Trojaner-Board - Netbook infiziert?

Danke, hier die beiden Dateien:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-10-2013

Ran by tatjana (administrator) on TEA-PC on 22-10-2013 13:00:37

Running from C:\Users\tatjana\Desktop

Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

() C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

() C:\windows\SYSTEM32\Rezip.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\windows\system32\igfxsrvc.exe

(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Intel Corporation) C:\windows\system32\igfxext.exe

(Intel Corporation) C:\windows\system32\igfxsrvc.exe

(Microsoft Corporation) C:\windows\system32\wuauclt.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7625248 2009-07-21] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1541416 2009-07-15] (Synaptics Incorporated)

HKLM\...\Run: [UCam_Menu] - C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)

HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [38872 2012-07-31] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-11] (Adobe Systems Incorporated)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-07] (Avira Operations GmbH & Co. KG)

HKLM\...\Runonce: [FILE PATH-1] - CMD.EXE /C COPY "C:\PROGRA~1\COLORP~1\SETUP\SETUP.EXE" "C:\Program Files\InstallShield Installation Information\{A5505456-B9C3-43DA-A588-F6947422C134}"

HKCU\...\Run: [msnmsgr] - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-06-28] (Google Inc.)

HKCU\...\Run: [Google Update] - C:\Users\tatjana\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-06-11] (Google Inc.)

MountPoints2: E - E:\setup_vmc_lite.exe /checkApplicationPresence

MountPoints2: {1ada7cb6-6c09-11df-bcc4-00245438e045} - E:\setup_vmc_lite.exe /checkApplicationPresence

MountPoints2: {c31325b3-6bb6-11df-b9ce-00245438e045} - E:\setup_vmc_lite.exe /checkApplicationPresence

MountPoints2: {c31325cd-6bb6-11df-b9ce-00245438e045} - F:\setup_vmc_lite.exe /checkApplicationPresence

MountPoints2: {d4455ab4-6cba-11df-bc57-00245438e045} - E:\setup_vmc_lite.exe /checkApplicationPresence
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: 192.168.13.100:3128

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.lahr-info.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1064255F6BC8CA01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd

URLSearchHook: softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsof0.dll (Conduit Ltd.)

SearchScopes: HKLM - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2431245

SearchScopes: HKCU - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2431245

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=IEFM1&q={searchTerms}&src={referrer:source?}

SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd

SearchScopes: HKCU - {65701010-EBD6-47BA-B003-5F243C35D064} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=PV&apn_dtid=YYYYYYYYDE&apn_uid=FAA0EA62-249D-475C-8594-78CE3B73AAF7&apn_sauid=69C1BC39-0A9E-4902-83FC-94B8D5140B8C

SearchScopes: HKCU - {8A96AF9E-4074-43b7-BEA3-87217BDA74C8} URL = hxxp://www.searchqu.com/web?src=ieb&q={SearchTerms}

SearchScopes: HKCU - {8B63A8D6-BBED-4341-8867-790E5F524C96} URL = hxxp://mystart.hiyo.com/?search={searchTerms}&loc=ie_search

SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2431245

SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredimail.com/?search={searchTerms}&loc=search_box_im2_test_v2

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO: softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsof0.dll (Conduit Ltd.)

Toolbar: HKLM - softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Program Files\softonic-de3\tbsof0.dll (Conduit Ltd.)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - softonic-de3 Toolbar - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Program Files\softonic-de3\tbsof0.dll (Conduit Ltd.)

Toolbar: HKCU - No Name - {855F3B16-6D32-4FE6-8A56-BBB695989046} -  No File

Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF DefaultSearchEngine: Google

FF SearchEngineOrder.1: Ask.com

FF SelectedSearchEngine: Google

FF Homepage: hxxp://www.gmx.net/

FF NetworkProxy: "ftp", "192.168.13.100"

FF NetworkProxy: "ftp_port", 3128

FF NetworkProxy: "http", "192.168.13.100"

FF NetworkProxy: "http_port", 3128

FF NetworkProxy: "share_proxy_settings", true

FF NetworkProxy: "socks", "192.168.13.100"

FF NetworkProxy: "socks_port", 3128

FF NetworkProxy: "ssl", "192.168.13.100"

FF NetworkProxy: "ssl_port", 3128

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\tatjana\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=8 - C:\Users\tatjana\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll No File

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\tatjana\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF SearchPlugin: C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\searchplugins\askcom.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Yahoo! Toolbar - C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

FF Extension: toolbar - C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\Extensions\toolbar@gmx.net.xpi

FF Extension: No Name - C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
 

Chrome: 

=======

CHR Plugin: (Shockwave Flash) - C:\Users\tatjana\AppData\Local\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Shockwave Flash) - C:\Users\tatjana\AppData\Local\Google\Chrome\Application\30.0.1599.69\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll No File

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\tatjana\AppData\Local\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\tatjana\AppData\Local\Google\Chrome\Application\30.0.1599.69\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File

CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Shockwave for Director) - C:\windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Extension: (YouTube) - C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1

CHR Extension: (Adblock Plus) - C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6_0

CHR Extension: (Google Search) - C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1

CHR Extension: (Chrome In-App Payments service) - C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: (Gmail) - C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR StartMenuInternet: Google Chrome - C:\Users\tatjana\AppData\Local\Google\Chrome\Application\chrome.exe
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-07] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-07] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-07] (Avira Operations GmbH & Co. KG)

R2 OberonGameConsoleService; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [44312 2009-08-13] ()

R2 Rezip; C:\windows\SYSTEM32\Rezip.exe [311296 2009-03-05] ()

S2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [x]

S2 Net Driver HPZ12; C:\windows\system32\HPZinw12.dll [x]

S2 Pml Driver HPZ12; C:\windows\system32\HPZipm12.dll [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-07] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-07] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-09-07] (Avira Operations GmbH & Co. KG)

R0 CLFS; C:\Windows\System32\CLFS.sys [249408 2009-07-14] (Microsoft Corporation)

R1 SABI; C:\windows\system32\Drivers\SABI.sys [10752 2009-05-28] (SAMSUNG ELECTRONICS)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-07] (Avira GmbH)

S3 PDNMp50; \??\C:\windows\system32\drivers\PDNMp50.sys [x]

S3 PDNSp50; \??\C:\windows\system32\drivers\PDNSp50.sys [x]

S3 upperdev; system32\DRIVERS\usbser_lowerflt.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-10-22 13:00 - 2013-10-22 13:00 - 00000000 ____D C:\FRST

2013-10-22 12:51 - 2013-10-22 12:52 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-10-22 12:45 - 2013-10-22 12:50 - 01087503 _____ (Farbar) C:\Users\tatjana\Desktop\FRST.exe

2013-10-22 12:35 - 2013-10-22 12:35 - 102327253 _____ C:\windows\system32\喚伓ᨬ]

2013-10-20 08:22 - 2013-10-20 08:24 - 00000000 ____D C:\Users\tatjana\Desktop\Scans

2013-10-20 08:20 - 2013-10-20 08:22 - 00000000 ____D C:\Users\Public\Documents\DigiScan

2013-10-20 08:20 - 2013-10-20 08:20 - 00000020 _____ C:\Users\Public\Documents\ExitAP.ini

2013-10-20 08:20 - 2013-10-20 08:20 - 00000000 ____D C:\Users\Public\Documents\7G3

2013-10-20 08:19 - 2013-10-20 08:19 - 00000000 ____D C:\windows\LastGood

2013-10-20 08:18 - 2013-10-20 08:18 - 00001846 _____ C:\Users\Public\Desktop\DigiScan.lnk

2013-10-20 08:18 - 2013-10-20 08:18 - 00000000 ____D C:\Program Files\Common Files\iMpacct

2013-10-20 08:18 - 2013-10-20 08:18 - 00000000 ____D C:\Program Files\Common Files\comscan

2013-10-20 08:18 - 2011-02-23 08:16 - 00061440 _____ (Windows (R) Win 7 DDK provider) C:\windows\system32\PkWiaDrv20_7G3.dll

2013-10-20 08:18 - 2010-12-30 02:42 - 00024576 _____ C:\windows\system32\PkImgFilter.dll

2013-10-20 08:18 - 2010-09-14 09:29 - 00010752 _____ (Windows (R) Win 7 DDK provider) C:\windows\system32\PkWiaError.dll

2013-10-20 08:18 - 2010-09-14 09:28 - 00010240 _____ C:\windows\system32\PkSegFilter.dll

2013-10-20 08:18 - 2007-01-26 04:56 - 00015360 _____ () C:\windows\system32\GetInst32.dll

2013-10-20 08:18 - 1999-05-05 06:22 - 00008944 ____R (Microsoft Corporation) C:\windows\system\Usbscan.sys

2013-10-20 08:18 - 1997-01-22 20:26 - 00565760 _____ (Microsoft Corporation) C:\windows\system32\Msvcp50.dll

2013-10-20 08:17 - 2013-10-20 08:18 - 00000000 ____D C:\Program Files\ColorPage-SF600

2013-10-19 18:52 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2013-10-19 18:52 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2013-10-19 18:52 - 2013-09-23 01:28 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2013-10-19 18:52 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2013-10-19 18:52 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2013-10-19 18:52 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll

2013-10-19 18:52 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2013-10-19 18:52 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2013-10-19 18:52 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll

2013-10-19 18:52 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2013-10-19 18:52 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2013-10-19 18:52 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2013-10-19 18:52 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2013-10-19 18:51 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2013-10-19 18:51 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2013-10-19 18:43 - 2013-10-19 18:55 - 00000000 ____D C:\Program Files\HP

2013-10-19 18:36 - 2013-10-19 18:53 - 00001503 _____ C:\ProgramData\hpzinstall.log

2013-10-19 18:36 - 2013-10-19 18:36 - 00000000 ____D C:\ProgramData\HP

2013-10-19 18:29 - 2013-10-19 17:55 - 329011408 _____ C:\Users\tatjana\Desktop\OJ4500vG510g-m_Full_13.exe

2013-10-11 13:01 - 2013-10-11 13:01 - 00015749 _____ C:\Users\tatjana\Desktop\Unbenannt 2.odt

2013-10-11 12:52 - 2013-09-14 02:48 - 00338944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys

2013-10-11 12:52 - 2013-09-08 04:07 - 01294272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys

2013-10-11 12:52 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll

2013-10-11 12:52 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe

2013-10-11 12:52 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe

2013-10-11 12:52 - 2013-08-01 13:03 - 00729024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys

2013-10-11 12:52 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll

2013-10-11 12:52 - 2013-07-03 06:02 - 00036352 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbscan.sys

2013-10-11 12:52 - 2013-07-03 05:36 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys

2013-10-11 12:52 - 2013-07-03 05:36 - 00025728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys

2013-10-11 12:51 - 2013-08-29 03:50 - 01289096 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll

2013-10-11 12:51 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll

2013-10-11 12:51 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll

2013-10-11 12:51 - 2013-08-28 03:04 - 02348544 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys

2013-10-11 12:51 - 2013-08-28 02:57 - 00434688 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll

2013-10-11 12:51 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-10-11 12:51 - 2013-06-06 06:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll

2013-10-11 12:51 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll

2013-10-11 12:51 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll

2013-10-11 12:51 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll

2013-10-11 12:51 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll

2013-10-11 12:50 - 2013-07-12 12:08 - 00146816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys

2013-10-11 12:50 - 2013-07-12 12:07 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys

2013-10-11 12:50 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll

2013-10-11 12:50 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll

2013-10-11 12:50 - 2013-07-04 11:48 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys

2013-10-11 12:50 - 2013-06-26 00:56 - 00527064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys

2013-10-07 14:36 - 2013-10-07 14:36 - 00000000 ____D C:\Users\tatjana\AppData\Roaming\OpenOffice

2013-10-06 19:27 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll

2013-10-06 19:26 - 2013-08-05 03:56 - 00133056 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ataport.sys

2013-10-06 19:26 - 2013-08-02 03:50 - 00169984 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll

2013-10-06 19:26 - 2013-08-02 03:49 - 00868352 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll

2013-10-06 19:26 - 2013-08-02 03:49 - 00293376 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 02:52 - 00271360 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe

2013-10-06 19:26 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-10-06 19:26 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-10-06 19:26 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll

2013-10-06 19:26 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\windows\system32\shdocvw.dll

2013-10-06 19:09 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll

2013-10-06 17:57 - 2013-10-19 19:05 - 00000000 ____D C:\windows\system32\MRT

2013-10-06 16:44 - 2013-10-06 16:44 - 01441280 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2013-10-06 16:44 - 2013-10-06 16:44 - 01400416 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat

2013-10-06 16:44 - 2013-10-06 16:44 - 00745472 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00719360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00629248 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00523264 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00361984 _____ (Microsoft Corporation) C:\windows\system32\html.iec

2013-10-06 16:44 - 2013-10-06 16:44 - 00357888 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00242200 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00232960 _____ (Microsoft Corporation) C:\windows\system32\url.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00204800 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00158720 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00150528 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00138752 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00137216 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00125440 _____ (Microsoft Corporation) C:\windows\system32\occache.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00082432 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00073728 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx

2013-10-06 16:44 - 2013-10-06 16:44 - 00057344 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00023040 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00011776 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe

2013-10-06 16:43 - 2013-10-06 16:43 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\taskhost.exe

2013-10-06 16:42 - 2013-10-06 16:42 - 03419136 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 02284544 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 01988096 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 01158144 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 01080832 _____ (Microsoft Corporation) C:\windows\system32\d3d10.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00906240 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00604160 _____ (Microsoft Corporation) C:\windows\system32\d3d10level9.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00364544 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00293376 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00249856 _____ (Microsoft Corporation) C:\windows\system32\d3d10_1core.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\d3d10core.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00207872 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecsExt.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\UIAnimation.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00161792 _____ (Microsoft Corporation) C:\windows\system32\d3d10_1.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00010752 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00009728 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00005632 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00005632 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00002560 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-10-06 16:38 - 2013-10-06 16:52 - 00010861 _____ C:\windows\IE10_main.log
 

==================== One Month Modified Files and Folders =======
 

2013-10-22 13:00 - 2013-10-22 13:00 - 00000000 ____D C:\FRST

2013-10-22 12:58 - 2009-08-28 02:32 - 01634239 _____ C:\windows\WindowsUpdate.log

2013-10-22 12:53 - 2013-09-07 13:20 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2013-10-22 12:53 - 2011-09-02 17:40 - 00000000 ____D C:\Users\tatjana\AppData\Local\Mozilla

2013-10-22 12:52 - 2013-10-22 12:51 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-10-22 12:50 - 2013-10-22 12:45 - 01087503 _____ (Farbar) C:\Users\tatjana\Desktop\FRST.exe

2013-10-22 12:50 - 2010-06-28 18:34 - 00001096 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-10-22 12:41 - 2009-07-14 06:34 - 00010272 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-10-22 12:41 - 2009-07-14 06:34 - 00010272 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-10-22 12:40 - 2010-08-23 11:43 - 00001076 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1675562717-242507097-1823633445-1000Core.job

2013-10-22 12:35 - 2013-10-22 12:35 - 102327253 _____ C:\windows\system32\喚伓ᨬ]

2013-10-22 12:33 - 2010-08-23 11:43 - 00001128 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1675562717-242507097-1823633445-1000UA.job

2013-10-22 12:33 - 2010-06-28 18:34 - 00001100 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-10-22 12:32 - 2012-04-08 10:30 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2013-10-20 08:49 - 2010-03-20 20:21 - 00000000 ____D C:\Program Files\Windows Live

2013-10-20 08:24 - 2013-10-20 08:22 - 00000000 ____D C:\Users\tatjana\Desktop\Scans

2013-10-20 08:23 - 2009-07-14 04:37 - 00000000 ___RD C:\Users\Public

2013-10-20 08:22 - 2013-10-20 08:20 - 00000000 ____D C:\Users\Public\Documents\DigiScan

2013-10-20 08:20 - 2013-10-20 08:20 - 00000020 _____ C:\Users\Public\Documents\ExitAP.ini

2013-10-20 08:20 - 2013-10-20 08:20 - 00000000 ____D C:\Users\Public\Documents\7G3

2013-10-20 08:19 - 2013-10-20 08:19 - 00000000 ____D C:\windows\LastGood

2013-10-20 08:18 - 2013-10-20 08:18 - 00001846 _____ C:\Users\Public\Desktop\DigiScan.lnk

2013-10-20 08:18 - 2013-10-20 08:18 - 00000000 ____D C:\Program Files\Common Files\iMpacct

2013-10-20 08:18 - 2013-10-20 08:18 - 00000000 ____D C:\Program Files\Common Files\comscan

2013-10-20 08:18 - 2013-10-20 08:17 - 00000000 ____D C:\Program Files\ColorPage-SF600

2013-10-20 08:18 - 2009-08-27 10:35 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

2013-10-20 08:18 - 2009-07-14 06:52 - 00000000 ____D C:\windows\twain_32

2013-10-20 08:18 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system

2013-10-20 08:16 - 2009-07-26 22:06 - 01498742 _____ C:\windows\system32\PerfStringBackup.INI

2013-10-19 21:00 - 2009-07-14 04:37 - 00000000 ____D C:\windows\rescache

2013-10-19 20:31 - 2012-09-20 16:26 - 00002372 _____ C:\Users\tatjana\Desktop\Google Chrome.lnk

2013-10-19 20:17 - 2012-04-08 10:30 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe

2013-10-19 20:17 - 2011-05-22 17:47 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl

2013-10-19 19:52 - 2009-07-14 04:37 - 00000000 ____D C:\windows\Microsoft.NET

2013-10-19 19:36 - 2010-03-20 21:17 - 00000000 ____D C:\Users\tatjana\Tracing

2013-10-19 19:32 - 2010-03-20 20:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-10-19 19:32 - 2009-07-14 06:53 - 00000006 ____H C:\windows\Tasks\SA.DAT

2013-10-19 19:32 - 2009-07-14 06:39 - 00106714 _____ C:\windows\setupact.log

2013-10-19 19:32 - 2009-07-14 06:33 - 00327232 _____ C:\windows\system32\FNTCACHE.DAT

2013-10-19 19:29 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\de-DE

2013-10-19 19:11 - 2010-03-20 20:07 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-10-19 19:05 - 2013-10-06 17:57 - 00000000 ____D C:\windows\system32\MRT

2013-10-19 18:58 - 2010-03-31 18:09 - 78106760 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

2013-10-19 18:55 - 2013-10-19 18:43 - 00000000 ____D C:\Program Files\HP

2013-10-19 18:53 - 2013-10-19 18:36 - 00001503 _____ C:\ProgramData\hpzinstall.log

2013-10-19 18:36 - 2013-10-19 18:36 - 00000000 ____D C:\ProgramData\HP

2013-10-19 18:18 - 2012-05-19 18:23 - 00000000 ____D C:\Users\tatjana\AppData\Local\CrashDumps

2013-10-19 18:15 - 2009-08-27 11:18 - 00878846 _____ C:\windows\PFRO.log

2013-10-19 17:55 - 2013-10-19 18:29 - 329011408 _____ C:\Users\tatjana\Desktop\OJ4500vG510g-m_Full_13.exe

2013-10-11 13:01 - 2013-10-11 13:01 - 00015749 _____ C:\Users\tatjana\Desktop\Unbenannt 2.odt

2013-10-07 14:36 - 2013-10-07 14:36 - 00000000 ____D C:\Users\tatjana\AppData\Roaming\OpenOffice

2013-10-06 18:56 - 2010-03-20 19:54 - 00000000 ____D C:\Users\tatjana

2013-10-06 18:46 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\zh-TW

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\zh-HK

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\zh-CN

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\tr-TR

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\sv-SE

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\ru-RU

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\pt-PT

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\pt-BR

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\pl-PL

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\nl-NL

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\nb-NO

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\ko-KR

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\ja-JP

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\it-IT

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\hu-HU

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\fr-FR

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\fi-FI

2013-10-06 18:46 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\el-GR

2013-10-06 16:52 - 2013-10-06 16:38 - 00010861 _____ C:\windows\IE10_main.log

2013-10-06 16:44 - 2013-10-06 16:44 - 01441280 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2013-10-06 16:44 - 2013-10-06 16:44 - 01400416 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat

2013-10-06 16:44 - 2013-10-06 16:44 - 00745472 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00719360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00629248 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00523264 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00361984 _____ (Microsoft Corporation) C:\windows\system32\html.iec

2013-10-06 16:44 - 2013-10-06 16:44 - 00357888 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00242200 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00232960 _____ (Microsoft Corporation) C:\windows\system32\url.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00226816 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00204800 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00163840 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00158720 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00150528 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00138752 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00137216 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00125440 _____ (Microsoft Corporation) C:\windows\system32\occache.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00117248 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00110592 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00082432 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00079872 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00073728 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx

2013-10-06 16:44 - 2013-10-06 16:44 - 00057344 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00041984 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00023040 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll

2013-10-06 16:44 - 2013-10-06 16:44 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe

2013-10-06 16:44 - 2013-10-06 16:44 - 00011776 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe

2013-10-06 16:43 - 2013-10-06 16:43 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\taskhost.exe

2013-10-06 16:42 - 2013-10-06 16:42 - 03419136 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 02284544 _____ (Microsoft Corporation) C:\windows\system32\msmpeg2vdec.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 01988096 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 01158144 _____ (Microsoft Corporation) C:\windows\system32\XpsPrint.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 01080832 _____ (Microsoft Corporation) C:\windows\system32\d3d10.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00906240 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00604160 _____ (Microsoft Corporation) C:\windows\system32\d3d10level9.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00364544 _____ (Microsoft Corporation) C:\windows\system32\XpsGdiConverter.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00293376 _____ (Microsoft Corporation) C:\windows\system32\dxgi.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00249856 _____ (Microsoft Corporation) C:\windows\system32\d3d10_1core.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\d3d10core.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00207872 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecsExt.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00187392 _____ (Microsoft Corporation) C:\windows\system32\UIAnimation.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00161792 _____ (Microsoft Corporation) C:\windows\system32\d3d10_1.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00010752 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00009728 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00005632 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00005632 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-10-06 16:42 - 2013-10-06 16:42 - 00002560 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-10-06 16:13 - 2010-12-19 10:32 - 00074320 _____ C:\Users\tatjana\AppData\Local\GDIPFONTCACHEV1.DAT

2013-09-23 01:28 - 2013-10-19 18:52 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2013-09-23 01:28 - 2013-10-19 18:52 - 01141248 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2013-09-23 01:28 - 2013-10-19 18:52 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2013-09-23 01:27 - 2013-10-19 18:52 - 02876928 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2013-09-23 01:27 - 2013-10-19 18:52 - 02048512 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2013-09-23 01:27 - 2013-10-19 18:52 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll

2013-09-23 01:27 - 2013-10-19 18:52 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2013-09-23 01:27 - 2013-10-19 18:52 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2013-09-23 01:27 - 2013-10-19 18:52 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll

2013-09-23 01:27 - 2013-10-19 18:52 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2013-09-23 01:27 - 2013-10-19 18:52 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2013-09-23 01:27 - 2013-10-19 18:52 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2013-09-23 01:27 - 2013-10-19 18:51 - 14335488 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2013-09-23 01:27 - 2013-10-19 18:51 - 13761024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
 

Files to move or delete:

====================

C:\Users\tatjana\Apache_OpenOffice_4.0.0_Win_x86_install_de.exe

C:\Users\tatjana\GMX_Firefox_Setup.exe
 
 

Some content of TEMP:

====================

C:\Users\tatjana\AppData\Local\Temp\AskSLib.dll

C:\Users\tatjana\AppData\Local\Temp\contentDATs.exe

C:\Users\tatjana\AppData\Local\Temp\GLF7BD9.tmp.tbsoft.dll

C:\Users\tatjana\AppData\Local\Temp\GLF8BA3.tmp.tbsoft.dll

C:\Users\tatjana\AppData\Local\Temp\GLFAFD4.tmp.tbsoft.dll

C:\Users\tatjana\AppData\Local\Temp\GLFC334.tmp.tbsoft.dll

C:\Users\tatjana\AppData\Local\Temp\GLFD983.tmp.tbsoft.dll

C:\Users\tatjana\AppData\Local\Temp\GoogleChromeInstaller.exe

C:\Users\tatjana\AppData\Local\Temp\GoogleToolbarInstaller.exe

C:\Users\tatjana\AppData\Local\Temp\nse3E97.tmp.exe

C:\Users\tatjana\AppData\Local\Temp\nsiDF68.tmp.ConduitEngineEmbbed.exe

C:\Users\tatjana\AppData\Local\Temp\SearchWithGoogleUpdate.exe

C:\Users\tatjana\AppData\Local\Temp\SecurityScan_Release.exe

C:\Users\tatjana\AppData\Local\Temp\setup.exe

C:\Users\tatjana\AppData\Local\Temp\SkypeSetup.exe

C:\Users\tatjana\AppData\Local\Temp\SLOW-PCfighterSetup_partner502_1.4.39Full.exe

C:\Users\tatjana\AppData\Local\Temp\softonic-de3.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-10-12 17:00
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22-10-2013

Ran by tatjana at 2013-10-22 13:06:06

Running from C:\Users\tatjana\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

 Update for Microsoft Office 2007 (KB2508958)

Adobe Flash Player 11 ActiveX (Version: 11.9.900.117)

Adobe Flash Player 11 Plugin (Version: 11.9.900.117)

Adobe Reader 9.5.2 - Deutsch (Version: 9.5.2)

Adobe Shockwave Player 11.5 (Version: 11.5.7.609)

AnyPC Client (Version: 1.0.0.12)

Atheros Client Installation Program (Version: 1.0.1.0805)

Avira Free Antivirus (Version: 13.0.0.4052)

BatteryLifeExtender (Version: 1.0.0)

ColorPage-SF600  (Version: V4.3.0)

CyberLink YouCam (Version: 2.0.2907)

Dairy Dash

Easy Display Manager (Version: 3.0)

Easy Network Manager (Version: 4.0.2)

Easy SpeedUp Manager (Version: 3.0.0.4)

EasyBatteryManager (Version: 4.0.0.2)

EasyBits GO

Elf Bowling Hawaiian Vacation

Game Pack (Version: 5.3.0.10)

Go-Go Gourmet

Google Chrome (HKCU Version: 30.0.1599.101)

Google Toolbar for Internet Explorer (Version: 1.0.0)

Google Toolbar for Internet Explorer (Version: 7.5.4601.54)

Google Update Helper (Version: 1.3.21.165)

ICQ6 (Version: 6.00.0000)

Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.2176)

Junk Mail filter update (Version: 14.0.8089.726)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft Application Error Reporting (Version: 12.0.6012.5000)

Microsoft Choice Guard (Version: 2.0.48.0)

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Activation Assistant for Netbooks (Version: 1.6)

Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)

Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)

Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)

Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)

Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)

Mozilla Firefox 24.0 (x86 de) (Version: 24.0)

Mozilla Maintenance Service (Version: 24.0)

MSVCRT (Version: 14.0.1468.721)

OpenOffice 4.0.0 (Version: 4.00.9702)

PhotoMail Maker (Version: 1.0.0.1040)

Realtek Ethernet Controller  Driver (Version: 1.00.0008)

Realtek High Definition Audio Driver (Version: 6.0.1.5898)

REALTEK Wireless LAN Software (Version: 1.01.0088)

Samsung Recovery Solution 4 (Version: 4.0.0.3)

Samsung Support Center (Version: 1.0.0)

Samsung Update Plus (Version: 2.0)

softonic-de3 Toolbar (Version: )

Synaptics Pointing Device Driver (Version: 13.2.4.12)

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition

Update für Microsoft Office Excel 2007 Help (KB963678)

Update für Microsoft Office Powerpoint 2007 Help (KB963669)

Update für Microsoft Office Word 2007 Help (KB963665)

User Guide (Version: 1.0)

Visual Studio Tools for the Office system 3.0 Runtime

Visual Studio Tools for the Office system 3.0 Runtime (Version: 9.0.30729)

Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (Version: 1)

VLC media player 1.0.5 (Version: 1.0.5)

Windows Live Communications Platform (Version: 14.0.8098.930)

Windows Live Essentials (Version: 14.0.8089.0726)

Windows Live Essentials (Version: 14.0.8089.726)

Windows Live Family Safety (Version: 14.0.8093.805)

Windows Live Fotogalerie (Version: 14.0.8081.709)

Windows Live Mail (Version: 14.0.8089.0726)

Windows Live Movie Maker (Version: 14.0.8091.0730)

Windows Live Writer (Version: 14.0.8089.0726)

WinRAR
 

==================== Restore Points  =========================
 

07-10-2013 12:06:02 Windows Modules Installer

19-10-2013 16:28:23 Windows Update

20-10-2013 06:17:34 Installiert ColorPage-SF600 
 

==================== Hosts content: ==========================
 

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {15C220F7-1D59-4087-A384-16B573454E72} - System32\Tasks\advSRS4 => C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe [2009-08-06] (SEC)

Task: {1C98CDAB-44E3-4EC9-B834-D07C611D47AE} - System32\Tasks\{9BF9720A-2C83-4F9E-A4E2-EE6A832439CC} => Iexplore.exe hxxp://ui.skype.com/ui/0/4.2.0.166/de/abandoninstall?source=lightinstaller&amp;page=tsMain&amp;installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;userlevelpresent

Task: {1F2A8A18-910D-45D8-9C66-5F3365F4BF53} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-28] (Google Inc.)

Task: {238ED261-730D-4C07-B18A-80195C7009BB} - System32\Tasks\{1D11A824-A1FD-49C4-BAE0-31F095E3DC78} => Iexplore.exe hxxp://ui.skype.com/ui/0/4.2.0.166/de/abandoninstall?source=lightinstaller&amp;page=tsMain&amp;installinfo=google-toolbar:notoffered;toolbarpresent,google-chrome:notoffered;alreadyoffered

Task: {3568518E-9885-4E3B-891D-EDDB811C8D8B} - System32\Tasks\SamsungSupportCenter => C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe [2009-08-27] (SAMSUNG Electronics)

Task: {3C823206-F087-4081-B4C9-3E58C8F5CB91} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-28] (Google Inc.)

Task: {539F5E7F-BE89-46B9-9F21-679547F52201} - System32\Tasks\{F5CF3D8C-8DA0-4179-B2C4-E654BD42FC3E} => C:\Program Files\Skype\\Phone\Skype.exe

Task: {54F6A48F-AC7E-4E19-A170-3A3BEC9FC25D} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Internet Security\Engine\19.9.1.14\WSCStub.exe

Task: {584D9A6B-2FCC-4B5B-8DB2-09D5F80FE135} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)

Task: {5FEABDCA-1547-4F17-BB9A-C98D9896EEB4} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files\Norton Internet Security\Engine\19.9.1.14\SymErr.exe

Task: {623C28C8-67AC-4C1B-9AE3-FA6935B26D93} - System32\Tasks\BatteryLifeExtender => C:\Program Files\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2009-08-12] (Samsung Electronics. Co. Ltd.)

Task: {6AB99BE2-28FD-4418-BF44-B789BBC7E0B8} - System32\Tasks\SUPBackground => C:\Program Files\Samsung\Samsung Update Plus\SUPBackground.exe [2010-04-20] ()

Task: {8AE17EE3-E5F6-4E94-AF66-9E2061CDA19A} - System32\Tasks\{82ACF879-88D4-43F7-8151-8B24B151655E} => C:\Program Files\Skype\Phone\Skype.exe

Task: {90FE9373-6703-4478-A1A5-4908EF3CDF32} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)

Task: {955C7DA0-43EC-450F-8849-CF5B514E8B01} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files\Norton Internet Security\Engine\19.9.1.14\SymErr.exe

Task: {959E0EAF-0527-47ED-AC67-734143880525} - System32\Tasks\ChkWiz4VistaWin7 => C:\Sysprep\ChkWiz4VistaWin7.exe

Task: {9FC1ECB7-2970-4126-974A-5C21B0EDA4E2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1675562717-242507097-1823633445-1000UA => C:\Users\tatjana\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-11] (Google Inc.)

Task: {AC87FD13-E58F-4426-8A6A-FA2762D3A9C0} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-19] (Adobe Systems Incorporated)

Task: {B749F7C6-B858-4A9B-8ABA-5104B0AFFA70} - System32\Tasks\EasySpeedUpManager => C:\Program Files\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe [2009-08-23] (Samsung Electronics Co., Ltd.)

Task: {BA63A394-CEB3-4970-9080-B0CAF9661E84} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1675562717-242507097-1823633445-1000Core => C:\Users\tatjana\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-11] (Google Inc.)

Task: {BB4F83E7-F5EB-4FA1-A9EA-F6B44DA8A10A} - System32\Tasks\EasyBatteryManager => C:\Program Files\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2009-08-01] (SAMSUNG Electronics co., LTD.)

Task: {C3F80E4D-F1AB-47A7-AD44-26C3EB28CC59} - System32\Tasks\EasyDisplayMgr => C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe [2009-08-22] (Samsung Electronics Co., Ltd.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1675562717-242507097-1823633445-1000Core.job => C:\Users\tatjana\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1675562717-242507097-1823633445-1000UA.job => C:\Users\tatjana\AppData\Local\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2009-08-27 10:48 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll

2010-06-20 14:14 - 2010-03-15 11:28 - 00141824 _____ () C:\Program Files\WinRAR\rarext.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\Temp:4CF61E54

AlternateDataStreams: C:\ProgramData\Temp:ABE89FFE

AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (10/20/2013 08:17:32 AM) (Source: VSS) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert

.

Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
 
 

Vorgang:

   Generatordaten werden gesammelt
 

Kontext:

   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}

   Generatorname: System Writer

   Generatorinstanz-ID: {4a669d47-31d4-4dfb-89ca-ffecdd135a23}
 

Error: (10/19/2013 08:52:58 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (10/19/2013 08:51:41 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (10/19/2013 06:55:33 PM) (Source: Windows Search Service) (User: )

Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Error: (10/19/2013 06:50:58 PM) (Source: MsiInstaller) (User: TEA-PC)

Description: Produkt: Network -- Error 1935. Während der Installation der Assembly "Microsoft.VC90.MFC,version="9.0.21022.8",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32"" ist ein Fehler aufgetreten. Weitere Informationen finden Sie unter Hilfe und Support. HRESULT: 0x80070BC9, Assemblyschnittstelle: IAssemblyCacheItem, Funktion: Commit, Komponente: {C6357C55-7461-3D51-9AE5-FD71CA24027A}
 

Error: (10/19/2013 06:17:29 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: avnotify.exe, Version: 13.6.20.2100, Zeitstempel: 0x51e6b921

Name des fehlerhaften Moduls: avnotify.exe, Version: 13.6.20.2100, Zeitstempel: 0x51e6b921

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00001487

ID des fehlerhaften Prozesses: 0x9e4

Startzeit der fehlerhaften Anwendung: 0xavnotify.exe0

Pfad der fehlerhaften Anwendung: avnotify.exe1

Pfad des fehlerhaften Moduls: avnotify.exe2

Berichtskennung: avnotify.exe3
 

Error: (10/10/2013 03:54:43 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (10/10/2013 03:53:23 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (10/07/2013 03:08:13 AM) (Source: Windows Search Service) (User: )

Description: Die Leistungsüberwachung für den Gatherer-Dienst kann nicht initialisiert werden, da die Datenquellen nicht geladen sind oder das freigegebene Speicherobjekt nicht geöffnet werden konnte. Dies beeinträchtigt lediglich die Verfügbarkeit der Leistungsindikatoren. Starten Sie den Computer erneut.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Error: (10/06/2013 07:47:55 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 
 

System errors:

=============

Error: (10/21/2013 11:15:37 AM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AntiVirSchedulerService erreicht.
 

Error: (10/20/2013 08:10:40 AM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.
 

Error: (10/19/2013 07:36:13 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (10/19/2013 07:34:10 PM) (Source: Service Control Manager) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

cdrom
 

Error: (10/19/2013 07:33:10 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Pml Driver HPZ12" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (10/19/2013 07:33:03 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Net Driver HPZ12" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (10/19/2013 06:54:03 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (10/19/2013 06:54:03 PM) (Source: DCOM) (User: )

Description: {10DA4F3C-CC99-4190-BE4D-58330754E882}
 

Error: (10/19/2013 06:53:33 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "HP Network Devices Support" wurde mit folgendem Fehler beendet: 

%%126
 

Error: (10/19/2013 06:50:55 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070652 fehlgeschlagen: Sicherheitsupdate für Microsoft Office 2007 suites (KB2827329)
 
 

Microsoft Office Sessions:

=========================
 

==================== Memory info =========================== 
 

Percentage of memory in use: 56%

Total physical RAM: 1014.37 MB

Available physical RAM: 440.83 MB

Total Pagefile: 2038.37 MB

Available Pagefile: 1046.16 MB

Total Virtual: 2047.88 MB

Available Virtual: 1903.8 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:66.97 GB) (Free:37.71 GB) NTFS

Drive d: () (Fixed) (Total:66.98 GB) (Free:3.85 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (Size: 149 GB) (Disk ID: 829A415E)

Partition 1: (Not Active) - (Size=15 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=67 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=67 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Hallo Schrauber,

hier die gewünschten Dateien:

Code:

Malwarebytes Anti-Malware (Test) 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.11.09.02
 

Windows 7 Service Pack 1 x86 NTFS

Internet Explorer 10.0.9200.16721

tatjana :: TEA-PC [Administrator]
 

Schutz: Aktiviert
 

09.11.2013 08:13:01

mbam-log-2013-11-09 (08-13-01).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 199855

Laufzeit: 15 Minute(n), 50 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

Code:

# AdwCleaner v3.011 - Bericht erstellt am 09/11/2013 um 09:03:27

# Updated 03/11/2013 von Xplode

# Betriebssystem : Windows 7 Starter Service Pack 1 (32 bits)

# Benutzername : tatjana - TEA-PC

# Gestartet von : C:\Users\tatjana\Desktop\adwcleaner.exe

# Option : Suchen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Datei Gefunden : C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\searchplugins\Askcom.xml

Datei Gefunden : C:\windows\system32\conduitEngine.tmp

Ordner Gefunden : C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

Ordner Gefunden C:\Program Files\Bandoo

Ordner Gefunden C:\Program Files\Conduit

Ordner Gefunden C:\Program Files\ConduitEngine

Ordner Gefunden C:\Program Files\icqtoolbar

Ordner Gefunden C:\Program Files\softonic-de3

Ordner Gefunden C:\Program Files\softonic-de3

Ordner Gefunden C:\ProgramData\Partner

Ordner Gefunden C:\Users\tatjana\AppData\Local\PackageAware

Ordner Gefunden C:\Users\tatjana\AppData\Local\softonic-de3

Ordner Gefunden C:\Users\tatjana\AppData\Local\softonic-de3

Ordner Gefunden C:\Users\tatjana\AppData\LocalLow\Conduit

Ordner Gefunden C:\Users\tatjana\AppData\LocalLow\ConduitEngine

Ordner Gefunden C:\Users\tatjana\AppData\LocalLow\PriceGong

Ordner Gefunden C:\Users\tatjana\AppData\LocalLow\softonic-de3

Ordner Gefunden C:\Users\tatjana\AppData\LocalLow\softonic-de3
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\Conduit

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\conduitEngine

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\conduitEngine

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\PriceGong

Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\softonic-de3

Schlüssel Gefunden : HKCU\Software\AppDataLow\Toolbar

Schlüssel Gefunden : HKCU\Software\Conduit

Schlüssel Gefunden : HKCU\Software\ICQToolbar

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43B7-BEA3-87217BDA74C8}

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8B63A8D6-BBED-4341-8867-790E5F524C96}

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gefunden : HKCU\Software\Softonic

Schlüssel Gefunden : HKCU\Software\softonic-de3

Schlüssel Gefunden : HKCU\Toolbar

Schlüssel Gefunden : HKLM\Software\Bandoo

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\BandooCore.EXE

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.BandooCore

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.BandooCore.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{27F69C85-64E1-43CE-98B5-3C9F22FB408E}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{B543EF05-9758-464E-9F37-4C28525B4A4C}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{BB76A90B-2B4C-4378-8506-9A2B6E16943C}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{C3AB94A4-BFD0-4BBA-A331-DE504F07D2DB}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D2198933-0C82-4681-9AEB-F155371ABCAE}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Conduit.Engine

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{6F43FA77-C18F-4D0C-9C7E-958876FE2061}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{DF948646-8BF4-450E-A059-CF8A4E0FE2BE}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{E96B49B0-E11F-48FC-984A-EEC29A4F57E1}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Toolbar.CT2431245

Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}

Schlüssel Gefunden : HKLM\Software\Conduit

Schlüssel Gefunden : HKLM\Software\conduitEngine

Schlüssel Gefunden : HKLM\Software\conduitEngine

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{55EE48FF-2A0A-41B2-BB24-564FE165C188}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B0D7D552-572E-4E46-853C-FD87DC101A0A}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-live-mail[1]_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-live-mail[1]_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader29287[1]_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader29287[1]_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D2198933-0C82-4681-9AEB-F155371ABCAE}

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\softonic-de3 Toolbar

Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\softonic-de3 Toolbar

Schlüssel Gefunden : HKLM\Software\softonic-de3

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{855F3B16-6D32-4FE6-8A56-BBB695989046}]

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]
 

***** [ Browser ] *****
 

-\\ Internet Explorer v0.0.0.0
 

Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] - hxxp://www.icq.com/search/results.php?q={searchTerms}&ch_id=osd
 

-\\ Mozilla Firefox v24.0 (de)
 

[ Datei : C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\prefs.js ]
 
 

-\\ Google Chrome v
 

[ Datei : C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [10860 octets] - [09/11/2013 09:03:27]
 

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [10921 octets] ##########

Code:

# AdwCleaner v3.011 - Bericht erstellt am 09/11/2013 um 09:20:44

# Updated 03/11/2013 von Xplode

# Betriebssystem : Windows 7 Starter Service Pack 1 (32 bits)

# Benutzername : tatjana - TEA-PC

# Gestartet von : C:\Users\tatjana\Desktop\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\Partner

Ordner Gelöscht : C:\Program Files\Bandoo

Ordner Gelöscht : C:\Program Files\Conduit

Ordner Gelöscht : C:\Program Files\ConduitEngine

Ordner Gelöscht : C:\Program Files\icqtoolbar

Ordner Gelöscht : C:\Program Files\softonic-de3

Ordner Gelöscht : C:\Users\tatjana\AppData\Local\PackageAware

Ordner Gelöscht : C:\Users\tatjana\AppData\Local\softonic-de3

Ordner Gelöscht : C:\Users\tatjana\AppData\LocalLow\Conduit

Ordner Gelöscht : C:\Users\tatjana\AppData\LocalLow\ConduitEngine

Ordner Gelöscht : C:\Users\tatjana\AppData\LocalLow\PriceGong

Ordner Gelöscht : C:\Users\tatjana\AppData\LocalLow\softonic-de3

Ordner Gelöscht : C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

Datei Gelöscht : C:\windows\system32\conduitEngine.tmp

Datei Gelöscht : C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\searchplugins\Askcom.xml
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

Schlüssel Gelöscht : HKCU\Toolbar

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BandooCore.EXE

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.BandooCore

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.BandooCore.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.ResourcesMngr.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.SettingsMngr.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BandooCore.StatisticMngr.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Conduit.Engine

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2431245

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader29287[1]_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader29287[1]_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-live-mail[1]_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-live-mail[1]_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{27F69C85-64E1-43CE-98B5-3C9F22FB408E}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B543EF05-9758-464E-9F37-4C28525B4A4C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{BB76A90B-2B4C-4378-8506-9A2B6E16943C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C3AB94A4-BFD0-4BBA-A331-DE504F07D2DB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D2198933-0C82-4681-9AEB-F155371ABCAE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6F43FA77-C18F-4D0C-9C7E-958876FE2061}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DF948646-8BF4-450E-A059-CF8A4E0FE2BE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E96B49B0-E11F-48FC-984A-EEC29A4F57E1}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D2198933-0C82-4681-9AEB-F155371ABCAE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{55EE48FF-2A0A-41B2-BB24-564FE165C188}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B0D7D552-572E-4E46-853C-FD87DC101A0A}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43B7-BEA3-87217BDA74C8}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8B63A8D6-BBED-4341-8867-790E5F524C96}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{855F3B16-6D32-4FE6-8A56-BBB695989046}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065}]

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\ICQToolbar

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : HKCU\Software\softonic-de3

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\conduitEngine

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\softonic-de3

Schlüssel Gelöscht : HKLM\Software\Bandoo

Schlüssel Gelöscht : HKLM\Software\Conduit

Schlüssel Gelöscht : HKLM\Software\conduitEngine

Schlüssel Gelöscht : HKLM\Software\softonic-de3

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\softonic-de3 Toolbar
 

***** [ Browser ] *****
 

-\\ Internet Explorer v0.0.0.0
 

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
 

-\\ Mozilla Firefox v24.0 (de)
 

[ Datei : C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\prefs.js ]
 
 

-\\ Google Chrome v
 

[ Datei : C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [11002 octets] - [09/11/2013 09:03:27]

AdwCleaner[S0].txt - [9104 octets] - [09/11/2013 09:20:44]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9164 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.8 (11.05.2013:1)

OS: Windows 7 Starter x86

Ran by tatjana on 09.11.2013 at 13:48:59,91

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\softonic-de3ToolbarHelper_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\softonic-de3ToolbarHelper_RASMANCS

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{65701010-EBD6-47BA-B003-5F243C35D064}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 09.11.2013 at 13:57:02,24

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013

Ran by tatjana (administrator) on TEA-PC on 09-11-2013 14:22:33

Running from C:\Users\tatjana\Desktop

Microsoft Windows 7 Starter  Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe

(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe

(SAMSUNG Electronics) C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe

(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

() C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe

(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

() C:\windows\SYSTEM32\Rezip.exe

(Intel Corporation) C:\windows\system32\igfxext.exe

(Intel Corporation) C:\windows\system32\igfxsrvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\windows\system32\igfxsrvc.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

(PLUSTEK) C:\Program Files\ColorPage-SF600\DigiScan.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Microsoft Corporation) C:\windows\system32\taskmgr.exe

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avcenter.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7625248 2009-07-21] (Realtek Semiconductor)

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1541416 2009-07-15] (Synaptics Incorporated)

HKLM\...\Run: [UCam_Menu] - C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [218408 2009-02-25] (CyberLink Corp.)

HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe [38872 2012-07-31] (Adobe Systems Incorporated)

HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-11] (Adobe Systems Incorporated)

HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-07] (Avira Operations GmbH & Co. KG)

HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-06-28] (Google Inc.)
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: 192.168.13.100:3128

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.lahr-info.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x1064255F6BC8CA01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=IEFM1&q={searchTerms}&src={referrer:source?}

BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default

FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml

FF DefaultSearchEngine: Google

FF SearchEngineOrder.1: Ask.com

FF SelectedSearchEngine: Google

FF Homepage: hxxp://www.gmx.net/

FF NetworkProxy: "ftp", "192.168.13.100"

FF NetworkProxy: "ftp_port", 3128

FF NetworkProxy: "http", "192.168.13.100"

FF NetworkProxy: "http_port", 3128

FF NetworkProxy: "share_proxy_settings", true

FF NetworkProxy: "socks", "192.168.13.100"

FF NetworkProxy: "socks_port", 3128

FF NetworkProxy: "ssl", "192.168.13.100"

FF NetworkProxy: "ssl_port", 3128

FF NetworkProxy: "type", 0

FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()

FF Plugin: @adobe.com/ShockwavePlayer - C:\windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\tatjana\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin HKCU: @tools.google.com/Google Update;version=8 - C:\Users\tatjana\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll No File

FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\tatjana\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: DownloadHelper - C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

FF Extension: toolbar - C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\Extensions\toolbar@gmx.net.xpi

FF Extension: Adblock Plus - C:\Users\tatjana\AppData\Roaming\Mozilla\Firefox\Profiles\mky60x3g.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
 

Chrome: 

=======

CHR Plugin: (Shockwave Flash) - C:\Users\tatjana\AppData\Local\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Shockwave Flash) - C:\Users\tatjana\AppData\Local\Google\Chrome\Application\30.0.1599.69\gcswf32.dll No File

CHR Plugin: (Shockwave Flash) - C:\windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll No File

CHR Plugin: (Remoting Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\tatjana\AppData\Local\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\tatjana\AppData\Local\Google\Chrome\Application\30.0.1599.69\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File

CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File

CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Shockwave for Director) - C:\windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Extension: (YouTube) - C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1

CHR Extension: (Adblock Plus) - C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6_0

CHR Extension: (Google Search) - C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1

CHR Extension: (Chrome In-App Payments service) - C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0

CHR Extension: (Gmail) - C:\Users\tatjana\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1

CHR StartMenuInternet: Google Chrome - C:\Users\tatjana\AppData\Local\Google\Chrome\Application\chrome.exe
 

========================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-09-07] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-07] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-07] (Avira Operations GmbH & Co. KG)

R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 OberonGameConsoleService; C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe [44312 2009-08-13] ()

R2 Rezip; C:\windows\SYSTEM32\Rezip.exe [311296 2009-03-05] ()

S2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [x]

S2 Net Driver HPZ12; C:\windows\system32\HPZinw12.dll [x]

S2 Pml Driver HPZ12; C:\windows\system32\HPZipm12.dll [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [88840 2013-09-07] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136672 2013-09-07] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-09-07] (Avira Operations GmbH & Co. KG)

R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)

R1 SABI; C:\windows\system32\Drivers\SABI.sys [10752 2009-05-28] (SAMSUNG ELECTRONICS)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-07] (Avira GmbH)

U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\Users\tatjana\AppData\Local\Temp\catchme.sys [x]

S3 PDNMp50; \??\C:\windows\system32\drivers\PDNMp50.sys [x]

S3 PDNSp50; \??\C:\windows\system32\drivers\PDNSp50.sys [x]

S3 upperdev; system32\DRIVERS\usbser_lowerflt.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-11-09 14:02 - 2013-11-09 14:02 - 00000000 ____D C:\Users\tatjana\Desktop\FRST alt

2013-11-09 13:59 - 2013-11-09 14:00 - 00000000 ____D C:\Users\tatjana\Desktop\JRT neu

2013-11-09 13:57 - 2013-11-09 13:57 - 00001007 _____ C:\Users\tatjana\Desktop\JRT.txt

2013-11-09 13:48 - 2013-11-09 13:48 - 00000000 ____D C:\windows\ERUNT

2013-11-09 09:03 - 2013-11-09 09:21 - 00000000 ____D C:\AdwCleaner

2013-11-09 08:04 - 2013-11-09 08:04 - 00001067 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-11-09 08:04 - 2013-11-09 08:04 - 00000000 ____D C:\Users\tatjana\AppData\Roaming\Malwarebytes

2013-11-09 08:04 - 2013-11-09 08:04 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-09 08:04 - 2013-11-09 08:04 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-11-09 08:04 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys

2013-11-09 08:02 - 2013-11-09 08:02 - 01034531 _____ (Thisisu) C:\Users\tatjana\Desktop\JRT.exe

2013-11-09 08:01 - 2013-11-09 08:01 - 01073262 _____ C:\Users\tatjana\Desktop\adwcleaner.exe

2013-11-09 07:59 - 2013-11-09 07:59 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\tatjana\Desktop\mbam-setup-1.75.0.1300.exe

2013-11-06 14:50 - 2013-11-06 14:51 - 00169978 _____ C:\Users\tatjana\Desktop\Verbindung.odt

2013-11-05 09:34 - 2013-11-05 09:34 - 00014097 _____ C:\ComboFix.txt

2013-11-04 11:55 - 2013-11-05 09:34 - 00000000 ____D C:\Qoobox

2013-11-04 11:55 - 2011-06-26 07:45 - 00256000 _____ C:\windows\PEV.exe

2013-11-04 11:55 - 2010-11-07 18:20 - 00208896 _____ C:\windows\MBR.exe

2013-11-04 11:55 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe

2013-11-04 11:55 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe

2013-11-04 11:55 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe

2013-11-04 11:55 - 2000-08-31 01:00 - 00098816 _____ C:\windows\sed.exe

2013-11-04 11:55 - 2000-08-31 01:00 - 00080412 _____ C:\windows\grep.exe

2013-11-04 11:55 - 2000-08-31 01:00 - 00068096 _____ C:\windows\zip.exe

2013-11-04 11:54 - 2013-11-04 12:15 - 00000000 ____D C:\windows\erdnt

2013-11-04 11:51 - 2013-11-04 11:51 - 05143677 ____R (Swearware) C:\Users\tatjana\Desktop\ComboFix.exe

2013-10-22 12:27 - 2013-10-22 12:27 - 00000000 ____D C:\Users\tatjana\Desktop\22.10.13

2013-10-22 12:06 - 2013-10-22 12:07 - 00020156 _____ C:\Users\tatjana\Desktop\Addition.txt

2013-10-22 12:00 - 2013-10-22 12:00 - 00000000 ____D C:\FRST

2013-10-22 11:51 - 2013-10-22 11:52 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-10-22 11:45 - 2013-11-09 14:16 - 01089445 _____ (Farbar) C:\Users\tatjana\Desktop\FRST.exe

2013-10-22 11:35 - 2013-10-22 11:35 - 102327253 _____ C:\windows\system32\喚伓ᨬ]

2013-10-20 07:22 - 2013-10-20 07:24 - 00000000 ____D C:\Users\tatjana\Desktop\Scans

2013-10-20 07:20 - 2013-11-09 13:25 - 00000020 _____ C:\Users\Public\Documents\ExitAP.ini

2013-10-20 07:20 - 2013-10-20 07:22 - 00000000 ____D C:\Users\Public\Documents\DigiScan

2013-10-20 07:20 - 2013-10-20 07:20 - 00000000 ____D C:\Users\Public\Documents\7G3

2013-10-20 07:18 - 2013-10-20 07:18 - 00001846 _____ C:\Users\Public\Desktop\DigiScan.lnk

2013-10-20 07:18 - 2013-10-20 07:18 - 00000000 ____D C:\Program Files\Common Files\iMpacct

2013-10-20 07:18 - 2013-10-20 07:18 - 00000000 ____D C:\Program Files\Common Files\comscan

2013-10-20 07:18 - 2011-02-23 07:16 - 00061440 _____ (Windows (R) Win 7 DDK provider) C:\windows\system32\PkWiaDrv20_7G3.dll

2013-10-20 07:18 - 2010-12-30 01:42 - 00024576 _____ C:\windows\system32\PkImgFilter.dll

2013-10-20 07:18 - 2010-09-14 08:29 - 00010752 _____ (Windows (R) Win 7 DDK provider) C:\windows\system32\PkWiaError.dll

2013-10-20 07:18 - 2010-09-14 08:28 - 00010240 _____ C:\windows\system32\PkSegFilter.dll

2013-10-20 07:18 - 2007-01-26 03:56 - 00015360 _____ () C:\windows\system32\GetInst32.dll

2013-10-20 07:18 - 1999-05-05 05:22 - 00008944 ____R (Microsoft Corporation) C:\windows\system\Usbscan.sys

2013-10-20 07:18 - 1997-01-22 19:26 - 00565760 _____ (Microsoft Corporation) C:\windows\system32\Msvcp50.dll

2013-10-20 07:17 - 2013-10-20 07:18 - 00000000 ____D C:\Program Files\ColorPage-SF600

2013-10-19 17:52 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2013-10-19 17:52 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2013-10-19 17:52 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2013-10-19 17:52 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2013-10-19 17:52 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2013-10-19 17:52 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll

2013-10-19 17:52 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2013-10-19 17:52 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2013-10-19 17:52 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll

2013-10-19 17:52 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2013-10-19 17:52 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2013-10-19 17:52 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2013-10-19 17:52 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2013-10-19 17:51 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2013-10-19 17:51 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2013-10-19 17:43 - 2013-10-19 17:55 - 00000000 ____D C:\Program Files\HP

2013-10-19 17:36 - 2013-10-19 17:53 - 00001503 _____ C:\ProgramData\hpzinstall.log

2013-10-19 17:36 - 2013-10-19 17:36 - 00000000 ____D C:\ProgramData\HP

2013-10-19 17:29 - 2013-10-19 16:55 - 329011408 _____ C:\Users\tatjana\Desktop\OJ4500vG510g-m_Full_13.exe

2013-10-11 12:01 - 2013-10-11 12:01 - 00015749 _____ C:\Users\tatjana\Desktop\Unbenannt 2.odt

2013-10-11 11:52 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys

2013-10-11 11:52 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys

2013-10-11 11:52 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll

2013-10-11 11:52 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe

2013-10-11 11:52 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe

2013-10-11 11:52 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys

2013-10-11 11:52 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll

2013-10-11 11:52 - 2013-07-03 05:02 - 00036352 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbscan.sys

2013-10-11 11:52 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys

2013-10-11 11:52 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys

2013-10-11 11:51 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll

2013-10-11 11:51 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll

2013-10-11 11:51 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll

2013-10-11 11:51 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys

2013-10-11 11:51 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll

2013-10-11 11:51 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-10-11 11:51 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll

2013-10-11 11:51 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll

2013-10-11 11:51 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll

2013-10-11 11:51 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll

2013-10-11 11:51 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll

2013-10-11 11:50 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys

2013-10-11 11:50 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys

2013-10-11 11:50 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll

2013-10-11 11:50 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll

2013-10-11 11:50 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys

2013-10-11 11:50 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
 

==================== One Month Modified Files and Folders =======
 

2013-11-09 14:22 - 2010-06-28 17:34 - 00001100 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-11-09 14:21 - 2010-08-23 10:43 - 00001128 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1675562717-242507097-1823633445-1000UA.job

2013-11-09 14:20 - 2009-07-14 05:34 - 00010272 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-09 14:20 - 2009-07-14 05:34 - 00010272 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-09 14:16 - 2013-10-22 11:45 - 01089445 _____ (Farbar) C:\Users\tatjana\Desktop\FRST.exe

2013-11-09 14:16 - 2012-04-08 09:30 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job

2013-11-09 14:02 - 2013-11-09 14:02 - 00000000 ____D C:\Users\tatjana\Desktop\FRST alt

2013-11-09 14:00 - 2013-11-09 13:59 - 00000000 ____D C:\Users\tatjana\Desktop\JRT neu

2013-11-09 13:57 - 2013-11-09 13:57 - 00001007 _____ C:\Users\tatjana\Desktop\JRT.txt

2013-11-09 13:48 - 2013-11-09 13:48 - 00000000 ____D C:\windows\ERUNT

2013-11-09 13:27 - 2009-07-26 21:06 - 01498742 _____ C:\windows\system32\PerfStringBackup.INI

2013-11-09 13:25 - 2013-10-20 07:20 - 00000020 _____ C:\Users\Public\Documents\ExitAP.ini

2013-11-09 13:23 - 2010-06-28 17:34 - 00001096 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-11-09 13:22 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT

2013-11-09 13:22 - 2009-07-14 05:39 - 00106994 _____ C:\windows\setupact.log

2013-11-09 13:21 - 2009-08-28 01:32 - 01759344 _____ C:\windows\WindowsUpdate.log

2013-11-09 09:21 - 2013-11-09 09:03 - 00000000 ____D C:\AdwCleaner

2013-11-09 08:04 - 2013-11-09 08:04 - 00001067 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-11-09 08:04 - 2013-11-09 08:04 - 00000000 ____D C:\Users\tatjana\AppData\Roaming\Malwarebytes

2013-11-09 08:04 - 2013-11-09 08:04 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-11-09 08:04 - 2013-11-09 08:04 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2013-11-09 08:02 - 2013-11-09 08:02 - 01034531 _____ (Thisisu) C:\Users\tatjana\Desktop\JRT.exe

2013-11-09 08:01 - 2013-11-09 08:01 - 01073262 _____ C:\Users\tatjana\Desktop\adwcleaner.exe

2013-11-09 07:59 - 2013-11-09 07:59 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\tatjana\Desktop\mbam-setup-1.75.0.1300.exe

2013-11-06 14:51 - 2013-11-06 14:50 - 00169978 _____ C:\Users\tatjana\Desktop\Verbindung.odt

2013-11-06 13:26 - 2009-08-27 10:18 - 00880390 _____ C:\windows\PFRO.log

2013-11-05 09:34 - 2013-11-05 09:34 - 00014097 _____ C:\ComboFix.txt

2013-11-05 09:34 - 2013-11-04 11:55 - 00000000 ____D C:\Qoobox

2013-11-05 09:31 - 2009-07-14 03:04 - 00000215 _____ C:\windows\system.ini

2013-11-05 08:58 - 2012-05-19 17:23 - 00000000 ____D C:\Users\tatjana\AppData\Local\CrashDumps

2013-11-04 12:17 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default

2013-11-04 12:17 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public

2013-11-04 12:15 - 2013-11-04 11:54 - 00000000 ____D C:\windows\erdnt

2013-11-04 12:12 - 2010-03-20 18:54 - 00000000 ____D C:\Users\tatjana

2013-11-04 11:51 - 2013-11-04 11:51 - 05143677 ____R (Swearware) C:\Users\tatjana\Desktop\ComboFix.exe

2013-11-04 10:56 - 2010-03-20 19:07 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-11-04 10:42 - 2013-09-07 12:20 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service

2013-10-22 12:27 - 2013-10-22 12:27 - 00000000 ____D C:\Users\tatjana\Desktop\22.10.13

2013-10-22 12:07 - 2013-10-22 12:06 - 00020156 _____ C:\Users\tatjana\Desktop\Addition.txt

2013-10-22 12:00 - 2013-10-22 12:00 - 00000000 ____D C:\FRST

2013-10-22 11:53 - 2011-09-02 16:40 - 00000000 ____D C:\Users\tatjana\AppData\Local\Mozilla

2013-10-22 11:52 - 2013-10-22 11:51 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-10-22 11:40 - 2010-08-23 10:43 - 00001076 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1675562717-242507097-1823633445-1000Core.job

2013-10-22 11:35 - 2013-10-22 11:35 - 102327253 _____ C:\windows\system32\喚伓ᨬ]

2013-10-20 07:49 - 2010-03-20 19:21 - 00000000 ____D C:\Program Files\Windows Live

2013-10-20 07:24 - 2013-10-20 07:22 - 00000000 ____D C:\Users\tatjana\Desktop\Scans

2013-10-20 07:22 - 2013-10-20 07:20 - 00000000 ____D C:\Users\Public\Documents\DigiScan

2013-10-20 07:20 - 2013-10-20 07:20 - 00000000 ____D C:\Users\Public\Documents\7G3

2013-10-20 07:18 - 2013-10-20 07:18 - 00001846 _____ C:\Users\Public\Desktop\DigiScan.lnk

2013-10-20 07:18 - 2013-10-20 07:18 - 00000000 ____D C:\Program Files\Common Files\iMpacct

2013-10-20 07:18 - 2013-10-20 07:18 - 00000000 ____D C:\Program Files\Common Files\comscan

2013-10-20 07:18 - 2013-10-20 07:17 - 00000000 ____D C:\Program Files\ColorPage-SF600

2013-10-20 07:18 - 2009-08-27 09:35 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

2013-10-20 07:18 - 2009-07-14 05:52 - 00000000 ____D C:\windows\twain_32

2013-10-20 07:18 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system

2013-10-19 20:00 - 2009-07-14 03:37 - 00000000 ____D C:\windows\rescache

2013-10-19 19:31 - 2012-09-20 15:26 - 00002372 _____ C:\Users\tatjana\Desktop\Google Chrome.lnk

2013-10-19 19:17 - 2012-04-08 09:30 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe

2013-10-19 19:17 - 2011-05-22 16:47 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl

2013-10-19 18:52 - 2009-07-14 03:37 - 00000000 ____D C:\windows\Microsoft.NET

2013-10-19 18:36 - 2010-03-20 20:17 - 00000000 ____D C:\Users\tatjana\Tracing

2013-10-19 18:32 - 2010-03-20 19:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-10-19 18:32 - 2009-07-14 05:33 - 00327232 _____ C:\windows\system32\FNTCACHE.DAT

2013-10-19 18:29 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\de-DE

2013-10-19 18:05 - 2013-10-06 16:57 - 00000000 ____D C:\windows\system32\MRT

2013-10-19 17:58 - 2010-03-31 17:09 - 78106760 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

2013-10-19 17:55 - 2013-10-19 17:43 - 00000000 ____D C:\Program Files\HP

2013-10-19 17:53 - 2013-10-19 17:36 - 00001503 _____ C:\ProgramData\hpzinstall.log

2013-10-19 17:36 - 2013-10-19 17:36 - 00000000 ____D C:\ProgramData\HP

2013-10-19 16:55 - 2013-10-19 17:29 - 329011408 _____ C:\Users\tatjana\Desktop\OJ4500vG510g-m_Full_13.exe

2013-10-11 12:01 - 2013-10-11 12:01 - 00015749 _____ C:\Users\tatjana\Desktop\Unbenannt 2.odt
 

Some content of TEMP:

====================

C:\Users\tatjana\AppData\Local\temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-11-04 12:35
 

==================== End Of Log ============================

--- --- ---