEAC586F-E288-489A-B772-DB412AE40F27}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BF80ABAC-5BCB-478A-9EFF-D6021B9E69BF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BF83BA1D-2109-4734-8B3D-1E6FFAD107EE}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C0BBFAB2-29A1-4ADA-959A-179DD2089667}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C165F348-41F3-49E2-BC68-F2BF0C8457BD}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C232A61F-CD8D-4006-B30E-4D8EBF82245A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C2DA5721-FA21-486D-A2AC-365FDBDAE159}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C33F2DA6-1B4A-4509-924E-D987339C4816}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C3EE865D-65B8-4AFD-8529-CD5E30982988}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C4DED12B-785B-41BA-96A6-DCD5D2411673}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C549E23A-91BD-49CC-A168-342CB4876BF7}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C58E1266-F300-4927-ACAB-B976B0D4B94F}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C6E3E840-4FC0-4BA3-A586-EA82D8EF31D1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C712E83F-478C-431D-910D-CD22FF7F3250}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C8312CD7-E2D3-48DE-855A-AB0A646CB48E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C8917016-986F-4B46-973F-C5B1DE8E827E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C8BBE685-8C96-433C-B1E6-BB71599E28A0}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C901C82D-8B87-4C05-A78F-7B563C38A785}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C9034C20-3116-48E5-A035-793B47C306BA}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C947EF4A-82A5-40DC-B8F8-6E27A5D60E92}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CAA2A4DD-3C42-48D1-8336-4014A889A4D5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CB75EEE4-B662-4A35-A2BC-02C529610DDF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CB7D6A87-5726-44CF-8D7D-54A4DC89A779}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CB97103F-9DEF-42B3-ABB0-0DCA2099A70A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CBA2CA77-E298-48FA-B6B4-DDF0B3578F30}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CC85BFB7-0D39-4428-AFDB-D79DFBF5F4D6}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CC98C5F9-E9BE-467B-8566-0C4E6F841E5C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CCFB6434-7C74-4CB1-84E5-0358065059E6}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CD7516EB-A479-475C-BC07-65F4F9536445}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CDD72577-EC3A-4E96-83B9-5FB66024A911}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CDE129D9-E521-42AD-BFDD-56D9801B27F8}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CDE75E9D-6B63-4DE6-B38E-B3DF8240305A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CEF3BC59-4F65-4E5A-BD11-4506E9ADD3C9}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CF32B590-9EE0-4A3A-9FBF-0D3EF05F2183}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CFE6E86A-8EAD-4E78-A539-ABF44BD12152}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CFF0C93F-2DEA-4CD8-AE4E-6EB0B2F1EE7F}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D06087D4-7A23-4269-89EC-B9DAE1FD8EB5}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D0DBB1D7-40E6-4405-BF5D-31E8BE17BB86}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D2EEA737-11FA-4C68-9A10-85D5C5CE9C73}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D3B9106A-BA55-4571-88C1-5735E2003393}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D469AD15-9770-44A9-849A-2D0EFD622F60}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D4A4FA49-BF60-4513-905C-958E8E0F4620}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D4A7D136-488E-453A-8AB6-A2C378F8F03E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D595C5C4-A29E-4D86-8D66-A31CF562BC8C}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D5CC6B3E-1BB5-4BDC-B50E-B1364EBD2A15}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D6CCC5B1-C457-4298-97D8-FEE53EBB8F94}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D744F06E-FF84-4109-AF90-E2DCF656436D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D7CFFCEF-BC05-40F4-9B05-D594D6D44C38}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D7EAAD6D-DCAD-447B-9B33-F4B795AD15CA}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D80261C5-F305-424F-BB5F-6F3C9E384590}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D896D976-7AEA-46AF-907A-F1D44E28CE3B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D9AEC28B-79BC-4739-85A4-EBA53B157E96}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DA24A7B7-A8DF-4758-8589-12BF3709E1D3}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DB05BD32-D5D4-4881-93E7-B0286C0775D0}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DBC18FBF-690D-4635-9E85-30C947CE458F}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DBFD64E7-57C2-4B53-9A0E-A96DB4DE9025}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DD56EDBD-8FC2-4201-A5F9-5328A12C1D42}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DE6A5E22-B8B3-48FC-B842-7AE41C46171E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DEA9FA60-DEB1-4EE0-AC5B-1E673AB2CCDD}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DEFCF917-33D4-4EAD-AB37-8C15493A0351}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DF6F39BE-08AB-43D3-9907-ED9C01C42C85}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DFC9A91E-7C61-40D1-9DCD-F222283B9E2B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DFE41E4A-9999-4F34-9A4B-A557C67ACBA2}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E16AC3F6-9C59-4995-A573-7EB48211AF05}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E195BCA1-49BA-4B51-ADB6-0AD0305BB03E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E1C5424D-5A35-4668-9BB1-1852D8D5C498}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E1EB47BD-96CF-426E-A658-6A624B81251B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E2CB7ACA-71BD-4F50-AFC7-A0962E14026D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E42BB136-0AEB-4DB8-B461-400609DDDF4A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E42C9882-51BF-436C-9753-E05A4D13A685}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E48614D6-6F81-4CA6-9E86-696A6D3AC9D3}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E5B471A2-64D6-4BF7-9AAC-060974D44891}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E6E2C5C6-30E7-4E1C-BF99-1DEFDB5ABB20}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E6EEAEB6-913C-445D-A924-01547309F441}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E8284A63-DD37-4F1A-AFEC-0F9B541AC0AF}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E8CBF75A-DAE8-43C4-BC99-13B565EE07A7}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E8E7B87F-E4BC-4EEC-A6AC-76E5197BE851}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E99309F9-4331-4C9A-BE91-680764BF3280}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E9AB5025-1463-4DD3-AC02-2F62850815A9}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EB236629-697A-4BB0-AB6E-F31BB826F5B7}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EB489020-ABCA-429E-AF49-8A212981004A}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EB9DD48F-C970-4D61-82F8-B8FC61699E86}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EBAE04CB-2B1B-4E74-A5B4-AE59343C4D0D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EC4642A4-67AE-43FE-88AC-E7B31D96ADDC}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{ECF1162B-6188-4720-AA1D-07BB42DDBE9E}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EDED7AE1-7E98-494F-9218-2376C3A05DF1}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EF38EF97-85EE-44F1-9F17-56B7C2971F18}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F05C173E-9F1D-4DD8-87A8-6FC2FF28B8E6}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F11A9F92-01C0-4DC6-B0F7-BDFACC1FC0AE}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F11D4629-295F-436B-9B5E-E7F8D375A083}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F3065388-8E0B-49F7-8AA9-C074DFA46D4D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F3131A55-A6E2-40AA-A455-5BF20AE38A62}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F3A93FA9-8F93-4ECF-BCC0-BAF630018099}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F439BBAA-0535-4EE7-936A-17F22A07E0C2}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F6B5A559-8F32-44E0-ABE7-A8DFB7129016}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F7AC96B0-6AD6-4249-9C6B-99B60759FFDB}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F7DA447A-D967-4FA5-982B-F0680F7A158D}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F9F9893C-739A-4981-896A-BFC24576C181}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FA94B604-954D-49AE-93BA-741FE1445D4B}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FB6AE66D-C1AC-44A5-9C07-290B6C3F3A07}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FBA3C724-0B47-4513-9E8B-DE7C435E1532}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FC24763E-1E13-48F0-BAC7-085F4488A332}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FDB95D36-7B4B-4D6D-9DDA-4ABD9A773DB2}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FDFF8855-6934-49D2-9F9E-BAC74C5871CB}
Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FE7FF1A0-4E03-4763-A054-459B3AD91346}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.06.2013 at 17:51:18,88
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

schrauber 27.06.2013 19:16

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST Log, dann entfernen wir die Reste :)

R4M1N 28.06.2013 06:53
Auch SD Karten? Und die Sticks die ich noch nie an dem PC genutzt habe, nicht oder?

schrauber 28.06.2013 08:12
Wie du wilst. Das steht da nur weil es eine Chance ist mal alles durch zu scannen :)

R4M1N 28.06.2013 08:44
Ja, ok. Aber ich habe mal eine Frage, ist es normal das das jetzt schon 1:40 Stunden dauert und erst bei 24 Prozent ist?! Wenn das so weitergeht wäre ich ja erst in 5-6 Stunden fertig mit dem Scan??!!!

schrauber 28.06.2013 09:32
Kann schon hinkommen :)

R4M1N 28.06.2013 10:49
Logfile Nr. 1:
Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=08cc6f4620569547b38be1f2cfc0713b
# engine=14179
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-06-28 09:38:50
# local_time=2013-06-28 11:38:50 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1035 16777213 100 97 72909 59588234 0 0
# compatibility_mode=5893 16776574 100 94 14931718 124042180 0 0
# scanned=398972
# found=0
# cleaned=0
# scan_time=13117
Code:
Results of screen317's Security Check version 0.99.68 
 Windows 7 Service Pack 1 x64 (UAC is enabled) 
 Internet Explorer 10 
``````````````Antivirus/Firewall Check:``````````````
AVG Anti-Virus Free Edition 2012 
 Antivirus up to date!  (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
 Malwarebytes Anti-Malware Version 1.75.0.1300 
 CCleaner (remove only) 
 EasyCleaner   
 Java 7 Update 25 
 Adobe Flash Player 10 Flash Player out of Date!
 Adobe Reader XI 
 Google Chrome 27.0.1453.110 
 Google Chrome 27.0.1453.116 
````````Process Check: objlist.exe by Laurent```````` 
 AVG avgwdsvc.exe
 AVG avgtray.exe
 Mobile Partner OnlineUpdate ouc.exe 
 Online Games Manager ogmservice.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-06-2013 02
Ran by Admin (administrator) on 28-06-2013 12:01:38
Running from D:\Eigene Datein\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(ASUSTeK Computer Inc.) C:\Windows\system32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
() C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Script Soft eK) C:\Program Files (x86)\LOADSTREET\WinSpeedUp 3\CleanRAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Windows\system32\UI0Detect.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(ASUS) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Windows\AsScrPro.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
() C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgtray.exe
(ROCCAT) C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2012\avgcfgex.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe
(Maple Studio) C:\Users\Admin\AppData\Local\MapleStudio\ChromePlus\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe [2587944 2010-12-31] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /SF3  [2278504 2011-10-14] (Realtek Semiconductor)
HKCU\...\Run: [ISUSPM Startup] c:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup [221184 2004-06-14] (InstallShield Software Corporation)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2317312 2011-09-13] (ASUS)
HKLM-x32\...\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5716608 2011-07-22] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-08] (ASUS)
HKLM-x32\...\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe /S [737104 2011-07-29] (ecareme)
HKLM-x32\...\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE" [3331312 2011-10-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe" [2598520 2012-11-19] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [ROCCAT Pyra Mouse] "C:\Program Files (x86)\ROCCAT\Pyra Mouse\PyraMonitor.EXE" [532480 2010-09-07] (ROCCAT)
HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [TkBellExe] "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot [295512 2013-06-16] (RealNetworks, Inc.)
HKU\Administrator\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe"  /PROMPT /CMPID=JUNE2013_TB [x]
Startup: C:\ProgramData\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.)
BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /sync /restart

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiea.dll (AVG Technologies CZ, s.r.o.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: No Name - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -  No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - No Name - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} -  No File
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler: msdaipp - No CLSID Value -
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler-x32: msdaipp - No CLSID Value -
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\..\Interfaces\{577A6469-348A-400E-9ADF-55F0368C09DF}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{9C7178F1-B9A8-4E94-A311-55779E9F4971}: [NameServer]193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{CB56EDD6-BF4B-46E0-814C-E753482E405A}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{E557479C-4C23-4962-99CE-F58DAB4A570E}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{F3541CCE-820B-4A60-BF64-A21C3CC64E0A}: [NameServer]193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{F3C9A186-484B-4B09-BACB-011EEF623785}: [NameServer]193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{F58468F4-4D78-4FBB-8E05-6DBD6146FDE5}: [NameServer]193.189.244.225 193.189.244.206

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\extensions
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\info@d.sl
FF Extension: Speed Analysis 2 - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\speedanalysis02@SpeedAnalysis.com
FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Extensions\sz@mast.er

Chrome:
=======

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2011-11-02] (Advanced Micro Devices, Inc.)
S3 AppBoosterService; C:\Program Files (x86)\Common Files\PCSUITE Common\BoostService.exe [1556360 2012-01-09] (MARKEMENT)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [5174392 2012-11-02] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [193288 2012-02-14] (AVG Technologies CZ, s.r.o.)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [100864 2012-09-07] (Freemake)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [239968 2012-07-04] ()
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [559168 2013-03-12] (RealNetworks, Inc.)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] ()
R2 WLCleanRAM; C:\Program Files (x86)\LOADSTREET\WinSpeedUp 3\CleanRAMService.exe [20480 2007-12-04] (Script Soft eK)
S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [x]

==================== Drivers (Whitelisted) ====================

R3 AiCharger; C:\Windows\SysWow64\DRIVERS\AiCharger.sys [17152 2011-10-15] (ASUSTek Computer Inc.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [88480 2013-06-21] ()
R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [127328 2012-12-10] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\avgidsfiltera.sys [29776 2011-12-23] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [28480 2012-04-19] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [307040 2012-11-08] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [47696 2011-12-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [36944 2012-01-31] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [384800 2013-04-11] (AVG Technologies CZ, s.r.o.)
R3 BlueletAudio; C:\Windows\System32\DRIVERS\blueletaudio.sys [38160 2007-05-11] (IVT Corporation.)
R3 BlueletSCOAudio; C:\Windows\System32\DRIVERS\BlueletSCOAudio.sys [37648 2007-03-05] (IVT Corporation.)
R3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [25360 2007-03-05] (IVT Corporation.)
S3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [44688 2007-05-09] (IVT Corporation.)
R0 BTHidEnum; C:\Windows\System32\Drivers\vbtenum.sys [24976 2007-03-05] (IVT Corporation.)
R0 BTHidMgr; C:\Windows\System32\Drivers\BTHidMgr.sys [49680 2007-03-05] (IVT Corporation.)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-19] (Siliten)
S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37464 2010-09-07] (Abelssoft GmbH)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [46400 2013-06-21] ()
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [12288 2009-08-22] ()
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [12288 2009-08-22] ()
S0 sfdrv01a; C:\Windows\System32\drivers\sfdrv01a.sys [77688 2006-07-05] (Protection Technology (StarForce))
S0 sfsync04; C:\Windows\System32\drivers\sfsync04.sys [78208 2006-08-11] (Protection Technology (StarForce))
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [765288 2011-10-01] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [268648 2011-10-01] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [25960 2011-10-01] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [22376 2011-10-01] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [828912 2012-12-22] ()
R3 VComm; C:\Windows\System32\DRIVERS\VComm.sys [47120 2007-03-05] (IVT Corporation.)
R3 VcommMgr; C:\Windows\System32\Drivers\VcommMgr.sys [63248 2007-03-05] (IVT Corporation.)
S3 atillk64; \??\C:\Program Files (x86)\AMD\System Monitor\atillk64.sys [x]
S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]
S1 hwinterface; System32\Drivers\hwinterface.sys [x]
S4 InCDfs; No ImagePath
S1 InCDPass; System32\DRIVERS\InCDPass.sys [x]
U1 InCDrec; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-28 11:51 - 2013-06-28 11:52 - 00890988 ____A C:\Users\Admin\Desktop\SecurityCheck.exe
2013-06-28 10:06 - 2013-06-28 10:44 - 00000000 ____D C:\Users\Admin\AppData\Roaming\SpinTires
2013-06-28 10:06 - 2013-06-28 10:06 - 00003087 ____A C:\Users\Admin\Desktop\SpinTires Tech Demo (June 060613).lnk
2013-06-28 10:06 - 2013-06-28 10:06 - 00000000 ____D C:\Program Files (x86)\Oovee
2013-06-28 09:51 - 2013-06-28 09:51 - 00000000 ____D C:\Users\Admin\AppData\Local\{F024AB6A-C7EC-4B55-9BF0-46000850E43E}
2013-06-28 07:56 - 2013-06-28 07:57 - 02347384 ____A (ESET) C:\Users\Admin\Desktop\esetsmartinstaller_enu.exe
2013-06-27 21:29 - 2013-06-27 21:29 - 00000000 ____D C:\Users\Admin\AppData\Local\{EA243C44-F176-4188-92E8-1C2A7BB9494D}
2013-06-27 17:51 - 2013-06-27 17:51 - 00040483 ____A C:\Users\Admin\Desktop\JRT.txt
2013-06-27 17:46 - 2013-06-27 17:46 - 00000000 ___DC C:\JRT
2013-06-27 17:46 - 2013-06-27 17:46 - 00000000 ____D C:\Windows\ERUNT
2013-06-27 17:45 - 2013-06-27 17:45 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Admin\Desktop\JRT.exe
2013-06-27 17:32 - 2013-06-27 17:32 - 00007443 ___AC C:\AdwCleaner[S1].txt
2013-06-27 17:31 - 2013-06-27 17:31 - 00648201 ____A C:\Users\Admin\Desktop\adwcleaner.exe
2013-06-27 15:50 - 2013-06-27 16:07 - 00000000 __SDC C:\ComboFix
2013-06-27 15:47 - 2013-06-27 15:48 - 05083698 ____R (Swearware) C:\Users\Admin\Desktop\ComboFix.exe
2013-06-27 12:50 - 2013-06-27 16:06 - 00001566 ____A C:\Windows\PFRO.log
2013-06-27 12:29 - 2013-06-27 15:52 - 00000000 __ADC C:\Qoobox
2013-06-27 12:29 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-06-27 12:29 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-06-27 12:29 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-06-27 12:29 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-06-27 12:29 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-06-27 12:29 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-06-27 12:29 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-06-27 12:29 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-06-27 12:28 - 2013-06-27 16:04 - 00000000 ____D C:\Windows\erdnt
2013-06-27 11:59 - 2013-06-27 11:59 - 00000000 ___DC C:\FRST
2013-06-27 11:40 - 2013-06-27 11:40 - 00000000 ___AC C:\autoexec.bat
2013-06-27 11:40 - 2013-06-27 11:40 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-06-27 11:38 - 2013-06-27 12:37 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-06-27 11:38 - 2013-06-27 12:33 - 00000000 ____D C:\Windows\E63D89610BA94CF39E94407ACA42846C.TMP
2013-06-27 11:38 - 2013-06-27 11:38 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-06-27 10:45 - 2013-06-27 15:45 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner
2013-06-27 10:23 - 2013-06-27 10:23 - 00481464 ____A C:\Windows\Minidump\062713-33150-01.dmp
2013-06-27 08:24 - 2013-06-27 08:24 - 00377856 ____A C:\Users\Admin\Desktop\gmer_2.1.19163.exe
2013-06-27 08:24 - 2013-06-27 08:24 - 00050477 ____A C:\Users\Admin\Desktop\Defogger.exe
2013-06-27 08:22 - 2013-06-27 08:22 - 00602112 ____A (OldTimer Tools) C:\Users\Admin\Desktop\OTL.exe
2013-06-27 08:18 - 2013-06-27 08:18 - 00001075 ____A C:\Users\Admin\Desktop\Malwarebytes Anti-Malware.lnk
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Malwarebytes
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-27 08:18 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-06-26 06:53 - 2013-06-28 07:18 - 00000560 ____A C:\Windows\setupact.log
2013-06-26 06:53 - 2013-06-26 06:53 - 00000000 ____A C:\Windows\setuperr.log
2013-06-25 15:21 - 2013-06-25 15:21 - 00000000 ___DC C:\tmp
2013-06-24 16:38 - 2013-06-27 11:08 - 00000000 ____D C:\Users\Admin\Desktop\em bl mo
2013-06-23 15:42 - 2013-06-23 18:55 - 00000000 ____D C:\Users\Admin\AppData\Local\FT Software Updates
2013-06-22 17:48 - 2013-06-22 17:50 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2
2013-06-20 11:33 - 2013-06-12 21:47 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-20 11:33 - 2013-06-12 21:43 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-20 11:33 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-20 11:33 - 2013-06-12 21:43 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-20 11:32 - 2013-06-20 11:33 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-19 16:13 - 2013-06-19 16:17 - 00000000 ____D C:\Program Files (x86)\Der Bahngigant
2013-06-19 07:47 - 2013-06-28 11:31 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype
2013-06-19 07:47 - 2013-06-19 07:47 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-19 07:47 - 2013-06-19 07:47 - 00000000 ____D C:\ProgramData\Skype
2013-06-17 14:03 - 2013-06-17 14:03 - 00000000 ____D C:\Users\Admin\AppData\Roaming\dvdcss
2013-06-16 16:26 - 2013-06-16 16:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\RealNetworks
2013-06-16 16:25 - 2013-06-16 16:25 - 00272896 ____A (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00201872 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00006656 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00005632 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00000000 ____D C:\ProgramData\RealNetworks
2013-06-16 16:25 - 2013-06-16 16:25 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ___DC C:\Multimedia Files
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ____D C:\Users\Admin\AppData\Roaming\IrfanView
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-06-16 14:28 - 2013-06-16 14:29 - 00000000 ____D C:\Program Files (x86)\Microsoft GIF Animator
2013-06-08 14:38 - 2013-06-08 14:39 - 00000000 ____D C:\Program Files (x86)\Rescue2013
2013-06-03 20:11 - 2013-06-24 15:37 - 00000000 ___DC C:\Fraps
2013-06-03 20:11 - 2013-06-03 20:11 - 00000568 ____A C:\Users\Administrator\Desktop\Fraps.lnk
2013-06-03 20:11 - 2013-06-03 20:11 - 00000568 ____A C:\Users\Admin\Desktop\Fraps.lnk

==================== One Month Modified Files and Folders =======

2013-06-28 11:52 - 2013-06-28 11:51 - 00890988 ____A C:\Users\Admin\Desktop\SecurityCheck.exe
2013-06-28 11:31 - 2013-06-19 07:47 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype
2013-06-28 11:08 - 2012-06-30 15:42 - 00001120 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001UA.job
2013-06-28 10:44 - 2013-06-28 10:06 - 00000000 ____D C:\Users\Admin\AppData\Roaming\SpinTires
2013-06-28 10:06 - 2013-06-28 10:06 - 00003087 ____A C:\Users\Admin\Desktop\SpinTires Tech Demo (June 060613).lnk
2013-06-28 10:06 - 2013-06-28 10:06 - 00000000 ____D C:\Program Files (x86)\Oovee
2013-06-28 09:51 - 2013-06-28 09:51 - 00000000 ____D C:\Users\Admin\AppData\Local\{F024AB6A-C7EC-4B55-9BF0-46000850E43E}
2013-06-28 09:08 - 2012-06-30 15:42 - 00001068 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3025859492-1826490741-3861217815-1001Core.job
2013-06-28 07:59 - 2011-02-19 06:24 - 00719560 ____A C:\Windows\System32\perfh007.dat
2013-06-28 07:59 - 2011-02-19 06:24 - 00157202 ____A C:\Windows\System32\perfc007.dat
2013-06-28 07:59 - 2009-07-14 07:13 - 01674918 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-28 07:57 - 2013-06-28 07:56 - 02347384 ____A (ESET) C:\Users\Admin\Desktop\esetsmartinstaller_enu.exe
2013-06-28 07:47 - 2012-01-12 15:48 - 01633859 ____A C:\Windows\WindowsUpdate.log
2013-06-28 07:26 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-28 07:26 - 2009-07-14 06:45 - 00009696 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-28 07:19 - 2012-08-05 20:34 - 00000326 ____A C:\Windows\Tasks\GlaryInitialize.job
2013-06-28 07:19 - 2012-06-09 10:50 - 00045056 ____A C:\Windows\SysWOW64\acovcnt.exe
2013-06-28 07:18 - 2013-06-26 06:53 - 00000560 ____A C:\Windows\setupact.log
2013-06-28 07:18 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-27 21:29 - 2013-06-27 21:29 - 00000000 ____D C:\Users\Admin\AppData\Local\{EA243C44-F176-4188-92E8-1C2A7BB9494D}
2013-06-27 17:51 - 2013-06-27 17:51 - 00040483 ____A C:\Users\Admin\Desktop\JRT.txt
2013-06-27 17:46 - 2013-06-27 17:46 - 00000000 ___DC C:\JRT
2013-06-27 17:46 - 2013-06-27 17:46 - 00000000 ____D C:\Windows\ERUNT
2013-06-27 17:45 - 2013-06-27 17:45 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Admin\Desktop\JRT.exe
2013-06-27 17:32 - 2013-06-27 17:32 - 00007443 ___AC C:\AdwCleaner[S1].txt
2013-06-27 17:31 - 2013-06-27 17:31 - 00648201 ____A C:\Users\Admin\Desktop\adwcleaner.exe
2013-06-27 16:07 - 2013-06-27 15:50 - 00000000 __SDC C:\ComboFix
2013-06-27 16:06 - 2013-06-27 12:50 - 00001566 ____A C:\Windows\PFRO.log
2013-06-27 16:05 - 2009-07-14 04:34 - 89391104 ____A C:\Windows\System32\config\SOFTWARE.bak
2013-06-27 16:05 - 2009-07-14 04:34 - 27787264 ____A C:\Windows\System32\config\SYSTEM.bak
2013-06-27 16:05 - 2009-07-14 04:34 - 01048576 ____A C:\Windows\System32\config\DEFAULT.bak
2013-06-27 16:05 - 2009-07-14 04:34 - 00262144 ____A C:\Windows\System32\config\SECURITY.bak
2013-06-27 16:05 - 2009-07-14 04:34 - 00262144 ____A C:\Windows\System32\config\SAM.bak
2013-06-27 16:04 - 2013-06-27 12:28 - 00000000 ____D C:\Windows\erdnt
2013-06-27 15:52 - 2013-06-27 12:29 - 00000000 __ADC C:\Qoobox
2013-06-27 15:48 - 2013-06-27 15:47 - 05083698 ____R (Swearware) C:\Users\Admin\Desktop\ComboFix.exe
2013-06-27 15:45 - 2013-06-27 10:45 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner
2013-06-27 15:23 - 2012-12-22 11:52 - 00000000 ____D C:\Windows\System32\Drivers\AVG
2013-06-27 12:49 - 2012-06-28 08:43 - 00000000 ____D C:\Users\Admin\AppData\Roaming\SoftGrid Client
2013-06-27 12:44 - 2009-07-14 04:34 - 00000215 ___AC C:\Windows\system.ini
2013-06-27 12:37 - 2013-06-27 11:38 - 00000000 ____D C:\ProgramData\SecTaskMan
2013-06-27 12:33 - 2013-06-27 11:38 - 00000000 ____D C:\Windows\E63D89610BA94CF39E94407ACA42846C.TMP
2013-06-27 11:59 - 2013-06-27 11:59 - 00000000 ___DC C:\FRST
2013-06-27 11:40 - 2013-06-27 11:40 - 00000000 ___AC C:\autoexec.bat
2013-06-27 11:40 - 2013-06-27 11:40 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-06-27 11:38 - 2013-06-27 11:38 - 00000000 ____D C:\Program Files (x86)\Security Task Manager
2013-06-27 11:08 - 2013-06-24 16:38 - 00000000 ____D C:\Users\Admin\Desktop\em bl mo
2013-06-27 10:23 - 2013-06-27 10:23 - 00481464 ____A C:\Windows\Minidump\062713-33150-01.dmp
2013-06-27 10:23 - 2012-11-25 10:48 - 00000000 ____D C:\Windows\Minidump
2013-06-27 08:24 - 2013-06-27 08:24 - 00377856 ____A C:\Users\Admin\Desktop\gmer_2.1.19163.exe
2013-06-27 08:24 - 2013-06-27 08:24 - 00050477 ____A C:\Users\Admin\Desktop\Defogger.exe
2013-06-27 08:22 - 2013-06-27 08:22 - 00602112 ____A (OldTimer Tools) C:\Users\Admin\Desktop\OTL.exe
2013-06-27 08:18 - 2013-06-27 08:18 - 00001075 ____A C:\Users\Admin\Desktop\Malwarebytes Anti-Malware.lnk
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Malwarebytes
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-27 08:18 - 2013-06-27 08:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-06-27 07:44 - 2012-01-12 16:04 - 00001702 ____A C:\Windows\System32\ServiceFilter.ini
2013-06-26 06:53 - 2013-06-26 06:53 - 00000000 ____A C:\Windows\setuperr.log
2013-06-25 15:21 - 2013-06-25 15:21 - 00000000 ___DC C:\tmp
2013-06-25 15:03 - 2012-06-09 10:49 - 00000000 ____D C:\users\Admin
2013-06-24 15:37 - 2013-06-03 20:11 - 00000000 ___DC C:\Fraps
2013-06-24 07:11 - 2012-06-28 08:16 - 00000000 ___RD C:\Users\Admin\Desktop\Spiele
2013-06-23 18:55 - 2013-06-23 15:42 - 00000000 ____D C:\Users\Admin\AppData\Local\FT Software Updates
2013-06-22 19:11 - 2013-04-15 18:09 - 00000000 ____D C:\Users\Admin\AppData\Local\FT_Software
2013-06-22 17:50 - 2013-06-22 17:48 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2
2013-06-22 14:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF
2013-06-22 13:15 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-06-21 17:42 - 2012-07-03 16:50 - 00000000 ____D C:\Program Files (x86)\Anno 1701
2013-06-21 16:27 - 2012-07-03 17:05 - 00088480 ____A C:\Windows\System32\Drivers\atksgt.sys
2013-06-21 16:27 - 2012-07-03 17:04 - 00046400 ____A C:\Windows\System32\Drivers\lirsgt.sys
2013-06-21 16:15 - 2012-01-12 15:54 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-06-21 14:36 - 2012-06-28 08:52 - 00000000 ____D C:\ProgramData\DatacardService
2013-06-21 14:27 - 2013-01-13 10:33 - 00007598 ____A C:\Users\Admin\AppData\Local\resmon.resmoncfg
2013-06-20 11:33 - 2013-06-20 11:32 - 00004944 ____A C:\Windows\SysWOW64\jupdate-1.7.0_25-b16.log
2013-06-20 11:33 - 2013-05-19 14:00 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-19 16:17 - 2013-06-19 16:13 - 00000000 ____D C:\Program Files (x86)\Der Bahngigant
2013-06-19 13:56 - 2013-04-15 18:10 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2013-06-19 08:06 - 2012-06-28 08:16 - 00000000 ___RD C:\Users\Admin\Desktop\Büro
2013-06-19 07:47 - 2013-06-19 07:47 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-06-19 07:47 - 2013-06-19 07:47 - 00000000 ____D C:\ProgramData\Skype
2013-06-18 14:46 - 2012-08-05 20:34 - 00000000 ____D C:\Program Files\Blender Foundation
2013-06-17 14:04 - 2013-05-08 17:15 - 00000000 ____D C:\Users\Admin\AppData\Roaming\vlc
2013-06-17 14:03 - 2013-06-17 14:03 - 00000000 ____D C:\Users\Admin\AppData\Roaming\dvdcss
2013-06-17 14:02 - 2012-06-30 15:50 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Real
2013-06-16 16:30 - 2012-06-30 16:38 - 00000000 ____D C:\ProgramData\Real
2013-06-16 16:26 - 2013-06-16 16:26 - 00000000 ____D C:\Users\Admin\AppData\Roaming\RealNetworks
2013-06-16 16:25 - 2013-06-16 16:25 - 00272896 ____A (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00201872 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00006656 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00005632 ____A (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-06-16 16:25 - 2013-06-16 16:25 - 00000000 ____D C:\ProgramData\RealNetworks
2013-06-16 16:25 - 2013-06-16 16:25 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-06-16 16:25 - 2012-06-30 15:52 - 00499712 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-06-16 16:25 - 2012-06-30 15:52 - 00348160 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-06-16 16:25 - 2012-06-30 15:51 - 00000000 ____D C:\Program Files (x86)\Real
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ___DC C:\Multimedia Files
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ____D C:\Users\Admin\AppData\Roaming\IrfanView
2013-06-16 14:29 - 2013-06-16 14:29 - 00000000 ____D C:\Program Files (x86)\IrfanView
2013-06-16 14:29 - 2013-06-16 14:28 - 00000000 ____D C:\Program Files (x86)\Microsoft GIF Animator
2013-06-14 06:52 - 2012-09-30 11:52 - 00000000 ___RD C:\Users\Admin\Desktop\Ordner für alles mögliche
2013-06-12 21:48 - 2013-05-19 14:00 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-12 21:48 - 2013-05-19 14:00 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-12 21:47 - 2013-06-20 11:33 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-12 21:43 - 2013-06-20 11:33 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-12 21:43 - 2013-06-20 11:33 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-12 21:43 - 2013-06-20 11:33 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-10 20:25 - 2012-10-03 08:46 - 00000000 ____D C:\Program Files (x86)\BitZipper
2013-06-08 14:39 - 2013-06-08 14:38 - 00000000 ____D C:\Program Files (x86)\Rescue2013
2013-06-03 20:11 - 2013-06-03 20:11 - 00000568 ____A C:\Users\Administrator\Desktop\Fraps.lnk
2013-06-03 20:11 - 2013-06-03 20:11 - 00000568 ____A C:\Users\Admin\Desktop\Fraps.lnk

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-23 16:34

==================== End Of Log ============================
--- --- ---


So alles weg?


Alle Zeitangaben in WEZ +1. Es ist jetzt 10:09 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131