Trojaner-Board - Nerviges Werbefenster bei Eingabe auf Webseiten

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-11-2013

Ran by OH (administrator) on OH-VAIO on 21-11-2013 19:22:30

Running from C:\Users\OH\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

() C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe

(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

(mst software GmbH, Germany) C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\DfsdkS64.exe

(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe

(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe

(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe

(ICQ, LLC.) C:\Program Files (x86)\ICQ7.5\ICQ.exe

(SWR3.online) C:\Program Files (x86)\RauchFrei\RauchFrei.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe

(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe

(Huawei Technologies Co., Ltd.) C:\Users\OH\AppData\Roaming\T-Mobile Internet Manager\ouc.exe

(Microsoft) C:\Program Files (x86)\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe

(GoPro) C:\Program Files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe

(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

(Huawei Technologies Co., Ltd.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

(AOL Inc.) C:\Program Files (x86)\Common Files\aol\1357462529\ee\aolsoftware.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 4620 series\Bin\HPNetworkCommunicatorCom.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe

(ALPS) C:\Program Files\Apoint\Apvfb.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe

(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe

(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe

(Microsoft Corporation) C:\Windows\System32\vds.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe

(Microsoft Corporation) C:\Windows\System32\Magnify.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.)

HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790176 2011-03-31] (Atheros Communications)

HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657056 2011-03-31] (Atheros Commnucations)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [HW_OPENEYE_OUC_T-Mobile Internet Manager] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe [110592 2009-06-23] (Huawei Technologies Co., Ltd.)

HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7.5\ICQ.exe [124480 2011-08-01] (ICQ, LLC.)

HKCU\...\Run: [SWR3RauchFrei] - C:\Program Files (x86)\RauchFrei\RauchFrei.exe [895488 2004-04-07] (SWR3.online)

HKCU\...\Run: [HP Officejet 4620 series (NET)] - C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKCU\...\Run: [GarminExpressTrayApp] - C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1093976 2013-09-19] (Garmin Ltd or its subsidiaries)

HKCU\...\Run: [BrowserMask] - C:\Program Files (x86)\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe [101328 2012-08-14] (Microsoft)

HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation)

HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation)

HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-26] (Sony Corporation)

HKLM-x32\...\Run: [DataCardMonitor] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe [253952 2011-07-06] (Huawei Technologies Co., Ltd.)

HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [309688 2012-09-28] (Samsung Electronics Co., Ltd.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [HostManager] - C:\Program Files (x86)\Common Files\aol\1357462529\ee\aolsoftware.exe [41800 2010-03-08] (AOL Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-19] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)

HKLM-x32\...\Run: [QuickTime Plugin Install] - C:\Program Files (x86)\QuickTime\Plugins\DeleteMe1.exe [86016 2013-07-04] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

Startup: C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk

ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

Startup: C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ross-Tech VCDS DRV Updater-PCI.lnk

ShortcutTarget: Ross-Tech VCDS DRV Updater-PCI.lnk -> C:\PCI-Tuning\VCDS-PCI\VCDS.exe (Ross-Tech, LLC)

Startup: C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ross-Tech VCDS DRV Updater.lnk

ShortcutTarget: Ross-Tech VCDS DRV Updater.lnk -> C:\PCI-Tuning\VCDS-PCI\VCDS.exe (Ross-Tech, LLC)

Startup: C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk

ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 4620 series\bin\HPStatusBL.dll (Hewlett-Packard Co.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=UP93&ocid=UP93DHP&dt=053113

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - DefaultScope {06797DD0-B899-40BB-A36C-BF7F382FD418} URL = hxxp://de.shopping.com/?linkin_id=8056363

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {06797DD0-B899-40BB-A36C-BF7F382FD418} URL = hxxp://de.shopping.com/?linkin_id=8056363

SearchScopes: HKCU - {27C0E32C-9041-4E45-9647-D0E3AEBF7103} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-21/4?satitle={searchTerms}

SearchScopes: HKCU - {6083E34B-C277-41EF-8A48-3CF29E852A36} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File

BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default

FF Homepage: https://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\11-suche.xml

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\aol-search.xml

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\ashampoo-de-customized-web-search.xml

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\englische-ergebnisse.xml

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\gmx-suche.xml

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\lastminute.xml

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\webde-suche.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Plus-HD-1.3 - C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\Extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com

FF Extension: Garmin Communicator - C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

FF Extension: AOL Mail Toolbar - C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\Extensions\{fa1cfe8c-66b4-4469-b360-b60c79d70c28}

FF Extension: Adblock Plus - C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: computerbildabzockschutz - C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\Extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}

FF HKCU\...\Firefox\Extensions: [addlyrics@addlyrics.net] - C:\Program Files (x86)\AddLyrics\FF\
 

Chrome: 

=======

CHR DefaultSearchURL: (Bing) - hxxp://www.bing.com/search?setmkt=de-DE&q={searchTerms}

CHR DefaultSuggestURL: (Bing) - hxxp://api.bing.com/osjson.aspx?query={searchTerms}&language={language}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll ()

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\SysWOW64\npDeployJava1.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File

CHR Extension: (Plus-HD-1.3) - C:\Users\OH\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.23.10_0

CHR Extension: (Google Wallet) - C:\Users\OH\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR HKLM-x32\...\Chrome\Extension: [kdlfddggdloaadnphbhejknhaggjaeld] - C:\Program Files (x86)\AddLyrics\Chrome.crx
 

==================== Services (Whitelisted) =================
 

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

R2 AHDDC2; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe [1518504 2012-07-30] ()

R2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [1012280 2013-11-19] (Avira Operations GmbH & Co. KG)

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [948296 2013-10-07] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-07] (Avira Operations GmbH & Co. KG)

R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-03-31] (Atheros)

R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)

R2 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany)

R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)

R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)

R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)

R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)

S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation)

R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)

R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [114608 2013-03-02] (Avira GmbH)

R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [141376 2013-03-02] (Avira GmbH)

R1 avfwot; C:\Windows\SysWow64\DRIVERS\avfwot.sys [131336 2011-06-28] (Avira GmbH)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [106904 2013-11-19] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-19] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)

S2 IWPORT; C:\Windows\SysWow64\DRIVERS\IWPORT.SYS [8152 2011-06-30] (TDi GmbH TechnoData - Interware)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

S3 RT-USB; C:\Windows\System32\drivers\RT-USB64.SYS [70984 2010-06-16] (Ross-Tech LLC)

S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 bnsdusb; system32\DRIVERS\bnsdusb.sys [x]

S3 catchme; \??\C:\ComboFix\catchme.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-11-21 19:22 - 2013-11-21 19:23 - 00027351 _____ C:\Users\OH\Downloads\FRST.txt

2013-11-21 19:22 - 2013-11-21 19:22 - 00000000 ____D C:\FRST

2013-11-21 19:21 - 2013-11-21 19:21 - 01957964 _____ (Farbar) C:\Users\OH\Downloads\FRST64.exe

2013-11-21 19:12 - 2013-11-21 19:12 - 00000000 ___RD C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

2013-11-20 19:34 - 2013-11-20 19:44 - 00000000 ____D C:\Users\OH\Documents\AderlassanalyseHeinz,o.112013

2013-11-20 19:34 - 2013-11-20 19:34 - 00073449 _____ C:\Users\OH\Documents\AderlassanalyseHeinz,o.112013.zip

2013-11-20 07:17 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-11-20 07:17 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-11-20 07:17 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-11-20 07:17 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-11-20 07:15 - 2013-11-20 07:17 - 00004278 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log

2013-11-20 06:16 - 2013-11-20 06:16 - 00836328 _____ C:\Windows\Minidump\112013-22308-01.dmp

2013-11-16 08:23 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2013-11-16 08:18 - 2013-11-16 08:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-16 08:18 - 2013-11-16 08:18 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-16 08:17 - 2013-11-16 08:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-16 08:17 - 2013-11-16 08:17 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-16 08:17 - 2013-11-16 08:17 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-16 08:17 - 2013-11-16 08:17 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-16 08:17 - 2013-11-16 08:17 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-16 08:17 - 2013-11-16 08:17 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-16 08:17 - 2013-11-16 08:17 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-16 08:17 - 2013-11-16 08:17 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-16 08:17 - 2013-11-16 08:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-16 08:17 - 2013-11-16 08:17 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-16 08:16 - 2013-11-16 08:24 - 00010277 _____ C:\Windows\IE11_main.log

2013-11-15 19:04 - 2013-11-15 19:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-14 20:14 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2013-11-14 20:14 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2013-11-14 20:14 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2013-11-14 20:14 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2013-11-14 20:14 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2013-11-14 20:14 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-11-14 20:14 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-11-14 20:14 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll

2013-11-14 20:14 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll

2013-11-14 20:14 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2013-11-14 20:14 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll

2013-11-14 20:14 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-11-14 20:14 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll

2013-11-14 20:14 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2013-11-14 20:14 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2013-11-14 20:14 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-11-14 20:14 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2013-11-14 20:14 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2013-11-14 20:14 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2013-11-14 20:14 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2013-11-14 20:14 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2013-11-14 20:14 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2013-11-14 20:14 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2013-11-14 20:14 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2013-11-14 20:14 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2013-11-14 20:14 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2013-11-14 20:14 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2013-11-14 20:14 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2013-11-14 20:14 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2013-11-14 20:14 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2013-11-14 20:04 - 2013-11-14 20:04 - 00168093 _____ C:\Users\OH\Documents\Vorgang3tui

2013-11-02 13:46 - 2013-11-02 13:48 - 11340607 _____ (DJI                                                         ) C:\Users\OH\Downloads\NAZAM_2.20_Installer (1).exe

2013-10-30 22:29 - 2013-10-30 22:29 - 00810866 _____ (DJI                                                         ) C:\Users\OH\Downloads\DJI_Driver_Installer(1).exe

2013-10-30 22:09 - 2013-10-30 22:09 - 00000000 _____ C:\Windows\SysWOW64\sho792C.tmp

2013-10-30 21:34 - 2013-10-30 21:34 - 00810866 _____ (DJI                                                         ) C:\Users\OH\Downloads\DJI_Driver_Installer.exe

2013-10-30 21:27 - 2013-11-02 13:49 - 00001222 _____ C:\Users\Public\Desktop\DJI NAZAM Assistant_2.20.lnk

2013-10-30 21:27 - 2013-10-30 21:35 - 00000000 ____D C:\Program Files (x86)\DJI Product

2013-10-30 21:25 - 2013-10-30 21:26 - 11340607 _____ (DJI                                                         ) C:\Users\OH\Downloads\NAZAM_2.20_Installer.exe

2013-10-30 19:26 - 2013-10-30 19:26 - 00000000 ____D C:\Users\OH\Documents\Drone

2013-10-30 19:23 - 2013-10-30 19:26 - 16945052 _____ C:\Users\OH\Documents\Drone.zip

2013-10-29 14:28 - 2013-10-29 14:28 - 00174343 _____ C:\Users\OH\Documents\MDCarBroker_1286539-01_2013-10-29_13-49-7.zip

2013-10-29 14:28 - 2013-10-29 14:28 - 00000000 ____D C:\Users\OH\Documents\MDCarBroker_1286539-01_2013-10-29_13-49-7

2013-10-29 07:00 - 2013-10-29 07:00 - 00039653 _____ C:\Users\OH\Documents\MDCarBroker_9531023-01_2013-9-17_16-30-13.zip

2013-10-29 07:00 - 2013-10-29 07:00 - 00000000 ____D C:\Users\OH\Documents\MDCarBroker_9531023-01_2013-9-17_16-30-13

2013-10-29 06:56 - 2013-10-29 06:56 - 00012785 _____ C:\Users\OH\Documents\Rechnung1 drohne34497.htm

2013-10-28 06:12 - 2013-10-28 06:13 - 00837456 _____ C:\Windows\Minidump\102813-29780-01.dmp
 

==================== One Month Modified Files and Folders =======
 

2013-11-21 19:23 - 2013-11-21 19:22 - 00027351 _____ C:\Users\OH\Downloads\FRST.txt

2013-11-21 19:22 - 2013-11-21 19:22 - 00000000 ____D C:\FRST

2013-11-21 19:21 - 2013-11-21 19:21 - 01957964 _____ (Farbar) C:\Users\OH\Downloads\FRST64.exe

2013-11-21 19:20 - 2009-07-14 05:45 - 00020928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-21 19:20 - 2009-07-14 05:45 - 00020928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-21 19:17 - 2011-06-09 18:14 - 01641651 _____ C:\Windows\WindowsUpdate.log

2013-11-21 19:15 - 2011-06-09 19:21 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2AD172AF-193F-4FFD-B26F-A47DC864C1B4}

2013-11-21 19:15 - 2011-04-21 07:42 - 00697534 _____ C:\Windows\system32\perfh007.dat

2013-11-21 19:15 - 2011-04-21 07:42 - 00148540 _____ C:\Windows\system32\perfc007.dat

2013-11-21 19:15 - 2009-07-14 06:13 - 01614892 _____ C:\Windows\system32\PerfStringBackup.INI

2013-11-21 19:13 - 2012-12-18 20:48 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-11-21 19:13 - 2011-06-09 22:07 - 00000000 ____D C:\Users\OH\AppData\Roaming\ICQ

2013-11-21 19:12 - 2013-11-21 19:12 - 00000000 ___RD C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

2013-11-21 19:12 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing

2013-11-21 19:11 - 2012-12-18 20:48 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-11-21 19:11 - 2012-07-01 17:38 - 00065536 _____ C:\Windows\system32\Ikeext.etl

2013-11-21 19:11 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-11-21 19:11 - 2009-07-14 05:51 - 00111305 _____ C:\Windows\setupact.log

2013-11-21 19:09 - 2011-06-18 09:00 - 00000000 ____D C:\Users\OH\AppData\Roaming\SoftGrid Client

2013-11-21 19:06 - 2012-04-02 21:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-11-20 19:44 - 2013-11-20 19:34 - 00000000 ____D C:\Users\OH\Documents\AderlassanalyseHeinz,o.112013

2013-11-20 19:34 - 2013-11-20 19:34 - 00073449 _____ C:\Users\OH\Documents\AderlassanalyseHeinz,o.112013.zip

2013-11-20 18:19 - 2011-06-20 14:12 - 00000000 ____D C:\Users\OH\AppData\Local\CrashDumps

2013-11-20 18:18 - 2013-09-19 13:17 - 00000000 ____D C:\ProgramData\Oracle

2013-11-20 07:17 - 2013-11-20 07:15 - 00004278 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log

2013-11-20 07:17 - 2011-04-20 22:02 - 00000000 ____D C:\Program Files (x86)\Java

2013-11-20 06:55 - 2010-11-21 04:47 - 00456228 _____ C:\Windows\PFRO.log

2013-11-20 06:16 - 2013-11-20 06:16 - 00836328 _____ C:\Windows\Minidump\112013-22308-01.dmp

2013-11-20 06:16 - 2013-04-29 08:23 - 462454831 _____ C:\Windows\MEMORY.DMP

2013-11-20 06:16 - 2013-04-29 08:23 - 00000000 ____D C:\Windows\Minidump

2013-11-20 06:16 - 2012-04-27 23:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-11-19 12:26 - 2013-03-21 16:21 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-11-19 12:26 - 2013-03-21 16:21 - 00106904 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-11-18 02:29 - 2011-06-24 22:51 - 00000000 ____D C:\Users\OH\AppData\Roaming\Skype

2013-11-16 11:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-11-16 08:58 - 2011-06-09 19:20 - 00001468 _____ C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-11-16 08:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-11-16 08:24 - 2013-11-16 08:16 - 00010277 _____ C:\Windows\IE11_main.log

2013-11-16 08:18 - 2013-11-16 08:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-16 08:18 - 2013-11-16 08:18 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-16 08:17 - 2013-11-16 08:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-16 08:17 - 2013-11-16 08:17 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-16 08:17 - 2013-11-16 08:17 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-16 08:17 - 2013-11-16 08:17 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-16 08:17 - 2013-11-16 08:17 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-16 08:17 - 2013-11-16 08:17 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-16 08:17 - 2013-11-16 08:17 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-16 08:17 - 2013-11-16 08:17 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-16 08:17 - 2013-11-16 08:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-16 08:17 - 2013-11-16 08:17 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-15 19:26 - 2013-07-27 08:11 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-11-15 19:05 - 2013-11-15 19:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-15 00:24 - 2013-07-23 09:07 - 00000000 ____D C:\Windows\system32\MRT

2013-11-15 00:22 - 2011-06-10 19:33 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-11-14 23:39 - 2011-06-24 22:51 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-11-14 23:39 - 2011-04-20 22:52 - 00000000 ____D C:\ProgramData\Skype

2013-11-14 23:23 - 2011-07-14 09:01 - 00018526 _____ C:\test.xml

2013-11-14 22:24 - 2011-06-09 19:21 - 00000000 ____D C:\Users\OH\AppData\Local\Adobe

2013-11-14 22:23 - 2012-04-02 21:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-11-14 22:23 - 2012-04-02 21:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-11-14 22:23 - 2011-06-19 09:51 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-11-14 22:18 - 2011-06-09 19:21 - 00000000 ____D C:\Users\OH\AppData\Roaming\Atheros

2013-11-14 20:04 - 2013-11-14 20:04 - 00168093 _____ C:\Users\OH\Documents\Vorgang3tui

2013-11-02 16:37 - 2012-06-19 19:10 - 00000000 ____D C:\ProgramData\POIbase

2013-11-02 15:31 - 2011-12-03 16:21 - 00000000 ____D C:\Program Files (x86)\POIbase

2013-11-02 13:49 - 2013-10-30 21:27 - 00001222 _____ C:\Users\Public\Desktop\DJI NAZAM Assistant_2.20.lnk

2013-11-02 13:48 - 2013-11-02 13:46 - 11340607 _____ (DJI                                                         ) C:\Users\OH\Downloads\NAZAM_2.20_Installer (1).exe

2013-11-02 10:47 - 2011-06-09 19:21 - 00000000 ____D C:\Users\OH\Documents\Bluetooth Folder

2013-10-30 22:31 - 2011-04-20 21:57 - 00136328 _____ C:\Windows\DPINST.LOG

2013-10-30 22:29 - 2013-10-30 22:29 - 00810866 _____ (DJI                                                         ) C:\Users\OH\Downloads\DJI_Driver_Installer(1).exe

2013-10-30 22:09 - 2013-10-30 22:09 - 00000000 _____ C:\Windows\SysWOW64\sho792C.tmp

2013-10-30 21:35 - 2013-10-30 21:27 - 00000000 ____D C:\Program Files (x86)\DJI Product

2013-10-30 21:34 - 2013-10-30 21:34 - 00810866 _____ (DJI                                                         ) C:\Users\OH\Downloads\DJI_Driver_Installer.exe

2013-10-30 21:26 - 2013-10-30 21:25 - 11340607 _____ (DJI                                                         ) C:\Users\OH\Downloads\NAZAM_2.20_Installer.exe

2013-10-30 19:26 - 2013-10-30 19:26 - 00000000 ____D C:\Users\OH\Documents\Drone

2013-10-30 19:26 - 2013-10-30 19:23 - 16945052 _____ C:\Users\OH\Documents\Drone.zip

2013-10-29 14:28 - 2013-10-29 14:28 - 00174343 _____ C:\Users\OH\Documents\MDCarBroker_1286539-01_2013-10-29_13-49-7.zip

2013-10-29 14:28 - 2013-10-29 14:28 - 00000000 ____D C:\Users\OH\Documents\MDCarBroker_1286539-01_2013-10-29_13-49-7

2013-10-29 07:00 - 2013-10-29 07:00 - 00039653 _____ C:\Users\OH\Documents\MDCarBroker_9531023-01_2013-9-17_16-30-13.zip

2013-10-29 07:00 - 2013-10-29 07:00 - 00000000 ____D C:\Users\OH\Documents\MDCarBroker_9531023-01_2013-9-17_16-30-13

2013-10-29 06:56 - 2013-10-29 06:56 - 00012785 _____ C:\Users\OH\Documents\Rechnung1 drohne34497.htm

2013-10-28 06:13 - 2013-10-28 06:12 - 00837456 _____ C:\Windows\Minidump\102813-29780-01.dmp

2013-10-23 09:43 - 2012-08-22 00:22 - 00000000 ____D C:\Users\OH\Desktop\DIPLO2
 

Some content of TEMP:

====================

C:\Users\OH\AppData\Local\Temp\avgnt.exe

C:\Users\OH\AppData\Local\Temp\doxillionsetup.exe

C:\Users\OH\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe

C:\Users\OH\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe

C:\Users\OH\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-11-20 09:57
 

==================== End Of Log ============================

--- --- ---

Und das Zweite

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-11-2013

Ran by OH at 2013-11-21 19:24:23

Running from C:\Users\OH\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

64 Bit HP CIO Components Installer (Version: 7.2.8)

7-Zip 9.20 (x32)

Adobe Community Help (x32 Version: 3.2.1)

Adobe Community Help (x32 Version: 3.2.1.650)

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)

Adobe Photoshop Elements 9 (x32 Version: 9.0)

Adobe Premiere Elements 9 (x32 Version: 9.0)

Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)

Alps Pointing-device for VAIO

AntiBrowserSpy (x32 Version: 4.0.110)

AOL Deinstallation (x32)

AOL Mail Toolbar (HKCU)

AOL Uninstaller (Choose which Products to Remove) (x32)

Apple Application Support (x32 Version: 2.3.4)

Apple Mobile Device Support (Version: 3.4.1.2)

Apple Software Update (x32 Version: 2.1.3.127)

ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.142)

ArcSoft WebCam Companion 4 (x32 Version: 4.0.21.392)

Ashampoo HDD Control 2 v.2.1.0 (x32 Version: 2.1.0)

Atheros WiFi Driver Installation (x32 Version: 3.0)

Avira Internet Security (x32 Version: 14.0.1.719)

Bing Bar (x32 Version: 7.0.610.0)

Bing-Desktop (x32 Version: 1.3.171.0)

Bingo M [4.02a] (x32)

Bingo S [3.07a] (x32)

Bluetooth Win7 Suite (64) (Version: 7.3.0.95)

Bonjour (Version: 2.0.5.0)

CDBurnerXP (x32 Version: 4.4.0.2905)

COMPUTERBILD-Abzockschutz (x32 Version: 1.0.42)

Conexant HD Audio (Version: 8.54.0.53)

D3DX10 (x32 Version: 15.4.2368.0902)

DivX 4.02 Codec (x32)

DJ_SF_06_D1600_SW_Min (x32 Version: 140.0.690.000)

DJI driver version 1.0 (x32 Version: 1.0)

DJI NAZAM Assistant version 2.20 (x32 Version: 2.20)

DMUninstaller (x32)

Doxillion Dokumentkonverter (x32)

Elements 9 Organizer (x32 Version: 9.0)

Elements STI Installer (x32 Version: 1.0)

Elevated Installer (x32 Version: 2.3.14.0)

ESET Online Scanner v3 (x32)

ffdshow [rev 2527] [2008-12-19] (x32 Version: 1.0)

Firebird SQL Server - MAGIX Edition (x32 Version: 2.1.31.0)

Fotogalerie (x32 Version: 16.4.3508.0205)

Freeware Edition (Version 0.4.0.0) (x32)

FwD Updater 1.4 (x32 Version: 1.4)

Garmin City Navigator Europe (Unicode) NT 2013.30 Update (x32 Version: 16.30.0.0)

Garmin Express (x32 Version: 2.3.14.0)

Garmin Express Tray (x32 Version: 2.3.14.0)

Garmin POI Loader (x32 Version: 2.7.1)

Garmin USB Drivers (x32 Version: 2.3.0.0)

Google Chrome (x32 Version: 31.0.1650.57)

Google Earth (x32 Version: 7.1.1.1888)

Google Update Helper (x32 Version: 1.3.21.165)

GoPro Studio 2.0.0 (x32 Version: 2.0.0)

GSA AV Guard v3.2.6 (x32 Version: 3.2.6)

Haali Media Splitter (x32)

HP Deskjet D1600 Printer Driver 14.0 Rel. 6 (Version: 14.0)

HP Officejet 4620 series - Grundlegende Software für das Gerät (Version: 28.0.1315.0)

HP Officejet 4620 series Hilfe (x32 Version: 6.0.0)

HP Photo Creations (x32 Version: 1.0.0.9572)

HP Update (x32 Version: 5.003.003.001)

HPDiagnosticAlert (x32 Version: 1.00.0000)

I.R.I.S. OCR (x32 Version: 12.3.4.0)

ICQ7.5 (x32 Version: 7.5)

Intel(R) Control Center (x32 Version: 1.2.1.1007)

Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)

Intel(R) Processor Graphics (x32 Version: 8.15.10.2291)

Intel(R) Rapid Storage Technology (x32 Version: 10.0.0.1046)

iPrivo 0.55 (x32 Version: 0.55)

iTunes (Version: 10.3.1.55)

Java 7 Update 45 (x32 Version: 7.0.450)

Java Auto Updater (x32 Version: 2.1.9.8)

JDownloader 0.9 (x32 Version: 0.9)

Junk Mail filter update (x32 Version: 16.4.3508.0205)

MAGIX Speed burnR (MSI) (Version: 7.0.2.6)

MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6)

MAGIX Video deluxe 2013 (Version: 12.0.0.32)

MAGIX Video deluxe 2013 (x32 Version: 12.0.0.32)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

McAfee Security Scan Plus (x32 Version: 3.0.318.3)

Media Gallery (Version: 1.5.0.16020)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)

Microsoft .NET Framework 4 Extended (Version: 4.0.30320)

Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30320)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Office 2010 (x32 Version: 14.0.4763.1000)

Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)

Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)

Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft SkyDrive (HKCU Version: 17.0.2003.1112)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft VC9 runtime libraries (x32 Version: 1.0.0)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)

Movie Maker (x32 Version: 16.4.3508.0205)

Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)

Mozilla Maintenance Service (x32 Version: 25.0.1)

Mozilla Thunderbird 17.0.6 (x86 de) (x32 Version: 17.0.6)

MSVCRT (x32 Version: 15.4.2862.0708)

MSVCRT_amd64 (x32 Version: 15.4.2862.0708)

MSVCRT110 (x32 Version: 16.4.1108.0727)

MSVCRT110_amd64 (Version: 16.4.1109.0912)

MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)

MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)

MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)

MyFreeCodec (HKCU)

Network Stumbler 0.4.0 (remove only) (x32)

Netzmanager (Version: 1.071)

Netzmanager (x32 Version: 1.071)

OpenOffice.org 3.3 (x32 Version: 3.3.9567)

PantsOff 2.0 (x32 Version: 2.0)

Photo Common (x32 Version: 16.4.3508.0205)

Photo Gallery (x32 Version: 16.4.3508.0205)

PMB (x32 Version: 5.5.02.12220)

PMB VAIO Edition Plug-in (Version: 1.5.10.05300)

PMB VAIO Edition Plug-in (x32 Version: 1.5.00.02250)

PMB VAIO Edition Plug-in (x32 Version: 1.5.10.06150)

POIbase 1.041 (x32)

Prism Videodatei-Konverter (x32)

Quick Web Access (x32 Version: 1.4.6.9)

QuickTime (x32 Version: 7.74.80.86)

Realtek PCIE Card Reader (x32 Version: 6.1.7601.92)

Remote Keyboard (x32 Version: 1.1.1.03020)

Remote Play with PlayStation 3 (x32 Version: 1.1.0.15070)

Samsung Kies (x32 Version: 2.0.3.11082_152)

SAMSUNG USB Driver for Mobile Phones (Version: 1.5.15.0)

ScanMaster-ELM 2.1.104.771 (Version: 2.1.104.771)

ScanMaster-ELM 2.1.104.771 DEMO (Version: 2.1.104.771)

Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (x32)

Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista (x32 Version: 5.40.24)

Silicon Laboratories CP210x VCP Drivers for Windows 2000/XP/2003 Server/Vista_2 (c:\SiLabs\MCU\CP210x\Windows_2K_XP_S2K3_Vista_2) (x32 Version: 5.40.24)

Silicon Laboratories CP210x VCP Drivers for Windows 7 (x32 Version: 5.40.24)

Skype Click to Call (x32 Version: 5.6.8442)

Skype™ 6.10 (x32 Version: 6.10.104)

SmartSound Quicktracks for Premiere Elements 9.0 (x32 Version: 3.12.3090)

Sony Corporation (Version: 1.0.0)

Sony RAW Driver (x32 Version: 2.0.00.08130)

SSLx64 (Version: 1.0.0)

SSLx86 (x32 Version: 1.0.0)

Studie zur Verbesserung von HP Officejet 4620 series Produkten (Version: 28.0.1315.0)

SugarSync Manager (HKCU)

SWR3 RauchFrei Version 1.2 (x32 Version: 1.1)

TinyPic (x32)

T-Mobile Internet Manager (x32 Version: 11.301.05.17.55)

Toolbox (x32 Version: 140.0.428.000)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)

VAIO - Media Gallery (x32 Version: 1.5.0.16020)

VAIO - PMB VAIO Edition Guide (x32 Version: 1.5.00.02250)

VAIO - PMB VAIO Edition Plug-in (x32 Version: 1.6.10.11160)

VAIO - Remote Play mit PlayStation®3 (x32 Version: 1.1.0.15070)

VAIO - Remote-Tastatur  (x32 Version: 1.0.1.03020)

VAIO Care (x32 Version: 6.4.1.05290)

VAIO Control Center (x32 Version: 4.5.0.03040)

VAIO Data Restore Tool (x32 Version: 1.6.0.13140)

VAIO Easy Connect (x32 Version: 1.1.2.01120)

VAIO Event Service (x32 Version: 5.5.0.03040)

VAIO Gate (x32 Version: 2.4.0.06210)

VAIO Gate Default (x32 Version: 2.4.0.03240)

VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280)

VAIO Hero Screensaver - Summer 2011 Screensaver (x32)

VAIO Improvement (x32 Version: 1.0.0.14150)

VAIO Improvement Validation (Version: 1.0.4.01190)

VAIO Sample Contents (x32 Version: 1.4.2.09010)

VAIO Smart Network (x32 Version: 3.5.0.02280)

VAIO Update (x32 Version: 6.1.1.10250)

VAIO-Handbuch (x32 Version: 2.0.0.02250)

VAIO-Support für Übertragungen (x32 Version: 1.4.0.14230)

VCCx86 (x32 Version: 1.0.0)

VCDS PCI 12.12 (x32 Version: PCI 12.12)

VESx64 (Version: 1.0.0)

VESx86 (x32 Version: 1.0.0)

VideoPad Videobearbeitungs-Software (x32)

VIx64 (Version: 1.0.0)

VIx86 (x32 Version: 1.0.0)

VLC media player 2.0.6 (Version: 2.0.6)

VLC media player 2.0.8 (x32 Version: 2.0.8)

VSNx64 (Version: 1.0.0)

VU5x64 (Version: 1.1.0)

VU5x86 (x32 Version: 1.0.0)

VU5x86 (x32 Version: 1.1.0)

VWSTx86 (x32 Version: 1.0.0)

WavePad Audiobearbeitungs-Software (x32)

Webasto Thermo Test 2.15 (x32 Version: 2.15)

WebastoThermoTest (x32 Version: 2.09.0)

WebastoThermoTestGB (x32 Version: 1.0.0)

Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (Version: 06/03/2009 2.3.0.0)

Windows Driver Package - GoPro (WinUSB) Universal Serial Bus devices  (03/07/2012 ) (Version: 03/07/2012 )

Windows Live Communications Platform (x32 Version: 16.4.3508.0205)

Windows Live Essentials (x32 Version: 15.4.3502.0922)

Windows Live Essentials (x32 Version: 16.4.3508.0205)

Windows Live Family Safety (Version: 16.4.3508.0205)

Windows Live Family Safety (x32 Version: 16.4.3508.0205)

Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)

Windows Live Installer (x32 Version: 16.4.3508.0205)

Windows Live Mail (x32 Version: 15.4.3502.0922)

Windows Live Mail (x32 Version: 16.4.3508.0205)

Windows Live Messenger (x32 Version: 15.4.3538.0513)

Windows Live Messenger (x32 Version: 16.4.3508.0205)

Windows Live MIME IFilter (Version: 16.4.3508.0205)

Windows Live Movie Maker (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 15.4.3502.0922)

Windows Live Photo Common (x32 Version: 16.4.3508.0205)

Windows Live PIMT Platform (x32 Version: 16.4.3508.0205)

Windows Live SOXE (x32 Version: 16.4.3508.0205)

Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205)

Windows Live UX Platform (x32 Version: 16.4.3508.0205)

Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)

Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205)

Windows Live Writer (x32 Version: 15.4.3502.0922)

Windows Live Writer (x32 Version: 16.4.3508.0205)

Windows Live Writer Resources (x32 Version: 15.4.3502.0922)

Windows Live Writer Resources (x32 Version: 16.4.3508.0205)

Windows-Treiberpaket - Auto-Intern Virtueller COM-Port-Treiber (03/30/2010 2.06.02) (Version: 03/30/2010 2.06.02)

Windows-Treiberpaket - dji-innovations inc. (usbser) Ports  (01/19/2011 5.1.2600.5512) (Version: 01/19/2011 5.1.2600.5512)

Windows-Treiberpaket - Ross-Tech USB Driver Package (06/16/2010 2.06.02) (Version: 06/16/2010 2.06.02)

WinRAR 4.01 (32-Bit) (x32 Version: 4.01.0)

WMBackup - Windows Live Mail Backup (x32 Version: 2.70)

XMedia Recode Version 3.1.5.3 (x32 Version: 3.1.5.3)

XnView 1.99 (x32 Version: 1.99)
 

==================== Restore Points  =========================
 

20-11-2013 06:14:27 Installed Java 7 Update 45

20-11-2013 22:00:01 Windows-Sicherung
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2013-05-21 22:32 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {10F71B85-CD36-4B16-8CDE-B82A385212A9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-18] (Google Inc.)

Task: {23CCFEE6-868C-422F-9512-2D70F1FA5D0A} - System32\Tasks\HPCustParticipation HP Officejet 4620 series => C:\Program Files\HP\HP Officejet 4620 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)

Task: {40056D60-EFB0-47DF-9702-513B3F18BB9D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-14] (Adobe Systems Incorporated)

Task: {44971141-47D6-467A-A61C-3D9757CC0306} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation)

Task: {4594B4F2-8528-485D-917C-8BA9B2449886} - System32\Tasks\{934DA9B0-864F-44C6-989A-97AE4693B8D5} => Chrome.exe hxxp://ui.skype.com/ui/0/6.3.73.105.457/de/abandoninstall?page=tsMain

Task: {4B45AC49-E392-440F-8EF7-741FB3360AF7} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation)

Task: {55C2DA69-EBB1-4A01-A36B-91A0D32471DE} - System32\Tasks\AdobeAAMUpdater-1.0-OH-VAIO-OH => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2010-07-29] (Adobe Systems Incorporated)

Task: {751F5D6E-4D3A-4E3C-8774-C97FAD39D188} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {77BD8485-F7A8-42B9-974A-E02DB4F2D9A5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-18] (Google Inc.)

Task: {8BE9541E-0C1E-42CD-8EEC-C167625D4274} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {9AF21C0C-1CF5-471C-B922-2A3D240A8822} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation)

Task: {B928EDEF-E266-4756-B4D9-746146CBED2E} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-06-21] (Sony Corporation)

Task: {BD9EE8CF-C7BA-420A-8800-0647267AFAA2} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation)

Task: {CEC1015D-320D-4FEC-8378-0275EC8C78E6} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClient

Task: {D1C04030-534B-4423-9C6F-3ACA8094968A} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-06-21] (Sony Corporation)

Task: {DF3B4483-CD12-4D7B-9F08-DD4E2075B86E} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation)

Task: {F7B9DF50-C042-4BDB-BEAC-54D829B752E3} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2011-06-13 22:32 - 2011-05-28 21:05 - 00164864 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll

2011-03-30 02:46 - 2011-03-29 09:47 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2013-04-27 20:11 - 2012-08-14 15:19 - 07027664 _____ () C:\Program Files (x86)\AntiBrowserSpy\Commons.dll

2013-04-27 20:11 - 2012-08-14 15:19 - 00177616 _____ () C:\Program Files (x86)\AntiBrowserSpy\AbBrowserLibs.dll

2013-04-27 20:11 - 2012-08-14 15:19 - 00028112 _____ () C:\Program Files (x86)\AntiBrowserSpy\VersionInfo.dll

2013-04-27 20:11 - 2012-08-14 15:19 - 00012752 _____ () C:\Program Files (x86)\AntiBrowserSpy\AbProcessManager.dll

2013-03-02 21:14 - 2013-03-02 21:09 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

2011-04-20 22:05 - 2011-03-05 15:42 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll

2012-08-07 22:38 - 2008-12-19 17:26 - 02625536 _____ () C:\Program Files (x86)\ffdshow\ffdshow.ax

2011-01-17 15:19 - 2011-06-23 20:53 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll

2013-03-02 21:14 - 2013-03-02 21:09 - 00447848 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\libxml2.dll

2013-03-02 21:14 - 2013-03-02 21:08 - 00060264 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\cares.dll

2013-08-15 15:50 - 2013-08-15 15:50 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\cd9a4b4dbc1a4b564ebed696e18cadb6\IsdiInterop.ni.dll

2011-04-20 21:53 - 2010-09-13 17:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

2013-11-15 19:04 - 2013-11-15 19:05 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2013-11-14 22:23 - 2013-11-14 22:23 - 16237448 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\TEMP:054203E4
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 

Name: Bluetooth-Peripheriegerät

Description: Bluetooth-Peripheriegerät

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (11/21/2013 07:07:48 PM) (Source: Application Hang) (User: )

Description: Programm Explorer.exe, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 120c
 

Startzeit: 01cee6e46eada87d
 

Endzeit: 82
 

Anwendungspfad: C:\Windows\Explorer.exe
 

Berichts-ID: c8153589-52d7-11e3-94a1-ec86004786b2
 

Error: (11/21/2013 07:06:42 PM) (Source: Application Hang) (User: )

Description: Programm explorer.exe, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 5398
 

Startzeit: 01cee6e4606b16d9
 

Endzeit: 111
 

Anwendungspfad: C:\Windows\explorer.exe
 

Berichts-ID: a7b67323-52d7-11e3-94a1-ec86004786b2
 

Error: (11/21/2013 07:06:18 PM) (Source: Application Hang) (User: )

Description: Programm explorer.exe, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 2c80
 

Startzeit: 01cee6e42f6081f5
 

Endzeit: 0
 

Anwendungspfad: C:\Windows\explorer.exe
 

Berichts-ID: 99b8b3b1-52d7-11e3-94a1-ec86004786b2
 

Error: (11/21/2013 07:04:56 PM) (Source: Application Hang) (User: )

Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 10a0
 

Startzeit: 01cee5b53871cdb1
 

Endzeit: 0
 

Anwendungspfad: C:\Windows\Explorer.EXE
 

Berichts-ID: 4abbf8ac-52d7-11e3-94a1-ec86004786b2
 

Error: (11/20/2013 06:19:11 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: waol.exe, Version: 9.5.0.1, Zeitstempel: 0x4655457d

Name des fehlerhaften Moduls: waol.dll, Version: 9.5.0.1, Zeitstempel: 0x46554579

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001a6a3

ID des fehlerhaften Prozesses: 0x33d8

Startzeit der fehlerhaften Anwendung: 0xwaol.exe0

Pfad der fehlerhaften Anwendung: waol.exe1

Pfad des fehlerhaften Moduls: waol.exe2

Berichtskennung: waol.exe3
 

Error: (11/20/2013 06:18:24 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: waol.exe, Version: 9.5.0.1, Zeitstempel: 0x4655457d

Name des fehlerhaften Moduls: waol.dll, Version: 9.5.0.1, Zeitstempel: 0x46554579

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0001a6a3

ID des fehlerhaften Prozesses: 0x3608

Startzeit der fehlerhaften Anwendung: 0xwaol.exe0

Pfad der fehlerhaften Anwendung: waol.exe1

Pfad des fehlerhaften Moduls: waol.exe2

Berichtskennung: waol.exe3
 

Error: (11/20/2013 10:01:43 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (11/20/2013 09:57:34 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 

Error: (11/19/2013 00:58:55 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (11/19/2013 00:55:27 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.

Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig.
 
 

System errors:

=============

Error: (11/21/2013 07:11:12 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "IWPORT" ist von der Gruppe "Parallel arbitrator" abhängig. Kein Mitglied dieser Gruppe wurde jedoch gestartet.
 

Error: (11/21/2013 07:09:17 PM) (Source: DCOM) (User: )

Description: {9F070738-F6EA-408A-A6BD-AED405E67A13}
 

Error: (11/21/2013 06:59:17 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (11/21/2013 06:59:17 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Avira Browser-Schutz" ist vom Dienst "Avira Echtzeit-Scanner" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%0
 

Error: (11/21/2013 06:59:17 PM) (Source: Service Control Manager) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 

Error: (11/21/2013 06:59:16 PM) (Source: Service Control Manager) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 

Error: (11/21/2013 06:58:41 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Avira Echtzeit-Scanner" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (11/21/2013 06:57:58 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Garmin Core Update Service erreicht.
 

Error: (11/21/2013 06:59:20 AM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Garmin Core Update Service erreicht.
 

Error: (11/20/2013 06:55:31 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "IWPORT" ist von der Gruppe "Parallel arbitrator" abhängig. Kein Mitglied dieser Gruppe wurde jedoch gestartet.
 
 

Microsoft Office Sessions:

=========================

Error: (11/21/2013 07:07:48 PM) (Source: Application Hang)(User: )

Description: Explorer.exe6.1.7601.17567120c01cee6e46eada87d82C:\Windows\Explorer.exec8153589-52d7-11e3-94a1-ec86004786b2
 

Error: (11/21/2013 07:06:42 PM) (Source: Application Hang)(User: )

Description: explorer.exe6.1.7601.17567539801cee6e4606b16d9111C:\Windows\explorer.exea7b67323-52d7-11e3-94a1-ec86004786b2
 

Error: (11/21/2013 07:06:18 PM) (Source: Application Hang)(User: )

Description: explorer.exe6.1.7601.175672c8001cee6e42f6081f50C:\Windows\explorer.exe99b8b3b1-52d7-11e3-94a1-ec86004786b2
 

Error: (11/21/2013 07:04:56 PM) (Source: Application Hang)(User: )

Description: Explorer.EXE6.1.7601.1756710a001cee5b53871cdb10C:\Windows\Explorer.EXE4abbf8ac-52d7-11e3-94a1-ec86004786b2
 

Error: (11/20/2013 06:19:11 PM) (Source: Application Error)(User: )

Description: waol.exe9.5.0.14655457dwaol.dll9.5.0.146554579c00000050001a6a333d801cee614a09b52d5C:\Program Files (x86)\AOL 9.0 VRa\waol.exeC:\Program Files (x86)\AOL 9.0 VRa\waol.dlldea74cd4-5207-11e3-94a1-ec86004786b2
 

Error: (11/20/2013 06:18:24 PM) (Source: Application Error)(User: )

Description: waol.exe9.5.0.14655457dwaol.dll9.5.0.146554579c00000050001a6a3360801cee61483e11506C:\Program Files (x86)\AOL 9.0 VRa\waol.exeC:\Program Files (x86)\AOL 9.0 VRa\waol.dllc28580b1-5207-11e3-94a1-ec86004786b2
 

Error: (11/20/2013 10:01:43 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe
 

Error: (11/20/2013 09:57:34 AM) (Source: SideBySide)(User: )

Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2
 

Error: (11/19/2013 00:58:55 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\program files (x86)\ESET\eset online scanner\ESETSmartInstaller.exe
 

Error: (11/19/2013 00:55:27 PM) (Source: SideBySide)(User: )

Description: C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exeC:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe2
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-05-21 23:32:12.169

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-05-21 23:32:12.095

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 57%

Total physical RAM: 4043.86 MB

Available physical RAM: 1721.03 MB

Total Pagefile: 8085.9 MB

Available Pagefile: 5138.38 MB

Total Virtual: 8192 MB

Available Virtual: 8191.8 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:448.64 GB) (Free:292.87 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 55A4F08D)

Partition 1: (Not Active) - (Size=17 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=449 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.11.20.03
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16428

OH :: OH-VAIO [Administrator]
 

22.11.2013 16:21:05

mbam-log-2013-11-22 (16-21-05).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 221313

Laufzeit: 12 Minute(n), 6 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

Nummer 2

Code:

# AdwCleaner v3.012 - Bericht erstellt am 22/11/2013 um 16:45:38

# Updated 11/11/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : OH - OH-VAIO

# Gestartet von : C:\Users\OH\Downloads\adwcleaner(2).exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\NCH Software

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue\SpeedUpMyPC

Ordner Gelöscht : C:\Program Files (x86)\myfree codec

Ordner Gelöscht : C:\Program Files (x86)\NCH Software

Ordner Gelöscht : C:\Program Files (x86)\Uniblue\SpeedUpMyPC

Ordner Gelöscht : C:\Users\OH\AppData\Roaming\NCH Software

Ordner Gelöscht : C:\Users\OH\AppData\Roaming\Uniblue\SpeedUpMyPC

Datei Gelöscht : C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\11-suche.xml
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_avira-antivir-professional_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_avira-antivir-professional_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_garmin-poi-loader_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_garmin-poi-loader_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-live-mail-2012_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-live-mail-2012_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366126657}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366126657}

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\Myfree Codec

Schlüssel Gelöscht : HKCU\Software\NCH Software

Schlüssel Gelöscht : HKLM\Software\Conduit

Schlüssel Gelöscht : HKLM\Software\Myfree Codec

Schlüssel Gelöscht : HKLM\Software\NCH Software

Schlüssel Gelöscht : HKLM\Software\Uniblue

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DeviceVM

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DomaIQ
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

-\\ Mozilla Firefox v25.0.1 (de)
 

[ Datei : C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\prefs.js ]
 

Zeile gelöscht : user_pref("aol_toolbar.surf.date", "35");

Zeile gelöscht : user_pref("aol_toolbar.surf.lastDate", "29");

Zeile gelöscht : user_pref("aol_toolbar.surf.lastMonth", "8");

Zeile gelöscht : user_pref("aol_toolbar.surf.lastYear", "2013");

Zeile gelöscht : user_pref("aol_toolbar.surf.month", "4883");

Zeile gelöscht : user_pref("aol_toolbar.surf.prevMonth", "5768");

Zeile gelöscht : user_pref("aol_toolbar.surf.total", "17761");

Zeile gelöscht : user_pref("aol_toolbar.surf.week", "35");

Zeile gelöscht : user_pref("aol_toolbar.surf.year", "17652");

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.backgroundjs", "\n\n/*****************************************************************************[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.cache/2a71b3b28494cf1854d333288ccc18ba_DE.value", "%22var%20cat_2a71b3b28494cf1854d3332[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.cache/3518e1eac042730aa1274618984462b3_DE.value", "%22var%20cat_3518e1eac042730aa127461[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.cache/5cdf8a7ef2ec84abac286c67587b78d9.value", "%22function%20tcmMarkWindow%28a%29%7Bva[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.cache/d5baae4ef839769f8eb7e9f9d82d8a40_DE.value", "%22var%20cat_d5baae4ef839769f8eb7e9f[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.js", "\n\n  /************************************************************************************\[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_102.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_104.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_13.name", "CrossriderAppUtils");

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_14.name", "CrossriderUtils");

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_155.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1[...]

Zeile gelöscht : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]

Zeile gelöscht : user_pref("extensions.crossrider.bic", "14121166ee63b68c54a911795899fa7b");
 

-\\ Google Chrome v31.0.1650.57
 

[ Datei : C:\Users\OH\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [9542 octets] - [22/11/2013 16:37:01]

AdwCleaner[R1].txt - [9602 octets] - [22/11/2013 16:43:41]

AdwCleaner[S0].txt - [9249 octets] - [22/11/2013 16:45:38]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9309 octets] ##########

Nummer 3

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.8 (11.05.2013:1)

OS: Windows 7 Home Premium x64

Ran by OH on 22.11.2013 at 16:56:19,74

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\plus-hd-1.3

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\addlyrics_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\addlyrics_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\aol_pricecheck_fx_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\aol_pricecheck_fx_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110311121157}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\aol_pricecheck_fx_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\aol_pricecheck_fx_RASMANCS
 
 
 

~~~ Files
 

Successfully deleted: [File] "C:\Users\OH\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\speedupmypc.lnk"

Successfully deleted: [File] C:\Windows\syswow64\sho4A3F.tmp

Successfully deleted: [File] C:\Windows\syswow64\sho792C.tmp
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"
 
 
 

~~~ FireFox
 

Successfully deleted: [Folder] C:\Users\OH\AppData\Roaming\mozilla\firefox\profiles\kd3yy7op.default\extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com

Successfully deleted the following from C:\Users\OH\AppData\Roaming\mozilla\firefox\profiles\kd3yy7op.default\prefs.js
 

user_pref("aolmail_toolbar.search.searchtype", "web");

user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.cache/530e52021dc20843b1aa62957edeb9f8.value", "%22var%20adsDe

user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.internaldb.cache/833447eaff04548ccb80787286a7cad9_DE.value", "%22var%20ca

Emptied folder: C:\Users\OH\AppData\Roaming\mozilla\firefox\profiles\kd3yy7op.default\minidumps [57 files]
 
 
 

~~~ Chrome
 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\kdlfddggdloaadnphbhejknhaggjaeld
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 22.11.2013 at 17:03:51,23

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-11-2013 01

Ran by OH (administrator) on OH-VAIO on 22-11-2013 17:12:59

Running from C:\Users\OH\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

() C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

(Microsoft Corp.) C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe

(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

(mst software GmbH, Germany) C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\DfsdkS64.exe

(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe

(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe

(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe

(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe

(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe

(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe

(Huawei Technologies Co., Ltd.) C:\Users\OH\AppData\Roaming\T-Mobile Internet Manager\ouc.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(ICQ, LLC.) C:\Program Files (x86)\ICQ7.5\ICQ.exe

(SWR3.online) C:\Program Files (x86)\RauchFrei\RauchFrei.exe

(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe

(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe

(Microsoft) C:\Program Files (x86)\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE

(GoPro) C:\Program Files (x86)\CineForm\Tools\GoProCineFormStatusViewer.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe

(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

(Huawei Technologies Co., Ltd.) C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe

(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

(AOL Inc.) C:\Program Files (x86)\Common Files\aol\1357462529\ee\aolsoftware.exe

(AOL Inc.) C:\Program Files (x86)\AOL Desktop 9.7\waol.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe

(ALPS) C:\Program Files\Apoint\Apvfb.exe

(AOL LLC) C:\Program Files (x86)\Common Files\AOL\ACS\AOLAcsd.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe

(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe

(AOL Inc.) C:\Program Files (x86)\AOL Desktop 9.7\shellmon.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe

(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe

(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe

(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe

(Microsoft Corporation) C:\Windows\System32\vds.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\Magnify.exe

(Farbar) C:\Users\OH\Downloads\FRST64(1).exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.)

HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790176 2011-03-31] (Atheros Communications)

HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657056 2011-03-31] (Atheros Commnucations)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKCU\...\Run: [HW_OPENEYE_OUC_T-Mobile Internet Manager] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\UpdateDog\ouc.exe [110592 2009-06-23] (Huawei Technologies Co., Ltd.)

HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7.5\ICQ.exe [124480 2011-08-01] (ICQ, LLC.)

HKCU\...\Run: [SWR3RauchFrei] - C:\Program Files (x86)\RauchFrei\RauchFrei.exe [895488 2004-04-07] (SWR3.online)

HKCU\...\Run: [HP Officejet 4620 series (NET)] - C:\Program Files\HP\HP Officejet 4620 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)

HKCU\...\Run: [GarminExpressTrayApp] - C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1093976 2013-09-19] (Garmin Ltd or its subsidiaries)

HKCU\...\Run: [BrowserMask] - C:\Program Files (x86)\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe [101328 2012-08-14] (Microsoft)

HKCU\...\Run: [AOL Fast Start] - C:\Program Files (x86)\AOL Desktop 9.7\aol.exe [72312 2012-10-15] (AOL Inc.)

HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation)

HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation)

HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-26] (Sony Corporation)

HKLM-x32\...\Run: [DataCardMonitor] - C:\Program Files (x86)\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe [253952 2011-07-06] (Huawei Technologies Co., Ltd.)

HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [309688 2012-09-28] (Samsung Electronics Co., Ltd.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [HostManager] - C:\Program Files (x86)\Common Files\aol\1357462529\ee\aolsoftware.exe [41800 2010-03-08] (AOL Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-19] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208 2011-10-28] (Hewlett-Packard)

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [BingDesktop] - C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe [2249352 2013-06-20] (Microsoft Corp.)

HKLM-x32\...\Run: [QuickTime Plugin Install] - C:\Program Files (x86)\QuickTime\Plugins\DeleteMe1.exe [86016 2013-07-04] ()

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

Startup: C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk

ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

Startup: C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ross-Tech VCDS DRV Updater-PCI.lnk

ShortcutTarget: Ross-Tech VCDS DRV Updater-PCI.lnk -> C:\PCI-Tuning\VCDS-PCI\VCDS.exe (Ross-Tech, LLC)

Startup: C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Ross-Tech VCDS DRV Updater.lnk

ShortcutTarget: Ross-Tech VCDS DRV Updater.lnk -> C:\PCI-Tuning\VCDS-PCI\VCDS.exe (Ross-Tech, LLC)

Startup: C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk

ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 4620 series (Netzwerk).lnk -> C:\Program Files\HP\HP Officejet 4620 series\bin\HPStatusBL.dll (Hewlett-Packard Co.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=UP93&ocid=UP93DHP&dt=053113

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKCU - {06797DD0-B899-40BB-A36C-BF7F382FD418} URL = hxxp://de.shopping.com/?linkin_id=8056363

SearchScopes: HKCU - {27C0E32C-9041-4E45-9647-D0E3AEBF7103} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-21/4?satitle={searchTerms}

SearchScopes: HKCU - {6083E34B-C277-41EF-8A48-3CF29E852A36} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File

BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)

BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)

Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default

FF Homepage: https://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()

FF Plugin: @microsoft.com/GENUINE - disabled No File

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)

FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\aol-search.xml

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\ashampoo-de-customized-web-search.xml

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\englische-ergebnisse.xml

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\gmx-suche.xml

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\lastminute.xml

FF SearchPlugin: C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\searchplugins\webde-suche.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Garmin Communicator - C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}

FF Extension: AOL Mail Toolbar - C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\Extensions\{fa1cfe8c-66b4-4469-b360-b60c79d70c28}

FF Extension: Adblock Plus - C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

FF Extension: computerbildabzockschutz - C:\Users\OH\AppData\Roaming\Mozilla\Firefox\Profiles\kd3yy7op.default\Extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}

FF HKCU\...\Firefox\Extensions: [addlyrics@addlyrics.net] - C:\Program Files (x86)\AddLyrics\FF\
 

Chrome: 

=======

CHR DefaultSearchURL: (Bing) - hxxp://www.bing.com/search?setmkt=de-DE&q={searchTerms}

CHR DefaultSuggestURL: (Bing) - hxxp://api.bing.com/osjson.aspx?query={searchTerms}&language={language}

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll ()

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File

CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File

CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\SysWOW64\npDeployJava1.dll No File

CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File

CHR Extension: (Plus-HD-1.3) - C:\Users\OH\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.23.10_0

CHR Extension: (Google Wallet) - C:\Users\OH\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
 

==================== Services (Whitelisted) =================
 

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)

R2 AHDDC2; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe [1518504 2012-07-30] ()

R2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [1012280 2013-11-19] (Avira Operations GmbH & Co. KG)

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [948296 2013-10-07] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1164360 2013-10-07] (Avira Operations GmbH & Co. KG)

R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-03-31] (Atheros)

R2 BingDesktopUpdate; C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [173192 2013-06-20] (Microsoft Corp.)

R2 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany)

R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)

R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)

R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)

R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)

S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation)

R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)
 

==================== Drivers (Whitelisted) ====================
 

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)

R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [114608 2013-03-02] (Avira GmbH)

R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [141376 2013-03-02] (Avira GmbH)

R1 avfwot; C:\Windows\SysWow64\DRIVERS\avfwot.sys [131336 2011-06-28] (Avira GmbH)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [106904 2013-11-19] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-19] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)

S2 IWPORT; C:\Windows\SysWow64\DRIVERS\IWPORT.SYS [8152 2011-06-30] (TDi GmbH TechnoData - Interware)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

S3 RT-USB; C:\Windows\System32\drivers\RT-USB64.SYS [70984 2010-06-16] (Ross-Tech LLC)

S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 bnsdusb; system32\DRIVERS\bnsdusb.sys [x]

S3 catchme; \??\C:\ComboFix\catchme.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-11-22 17:10 - 2013-11-22 17:10 - 01958070 _____ (Farbar) C:\Users\OH\Downloads\FRST64(1).exe

2013-11-22 17:03 - 2013-11-22 17:03 - 00002885 _____ C:\Users\OH\Desktop\JRT.txt

2013-11-22 16:55 - 2013-11-22 16:56 - 01034531 _____ (Thisisu) C:\Users\OH\Downloads\JRT(2).exe

2013-11-22 16:48 - 2013-11-22 16:48 - 00000000 ___RD C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

2013-11-22 16:43 - 2013-11-22 16:43 - 01085542 _____ C:\Users\OH\Downloads\adwcleaner(2).exe

2013-11-22 16:36 - 2013-11-22 16:46 - 00000000 ____D C:\AdwCleaner

2013-11-22 16:36 - 2013-11-22 16:36 - 01085542 _____ C:\Users\OH\Downloads\adwcleaner(1).exe

2013-11-21 19:24 - 2013-11-21 19:25 - 00032624 _____ C:\Users\OH\Downloads\Addition.txt

2013-11-21 19:22 - 2013-11-22 17:13 - 00026801 _____ C:\Users\OH\Downloads\FRST.txt

2013-11-21 19:22 - 2013-11-21 19:22 - 00000000 ____D C:\FRST

2013-11-21 19:21 - 2013-11-21 19:21 - 01957964 _____ (Farbar) C:\Users\OH\Downloads\FRST64.exe

2013-11-20 19:34 - 2013-11-20 19:44 - 00000000 ____D C:\Users\OH\Documents\AderlassanalyseHeinz,o.112013

2013-11-20 19:34 - 2013-11-20 19:34 - 00073449 _____ C:\Users\OH\Documents\AderlassanalyseHeinz,o.112013.zip

2013-11-20 07:17 - 2013-10-08 07:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-11-20 07:17 - 2013-10-08 07:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2013-11-20 07:17 - 2013-10-08 07:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2013-11-20 07:17 - 2013-10-08 07:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2013-11-20 07:15 - 2013-11-20 07:17 - 00004278 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log

2013-11-20 06:16 - 2013-11-20 06:16 - 00836328 _____ C:\Windows\Minidump\112013-22308-01.dmp

2013-11-16 08:23 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE

2013-11-16 08:18 - 2013-11-16 08:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-16 08:18 - 2013-11-16 08:18 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-16 08:17 - 2013-11-16 08:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-16 08:17 - 2013-11-16 08:17 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-16 08:17 - 2013-11-16 08:17 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-16 08:17 - 2013-11-16 08:17 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-16 08:17 - 2013-11-16 08:17 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-16 08:17 - 2013-11-16 08:17 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-16 08:17 - 2013-11-16 08:17 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-16 08:17 - 2013-11-16 08:17 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-16 08:17 - 2013-11-16 08:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-16 08:17 - 2013-11-16 08:17 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-16 08:16 - 2013-11-16 08:24 - 00010277 _____ C:\Windows\IE11_main.log

2013-11-15 19:04 - 2013-11-15 19:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-14 20:14 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll

2013-11-14 20:14 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL

2013-11-14 20:14 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL

2013-11-14 20:14 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll

2013-11-14 20:14 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL

2013-11-14 20:14 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-11-14 20:14 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-11-14 20:14 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll

2013-11-14 20:14 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll

2013-11-14 20:14 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2013-11-14 20:14 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll

2013-11-14 20:14 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-11-14 20:14 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll

2013-11-14 20:14 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2013-11-14 20:14 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2013-11-14 20:14 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-11-14 20:14 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2013-11-14 20:14 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2013-11-14 20:14 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2013-11-14 20:14 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2013-11-14 20:14 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2013-11-14 20:14 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2013-11-14 20:14 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2013-11-14 20:14 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2013-11-14 20:14 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2013-11-14 20:14 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2013-11-14 20:14 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2013-11-14 20:14 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2013-11-14 20:14 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2013-11-14 20:14 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2013-11-14 20:04 - 2013-11-14 20:04 - 00168093 _____ C:\Users\OH\Documents\Vorgang3tui

2013-11-02 13:46 - 2013-11-02 13:48 - 11340607 _____ (DJI                                                         ) C:\Users\OH\Downloads\NAZAM_2.20_Installer (1).exe

2013-10-30 22:29 - 2013-10-30 22:29 - 00810866 _____ (DJI                                                         ) C:\Users\OH\Downloads\DJI_Driver_Installer(1).exe

2013-10-30 21:34 - 2013-10-30 21:34 - 00810866 _____ (DJI                                                         ) C:\Users\OH\Downloads\DJI_Driver_Installer.exe

2013-10-30 21:27 - 2013-11-02 13:49 - 00001222 _____ C:\Users\Public\Desktop\DJI NAZAM Assistant_2.20.lnk

2013-10-30 21:27 - 2013-10-30 21:35 - 00000000 ____D C:\Program Files (x86)\DJI Product

2013-10-30 21:25 - 2013-10-30 21:26 - 11340607 _____ (DJI                                                         ) C:\Users\OH\Downloads\NAZAM_2.20_Installer.exe

2013-10-30 19:26 - 2013-10-30 19:26 - 00000000 ____D C:\Users\OH\Documents\Drone

2013-10-30 19:23 - 2013-10-30 19:26 - 16945052 _____ C:\Users\OH\Documents\Drone.zip

2013-10-29 14:28 - 2013-10-29 14:28 - 00174343 _____ C:\Users\OH\Documents\MDCarBroker_1286539-01_2013-10-29_13-49-7.zip

2013-10-29 14:28 - 2013-10-29 14:28 - 00000000 ____D C:\Users\OH\Documents\MDCarBroker_1286539-01_2013-10-29_13-49-7

2013-10-29 07:00 - 2013-10-29 07:00 - 00039653 _____ C:\Users\OH\Documents\MDCarBroker_9531023-01_2013-9-17_16-30-13.zip

2013-10-29 07:00 - 2013-10-29 07:00 - 00000000 ____D C:\Users\OH\Documents\MDCarBroker_9531023-01_2013-9-17_16-30-13

2013-10-29 06:56 - 2013-10-29 06:56 - 00012785 _____ C:\Users\OH\Documents\Rechnung1 drohne34497.htm

2013-10-28 06:12 - 2013-10-28 06:13 - 00837456 _____ C:\Windows\Minidump\102813-29780-01.dmp
 

==================== One Month Modified Files and Folders =======
 

2013-11-22 17:13 - 2013-11-21 19:22 - 00026801 _____ C:\Users\OH\Downloads\FRST.txt

2013-11-22 17:13 - 2012-12-18 20:48 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-11-22 17:10 - 2013-11-22 17:10 - 01958070 _____ (Farbar) C:\Users\OH\Downloads\FRST64(1).exe

2013-11-22 17:06 - 2012-04-02 21:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-11-22 17:03 - 2013-11-22 17:03 - 00002885 _____ C:\Users\OH\Desktop\JRT.txt

2013-11-22 16:56 - 2013-11-22 16:55 - 01034531 _____ (Thisisu) C:\Users\OH\Downloads\JRT(2).exe

2013-11-22 16:56 - 2009-07-14 05:45 - 00020928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-11-22 16:56 - 2009-07-14 05:45 - 00020928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-11-22 16:54 - 2011-06-09 18:14 - 01658216 _____ C:\Windows\WindowsUpdate.log

2013-11-22 16:52 - 2011-04-21 07:42 - 00697534 _____ C:\Windows\system32\perfh007.dat

2013-11-22 16:52 - 2011-04-21 07:42 - 00148540 _____ C:\Windows\system32\perfc007.dat

2013-11-22 16:52 - 2009-07-14 06:13 - 01614892 _____ C:\Windows\system32\PerfStringBackup.INI

2013-11-22 16:48 - 2013-11-22 16:48 - 00000000 ___RD C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices

2013-11-22 16:48 - 2012-12-18 20:48 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-11-22 16:48 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\tracing

2013-11-22 16:47 - 2012-07-01 17:38 - 00065536 _____ C:\Windows\system32\Ikeext.etl

2013-11-22 16:47 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-11-22 16:47 - 2009-07-14 05:51 - 00111473 _____ C:\Windows\setupact.log

2013-11-22 16:46 - 2013-11-22 16:36 - 00000000 ____D C:\AdwCleaner

2013-11-22 16:43 - 2013-11-22 16:43 - 01085542 _____ C:\Users\OH\Downloads\adwcleaner(2).exe

2013-11-22 16:36 - 2013-11-22 16:36 - 01085542 _____ C:\Users\OH\Downloads\adwcleaner(1).exe

2013-11-22 16:29 - 2011-06-24 22:51 - 00000000 ____D C:\Users\OH\AppData\Roaming\Skype

2013-11-21 19:25 - 2013-11-21 19:24 - 00032624 _____ C:\Users\OH\Downloads\Addition.txt

2013-11-21 19:22 - 2013-11-21 19:22 - 00000000 ____D C:\FRST

2013-11-21 19:21 - 2013-11-21 19:21 - 01957964 _____ (Farbar) C:\Users\OH\Downloads\FRST64.exe

2013-11-21 19:15 - 2011-06-09 19:21 - 00003914 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{2AD172AF-193F-4FFD-B26F-A47DC864C1B4}

2013-11-21 19:13 - 2011-06-09 22:07 - 00000000 ____D C:\Users\OH\AppData\Roaming\ICQ

2013-11-21 19:09 - 2011-06-18 09:00 - 00000000 ____D C:\Users\OH\AppData\Roaming\SoftGrid Client

2013-11-20 19:44 - 2013-11-20 19:34 - 00000000 ____D C:\Users\OH\Documents\AderlassanalyseHeinz,o.112013

2013-11-20 19:34 - 2013-11-20 19:34 - 00073449 _____ C:\Users\OH\Documents\AderlassanalyseHeinz,o.112013.zip

2013-11-20 18:19 - 2011-06-20 14:12 - 00000000 ____D C:\Users\OH\AppData\Local\CrashDumps

2013-11-20 18:18 - 2013-09-19 13:17 - 00000000 ____D C:\ProgramData\Oracle

2013-11-20 07:17 - 2013-11-20 07:15 - 00004278 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log

2013-11-20 07:17 - 2011-04-20 22:02 - 00000000 ____D C:\Program Files (x86)\Java

2013-11-20 06:55 - 2010-11-21 04:47 - 00456228 _____ C:\Windows\PFRO.log

2013-11-20 06:16 - 2013-11-20 06:16 - 00836328 _____ C:\Windows\Minidump\112013-22308-01.dmp

2013-11-20 06:16 - 2013-04-29 08:23 - 462454831 _____ C:\Windows\MEMORY.DMP

2013-11-20 06:16 - 2013-04-29 08:23 - 00000000 ____D C:\Windows\Minidump

2013-11-20 06:16 - 2012-04-27 23:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-11-19 12:26 - 2013-03-21 16:21 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-11-19 12:26 - 2013-03-21 16:21 - 00106904 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-11-16 11:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-11-16 08:58 - 2011-06-09 19:20 - 00001468 _____ C:\Users\OH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-11-16 08:53 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-11-16 08:24 - 2013-11-16 08:16 - 00010277 _____ C:\Windows\IE11_main.log

2013-11-16 08:18 - 2013-11-16 08:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-16 08:18 - 2013-11-16 08:18 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-16 08:17 - 2013-11-16 08:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-16 08:17 - 2013-11-16 08:17 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-16 08:17 - 2013-11-16 08:17 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-16 08:17 - 2013-11-16 08:17 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-16 08:17 - 2013-11-16 08:17 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-16 08:17 - 2013-11-16 08:17 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-16 08:17 - 2013-11-16 08:17 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-16 08:17 - 2013-11-16 08:17 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-16 08:17 - 2013-11-16 08:17 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-16 08:17 - 2013-11-16 08:17 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-16 08:17 - 2013-11-16 08:17 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-16 08:17 - 2013-11-16 08:17 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-15 19:26 - 2013-07-27 08:11 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2013-11-15 19:05 - 2013-11-15 19:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-11-15 00:24 - 2013-07-23 09:07 - 00000000 ____D C:\Windows\system32\MRT

2013-11-15 00:22 - 2011-06-10 19:33 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-11-14 23:39 - 2011-06-24 22:51 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-11-14 23:39 - 2011-04-20 22:52 - 00000000 ____D C:\ProgramData\Skype

2013-11-14 23:23 - 2011-07-14 09:01 - 00018526 _____ C:\test.xml

2013-11-14 22:24 - 2011-06-09 19:21 - 00000000 ____D C:\Users\OH\AppData\Local\Adobe

2013-11-14 22:23 - 2012-04-02 21:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-11-14 22:23 - 2012-04-02 21:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-11-14 22:23 - 2011-06-19 09:51 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-11-14 22:18 - 2011-06-09 19:21 - 00000000 ____D C:\Users\OH\AppData\Roaming\Atheros

2013-11-14 20:04 - 2013-11-14 20:04 - 00168093 _____ C:\Users\OH\Documents\Vorgang3tui

2013-11-02 16:37 - 2012-06-19 19:10 - 00000000 ____D C:\ProgramData\POIbase

2013-11-02 15:31 - 2011-12-03 16:21 - 00000000 ____D C:\Program Files (x86)\POIbase

2013-11-02 13:49 - 2013-10-30 21:27 - 00001222 _____ C:\Users\Public\Desktop\DJI NAZAM Assistant_2.20.lnk

2013-11-02 13:48 - 2013-11-02 13:46 - 11340607 _____ (DJI                                                         ) C:\Users\OH\Downloads\NAZAM_2.20_Installer (1).exe

2013-11-02 10:47 - 2011-06-09 19:21 - 00000000 ____D C:\Users\OH\Documents\Bluetooth Folder

2013-10-30 22:31 - 2011-04-20 21:57 - 00136328 _____ C:\Windows\DPINST.LOG

2013-10-30 22:29 - 2013-10-30 22:29 - 00810866 _____ (DJI                                                         ) C:\Users\OH\Downloads\DJI_Driver_Installer(1).exe

2013-10-30 21:35 - 2013-10-30 21:27 - 00000000 ____D C:\Program Files (x86)\DJI Product

2013-10-30 21:34 - 2013-10-30 21:34 - 00810866 _____ (DJI                                                         ) C:\Users\OH\Downloads\DJI_Driver_Installer.exe

2013-10-30 21:26 - 2013-10-30 21:25 - 11340607 _____ (DJI                                                         ) C:\Users\OH\Downloads\NAZAM_2.20_Installer.exe

2013-10-30 19:26 - 2013-10-30 19:26 - 00000000 ____D C:\Users\OH\Documents\Drone

2013-10-30 19:26 - 2013-10-30 19:23 - 16945052 _____ C:\Users\OH\Documents\Drone.zip

2013-10-29 14:28 - 2013-10-29 14:28 - 00174343 _____ C:\Users\OH\Documents\MDCarBroker_1286539-01_2013-10-29_13-49-7.zip

2013-10-29 14:28 - 2013-10-29 14:28 - 00000000 ____D C:\Users\OH\Documents\MDCarBroker_1286539-01_2013-10-29_13-49-7

2013-10-29 07:00 - 2013-10-29 07:00 - 00039653 _____ C:\Users\OH\Documents\MDCarBroker_9531023-01_2013-9-17_16-30-13.zip

2013-10-29 07:00 - 2013-10-29 07:00 - 00000000 ____D C:\Users\OH\Documents\MDCarBroker_9531023-01_2013-9-17_16-30-13

2013-10-29 06:56 - 2013-10-29 06:56 - 00012785 _____ C:\Users\OH\Documents\Rechnung1 drohne34497.htm

2013-10-28 06:13 - 2013-10-28 06:12 - 00837456 _____ C:\Windows\Minidump\102813-29780-01.dmp

2013-10-23 09:43 - 2012-08-22 00:22 - 00000000 ____D C:\Users\OH\Desktop\DIPLO2
 

Some content of TEMP:

====================

C:\Users\OH\AppData\Local\Temp\avgnt.exe

C:\Users\OH\AppData\Local\Temp\doxillionsetup.exe

C:\Users\OH\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe

C:\Users\OH\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe

C:\Users\OH\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-11-20 09:57
 

==================== End Of Log ============================

--- --- ---