Trojaner-Board - Avira-Funde: TR/Drop.Vunop.1 und TR/Crypt.XPACK.Gen2

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Avira-Funde: TR/Drop.Vunop.1 und TR/Crypt.XPACK.Gen2 (https://www.trojaner-board.de/145956-avira-funde-tr-drop-vunop-1-tr-crypt-xpack-gen2.html)

Avira-Funde: TR/Drop.Vunop.1 und TR/Crypt.XPACK.Gen2

Hallo,

habe das Problem, dass der Avira-Virenscanner beim Scan obige Viren gefunden hat. Gibt es eine Möglichkeit sicher festzustellen, inwieweit mein PC nun infiziert ist und wenn ja: kann ich das System wieder zu 100 sauber bekommen oder muss ich neu aufsetzen?

Den TR/Drop.Vunop.1 habe ich wie von Avira empfohlen in Quarantäne geschoben, bei TR/Crypt.XPACK.Gen2 ist Zugriff verweigert.

Vielen Dank schon mal im Voraus.

Tom

Hi,

LOgfile von Avira?

Hallo,

muss vielleicht noch erwähnen, dass das System seit Monaten etwas langsam erscheint und der PC im Standby-Modus auch bereits seit Monaten sporadisch selbst hochfährt.

Ich hoffe, dass ich das hier mit dem Logfile richtig mache. Der erste Fund (TR/Crypt.XPACK.Gen2) wurde vom Avira-Echtzeitscanner selbstständig gemacht am 23.11.13 laut Ereignis-Übersicht. Der andere Fund erfolgte bei meinem manuellen Suchlauf. Hier der Bericht des Scans von Avira vom gestern:

Avira Free Antivirus
Erstellungsdatum der Reportdatei: Mittwoch, 11. Dezember 2013 19:36

Das Programm läuft als uneingeschränkte Vollversion.
Online-Dienste stehen zur Verfügung.

Lizenznehmer : Avira Free Antivirus
Seriennummer : 0000149996-ADJIE-0000001
Plattform : Windows 7 Home Premium
Windowsversion : (Service Pack 1) [6.1.7601]
Boot Modus : Normal gebootet
Benutzername : SYSTEM
Computername : SNOOPY-PC

Versionsinformationen:
BUILD.DAT : 14.0.1.759 55393 Bytes 26.11.2013 12:19:00
AVSCAN.EXE : 14.0.1.645 1030712 Bytes 25.11.2013 13:28:22
AVSCANRC.DLL : 14.0.1.641 62008 Bytes 25.11.2013 13:28:22
LUKE.DLL : 14.0.1.641 65080 Bytes 25.11.2013 13:28:36
AVSCPLR.DLL : 14.0.1.641 124472 Bytes 25.11.2013 13:28:22
AVREG.DLL : 14.0.1.641 250424 Bytes 25.11.2013 13:28:21
avlode.dll : 14.0.1.681 517176 Bytes 25.11.2013 13:28:21
avlode.rdf : 13.0.1.62 56973 Bytes 09.12.2013 13:21:17
VBASE000.VDF : 7.11.70.0 66736640 Bytes 04.04.2013 20:18:16
VBASE001.VDF : 7.11.74.226 2201600 Bytes 30.04.2013 16:12:25
VBASE002.VDF : 7.11.80.60 2751488 Bytes 28.05.2013 20:10:10
VBASE003.VDF : 7.11.85.214 2162688 Bytes 21.06.2013 18:17:41
VBASE004.VDF : 7.11.91.176 3903488 Bytes 23.07.2013 10:54:54
VBASE005.VDF : 7.11.98.186 6822912 Bytes 29.08.2013 15:47:41
VBASE006.VDF : 7.11.103.230 2293248 Bytes 24.09.2013 16:47:07
VBASE007.VDF : 7.11.116.38 5485568 Bytes 28.11.2013 16:14:13
VBASE008.VDF : 7.11.116.39 2048 Bytes 28.11.2013 16:14:13
VBASE009.VDF : 7.11.116.40 2048 Bytes 28.11.2013 16:14:13
VBASE010.VDF : 7.11.116.41 2048 Bytes 28.11.2013 16:14:14
VBASE011.VDF : 7.11.116.42 2048 Bytes 28.11.2013 16:14:14
VBASE012.VDF : 7.11.116.43 2048 Bytes 28.11.2013 16:14:14
VBASE013.VDF : 7.11.116.44 2048 Bytes 28.11.2013 16:14:14
VBASE014.VDF : 7.11.116.195 149504 Bytes 30.11.2013 18:22:15
VBASE015.VDF : 7.11.117.180 271872 Bytes 04.12.2013 18:44:07
VBASE016.VDF : 7.11.118.17 139776 Bytes 06.12.2013 17:28:39
VBASE017.VDF : 7.11.118.137 151552 Bytes 09.12.2013 13:21:16
VBASE018.VDF : 7.11.119.23 211968 Bytes 11.12.2013 14:51:21
VBASE019.VDF : 7.11.119.24 2048 Bytes 11.12.2013 14:51:21
VBASE020.VDF : 7.11.119.25 2048 Bytes 11.12.2013 14:51:21
VBASE021.VDF : 7.11.119.26 2048 Bytes 11.12.2013 14:51:21
VBASE022.VDF : 7.11.119.27 2048 Bytes 11.12.2013 14:51:21
VBASE023.VDF : 7.11.119.28 2048 Bytes 11.12.2013 14:51:21
VBASE024.VDF : 7.11.119.29 2048 Bytes 11.12.2013 14:51:21
VBASE025.VDF : 7.11.119.30 2048 Bytes 11.12.2013 14:51:22
VBASE026.VDF : 7.11.119.31 2048 Bytes 11.12.2013 14:51:22
VBASE027.VDF : 7.11.119.32 2048 Bytes 11.12.2013 14:51:22
VBASE028.VDF : 7.11.119.33 2048 Bytes 11.12.2013 14:51:22
VBASE029.VDF : 7.11.119.34 2048 Bytes 11.12.2013 14:51:22
VBASE030.VDF : 7.11.119.35 2048 Bytes 11.12.2013 14:51:22
VBASE031.VDF : 7.11.119.36 93696 Bytes 11.12.2013 14:51:22
Engineversion : 8.2.12.162
AEVDF.DLL : 8.1.3.4 102774 Bytes 13.06.2013 15:12:02
AESCRIPT.DLL : 8.1.4.174 516478 Bytes 09.12.2013 19:31:55
AESCN.DLL : 8.1.10.6 131447 Bytes 11.12.2013 14:51:23
AESBX.DLL : 8.2.16.26 1245560 Bytes 23.08.2013 17:39:33
AERDL.DLL : 8.2.0.138 704888 Bytes 02.12.2013 18:44:45
AEPACK.DLL : 8.3.3.6 762232 Bytes 02.12.2013 18:44:44
AEOFFICE.DLL : 8.1.2.76 205181 Bytes 18.08.2013 00:16:15
AEHEUR.DLL : 8.1.4.804 6357370 Bytes 09.12.2013 19:31:55
AEHELP.DLL : 8.1.27.10 266618 Bytes 22.11.2013 15:19:34
AEGEN.DLL : 8.1.7.20 446839 Bytes 13.11.2013 16:38:06
AEEXP.DLL : 8.4.1.114 381304 Bytes 22.11.2013 15:19:38
AEEMU.DLL : 8.1.3.2 393587 Bytes 06.04.2013 20:18:28
AECORE.DLL : 8.1.33.0 225657 Bytes 11.12.2013 14:51:23
AEBB.DLL : 8.1.1.4 53619 Bytes 06.04.2013 20:18:26
AVWINLL.DLL : 14.0.1.641 23608 Bytes 25.11.2013 13:28:02
AVPREF.DLL : 14.0.1.641 48696 Bytes 25.11.2013 13:28:21
AVREP.DLL : 14.0.1.641 175672 Bytes 25.11.2013 13:28:21
AVARKT.DLL : 14.0.1.641 257080 Bytes 25.11.2013 13:28:16
AVEVTLOG.DLL : 14.0.1.641 165944 Bytes 25.11.2013 13:28:19
SQLITE3.DLL : 3.7.0.1 394808 Bytes 08.12.2013 20:05:19
AVSMTP.DLL : 14.0.1.641 60472 Bytes 25.11.2013 13:28:23
NETNT.DLL : 14.0.1.641 13368 Bytes 25.11.2013 13:28:36
RCIMAGE.DLL : 14.0.1.641 4786744 Bytes 25.11.2013 13:28:02
RCTEXT.DLL : 14.0.1.641 67128 Bytes 25.11.2013 13:28:02

Konfiguration für den aktuellen Suchlauf:
Job Name..............................: Vollständige Systemprüfung
Konfigurationsdatei...................: C:\program files (x86)\avira\antivir desktop\sysscan.avp
Protokollierung.......................: standard
Primäre Aktion........................: Interaktiv
Sekundäre Aktion......................: Ignorieren
Durchsuche Masterbootsektoren.........: ein
Durchsuche Bootsektoren...............: ein
Bootsektoren..........................: C:, D:,
Durchsuche aktive Programme...........: ein
Laufende Programme erweitert..........: ein
Durchsuche Registrierung..............: ein
Suche nach Rootkits...................: ein
Integritätsprüfung von Systemdateien..: aus
Prüfe alle Dateien....................: Alle Dateien
Durchsuche Archive....................: ein
Rekursionstiefe einschränken..........: 20
Archiv Smart Extensions...............: ein
Makrovirenheuristik...................: ein
Dateiheuristik........................: erweitert

Beginn des Suchlaufs: Mittwoch, 11. Dezember 2013 19:36

Der Suchlauf über die Bootsektoren wird begonnen:
Bootsektor 'HDD0(C:, D:)'
[INFO] Es wurde kein Virus gefunden!

Der Suchlauf nach versteckten Objekten wird begonnen.
HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Session Manager\PendingFileRenameOperations
[HINWEIS] Der Registrierungseintrag ist nicht sichtbar.

Der Suchlauf über gestartete Prozesse wird begonnen:
Durchsuche Prozess 'svchost.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvSCPAPISvr.exe' - '37' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '84' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '99' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '168' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '80' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvxdsync.exe' - '50' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvvsvc.exe' - '47' Modul(e) wurden durchsucht
Durchsuche Prozess 'IswSvc.exe' - '74' Modul(e) wurden durchsucht
Durchsuche Prozess 'spoolsv.exe' - '84' Modul(e) wurden durchsucht
Durchsuche Prozess 'sched.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskhost.exe' - '72' Modul(e) wurden durchsucht
Durchsuche Prozess 'ForceField.exe' - '90' Modul(e) wurden durchsucht
Durchsuche Prozess 'Dwm.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'Explorer.EXE' - '192' Modul(e) wurden durchsucht
Durchsuche Prozess 'avguard.exe' - '108' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '65' Modul(e) wurden durchsucht
Durchsuche Prozess 'ccSvcHst.exe' - '71' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '38' Modul(e) wurden durchsucht
Durchsuche Prozess 'rundll32.exe' - '55' Modul(e) wurden durchsucht
Durchsuche Prozess 'sidebar.exe' - '104' Modul(e) wurden durchsucht
Durchsuche Prozess 'ccSvcHst.exe' - '57' Modul(e) wurden durchsucht
Durchsuche Prozess 'avgnt.exe' - '103' Modul(e) wurden durchsucht
Durchsuche Prozess 'nvtray.exe' - '56' Modul(e) wurden durchsucht
Durchsuche Prozess 'avshadow.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchIndexer.exe' - '62' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'OSPPSVC.EXE' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'mscorsvw.exe' - '43' Modul(e) wurden durchsucht
Durchsuche Prozess 'wmpnetwk.exe' - '126' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '48' Modul(e) wurden durchsucht
Durchsuche Prozess 'taskeng.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'avcenter.exe' - '102' Modul(e) wurden durchsucht
Durchsuche Prozess 'avscan.exe' - '125' Modul(e) wurden durchsucht
Durchsuche Prozess 'vssvc.exe' - '53' Modul(e) wurden durchsucht
Durchsuche Prozess 'svchost.exe' - '34' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '112' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '78' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'chrome.exe' - '59' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchProtocolHost.exe' - '35' Modul(e) wurden durchsucht
Durchsuche Prozess 'SearchFilterHost.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'smss.exe' - '2' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'wininit.exe' - '33' Modul(e) wurden durchsucht
Durchsuche Prozess 'csrss.exe' - '18' Modul(e) wurden durchsucht
Durchsuche Prozess 'services.exe' - '40' Modul(e) wurden durchsucht
Durchsuche Prozess 'winlogon.exe' - '31' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsass.exe' - '76' Modul(e) wurden durchsucht
Durchsuche Prozess 'lsm.exe' - '29' Modul(e) wurden durchsucht

Der Suchlauf auf Verweise zu ausführbaren Dateien (Registry) wird begonnen:
Die Registry wurde durchsucht ( '4016' Dateien ).

Der Suchlauf über die ausgewählten Dateien wird begonnen:

Beginne mit der Suche in 'C:\'
[0] Archivtyp: Runtime Packed
--> C:\$Recycle.Bin\S-1-5-21-3516118728-1142162036-4191355624-1001\$R6W5OAV.exe
[1] Archivtyp: RSRC
--> C:\$Recycle.Bin\S-1-5-21-3516118728-1142162036-4191355624-1001\$R8S234N.exe
[2] Archivtyp: Runtime Packed
--> C:\$Recycle.Bin\S-1-5-21-3516118728-1142162036-4191355624-1001\$RGKCSPY.exe
[3] Archivtyp: Runtime Packed
--> C:\Users\Snoopy\Downloads\access_saulgau_renhardsweiler.zip
[4] Archivtyp: ZIP
--> access_saulgau_renhardsweiler.exe
[FUND] Ist das Trojanische Pferd TR/Drop.Vunop.1
[WARNUNG] Infizierte Dateien in Archiven können nicht repariert werden
C:\Users\Snoopy\Downloads\access_saulgau_renhardsweiler.zip
[FUND] Ist das Trojanische Pferd TR/Drop.Vunop.1
Beginne mit der Suche in 'D:\'

Beginne mit der Desinfektion:
C:\Users\Snoopy\Downloads\access_saulgau_renhardsweiler.zip
[FUND] Ist das Trojanische Pferd TR/Drop.Vunop.1
[HINWEIS] Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5bb34927.qua' verschoben!

Ende des Suchlaufs: Mittwoch, 11. Dezember 2013 23:52
Benötigte Zeit: 4:14:01 Stunde(n)

Der Suchlauf wurde vollständig durchgeführt.

29597 Verzeichnisse wurden überprüft
897897 Dateien wurden geprüft
2 Viren bzw. unerwünschte Programme wurden gefunden
0 Dateien wurden als verdächtig eingestuft
0 Dateien wurden gelöscht
0 Viren bzw. unerwünschte Programme wurden repariert
1 Dateien wurden in die Quarantäne verschoben
0 Dateien wurden umbenannt
0 Dateien konnten nicht durchsucht werden
897895 Dateien ohne Befall
13146 Archive wurden durchsucht
1 Warnungen
2 Hinweise
838260 Objekte wurden beim Rootkitscan durchsucht
1 Versteckte Objekte wurden gefunden

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-12-2013 01

Ran by Snoopy (administrator) on SNOOPY-PC on 14-12-2013 09:31:52

Running from C:\Users\Snoopy\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe

(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe

(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ForceField.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe

(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [CmPCIaudio] - C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd

HKLM\...\Run: [ISW] - C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [1127592 2012-11-02] (Check Point Software Technologies)

HKLM-x32\...\Run: [ZoneAlarm] - C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [73392 2012-11-19] (Check Point Software Technologies LTD)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-25] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [InstallValidator.exe.FA87EC44_C38F_4148_93A1_FF4A64A2B707] - C:\Program Files (x86)\National Instruments\Shared\NIUninstaller\InstallValidator.exe [265096 2013-06-19] ()

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: http=;ftp=;https=;

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com

URLSearchHook: HKLM-x32 - (No Name) - {40c3cc16-7269-4b32-9531-17f2950fb06f} - No File

URLSearchHook: HKCU - (No Name) - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - No File

URLSearchHook: HKCU - (No Name) - {40c3cc16-7269-4b32-9531-17f2950fb06f} - No File

SearchScopes: HKLM - DefaultScope value is missing.

SearchScopes: HKLM-x32 - DefaultScope {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2319825&CUI=UN34837114533193890&SSPV=TB_IESB26

SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://search.chatzum.com/?q={searchTerms}

SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2319825&CUI=UN34837114533193890&SSPV=TB_IESB26

SearchScopes: HKCU - DefaultScope {A9616100-029A-4D82-B495-B298AB8A011A} URL = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=b80fb78a000000000000001bb9e2cfda&toi=16032&r=593

SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&affID=119671&babsrc=SP_ss&mntrId=B80F001BB9E2CFDA

SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 

SearchScopes: HKCU - {A9616100-029A-4D82-B495-B298AB8A011A} URL = hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=b80fb78a000000000000001bb9e2cfda&toi=16032&r=593

SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2319825&CUI=UN34837114533193890&SSPV=TB_IESB26

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)

Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

Toolbar: HKLM-x32 - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

Toolbar: HKCU - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Filter: AutorunsDisabled - No CLSID Value - No File

Filter-x32: AutorunsDisabled - No CLSID Value - No File

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

Chrome: 

=======

CHR HomePage: hxxp://search.softonic.com/MOY00009/tb_v1?SearchSource=48&cc=&mi=b80fb78a000000000000001bb9e2cfda&toi=16032

CHR RestoreOnStartup: "https://www.google.de/"

CHR DefaultSearchKeyword: ask search

CHR DefaultSearchProvider: Ask Search

CHR DefaultSearchURL: hxxp://www.search.ask.com/web?tpid=ORJ-V7C&o=APN11412&pf=V7&p2=%5EBBK%5EOSJ000%5EYY%5EDE&gct=&itbv=12.7.0.15&doi=2013-12-07&apn_uid=D1D686C8-741B-4D32-AB0D-7EAFC46087D7&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5EDE&apn_dbr=cr_31.0.1650.63&psv=&trgb=CR&tbv=&crxv=&q={searchTerms}

CHR DefaultNewTabURL: 

CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.376\_platform_specific\win_x86\widevinecdmadapter.dll ()

CHR Plugin: (Shockwave Flash) - C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility for IJ) - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

CHR Plugin: (npFFApi) - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll ()

CHR Plugin: (Google Update) - C:\Users\Snoopy\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File

CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Users\Snoopy\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll No File

CHR Extension: (AdBlock) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0

CHR Extension: (Define your own new tab!) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhjjapmfhhmcikhcfkiolockmndbbpng\3.2_0

CHR Extension: (Google Wallet) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0

CHR HKLM-x32\...\Chrome\Extension: [dgjkhjdcljddbedokogakmmdjgnbeanf] - C:\Users\Snoopy\AppData\Roaming\SpeedAnalysis2\speedanalysis.crx

CHR HKLM-x32\...\Chrome\Extension: [mocblcnaofikinigmceddfghppkkjbog] - C:\Users\Snoopy\AppData\Roaming\PlusWinks\pluswinks.crx
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)

S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-10-07] (Avira Operations GmbH & Co. KG)

S4 HOSTS Anti-PUPs; C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe [285795 2012-11-30] ()

R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [827560 2012-11-02] (Check Point Software Technologies)

S4 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe [132056 2012-07-17] (Symantec Corporation)

R2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe [126392 2011-11-07] (Symantec Corporation)

R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2447440 2012-11-19] (Check Point Software Technologies LTD)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-05] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132600 2013-11-25] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)

R3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [1155072 2009-12-01] (C-Media Inc)

R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2012-12-23] (GFI Software)

R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [33712 2012-11-02] (Check Point Software Technologies)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [611160 2012-11-15] (Kaspersky Lab)

S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [44480 2011-05-17] (hxxp://libusb-win32.sourceforge.net)

R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450136 2012-11-01] (Check Point Software Technologies LTD)

U0 KL1; 

U5 klflt; C:\Windows\System32\Drivers\klflt.sys [89432 2012-11-15] (Kaspersky Lab)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-14 09:31 - 2013-12-14 09:32 - 00013526 _____ C:\Users\Snoopy\Downloads\FRST.txt

2013-12-14 09:31 - 2013-12-14 09:31 - 00000000 ____D C:\FRST

2013-12-14 09:29 - 2013-12-14 09:29 - 01927462 _____ (Farbar) C:\Users\Snoopy\Downloads\FRST64.exe

2013-12-12 01:01 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-12 01:01 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-12 01:01 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-12 01:01 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-12 00:59 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-12 00:59 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-12 00:59 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-12 00:59 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-12 00:59 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-12 00:59 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-12 00:59 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-12 00:59 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-12 00:59 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-12 00:59 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-12 00:59 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-12 00:59 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-12 00:59 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-12 00:59 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-12 00:59 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-12 00:59 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-12 00:59 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-12 00:59 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-12 00:59 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-12 00:59 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-12 00:59 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-12 00:59 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-12 00:59 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-12 00:59 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-12 00:59 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-12 00:59 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-12 00:59 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-12 00:59 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-12 00:59 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-12 00:59 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-12 00:59 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-11 10:02 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-11 10:02 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-11 10:02 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-11 10:02 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-11 10:02 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-11 10:02 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-11 10:02 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-11 10:01 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-11 10:01 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-11 10:01 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-11 10:01 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-11 10:01 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-11 10:01 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-11 10:01 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-11 10:01 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-11 10:01 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-11 10:01 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-11 10:01 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-11 10:01 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-08 20:49 - 2013-12-08 20:49 - 00827728 _____ (Microsoft Corporation) C:\Users\Snoopy\Downloads\msvcr100.dll

2013-12-08 20:39 - 2013-12-08 20:39 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-msvcr100.exe

2013-12-08 20:31 - 2013-12-08 20:31 - 04422992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc100u.dll

2013-12-08 20:19 - 2013-12-08 20:51 - 00000000 ____D C:\Program Files (x86)\Dll-Files.com Fixer

2013-12-08 20:17 - 2013-12-08 20:18 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-mfc100u.exe

2013-12-08 20:10 - 2013-12-11 09:42 - 00006670 _____ C:\Windows\PFRO.log

2013-12-08 19:56 - 2013-12-08 19:56 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\TuneUp Software

2013-12-08 19:55 - 2013-12-08 19:58 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-12-08 19:54 - 2013-12-08 20:07 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

2013-12-08 19:53 - 2013-12-08 19:54 - 28181408 _____ (TuneUp Software) C:\Users\Snoopy\Downloads\TuneUpUtilities2013_de-DE.exe

2013-12-07 17:25 - 2013-04-24 22:32 - 00258753 _____ C:\Users\Snoopy\Desktop\MinecraftDev.exe

2013-12-07 17:08 - 2013-12-07 17:26 - 00000000 ____D C:\Users\Snoopy\Desktop\MinecraftDev

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Program Files (x86)\WinRAR

2013-12-07 17:04 - 2013-12-07 17:05 - 01766784 _____ C:\Users\Snoopy\Downloads\wrar500.exe

2013-12-07 17:02 - 2013-12-07 17:26 - 00117781 _____ C:\Users\Snoopy\Desktop\MinecraftDev.rar

2013-12-07 17:02 - 2013-12-07 17:02 - 00116804 _____ C:\Users\Snoopy\Downloads\MinecraftDev.rar

2013-12-07 16:51 - 2013-12-07 16:51 - 00159028 _____ C:\Users\Snoopy\Desktop\Minecraft- (3).rar

2013-12-07 16:43 - 2013-12-07 16:43 - 00000000 ____D C:\ProgramData\APN

2013-12-07 16:41 - 2013-12-07 16:51 - 00000000 ____D C:\ProgramData\Oracle

2013-12-07 16:39 - 2013-12-07 16:40 - 00005683 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log

2013-12-07 16:31 - 2013-12-07 16:31 - 00159028 _____ C:\Users\Snoopy\Downloads\Minecraft-.rar

2013-12-07 12:54 - 2013-12-07 12:54 - 02465368 _____ (Check Point Software Technologies LTD) C:\Users\Snoopy\Downloads\zaSetupWeb_120_104_000.exe

2013-12-06 20:38 - 2013-12-06 20:38 - 00000000 ____D C:\Users\Snoopy\AppData\Local\LEGO

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\ProgramData\IVI Foundation

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\Program Files (x86)\IVI Foundation

2013-12-06 20:28 - 2013-12-06 20:28 - 00000000 ____D C:\ProgramData\LEGO MINDSTORMS EV3

2013-12-05 19:44 - 2013-12-07 16:36 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\FileAdvisor

2013-12-03 19:35 - 2013-12-11 19:35 - 00000000 ____D C:\Program Files (x86)\File Type Advisor

2013-12-03 19:35 - 2013-12-03 19:35 - 00003524 _____ C:\Windows\System32\Tasks\FileAdvisorUpdate

2013-12-03 19:35 - 2013-12-03 19:35 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck

2013-12-03 19:33 - 2013-12-03 19:33 - 05834488 _____ (ManiacTools.com                                             ) C:\Users\Snoopy\Downloads\m4a-to80-mp3-converter.exe

2013-12-02 08:25 - 2013-12-14 09:12 - 00001400 _____ C:\Windows\setupact.log

2013-12-02 08:25 - 2013-12-02 08:25 - 00000000 _____ C:\Windows\setuperr.log

2013-12-01 14:18 - 2013-12-01 14:18 - 00001466 _____ C:\Users\Snoopy\Desktop\MB - Verknüpfung.lnk

2013-11-27 21:28 - 2013-11-27 21:28 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-27 21:28 - 2013-11-27 21:28 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-27 21:28 - 2013-11-27 21:28 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-27 21:27 - 2013-11-27 21:27 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-27 21:27 - 2013-11-27 21:27 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-27 21:27 - 2013-11-27 21:27 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-23 14:05 - 2013-11-24 21:30 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Systweak

2013-11-23 14:04 - 2013-11-23 14:04 - 04702376 _____ (Systweak Inc                                                ) C:\Users\Snoopy\Desktop\rcpsetup_softonic_sd_new.exe

2013-11-23 14:04 - 2013-11-23 14:04 - 00675988 _____ C:\Users\Snoopy\Desktop\Minecraft.exe

2013-11-23 14:03 - 2013-11-23 14:03 - 00401744 _____ (Softonic                                        ) C:\Users\Snoopy\Downloads\SoftonicDownloader_fuer_minecraft.exe

2013-11-23 13:27 - 2013-11-23 13:27 - 00000000 _____ C:\Windows\WdbInstW.INI

2013-11-23 13:26 - 2013-11-23 13:31 - 00001550 _____ C:\Windows\Bert47055_0.ini

2013-11-23 13:26 - 2013-11-23 13:31 - 00000000 ____D C:\Bertrams

2013-11-23 13:26 - 2000-09-07 10:08 - 00000481 _____ C:\Windows\Innentab.ini
 

==================== One Month Modified Files and Folders =======
 

2013-12-14 09:32 - 2013-12-14 09:31 - 00013526 _____ C:\Users\Snoopy\Downloads\FRST.txt

2013-12-14 09:31 - 2013-12-14 09:31 - 00000000 ____D C:\FRST

2013-12-14 09:29 - 2013-12-14 09:29 - 01927462 _____ (Farbar) C:\Users\Snoopy\Downloads\FRST64.exe

2013-12-14 09:26 - 2012-09-19 00:53 - 00000000 ____D C:\Users\Snoopy\Documents\Outlook-Dateien

2013-12-14 09:24 - 2013-02-04 23:28 - 01710704 _____ C:\Windows\WindowsUpdate.log

2013-12-14 09:23 - 2009-07-14 05:45 - 00026496 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-14 09:23 - 2009-07-14 05:45 - 00026496 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-14 09:12 - 2013-12-02 08:25 - 00001400 _____ C:\Windows\setupact.log

2013-12-14 09:12 - 2012-09-21 19:18 - 00000000 ____D C:\ProgramData\NVIDIA

2013-12-14 09:12 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-13 10:57 - 2012-09-18 23:01 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001UA.job

2013-12-13 10:56 - 2012-09-18 23:01 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001Core.job

2013-12-12 14:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-12-12 08:43 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-12 08:41 - 2012-09-19 07:50 - 03045072 _____ C:\Windows\system32\perfh007.dat

2013-12-12 08:41 - 2012-09-19 07:50 - 00878520 _____ C:\Windows\system32\perfc007.dat

2013-12-12 08:41 - 2009-07-14 06:13 - 00006492 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-12 08:35 - 2009-07-14 05:45 - 00408560 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-12 01:01 - 2012-09-18 22:36 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-12-12 00:56 - 2012-11-30 16:47 - 00036409 ____H C:\Windows\SysWOW64\BTImages.dat

2013-12-11 19:35 - 2013-12-03 19:35 - 00000000 ____D C:\Program Files (x86)\File Type Advisor

2013-12-11 17:47 - 2013-10-27 19:41 - 00000000 ____D C:\Daniel

2013-12-11 11:09 - 2012-09-23 11:48 - 00000000 ____D C:\ProgramData\tmp

2013-12-11 09:42 - 2013-12-08 20:10 - 00006670 _____ C:\Windows\PFRO.log

2013-12-10 23:35 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini

2013-12-08 21:08 - 2013-04-06 21:24 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-08 20:51 - 2013-12-08 20:19 - 00000000 ____D C:\Program Files (x86)\Dll-Files.com Fixer

2013-12-08 20:49 - 2013-12-08 20:49 - 00827728 _____ (Microsoft Corporation) C:\Users\Snoopy\Downloads\msvcr100.dll

2013-12-08 20:39 - 2013-12-08 20:39 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-msvcr100.exe

2013-12-08 20:31 - 2013-12-08 20:31 - 04422992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc100u.dll

2013-12-08 20:18 - 2013-12-08 20:17 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-mfc100u.exe

2013-12-08 20:07 - 2013-12-08 19:54 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

2013-12-08 20:07 - 2012-12-23 19:02 - 00000000 ____D C:\Users\Snoopy\AppData\Local\Downloaded Installations

2013-12-08 20:07 - 2012-09-18 22:36 - 00000000 ____D C:\Users\Snoopy\AppData\Local\Microsoft Help

2013-12-08 19:58 - 2013-12-08 19:55 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-12-08 19:56 - 2013-12-08 19:56 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\TuneUp Software

2013-12-08 19:54 - 2013-12-08 19:53 - 28181408 _____ (TuneUp Software) C:\Users\Snoopy\Downloads\TuneUpUtilities2013_de-DE.exe

2013-12-08 12:06 - 2012-09-23 11:48 - 00000000 ____D C:\ProgramData\hps

2013-12-08 10:25 - 2012-09-20 20:13 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\ZoomBrowser EX

2013-12-08 10:23 - 2012-09-20 19:58 - 00000000 ____D C:\ProgramData\ZoomBrowser

2013-12-08 10:03 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2013-12-08 10:01 - 2013-02-17 12:42 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software

2013-12-08 10:01 - 2013-02-17 12:42 - 00000000 ____D C:\ProgramData\NCH Software

2013-12-08 10:01 - 2013-02-17 12:42 - 00000000 ____D C:\Program Files (x86)\NCH Software

2013-12-07 21:22 - 2013-10-03 18:14 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\.minecraft

2013-12-07 17:26 - 2013-12-07 17:08 - 00000000 ____D C:\Users\Snoopy\Desktop\MinecraftDev

2013-12-07 17:26 - 2013-12-07 17:02 - 00117781 _____ C:\Users\Snoopy\Desktop\MinecraftDev.rar

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Program Files (x86)\WinRAR

2013-12-07 17:05 - 2013-12-07 17:04 - 01766784 _____ C:\Users\Snoopy\Downloads\wrar500.exe

2013-12-07 17:02 - 2013-12-07 17:02 - 00116804 _____ C:\Users\Snoopy\Downloads\MinecraftDev.rar

2013-12-07 16:51 - 2013-12-07 16:51 - 00159028 _____ C:\Users\Snoopy\Desktop\Minecraft- (3).rar

2013-12-07 16:51 - 2013-12-07 16:41 - 00000000 ____D C:\ProgramData\Oracle

2013-12-07 16:43 - 2013-12-07 16:43 - 00000000 ____D C:\ProgramData\APN

2013-12-07 16:40 - 2013-12-07 16:39 - 00005683 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log

2013-12-07 16:40 - 2013-06-10 20:34 - 00000000 ____D C:\Program Files (x86)\Java

2013-12-07 16:36 - 2013-12-05 19:44 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\FileAdvisor

2013-12-07 16:31 - 2013-12-07 16:31 - 00159028 _____ C:\Users\Snoopy\Downloads\Minecraft-.rar

2013-12-07 12:54 - 2013-12-07 12:54 - 02465368 _____ (Check Point Software Technologies LTD) C:\Users\Snoopy\Downloads\zaSetupWeb_120_104_000.exe

2013-12-06 20:38 - 2013-12-06 20:38 - 00000000 ____D C:\Users\Snoopy\AppData\Local\LEGO

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\ProgramData\IVI Foundation

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\Program Files (x86)\IVI Foundation

2013-12-06 20:32 - 2012-11-18 17:55 - 00000000 ____D C:\ProgramData\National Instruments

2013-12-06 20:29 - 2012-11-18 17:58 - 00000000 ____D C:\Users\Snoopy\Documents\LEGO Creations

2013-12-06 20:29 - 2012-11-18 17:56 - 00000000 ____D C:\Program Files (x86)\National Instruments

2013-12-06 20:29 - 2012-11-18 17:56 - 00000000 ____D C:\Program Files (x86)\LEGO Software

2013-12-06 20:28 - 2013-12-06 20:28 - 00000000 ____D C:\ProgramData\LEGO MINDSTORMS EV3

2013-12-06 20:20 - 2012-09-25 18:18 - 00006474 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-12-06 10:49 - 2012-09-18 23:01 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001UA

2013-12-06 10:49 - 2012-09-18 23:01 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001Core

2013-12-05 17:55 - 2013-04-06 21:24 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-12-05 08:51 - 2012-09-18 23:03 - 00002366 _____ C:\Users\Snoopy\Desktop\Google Chrome.lnk

2013-12-03 20:00 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-12-03 19:35 - 2013-12-03 19:35 - 00003524 _____ C:\Windows\System32\Tasks\FileAdvisorUpdate

2013-12-03 19:35 - 2013-12-03 19:35 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck

2013-12-03 19:33 - 2013-12-03 19:33 - 05834488 _____ (ManiacTools.com                                             ) C:\Users\Snoopy\Downloads\m4a-to80-mp3-converter.exe

2013-12-02 08:25 - 2013-12-02 08:25 - 00000000 _____ C:\Windows\setuperr.log

2013-12-01 18:38 - 2013-07-27 23:56 - 00000000 ____D C:\Windows\Minidump

2013-12-01 18:38 - 2012-09-19 07:53 - 00000000 ____D C:\Windows\Panther

2013-12-01 14:18 - 2013-12-01 14:18 - 00001466 _____ C:\Users\Snoopy\Desktop\MB - Verknüpfung.lnk

2013-11-28 07:52 - 2012-09-18 21:02 - 00001425 _____ C:\Users\Snoopy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-11-28 07:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-11-27 21:28 - 2013-11-27 21:28 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-27 21:28 - 2013-11-27 21:28 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-27 21:28 - 2013-11-27 21:28 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-27 21:27 - 2013-11-27 21:27 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-27 21:27 - 2013-11-27 21:27 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-27 21:27 - 2013-11-27 21:27 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-26 12:54 - 2013-12-12 00:59 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-26 11:19 - 2013-12-12 00:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-26 11:18 - 2013-12-12 00:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-26 11:11 - 2013-12-12 00:59 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-26 10:48 - 2013-12-12 00:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-26 10:46 - 2013-12-12 00:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-26 10:41 - 2013-12-12 00:59 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-26 10:29 - 2013-12-12 00:59 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-26 10:27 - 2013-12-12 00:59 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-26 10:23 - 2013-12-12 00:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-26 10:21 - 2013-12-12 00:59 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-26 10:18 - 2013-12-12 00:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-26 10:18 - 2013-12-12 00:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-26 10:16 - 2013-12-12 00:59 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-26 09:57 - 2013-12-12 00:59 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-26 09:38 - 2013-12-12 00:59 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-26 09:38 - 2013-12-12 00:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-26 09:35 - 2013-12-12 00:59 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-26 09:32 - 2013-12-12 00:59 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-26 09:28 - 2013-12-12 00:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-26 09:16 - 2013-12-12 00:59 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-26 09:02 - 2013-12-12 00:59 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-26 08:48 - 2013-12-12 00:59 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-26 08:32 - 2013-12-12 00:59 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-26 08:26 - 2013-12-12 00:59 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-26 08:07 - 2013-12-12 00:59 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-26 07:40 - 2013-12-12 00:59 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-26 07:34 - 2013-12-12 00:59 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-26 07:34 - 2013-12-12 00:59 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-26 07:33 - 2013-12-12 00:59 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-26 07:27 - 2013-12-12 00:59 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-25 20:20 - 2013-11-13 17:52 - 00000000 ____D C:\Reli Schülerzeitung

2013-11-25 14:44 - 2012-11-30 20:52 - 00019392 _____ (Dll-Files.com) C:\Windows\system32\roboot64.exe

2013-11-25 14:28 - 2013-04-06 21:24 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-11-24 21:30 - 2013-11-23 14:05 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Systweak

2013-11-23 19:26 - 2013-12-11 10:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-11-23 18:47 - 2013-12-11 10:02 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-11-23 14:04 - 2013-11-23 14:04 - 04702376 _____ (Systweak Inc                                                ) C:\Users\Snoopy\Desktop\rcpsetup_softonic_sd_new.exe

2013-11-23 14:04 - 2013-11-23 14:04 - 00675988 _____ C:\Users\Snoopy\Desktop\Minecraft.exe

2013-11-23 14:03 - 2013-11-23 14:03 - 00401744 _____ (Softonic                                        ) C:\Users\Snoopy\Downloads\SoftonicDownloader_fuer_minecraft.exe

2013-11-23 13:31 - 2013-11-23 13:26 - 00001550 _____ C:\Windows\Bert47055_0.ini

2013-11-23 13:31 - 2013-11-23 13:26 - 00000000 ____D C:\Bertrams

2013-11-23 13:27 - 2013-11-23 13:27 - 00000000 _____ C:\Windows\WdbInstW.INI

2013-11-20 20:51 - 2013-02-15 20:10 - 00007597 _____ C:\Users\Snoopy\AppData\Local\Resmon.ResmonCfg
 

Files to move or delete:

====================

C:\Users\Snoopy\AmazonMP3DownloaderInstall._V383787924_.exe

C:\Users\Snoopy\ANTAgent_233.exe
 
 

Some content of TEMP:

====================

C:\Users\Snoopy\AppData\Local\Temp\APNSetup.exe

C:\Users\Snoopy\AppData\Local\Temp\avgnt.exe

C:\Users\Snoopy\AppData\Local\Temp\i4jdel0.exe

C:\Users\Snoopy\AppData\Local\Temp\i4jdel1.exe

C:\Users\Snoopy\AppData\Local\Temp\SHSetup.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-10 21:19
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-12-2013 01

Ran by Snoopy at 2013-12-14 09:33:59

Running from C:\Users\Snoopy\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: ZoneAlarm Antivirus (Enabled - Up to date) {DE038A5B-9EDD-18A9-2361-FF7D98D43730}

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: ZoneAlarm Anti-Spyware (Enabled - Up to date) {65626BBF-B8E7-1727-19D1-C40FE3537D8D}

FW: ZoneAlarm Firewall (Enabled) {E6380B7E-D4B2-19F1-083E-56486607704B}
 

==================== Installed Programs ======================
 

Adobe Flash Player 11 ActiveX (x32 Version: 11.5.502.110)

Adobe Reader X (10.1.4) - Deutsch (x32 Version: 10.1.4)

Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)

Apple Software Update (x32 Version: 2.1.3.127)

Avira Free Antivirus (x32 Version: 14.0.1.759)

BauDesigner 6.5 (x32)

Canon Easy-PhotoPrint EX (x32)

Canon G.726 WMP-Decoder (x32 Version: 1.1.0.4)

CANON iMAGE GATEWAY Task for ZoomBrowser EX (x32 Version: 1.5.0.3)

Canon Inkjet Printer Driver Add-On Module

Canon Internet Library for ZoomBrowser EX (x32 Version: 1.6.1.6)

Canon MovieEdit Task for ZoomBrowser EX (x32 Version: 2.6.0.4)

Canon RAW Image Task for ZoomBrowser EX (x32 Version: 3.3.0.5)

Canon ScanGear Starter (x32)

Canon Utilities CameraWindow (x32 Version: 7.1.0.2)

Canon Utilities CameraWindow DC (x32 Version: 7.1.0.7)

Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX (x32 Version: 6.4.2.16)

Canon Utilities MyCamera (x32 Version: 6.4.0.5)

Canon Utilities MyCamera DC (x32 Version: 7.0.1.8)

Canon Utilities RemoteCapture DC (x32 Version: 3.0.1.8)

Canon Utilities RemoteCapture Task for ZoomBrowser EX (x32 Version: 1.7.1.9)

Canon Utilities ZoomBrowser EX (x32 Version: 6.1.1.21)

Canon ZoomBrowser EX Memory Card Utility (x32 Version: 1.1.0.8)

CCleaner (Version: 3.22)

CDBurnerXP (x32 Version: 4.5.1.3868)

CD-LabelPrint (x32)

C-Media PCI Audio Device

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)

Driver Mender (x32 Version: 8.1)

File Type Advisor 1.0 (x32)

FileViewPro (Version: 1.5)

Franzis 3D-Eisenbahnplaner 10.0 (x32)

Free Hide IP (x32 Version: 3.8.5.6)

Free Studio version 2013 (x32 Version: 6.0.0.128)

Free Video Converter (x32 Version: 1.0.1.4)

FUJIFILM MyFinePix Studio 1.0 (x32)

Garmin ANT Agent (x32 Version: 2.3.3)

Garmin Communicator Plugin (x32 Version: 4.0.4)

Garmin Communicator Plugin x64 (Version: 4.0.4)

Garmin USB Drivers (x32 Version: 2.3.0.0)

Google Chrome (HKCU Version: 31.0.1650.63)

Google Earth (x32 Version: 6.2.2.6613)

Haack Weltatlas CD-ROM 1.3 (x32 Version: 1.3)

Landwirtschafts Simulator 2011 (x32 Version: 1.0)

Landwirtschafts Simulator 2013 (x32 Version: 1.0)

LEGO MINDSTORMS EV3 (x32 Version: 1.0.0)

LEGO MINDSTORMS EV3 Home Content (x32 Version: 1.0.259)

LEGO MINDSTORMS EV3 Home deutscher Support (x32 Version: 1.0.228)

LEGO MINDSTORMS EV3 Home Edition (x32 Version: 1.0.346)

LEGO MINDSTORMS EV3 Uninstaller (x32 Version: 1.0.11)

LEGO MINDSTORMS NXT - (Deutsch) Sprachenpaket (x32 Version: 2.0.100.0)

LEGO MINDSTORMS NXT Migration Package (x32 Version: 1.2.8.0)

LEGO MINDSTORMS NXT Software v2.0 (x32 Version: 2.0.108.0)

LEGO MINDSTORMS NXT x64 Driver (Version: 1.20.115.0)

MFC RunTime files (x32 Version: 1.0.0)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)

Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Word Viewer 2003 (x32 Version: 11.0.8173.0)

Microsoft Silverlight (Version: 5.1.20913.0)

Microsoft Silverlight 5.1 (x32 Version: 5.1.4001)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

ModelleisenbahnSimulator (x32)

Modelleisenbahn-Simulator Wilder Westen (x32)

MPEG4E VFW - H.264/MPEG-4 AVC codec (remove only) (x32)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0)

Müller Foto (x32 Version: 5.0.3)

Nero 7 Demo (x32 Version: 7.00.7551)

NI .NET Framework 4 (x32 Version: 4.00.49152)

NI EulaDepot (x32 Version: 3.11.190)

NI MDF Support (x32 Version: 3.11.190)

NI Security Update (KB 67L8LCQW) (64-bit) (Version: 1.0.29.0)

NI Security Update (KB 67L8LCQW) (x32 Version: 1.0.29.0)

NI Uninstaller (x32 Version: 3.11.190)

NI VC2008MSMs x64 (Version: 9.0.401)

NI VC2008MSMs x86 (x32 Version: 9.0.401)

Norton PC Checkup (x32 Version: 2.0.17.20)

Norton PC Checkup (x32 Version: 3.0.2.122.0)

NVIDIA 3D Vision Treiber 311.06 (Version: 311.06)

NVIDIA Display Control Panel (Version: 1.10)

NVIDIA Drivers (Version: 1.10.62.40)

NVIDIA Grafiktreiber 311.06 (Version: 311.06)

NVIDIA Install Application (Version: 2.1002.108.688)

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1106)

NVIDIA Systemsteuerung 311.06 (Version: 311.06)

NVIDIA Update 1.11.3 (Version: 1.11.3)

NVIDIA Update Components (Version: 1.11.3)

OLYMPUS Master 2 (x32 Version: 1.0.5)

OLYMPUS muvee theaterPack (x32 Version: 1.0.2)

Photo Transport (x32 Version: 1.0.1)

QuickTime (x32 Version: 7.74.80.86)

Ravensburger tiptoi (x32)

Recuva (Version: 1.44)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)

Silicon Laboratories CP210x USB to UART Bridge (Driver Removal) (x32)

Silicon Laboratories USBXpress Device (Driver Removal) (x32)

Stellarium 0.11.4 (x32 Version: 0.11.4)

Tinypic 3.18 (x32 Version: Tinypic 3.18)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)

Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32)

VIS (x32)

Voltcraft - Voltsoft System Version (x32)

WavePad Audiobearbeitungs-Software (x32)

Windows Driver Package - Dynastream Innovations (libusb0) LibUsbDevices  (07/07/2009 1.12.2) (Version: 07/07/2009 1.12.2)

Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (Version: 06/03/2009 2.3.0.0)

WinRail 11.0 Demo (x32 Version: 11.0)

WinRAR 5.00 (32-bit) (x32 Version: 5.00.0)

WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137)

ZoneAlarm Antivirus (x32 Version: 11.0.000.020)

ZoneAlarm Firewall (x32 Version: 11.0.000.020)

ZoneAlarm Free Antivirus + Firewall (x32 Version: 11.0.000.020)

ZoneAlarm Security (x32 Version: 11.0.000.020)
 

==================== Restore Points  =========================
 

08-12-2013 09:00:20 Removed Apple Application Support

08-12-2013 09:02:36 Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

08-12-2013 09:03:03 Removed Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219

08-12-2013 09:03:56 Removed Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

08-12-2013 18:55:17 TuneUp Utilities 2013 wird installiert

08-12-2013 19:12:29 TuneUp Utilities 2013 wird entfernt

08-12-2013 19:14:18 TuneUp Utilities Language Pack (de-DE) wird entfernt

08-12-2013 19:34:02 DLL-Files Fixer So, Dez 08, 13  20:34

09-12-2013 19:35:23 Windows Update

10-12-2013 22:23:10 Windows Update

11-12-2013 23:55:57 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {04E9AB26-F5AD-41C4-81D6-7FC5480E8CCB} - System32\Tasks\{C17F2383-81D2-4A2D-9F84-F8C90455FAAF} => C:\Windows\twain_32\CNQSG\SGST.exe [2006-07-28] (CANON INC.)

Task: {05C2563B-22EB-438E-AFC3-E183211C6BDD} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe

Task: {0CD3EE2D-4B72-4A9F-B8E3-BD56DA9588B7} - System32\Tasks\Driver Mender-RTMScan => C:\Program Files (x86)\Driver Mender\Driver Mender\DriverMender.exe [2012-12-23] (PC Drivers Headquarters)

Task: {48DA2A59-E46D-4ABE-9D9E-F931052E6E9E} - System32\Tasks\{B556DEC0-7A59-437C-8C56-2F4B6DBF6AF9} => C:\Windows\twain_32\CNQSG\SGST.exe [2006-07-28] (CANON INC.)

Task: {4E3BCCBA-B6D3-43BF-8C1D-8C073D9E2C50} - System32\Tasks\FileAdvisorCheck => C:\Program Files (x86)\File Type Advisor\file-type-advisor.exe [2013-07-12] (filetypeadvisor.com                                         )

Task: {65983BD3-2DF5-4186-9E99-F67BE19E0B1F} - System32\Tasks\{EDF8A5F1-2DF4-4818-A324-987933846F75} => C:\Windows\twain_32\CNQSG\SGST.exe [2006-07-28] (CANON INC.)

Task: {6EA3ABF9-82F4-479A-8816-D14A21814AF9} - System32\Tasks\{6FA9BDE5-224B-461F-92A6-293D1A53065A} => C:\Windows\twain_32\CNQSG\SGST.exe [2006-07-28] (CANON INC.)

Task: {7332A70D-FE81-4E2D-BA44-9B8E71882DA8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-08-22] (Piriform Ltd)

Task: {814E6FC8-D294-41B2-B24C-2ACC78017168} - System32\Tasks\Google Updater and Installer => C:\Users\Snoopy\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-18] (Google Inc.)

Task: {89EAFBBE-5928-4DD3-B1FD-E61FCF606F07} - System32\Tasks\PC Performer Manager => Sc.exe start PC Performer Manager

Task: {976E02E2-66EA-4D1D-AB98-6C1A53005AAB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001Core => C:\Users\Snoopy\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-18] (Google Inc.)

Task: {9A490A51-8DBB-4F7B-8B1F-D47E111DBA8A} - System32\Tasks\FileAdvisorUpdate => C:\Program Files (x86)\File Type Advisor\fileadvisor.exe [2013-07-12] (File Type Advisor)

Task: {B54D8127-3C29-43A1-85D1-0BF1ECBAE6BC} - System32\Tasks\{76FC950E-3537-4B3C-8800-DE38C520FAC8} => C:\Windows\twain_32\CNQSG\SGST.exe [2006-07-28] (CANON INC.)

Task: {B77908CC-03DF-46A8-B01B-5AF870DD9D0D} - System32\Tasks\Driver Mender-RTMRules => C:\Program Files (x86)\Driver Mender\Driver Mender\DriverMender.exe [2012-12-23] (PC Drivers Headquarters)

Task: {C0C8CEF7-D5AC-41BE-8040-A5D69DA75CCE} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001UA => C:\Users\Snoopy\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-18] (Google Inc.)

Task: {D354E79C-3AAC-4B40-AAF0-E480CE554D3C} - System32\Tasks\{F260611E-A197-4CB6-9C25-14C47AB64648} => C:\Windows\twain_32\CNQSG\SGST.exe [2006-07-28] (CANON INC.)

Task: {EBE59B36-5C3D-46D6-A938-095B932E758C} - System32\Tasks\Driver Mender-RTMUpdater => C:\Program Files (x86)\Driver Mender\Driver Mender\DriverMender.exe [2012-12-23] (PC Drivers Headquarters)

Task: {FAB4E0E8-FD23-46D5-BD95-FA86079A9CC3} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001Core.job => C:\Users\Snoopy\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001UA.job => C:\Users\Snoopy\AppData\Local\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

2013-04-06 21:24 - 2013-12-08 21:05 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2013-12-05 08:51 - 2013-12-04 03:47 - 00702416 _____ () C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\libglesv2.dll

2013-12-05 08:51 - 2013-12-04 03:47 - 00099792 _____ () C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\libegl.dll

2013-12-05 08:51 - 2013-12-04 03:48 - 04055504 _____ () C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll

2013-12-05 08:51 - 2013-12-04 03:48 - 00399312 _____ () C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll

2013-12-05 08:51 - 2013-12-04 03:47 - 01619408 _____ () C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/14/2013 09:14:25 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/13/2013 10:36:00 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/12/2013 09:11:07 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 

Error: (12/12/2013 09:06:14 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/12/2013 02:33:33 PM) (Source: TestWorker) (User: )

Description: TestWorkerFailed to send data to service: Norton PC Checkup Application Launcher
 

Error: (12/12/2013 08:41:49 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (12/12/2013 08:41:49 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (12/12/2013 08:41:49 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (12/12/2013 08:36:10 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/12/2013 08:32:37 AM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

System errors:

=============

Error: (12/14/2013 09:17:51 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (12/14/2013 09:17:51 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (12/14/2013 09:17:33 AM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
 

Error: (12/13/2013 10:56:43 AM) (Source: DCOM) (User: )

Description: 1053sdrsvc{687E55CA-6621-4C41-B9F1-C0EDDC94BB05}
 

Error: (12/13/2013 10:56:43 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Windows-Sicherung" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (12/13/2013 10:56:43 AM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Sicherung erreicht.
 

Error: (12/13/2013 10:55:04 AM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.
 

Error: (12/13/2013 10:40:08 AM) (Source: Microsoft-Windows-HAL) (User: )

Description: Der Speicher wurde beim letzten Leistungsübergang des Systems von der Plattformfirmware beschädigt. Überprüfen Sie, ob für Ihr System aktualisierte Firmware verfügbar ist.
 

Error: (12/13/2013 10:39:01 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (12/13/2013 10:39:01 AM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 
 

Microsoft Office Sessions:

=========================

Error: (12/14/2013 09:14:25 AM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/13/2013 10:36:00 AM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/12/2013 09:11:07 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Snoopy\Downloads\SoftonicDownloader_fuer_minecraft.exe
 

Error: (12/12/2013 09:06:14 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/12/2013 02:33:33 PM) (Source: TestWorker)(User: )

Description: TestWorkerFailed to send data to service: Norton PC Checkup Application Launcher
 

Error: (12/12/2013 08:41:49 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)

Description: WmiApRplWmiApRpl8F20300004D070000
 

Error: (12/12/2013 08:41:49 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)

Description: Performance1637070000000000000000000009030000
 

Error: (12/12/2013 08:41:49 AM) (Source: Microsoft-Windows-LoadPerf)(User: NT-AUTORITÄT)

Description: Performance1637070000000000000000000009030000
 

Error: (12/12/2013 08:36:10 AM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/12/2013 08:32:37 AM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-12-14 09:29:54.600

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-13 11:05:29.955

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-12 22:44:30.471

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-12 21:35:57.432

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-12 19:20:04.167

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-12 18:58:32.238

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-12 14:33:35.004

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-12 08:43:43.139

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-12 00:55:01.557

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-12 00:24:27.764

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 60%

Total physical RAM: 2046.49 MB

Available physical RAM: 812.63 MB

Total Pagefile: 5118.49 MB

Available Pagefile: 3017.48 MB

Total Virtual: 8192 MB

Available Virtual: 8191.8 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:127.99 GB) (Free:34.34 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: () (Fixed) (Total:25.39 GB) (Free:20.28 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 153 GB) (Disk ID: 17221721)

Partition 1: (Active) - (Size=128 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=25 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Code:

ComboFix 13-12-13.01 - Snoopy 14.12.2013  21:37:36.1.2 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.2046.1075 [GMT 1:00]

ausgeführt von:: c:\users\Snoopy\Downloads\ComboFix.exe

AV: ZoneAlarm Antivirus *Disabled/Updated* {DE038A5B-9EDD-18A9-2361-FF7D98D43730}

FW: ZoneAlarm Firewall *Disabled* {E6380B7E-D4B2-19F1-083E-56486607704B}

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: ZoneAlarm Anti-Spyware *Disabled/Updated* {65626BBF-B8E7-1727-19D1-C40FE3537D8D}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files (x86)\Search Results Toolbar\Datamngr

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\config\skin\css\new-tab.css

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_amazon.png

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_ebay.png

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_facebook.png

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_fantastigames.png

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_ftalk.png

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\config\skin\images\fav_youtube.png

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\config\skin\images\IDR_WEBSTORE_ICON.png

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\config\skin\images\imesh_logo_128.png

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\config\skin\new-tab.html

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\manifest.json

c:\program files (x86)\Search Results Toolbar\Datamngr\ChromeExtension\OurLocalPage.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\as_guid.dat

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\about.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxpanel.xul

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxpaneltransparent.xul

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxpanelwin.xul

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxprefwin.xul

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxtransparentwin.xul

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\dtxwin.xul

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\emailnotifierproviders.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\neterror.xhtml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\rsspreview.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\rsswin.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\rsswin.xsl

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\lib\wmpstreamer.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\modules\datastore.jsm

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\neterror.xhtml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\preferences.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\template.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\toolbar.htm

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\toolbar.xul

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\vmnrsswin.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_icon.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconFF.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressed.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_iconPressedFF.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\tb_pref_icon.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\thumbs\tb_thumb_icon.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsw

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.jsww

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\com.djboxservice.dj.DJBox\widget.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-buffering.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-connecting.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-ico.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-playing.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\radiobeta-stopped.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\tb_icon.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\widget.jsw

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\content\widgets\net.vmn.www.RadioBeta\widget.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\data\search\engines.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\data\search\search.xsl

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\data\weather\icons.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\blip.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\bluelite.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\bluesky.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-search-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-search.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-settings-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-settings.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-widgets-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn-widgets.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\btn_settings.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\custom.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\dailymotion.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\divider.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\ebay.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\facebook.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\find-videos.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\grey.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\icon_games.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\images.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\add.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\alexabutton.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\aol.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\arrow-dn.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\arrow-right-disabled.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\arrow-right.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\arrow-up.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btn-divider.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btn-end.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btn-mdl.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btn-mdl_ff.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btn-start.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btnover-divider.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btnover-end.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btnover-mdl.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btnover-mdl_ff.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\bg-btnover-start.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\blank.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btn-widgets-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btn-widgets.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btn_slider.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnback-down-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnback-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnleft-down-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnleft-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnright-down-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\btnright-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\button-splitter-down-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\button-splitter-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\button-splitter.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\checkmark.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\chevron.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\collapse.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\debugbar\debug.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\dtx-test.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\dtx.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\edit-back-hot.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\edit-back.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\expand.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\found.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\gmail.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight_blue.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight_cyan.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight_lime.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight_magenta.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\highlight_yellow.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\hotmail.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\imap.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\lastsearch-thumb-back.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\launchers.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\loadingMid.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\lock.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\logo-separator.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\mailcom.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menu_bg-basic.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menu_separator_bar.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menu_separator_white.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitem-splitter.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemback-down-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemback-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemleft-down-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemleft-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemleft.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemright-down-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\menuitemright-vista.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\minus.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\modify.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\move.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\movetarget.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\css\panels.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\css\popupAbout.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\css\popupGames.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\css\popupWidgets.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\css\dialog.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\bg.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\btn-search.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\btn-wide-close-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\btn-wide-close.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\default.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\tab-off-l.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\tab-off-r.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\tab-on-l.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\tab-on-r.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\transparent.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\ttlbar-left.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\ttlbar-mdl.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\ttlbar-right.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-btm-left.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-btm-mdl.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-btm-right-resize.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-btm-right.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-left.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\images\win-right.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\main.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\main.html.bak

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\default\scripts\defscript.js.bak

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\footer.htm

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\gamecategory.xsl

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\gameList.xsl

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\gametype.xsl

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrow-dn.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrow-sml-drop.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrow-sml.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrow-up.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\arrowr-bluew5.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\bg-aboutbox.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\bg-btnover.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\bg-pnl520x390.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-addtoolbar-left.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-addtoolbar-right.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-back.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-close-grey.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-close-greyover.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-drag.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-mdl-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-mdl.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-moredetails.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-next-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-next.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-play-left-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-play-left.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-previous-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-previous.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-right-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-search-pnlbtm.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-try-left-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\btn-try-left.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\bullet-orange.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\gamethumb-on.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\gamethumb2-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-calendar.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-dollar.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-download.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-joystick24.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-news24.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-play.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\ico-tags.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\icon-Add.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\icon-download.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\icon-Info.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\icon-play.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\icon-shop.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\menul-bgon.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\menul-bgover.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\panel-botm-noscroll.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scroll-bg-206.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scroll-bg.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scroll-topwin.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollb-disable.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollb-down.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollb-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollb.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollt-disable.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollt-down.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollt-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\scrollt.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\searchbox-pnlbtm.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\star_x_grey.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\star_x_orange.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\throbber.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\TRUSTe_about.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\view-detailed-on.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\view-detailed-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\view-thumb-on.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\view-thumb-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\widgets-square-16px.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\widgets-square-24px.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\images\widgets.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\initHTML.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\popupGames.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\popupHTML.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\popupWidgets.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\panels\scroll.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\plus.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\pop.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\radio.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\reload.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\remove.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\rename.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\resize-box.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\rss.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\rsschannelback.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\RSSLogo.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\rsstabdivider.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\scroll-left.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\scroll-right.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\search-go.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\search.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\separator.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\text-ellipsis.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\throbber.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\toolbarsplitter.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\transparent_1px.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_02.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_03.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_04.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_06.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_07.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_08.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_09.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_10.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_11.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_12.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_13.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_14.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_15.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_16.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_18.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_19.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_20.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\border_21.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\btn-close-grey.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\btn-close-greyover.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\close-hot.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\close-normal.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\loadingMid.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\paneltemplate.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\proxy.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\template.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\template.html.bak

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\template.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\templateFF.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\uwa\throbber.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\icons\cond999.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\icons\icons.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\icons\na-s.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\icons\na-t.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\icons\na.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\icons\weather.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\add.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\box-check.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\ico-check.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\options-weather.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\over-blue.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\over-orange.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\popupWeather.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\weatherbutton\panels\popupWeather.html

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lib\yahoo.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\lichen.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\logo-about.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\logo-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\logo-separator.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\logo.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\menuseparatorback.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\metacafe.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\modify-save.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\modify.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\modifyhot.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\namespacetoolbar.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\options-search.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\options\options-main.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\options\options-search.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\options\options-weather.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\options\options-weather.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\options\options-widgets.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\orange.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\search-over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\search_icon.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\searchbar\searchbar-background-left.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\searchbar\searchbar-background-middle.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\searchbar\searchbar-background-right.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\setting_stb_16x.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\settings.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\settings_stb_19x.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\settings_stb_19x_over.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-bluelite.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-bluesky.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-grey.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-lichen.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-orange.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin-yellow.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\skin.xml

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\sv.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\throbber.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\toolbarsplitter.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\TRUSTe_about.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\tv.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\twitter.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\veoh.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\video.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\vimeo.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\vmn.css

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\web.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\websearch.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\yellow.gif

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\chrome\skin\youtube.png

c:\program files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\manifest.xml

c:\users\Snoopy\AppData\Local\assembly\tmp

c:\users\Snoopy\Documents\2C507584.tmp

c:\users\Snoopy\Documents\3B7D435C.tmp

c:\users\Snoopy\Documents\3C4C6C91.tmp

c:\users\Snoopy\Documents\5104E6A9.tmp

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-11-14 bis 2013-12-14  ))))))))))))))))))))))))))))))

.

.

2013-12-14 20:46 . 2013-12-14 20:46        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp

2013-12-14 20:46 . 2013-12-14 20:46        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-12-14 20:41 . 2013-12-14 20:41        76232        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{9FDDFCE4-48C4-4EB1-8E57-E06509BB6124}\offreg.dll

2013-12-14 08:36 . 2013-12-14 08:40        --------        d-----w-        C:\aaa_Trojanerbekaempfung

2013-12-14 08:31 . 2013-12-14 08:31        --------        d-----w-        C:\FRST

2013-12-12 00:01 . 2013-05-10 05:56        12625920        ----a-w-        c:\windows\system32\wmploc.DLL

2013-12-12 00:01 . 2013-05-10 04:30        167424        ----a-w-        c:\program files\Windows Media Player\wmplayer.exe

2013-12-12 00:01 . 2013-05-10 03:48        164864        ----a-w-        c:\program files (x86)\Windows Media Player\wmplayer.exe

2013-12-12 00:01 . 2013-05-10 04:56        12625408        ----a-w-        c:\windows\SysWow64\wmploc.DLL

2013-12-12 00:01 . 2013-05-10 05:56        14631424        ----a-w-        c:\windows\system32\wmp.dll

2013-12-11 09:02 . 2013-10-30 02:32        335360        ----a-w-        c:\windows\system32\msieftp.dll

2013-12-11 09:02 . 2013-10-30 02:19        301568        ----a-w-        c:\windows\SysWow64\msieftp.dll

2013-12-11 09:02 . 2013-10-30 01:24        3155968        ----a-w-        c:\windows\system32\win32k.sys

2013-12-11 09:02 . 2013-11-23 18:26        417792        ----a-w-        c:\windows\SysWow64\WMPhoto.dll

2013-12-11 09:02 . 2013-11-23 17:47        465920        ----a-w-        c:\windows\system32\WMPhoto.dll

2013-12-11 09:02 . 2013-10-19 02:18        81408        ----a-w-        c:\windows\system32\imagehlp.dll

2013-12-11 09:02 . 2013-10-19 01:36        159232        ----a-w-        c:\windows\SysWow64\imagehlp.dll

2013-12-11 09:01 . 2013-11-12 02:23        2048        ----a-w-        c:\windows\system32\tzres.dll

2013-12-11 09:01 . 2013-11-12 02:07        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

2013-12-11 09:01 . 2013-10-04 02:16        116736        ----a-w-        c:\windows\system32\drivers\drmk.sys

2013-12-11 09:01 . 2013-10-04 01:36        230400        ----a-w-        c:\windows\system32\drivers\portcls.sys

2013-12-11 09:01 . 2013-10-12 02:32        150016        ----a-w-        c:\windows\system32\wshom.ocx

2013-12-11 09:01 . 2013-10-12 02:31        202752        ----a-w-        c:\windows\system32\scrrun.dll

2013-12-11 09:01 . 2013-10-12 02:04        121856        ----a-w-        c:\windows\SysWow64\wshom.ocx

2013-12-11 09:01 . 2013-10-12 02:03        163840        ----a-w-        c:\windows\SysWow64\scrrun.dll

2013-12-11 09:01 . 2013-10-12 01:33        156160        ----a-w-        c:\windows\system32\cscript.exe

2013-12-11 09:01 . 2013-10-12 01:33        168960        ----a-w-        c:\windows\system32\wscript.exe

2013-12-11 09:01 . 2013-10-12 01:15        141824        ----a-w-        c:\windows\SysWow64\wscript.exe

2013-12-11 09:01 . 2013-10-12 01:15        126976        ----a-w-        c:\windows\SysWow64\cscript.exe

2013-12-08 19:31 . 2013-12-08 19:31        4422992        ----a-w-        c:\windows\SysWow64\mfc100u.dll

2013-12-08 19:19 . 2013-12-08 19:19        --------        d-----w-        c:\programdata\Logs

2013-12-08 19:19 . 2013-12-08 19:51        --------        d-----w-        c:\program files (x86)\Dll-Files.com Fixer

2013-12-08 18:56 . 2013-12-08 18:56        --------        d-----w-        c:\users\Snoopy\AppData\Roaming\TuneUp Software

2013-12-08 18:55 . 2013-12-08 18:58        --------        d-----w-        c:\programdata\TuneUp Software

2013-12-08 18:54 . 2013-12-08 19:07        --------        d-sh--w-        c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

2013-12-08 18:54 . 2013-12-08 18:54        --------        d--h--w-        c:\programdata\Common Files

2013-12-07 15:43 . 2013-12-07 15:43        --------        d-----w-        c:\programdata\APN

2013-12-07 15:41 . 2013-12-07 15:51        --------        d-----w-        c:\programdata\Oracle

2013-12-06 19:38 . 2013-12-06 19:38        --------        d-----w-        c:\users\Snoopy\AppData\Local\LEGO

2013-12-06 19:32 . 2013-12-06 19:32        --------        d-----w-        c:\programdata\IVI Foundation

2013-12-06 19:32 . 2013-12-06 19:32        --------        d-----w-        c:\program files (x86)\IVI Foundation

2013-12-06 19:28 . 2013-12-06 19:28        --------        d-----w-        c:\programdata\LEGO MINDSTORMS EV3

2013-12-05 18:44 . 2013-12-07 15:36        --------        d-----w-        c:\users\Snoopy\AppData\Roaming\FileAdvisor

2013-12-03 18:35 . 2013-12-11 18:35        --------        d-----w-        c:\program files (x86)\File Type Advisor

2013-11-27 20:27 . 2013-11-27 20:27        752640        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll

2013-11-23 13:05 . 2013-11-24 20:30        --------        d-----w-        c:\users\Snoopy\AppData\Roaming\Systweak

2013-11-23 12:26 . 2013-11-23 12:31        --------        d-----w-        C:\Bertrams

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-11-25 13:44 . 2012-11-30 19:52        19392        ----a-w-        c:\windows\system32\roboot64.exe

2013-11-13 17:48 . 2012-09-23 08:23        82896128        ----a-w-        c:\windows\system32\MRT.exe

2013-10-14 17:00 . 2013-03-08 16:55        28368        ----a-w-        c:\windows\system32\IEUDINIT.EXE

2013-10-12 02:30 . 2013-11-13 16:52        830464        ----a-w-        c:\windows\system32\nshwfp.dll

2013-10-12 02:29 . 2013-11-13 16:52        859648        ----a-w-        c:\windows\system32\IKEEXT.DLL

2013-10-12 02:29 . 2013-11-13 16:52        324096        ----a-w-        c:\windows\system32\FWPUCLNT.DLL

2013-10-12 02:03 . 2013-11-13 16:52        656896        ----a-w-        c:\windows\SysWow64\nshwfp.dll

2013-10-12 02:01 . 2013-11-13 16:52        216576        ----a-w-        c:\windows\SysWow64\FWPUCLNT.DLL

2013-10-05 20:25 . 2013-11-13 16:53        1474048        ----a-w-        c:\windows\system32\crypt32.dll

2013-10-05 19:57 . 2013-11-13 16:53        1168384        ----a-w-        c:\windows\SysWow64\crypt32.dll

2013-10-04 02:28 . 2013-11-13 16:52        190464        ----a-w-        c:\windows\system32\SmartcardCredentialProvider.dll

2013-10-04 02:25 . 2013-11-13 16:52        197120        ----a-w-        c:\windows\system32\credui.dll

2013-10-04 02:24 . 2013-11-13 16:52        1930752        ----a-w-        c:\windows\system32\authui.dll

2013-10-04 01:58 . 2013-11-13 16:52        152576        ----a-w-        c:\windows\SysWow64\SmartcardCredentialProvider.dll

2013-10-04 01:56 . 2013-11-13 16:52        168960        ----a-w-        c:\windows\SysWow64\credui.dll

2013-10-04 01:56 . 2013-11-13 16:52        1796096        ----a-w-        c:\windows\SysWow64\authui.dll

2013-10-03 02:23 . 2013-11-13 16:52        404480        ----a-w-        c:\windows\system32\gdi32.dll

2013-10-03 02:00 . 2013-11-13 16:52        311808        ----a-w-        c:\windows\SysWow64\gdi32.dll

2013-09-28 01:09 . 2013-11-13 16:53        497152        ----a-w-        c:\windows\system32\drivers\afd.sys

2013-09-25 02:26 . 2013-11-13 16:52        95680        ----a-w-        c:\windows\system32\drivers\ksecdd.sys

2013-09-25 02:26 . 2013-11-13 16:52        154560        ----a-w-        c:\windows\system32\drivers\ksecpkg.sys

2013-09-25 02:23 . 2013-11-13 16:52        28672        ----a-w-        c:\windows\system32\sspisrv.dll

2013-09-25 02:23 . 2013-11-13 16:52        135680        ----a-w-        c:\windows\system32\sspicli.dll

2013-09-25 02:23 . 2013-11-13 16:52        28160        ----a-w-        c:\windows\system32\secur32.dll

2013-09-25 02:22 . 2013-11-13 16:52        340992        ----a-w-        c:\windows\system32\schannel.dll

2013-09-25 02:21 . 2013-11-13 16:52        307200        ----a-w-        c:\windows\system32\ncrypt.dll

2013-09-25 02:21 . 2013-11-13 16:52        1447936        ----a-w-        c:\windows\system32\lsasrv.dll

2013-09-25 01:58 . 2013-11-13 16:52        96768        ----a-w-        c:\windows\SysWow64\sspicli.dll

2013-09-25 01:57 . 2013-11-13 16:52        22016        ----a-w-        c:\windows\SysWow64\secur32.dll

2013-09-25 01:57 . 2013-11-13 16:52        247808        ----a-w-        c:\windows\SysWow64\schannel.dll

2013-09-25 01:56 . 2013-11-13 16:52        220160        ----a-w-        c:\windows\SysWow64\ncrypt.dll

2013-09-25 01:03 . 2013-11-13 16:52        30720        ----a-w-        c:\windows\system32\lsass.exe

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]

2013-01-28 14:54        281760        ----a-w-        c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"ZoneAlarm"="c:\program files (x86)\CheckPoint\ZoneAlarm\zatray.exe" [2012-11-19 73392]

"InstallValidator.exe.FA87EC44_C38F_4148_93A1_FF4A64A2B707"="c:\program files (x86)\National Instruments\Shared\NIUninstaller\InstallValidator.exe" [2013-06-19 265096]

"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2012-11-05 89184]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 libusb0;libusb-win32 - Kernel Driver 04/08/2011 1.2.4.0;c:\windows\system32\DRIVERS\libusb0.sys;c:\windows\SYSNATIVE\DRIVERS\libusb0.sys [x]

R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys;c:\windows\SYSNATIVE\drivers\nusb3hub.sys [x]

R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys;c:\windows\SYSNATIVE\drivers\nusb3xhc.sys [x]

R3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\DRIVERS\silabenm.sys;c:\windows\SYSNATIVE\DRIVERS\silabenm.sys [x]

R3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\DRIVERS\silabser.sys;c:\windows\SYSNATIVE\DRIVERS\silabser.sys [x]

R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x]

R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x]

R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]

R4 HOSTS Anti-PUPs;HOSTS Anti-PUPs;c:\program files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe;c:\program files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe [x]

R4 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe;c:\program files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe [x]

S0 gfibto;gfibto;c:\windows\system32\drivers\gfibto.sys;c:\windows\SYSNATIVE\drivers\gfibto.sys [x]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]

S2 ISWKL;ZoneAlarm LTD Toolbar ISWKL;c:\program files\CheckPoint\ZAForceField\ISWKL.sys;c:\program files\CheckPoint\ZAForceField\ISWKL.sys [x]

S2 IswSvc;ZoneAlarm LTD Toolbar IswSvc;c:\program files\CheckPoint\ZAForceField\IswSvc.exe;c:\program files\CheckPoint\ZAForceField\IswSvc.exe [x]

S2 PCCUJobMgr;Common Client Job Manager Service;c:\program files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe;c:\program files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S4 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*Deregistered* - avipbb

.

Inhalt des "geplante Tasks" Ordners

.

2013-12-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001Core.job

- c:\users\Snoopy\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-18 22:01]

.

2013-12-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001UA.job

- c:\users\Snoopy\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-18 22:01]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]

2013-01-28 14:54        342176        ----a-w-        c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CmPCIaudio"="c:\windows\Syswow64\CMICNFG3.dll" [2009-10-30 8151040]

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = https://www.google.de/

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyServer = http=;ftp=;https=;

IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105

IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm

IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm

IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000

IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll

TCP: DhcpNameServer = 192.168.178.1

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

URLSearchHooks-{6c97a91e-4524-4019-86af-2aa2d567bf5c} - (no file)

URLSearchHooks-{40c3cc16-7269-4b32-9531-17f2950fb06f} - (no file)

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

HKLM-Run-ISW - (no file)

AddRemove-SIUSBXP&10C4&EA61 - c:\windows\system32\Silabs\DriverUninstaller.exe USBXpress\SIUSBXP&10C4&EA61

AddRemove-SLABCOMM&10C4&EA60 - c:\windows\system32\Silabs\DriverUninstaller.exe VCP CP210x Cardinal\SLABCOMM&10C4&EA60

.

.

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\services\PCCUJobMgr]

"ImagePath"="\"c:\program files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe\" /s \"PCCUJobMgr\" /m \"c:\program files (x86)\Norton PC Checkup\Engine\2.0.17.20\diMaster.dll\" /prefetch:1"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\S-1-5-21-3516118728-1142162036-4191355624-1001\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{9B3DA229-B9DD-01DB-DF61-FBEB41FC8536}*]

"pamfbagjedngogdbnikjicpnkdiogfdb"=hex:61,62,70,6d,6d,6b,64,62,61,65,66,6e,6f,

   6f,6c,62,67,62,69,66,64,62,6b,68,64,6b,6c,6a,62,68,70,6f,65,66,00,77

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_110_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_110_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2013-12-14  21:50:11

ComboFix-quarantined-files.txt  2013-12-14 20:50

.

Vor Suchlauf: 31 Verzeichnis(se), 38.569.492.480 Bytes frei

Nach Suchlauf: 38 Verzeichnis(se), 39.214.514.176 Bytes frei

.

- - End Of File - - 47CB820026401CFE14C8B5ED9BF66686

A36C5E4F47E84449FF07ED3517B43A31

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Code:

Malwarebytes Anti-Malware (Test) 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.12.15.02
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

Snoopy :: SNOOPY-PC [Administrator]
 

Schutz: Aktiviert
 

15.12.2013 11:13:46

mbam-log-2013-12-15 (11-13-46).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 244247

Laufzeit: 10 Minute(n), 28 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 7

HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\SOFTWARE\BabylonToolbar (PUP.Optional.BabylonToolBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\Software\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\Google\Chrome\Extensions\dgjkhjdcljddbedokogakmmdjgnbeanf (PUP.Optional.SpeedAnalysis2.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Registrierungswerte: 1

HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0M1H1I2W1R1R1UtF1L0J -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 4

C:\Users\Snoopy\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\AppData\Roaming\SpeedAnalysis2 (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Program Files (x86)\IminentToolbar (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\AppData\Roaming\File Scout (PUP.Optional.FileScout.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Dateien: 11

C:\Users\Snoopy\AppData\Roaming\File Scout\filescout.exe (PUP.Optional.FileScout.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\Desktop\rcpsetup_softonic_sd_new.exe (PUP.Optional.RegCleanerPro) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\Downloads\SoftonicDownloader_fuer_3gp-converter.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\Downloads\SoftonicDownloader_fuer_freerip-mp3.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\Downloads\SoftonicDownloader_fuer_minecraft.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\Downloads\SoftonicDownloader_fuer_quicktime.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\Downloads\TinyPicSetup.exe (Backdoor.Agent.FPA) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\AppData\Roaming\SpeedAnalysis2\speedanalysis.crx (PUP.Optional.SpeedAnalysis.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\AppData\Roaming\speedanalysis.ico (PUP.Optional.SpeedAnalysis2.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Snoopy\AppData\Roaming\File Scout\uninst.exe (PUP.Optional.FileScout.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Code:

# AdwCleaner v3.015 - Bericht erstellt am 15/12/2013 um 11:54:47

# Updated 10/12/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : Snoopy - SNOOPY-PC

# Gestartet von : C:\Users\Snoopy\Downloads\adwcleaner (1).exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\ProgramData\Babylon

Ordner Gelöscht : C:\ProgramData\boost_interprocess

Ordner Gelöscht : C:\ProgramData\FantastiGames

Ordner Gelöscht : C:\ProgramData\NCH Software

Ordner Gelöscht : C:\Program Files (x86)\adawaretb

Ordner Gelöscht : C:\Program Files (x86)\FantastiGames

Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup

Ordner Gelöscht : C:\Program Files (x86)\NCH Software

Ordner Gelöscht : C:\Program Files (x86)\Search Results Toolbar

Ordner Gelöscht : C:\Users\Snoopy\AppData\Local\Conduit

Ordner Gelöscht : C:\Users\Snoopy\AppData\LocalLow\adawaretb

Ordner Gelöscht : C:\Users\Snoopy\AppData\LocalLow\Conduit

Ordner Gelöscht : C:\Users\Snoopy\AppData\LocalLow\ilividtoolbarguid

Ordner Gelöscht : C:\Users\Snoopy\AppData\LocalLow\Softonic

[!] Ordner Gelöscht : C:\Users\Snoopy\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar

Ordner Gelöscht : C:\Users\Snoopy\AppData\Roaming\dvdvideosoftiehelpers

Ordner Gelöscht : C:\Users\Snoopy\AppData\Roaming\NCH Software

Ordner Gelöscht : C:\Users\Snoopy\AppData\Roaming\pccustubinstaller

Ordner Gelöscht : C:\Users\Snoopy\AppData\Roaming\PerformerSoft

Ordner Gelöscht : C:\Users\Snoopy\AppData\Roaming\pluswinks

Ordner Gelöscht : C:\Users\Snoopy\AppData\Roaming\Systweak

Ordner Gelöscht : C:\Users\Snoopy\AppData\Roaming\Windows Net Data

Datei Gelöscht : C:\Windows\System32\roboot64.exe

Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\user.js

Datei Gelöscht : C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dnpmlnedpdikbgdghljdepnljfpkhccn_0

Datei Gelöscht : C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dnpmlnedpdikbgdghljdepnljfpkhccn_0.localstorage

Datei Gelöscht : C:\Windows\System32\Tasks\NCH Software
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [pluswinks@PlusWinks]

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [pluswinks@PlusWinks]

Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [speedanalysis02@SpeedAnalysis.com]

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [speedanalysis02@SpeedAnalysis.com]

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\mocblcnaofikinigmceddfghppkkjbog

Schlüssel Gelöscht : HKCU\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\BabylonToolbar

Schlüssel Gelöscht : HKCU\Software\SIEN SA

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\*\shell\filescout

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\adawarebp_rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\adawarebp_rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\FreeRIP3_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\FreeRIP3_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs

Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CtlReBar

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CtlToolbar

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CtlToolbarHost

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CToolbarMenu

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_3gp-converter_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_3gp-converter_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freerip-mp3_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_freerip-mp3_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\filescout

Schlüssel Gelöscht : HKCU\Software\NCH Software

Schlüssel Gelöscht : HKCU\Software\performersoft llc

Schlüssel Gelöscht : HKCU\Software\systweak

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar

Schlüssel Gelöscht : HKLM\Software\adawaretb

Schlüssel Gelöscht : HKLM\Software\Babylon

Schlüssel Gelöscht : HKLM\Software\Conduit

Schlüssel Gelöscht : HKLM\Software\DataMngr

Schlüssel Gelöscht : HKLM\Software\Iminent

Schlüssel Gelöscht : HKLM\Software\NCH Software

Schlüssel Gelöscht : HKLM\Software\systweak

Schlüssel Gelöscht : HKLM\Software\Uniblue
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

-\\ Google Chrome v
 

[ Datei : C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

Gelöscht : homepage

Gelöscht : suggest_url
 

*************************
 

AdwCleaner[R0].txt - [16545 octets] - [15/12/2013 11:52:13]

AdwCleaner[S0].txt - [15641 octets] - [15/12/2013 11:54:47]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15702 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.8 (11.05.2013:1)

OS: Windows 7 Home Premium x64

Ran by Snoopy on 15.12.2013 at 12:05:40,92

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3516118728-1142162036-4191355624-1001\Software\sweetim

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\conduitinstaller_econa_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\conduitinstaller_econa_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\conduitinstaller_econa_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\conduitinstaller_econa_RASMANCS

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{A9616100-029A-4D82-B495-B298AB8A011A}
 
 
 

~~~ Files
 

Successfully deleted: [File] "C:\Users\Snoopy\appdata\local\google\chrome\user data\default\local storage\http_start.iminent.com_0.localstorage-journal"
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\ProgramData\apn"

Successfully deleted: [Folder] "C:\Users\Snoopy\appdata\local\cre"

Successfully deleted: [Folder] "C:\Program Files (x86)\dll-files.com fixer"

Successfully deleted: [Folder] "C:\Program Files (x86)\free video converter"
 
 
 

~~~ Chrome
 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 15.12.2013 at 12:39:43,33

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-12-2013 01

Ran by Snoopy (administrator) on SNOOPY-PC on 15-12-2013 12:52:09

Running from C:\Users\Snoopy\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe

(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ForceField.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [CmPCIaudio] - C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd

HKLM\...\Run: [ISW] - C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [1127592 2012-11-02] (Check Point Software Technologies)

HKLM-x32\...\Run: [ZoneAlarm] - C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [73392 2012-11-19] (Check Point Software Technologies LTD)

HKLM-x32\...\Run: [InstallValidator.exe.FA87EC44_C38F_4148_93A1_FF4A64A2B707] - C:\Program Files (x86)\National Instruments\Shared\NIUninstaller\InstallValidator.exe [265096 2013-06-19] ()

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: http=;ftp=;https=;

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope value is missing.

BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)

Toolbar: HKLM-x32 - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

Toolbar: HKLM-x32 - No Name - {41564952-412D-5637-00A7-7A786E7484D7} -  No File

Toolbar: HKCU - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Filter: AutorunsDisabled - No CLSID Value - No File

Filter-x32: AutorunsDisabled - No CLSID Value - No File

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "https://www.google.de/"

CHR DefaultSearchKeyword: ask search

CHR DefaultSearchProvider: Ask Search

CHR DefaultSearchURL: hxxp://www.search.ask.com/web?tpid=ORJ-V7C&o=APN11412&pf=V7&p2=%5EBBK%5EOSJ000%5EYY%5EDE&gct=&itbv=12.7.0.15&doi=2013-12-07&apn_uid=D1D686C8-741B-4D32-AB0D-7EAFC46087D7&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5EDE&apn_dbr=cr_31.0.1650.63&psv=&trgb=CR&tbv=&crxv=&q={searchTerms}

CHR DefaultNewTabURL: 

CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.376\_platform_specific\win_x86\widevinecdmadapter.dll ()

CHR Plugin: (Shockwave Flash) - C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility for IJ) - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

CHR Plugin: (npFFApi) - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll ()

CHR Plugin: (Google Update) - C:\Users\Snoopy\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File

CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Users\Snoopy\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll No File

CHR Extension: (AdBlock) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0

CHR Extension: (Define your own new tab!) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhjjapmfhhmcikhcfkiolockmndbbpng\3.2_0

CHR Extension: (Google Wallet) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)

S4 HOSTS Anti-PUPs; C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe [285795 2012-11-30] ()

R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [827560 2012-11-02] (Check Point Software Technologies)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S4 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe [132056 2012-07-17] (Symantec Corporation)

R2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe [126392 2011-11-07] (Symantec Corporation)

R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2447440 2012-11-19] (Check Point Software Technologies LTD)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)

R3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [1155072 2009-12-01] (C-Media Inc)

R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2012-12-23] (GFI Software)

R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [33712 2012-11-02] (Check Point Software Technologies)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [611160 2012-11-15] (Kaspersky Lab)

S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [44480 2011-05-17] (hxxp://libusb-win32.sourceforge.net)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450136 2012-11-01] (Check Point Software Technologies LTD)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

U0 KL1; 

U5 klflt; C:\Windows\System32\Drivers\klflt.sys [89432 2012-11-15] (Kaspersky Lab)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-15 12:51 - 2013-12-15 12:51 - 00000000 ____D C:\Users\Snoopy\Downloads\FRST-OlderVersion

2013-12-15 12:39 - 2013-12-15 12:39 - 00002245 _____ C:\Users\Snoopy\Desktop\JRT.txt

2013-12-15 12:05 - 2013-12-15 12:05 - 00000000 ____D C:\Windows\ERUNT

2013-12-15 12:04 - 2013-12-15 12:04 - 01034531 _____ (Thisisu) C:\Users\Snoopy\Downloads\JRT.exe

2013-12-15 11:52 - 2013-12-15 11:55 - 00000000 ____D C:\AdwCleaner

2013-12-15 11:47 - 2013-12-15 11:48 - 01226802 _____ C:\Users\Snoopy\Downloads\adwcleaner (1).exe

2013-12-15 11:08 - 2013-12-15 11:08 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-12-15 11:08 - 2013-12-15 11:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-15 11:08 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-12-15 11:06 - 2013-12-15 11:07 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Snoopy\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-14 22:16 - 2013-12-14 22:16 - 00000000 ____D C:\ProgramData\AskPartnerNetwork

2013-12-14 22:16 - 2013-12-14 22:16 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork

2013-12-14 22:14 - 2013-12-14 22:14 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Avira

2013-12-14 22:13 - 2013-12-14 22:13 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-14 22:13 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-12-14 22:13 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-12-14 22:13 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-12-14 22:13 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-12-14 22:12 - 2013-12-14 22:12 - 00000000 ____D C:\ProgramData\Avira

2013-12-14 22:12 - 2013-12-14 22:12 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-14 21:50 - 2013-12-14 21:50 - 00062603 _____ C:\ComboFix.txt

2013-12-14 21:34 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe

2013-12-14 21:34 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe

2013-12-14 21:34 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-12-14 21:34 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-12-14 21:34 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-12-14 21:34 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe

2013-12-14 21:34 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe

2013-12-14 21:34 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe

2013-12-14 21:32 - 2013-12-14 21:50 - 00000000 ____D C:\Qoobox

2013-12-14 21:31 - 2013-12-14 21:47 - 00000000 ____D C:\Windows\erdnt

2013-12-14 21:26 - 2013-12-14 21:29 - 129598176 _____ C:\Users\Snoopy\Downloads\avira_free_antivirus_de_14.0.2.286.exe

2013-12-14 21:14 - 2013-12-14 21:15 - 05154339 ____R (Swearware) C:\Users\Snoopy\Downloads\ComboFix.exe

2013-12-14 09:36 - 2013-12-15 12:48 - 00000000 ____D C:\aaa_Trojanerbekaempfung

2013-12-14 09:33 - 2013-12-14 09:35 - 00027855 _____ C:\Users\Snoopy\Downloads\Addition.txt

2013-12-14 09:31 - 2013-12-15 12:52 - 00012830 _____ C:\Users\Snoopy\Downloads\FRST.txt

2013-12-14 09:31 - 2013-12-15 12:51 - 00000000 ____D C:\FRST

2013-12-14 09:29 - 2013-12-15 12:51 - 01927796 _____ (Farbar) C:\Users\Snoopy\Downloads\FRST64.exe

2013-12-12 01:01 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-12 01:01 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-12 01:01 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-12 01:01 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-12 00:59 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-12 00:59 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-12 00:59 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-12 00:59 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-12 00:59 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-12 00:59 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-12 00:59 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-12 00:59 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-12 00:59 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-12 00:59 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-12 00:59 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-12 00:59 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-12 00:59 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-12 00:59 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-12 00:59 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-12 00:59 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-12 00:59 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-12 00:59 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-12 00:59 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-12 00:59 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-12 00:59 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-12 00:59 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-12 00:59 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-12 00:59 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-12 00:59 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-12 00:59 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-12 00:59 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-12 00:59 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-12 00:59 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-12 00:59 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-12 00:59 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-11 10:02 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-11 10:02 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-11 10:02 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-11 10:02 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-11 10:02 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-11 10:02 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-11 10:02 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-11 10:01 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-11 10:01 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-11 10:01 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-11 10:01 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-11 10:01 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-11 10:01 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-11 10:01 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-11 10:01 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-11 10:01 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-11 10:01 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-11 10:01 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-11 10:01 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-08 20:49 - 2013-12-08 20:49 - 00827728 _____ (Microsoft Corporation) C:\Users\Snoopy\Downloads\msvcr100.dll

2013-12-08 20:39 - 2013-12-08 20:39 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-msvcr100.exe

2013-12-08 20:31 - 2013-12-08 20:31 - 04422992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc100u.dll

2013-12-08 20:17 - 2013-12-08 20:18 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-mfc100u.exe

2013-12-08 20:10 - 2013-12-15 11:58 - 00020194 _____ C:\Windows\PFRO.log

2013-12-08 19:56 - 2013-12-08 19:56 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\TuneUp Software

2013-12-08 19:55 - 2013-12-08 19:58 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-12-08 19:54 - 2013-12-08 20:07 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

2013-12-08 19:53 - 2013-12-08 19:54 - 28181408 _____ (TuneUp Software) C:\Users\Snoopy\Downloads\TuneUpUtilities2013_de-DE.exe

2013-12-07 17:25 - 2013-04-24 22:32 - 00258753 _____ C:\Users\Snoopy\Desktop\MinecraftDev.exe

2013-12-07 17:08 - 2013-12-07 17:26 - 00000000 ____D C:\Users\Snoopy\Desktop\MinecraftDev

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Program Files (x86)\WinRAR

2013-12-07 17:04 - 2013-12-07 17:05 - 01766784 _____ C:\Users\Snoopy\Downloads\wrar500.exe

2013-12-07 17:02 - 2013-12-07 17:26 - 00117781 _____ C:\Users\Snoopy\Desktop\MinecraftDev.rar

2013-12-07 17:02 - 2013-12-07 17:02 - 00116804 _____ C:\Users\Snoopy\Downloads\MinecraftDev.rar

2013-12-07 16:51 - 2013-12-07 16:51 - 00159028 _____ C:\Users\Snoopy\Desktop\Minecraft- (3).rar

2013-12-07 16:41 - 2013-12-07 16:51 - 00000000 ____D C:\ProgramData\Oracle

2013-12-07 16:39 - 2013-12-07 16:40 - 00005683 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log

2013-12-07 16:31 - 2013-12-07 16:31 - 00159028 _____ C:\Users\Snoopy\Downloads\Minecraft-.rar

2013-12-07 12:54 - 2013-12-07 12:54 - 02465368 _____ (Check Point Software Technologies LTD) C:\Users\Snoopy\Downloads\zaSetupWeb_120_104_000.exe

2013-12-06 20:38 - 2013-12-06 20:38 - 00000000 ____D C:\Users\Snoopy\AppData\Local\LEGO

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\ProgramData\IVI Foundation

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\Program Files (x86)\IVI Foundation

2013-12-06 20:28 - 2013-12-06 20:28 - 00000000 ____D C:\ProgramData\LEGO MINDSTORMS EV3

2013-12-05 19:44 - 2013-12-07 16:36 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\FileAdvisor

2013-12-03 19:35 - 2013-12-11 19:35 - 00000000 ____D C:\Program Files (x86)\File Type Advisor

2013-12-03 19:35 - 2013-12-03 19:35 - 00003524 _____ C:\Windows\System32\Tasks\FileAdvisorUpdate

2013-12-03 19:35 - 2013-12-03 19:35 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck

2013-12-03 19:33 - 2013-12-03 19:33 - 05834488 _____ (ManiacTools.com                                             ) C:\Users\Snoopy\Downloads\m4a-to80-mp3-converter.exe

2013-12-02 08:25 - 2013-12-15 11:58 - 00001736 _____ C:\Windows\setupact.log

2013-12-02 08:25 - 2013-12-02 08:25 - 00000000 _____ C:\Windows\setuperr.log

2013-12-01 14:18 - 2013-12-01 14:18 - 00001466 _____ C:\Users\Snoopy\Desktop\MB - Verknüpfung.lnk

2013-11-27 21:28 - 2013-11-27 21:28 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-27 21:28 - 2013-11-27 21:28 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-27 21:28 - 2013-11-27 21:28 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-27 21:27 - 2013-11-27 21:27 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-27 21:27 - 2013-11-27 21:27 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-27 21:27 - 2013-11-27 21:27 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-23 14:04 - 2013-11-23 14:04 - 00675988 _____ C:\Users\Snoopy\Desktop\Minecraft.exe

2013-11-23 13:27 - 2013-11-23 13:27 - 00000000 _____ C:\Windows\WdbInstW.INI

2013-11-23 13:26 - 2013-11-23 13:31 - 00001550 _____ C:\Windows\Bert47055_0.ini

2013-11-23 13:26 - 2013-11-23 13:31 - 00000000 ____D C:\Bertrams

2013-11-23 13:26 - 2000-09-07 10:08 - 00000481 _____ C:\Windows\Innentab.ini
 

==================== One Month Modified Files and Folders =======
 

2013-12-15 12:53 - 2013-12-14 09:31 - 00012830 _____ C:\Users\Snoopy\Downloads\FRST.txt

2013-12-15 12:51 - 2013-12-15 12:51 - 00000000 ____D C:\Users\Snoopy\Downloads\FRST-OlderVersion

2013-12-15 12:51 - 2013-12-14 09:31 - 00000000 ____D C:\FRST

2013-12-15 12:51 - 2013-12-14 09:29 - 01927796 _____ (Farbar) C:\Users\Snoopy\Downloads\FRST64.exe

2013-12-15 12:48 - 2013-12-14 09:36 - 00000000 ____D C:\aaa_Trojanerbekaempfung

2013-12-15 12:39 - 2013-12-15 12:39 - 00002245 _____ C:\Users\Snoopy\Desktop\JRT.txt

2013-12-15 12:08 - 2009-07-14 05:45 - 00026496 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-15 12:08 - 2009-07-14 05:45 - 00026496 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-15 12:05 - 2013-12-15 12:05 - 00000000 ____D C:\Windows\ERUNT

2013-12-15 12:04 - 2013-12-15 12:04 - 01034531 _____ (Thisisu) C:\Users\Snoopy\Downloads\JRT.exe

2013-12-15 11:58 - 2013-12-08 20:10 - 00020194 _____ C:\Windows\PFRO.log

2013-12-15 11:58 - 2013-12-02 08:25 - 00001736 _____ C:\Windows\setupact.log

2013-12-15 11:58 - 2012-09-21 19:18 - 00000000 ____D C:\ProgramData\NVIDIA

2013-12-15 11:58 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-15 11:57 - 2013-02-04 23:28 - 01799145 _____ C:\Windows\WindowsUpdate.log

2013-12-15 11:55 - 2013-12-15 11:52 - 00000000 ____D C:\AdwCleaner

2013-12-15 11:55 - 2012-09-20 19:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-15 11:54 - 2012-09-18 23:01 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001UA.job

2013-12-15 11:48 - 2013-12-15 11:47 - 01226802 _____ C:\Users\Snoopy\Downloads\adwcleaner (1).exe

2013-12-15 11:41 - 2013-07-24 16:15 - 00000000 ____D C:\Windows\system32\MRT

2013-12-15 11:38 - 2012-09-23 09:23 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-15 11:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2013-12-15 11:08 - 2013-12-15 11:08 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-12-15 11:08 - 2013-12-15 11:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-15 11:07 - 2013-12-15 11:06 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Snoopy\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-15 10:54 - 2012-09-18 23:01 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001Core.job

2013-12-15 00:08 - 2012-09-19 00:53 - 00000000 ____D C:\Users\Snoopy\Documents\Outlook-Dateien

2013-12-14 22:16 - 2013-12-14 22:16 - 00000000 ____D C:\ProgramData\AskPartnerNetwork

2013-12-14 22:16 - 2013-12-14 22:16 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork

2013-12-14 22:14 - 2013-12-14 22:14 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Avira

2013-12-14 22:13 - 2013-12-14 22:13 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-14 22:12 - 2013-12-14 22:12 - 00000000 ____D C:\ProgramData\Avira

2013-12-14 22:12 - 2013-12-14 22:12 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-14 21:50 - 2013-12-14 21:50 - 00062603 _____ C:\ComboFix.txt

2013-12-14 21:50 - 2013-12-14 21:32 - 00000000 ____D C:\Qoobox

2013-12-14 21:50 - 2013-02-02 12:58 - 00000000 ____D C:\Users\Daniel

2013-12-14 21:47 - 2013-12-14 21:31 - 00000000 ____D C:\Windows\erdnt

2013-12-14 21:46 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini

2013-12-14 21:40 - 2012-09-19 07:50 - 03059614 _____ C:\Windows\system32\perfh007.dat

2013-12-14 21:40 - 2012-09-19 07:50 - 00883038 _____ C:\Windows\system32\perfc007.dat

2013-12-14 21:40 - 2009-07-14 06:13 - 00006492 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-14 21:29 - 2013-12-14 21:26 - 129598176 _____ C:\Users\Snoopy\Downloads\avira_free_antivirus_de_14.0.2.286.exe

2013-12-14 21:15 - 2013-12-14 21:14 - 05154339 ____R (Swearware) C:\Users\Snoopy\Downloads\ComboFix.exe

2013-12-14 09:35 - 2013-12-14 09:33 - 00027855 _____ C:\Users\Snoopy\Downloads\Addition.txt

2013-12-12 14:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-12-12 08:43 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-12 08:35 - 2009-07-14 05:45 - 00408560 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-12 01:01 - 2012-09-18 22:36 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-12-12 00:56 - 2012-11-30 16:47 - 00036409 ____H C:\Windows\SysWOW64\BTImages.dat

2013-12-11 19:35 - 2013-12-03 19:35 - 00000000 ____D C:\Program Files (x86)\File Type Advisor

2013-12-11 17:47 - 2013-10-27 19:41 - 00000000 ____D C:\Daniel

2013-12-11 11:09 - 2012-09-23 11:48 - 00000000 ____D C:\ProgramData\tmp

2013-12-10 23:35 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini

2013-12-09 11:37 - 2013-12-14 22:13 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-12-09 11:37 - 2013-12-14 22:13 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-12-09 11:37 - 2013-12-14 22:13 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-12-09 11:37 - 2013-12-14 22:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-12-08 20:49 - 2013-12-08 20:49 - 00827728 _____ (Microsoft Corporation) C:\Users\Snoopy\Downloads\msvcr100.dll

2013-12-08 20:39 - 2013-12-08 20:39 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-msvcr100.exe

2013-12-08 20:31 - 2013-12-08 20:31 - 04422992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc100u.dll

2013-12-08 20:18 - 2013-12-08 20:17 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-mfc100u.exe

2013-12-08 20:07 - 2013-12-08 19:54 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

2013-12-08 20:07 - 2012-12-23 19:02 - 00000000 ____D C:\Users\Snoopy\AppData\Local\Downloaded Installations

2013-12-08 20:07 - 2012-09-18 22:36 - 00000000 ____D C:\Users\Snoopy\AppData\Local\Microsoft Help

2013-12-08 19:58 - 2013-12-08 19:55 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-12-08 19:56 - 2013-12-08 19:56 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\TuneUp Software

2013-12-08 19:54 - 2013-12-08 19:53 - 28181408 _____ (TuneUp Software) C:\Users\Snoopy\Downloads\TuneUpUtilities2013_de-DE.exe

2013-12-08 12:06 - 2012-09-23 11:48 - 00000000 ____D C:\ProgramData\hps

2013-12-08 10:25 - 2012-09-20 20:13 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\ZoomBrowser EX

2013-12-08 10:23 - 2012-09-20 19:58 - 00000000 ____D C:\ProgramData\ZoomBrowser

2013-12-08 10:03 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2013-12-08 10:01 - 2013-02-17 12:42 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software

2013-12-07 21:22 - 2013-10-03 18:14 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\.minecraft

2013-12-07 17:26 - 2013-12-07 17:08 - 00000000 ____D C:\Users\Snoopy\Desktop\MinecraftDev

2013-12-07 17:26 - 2013-12-07 17:02 - 00117781 _____ C:\Users\Snoopy\Desktop\MinecraftDev.rar

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Program Files (x86)\WinRAR

2013-12-07 17:05 - 2013-12-07 17:04 - 01766784 _____ C:\Users\Snoopy\Downloads\wrar500.exe

2013-12-07 17:02 - 2013-12-07 17:02 - 00116804 _____ C:\Users\Snoopy\Downloads\MinecraftDev.rar

2013-12-07 16:51 - 2013-12-07 16:51 - 00159028 _____ C:\Users\Snoopy\Desktop\Minecraft- (3).rar

2013-12-07 16:51 - 2013-12-07 16:41 - 00000000 ____D C:\ProgramData\Oracle

2013-12-07 16:40 - 2013-12-07 16:39 - 00005683 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log

2013-12-07 16:40 - 2013-06-10 20:34 - 00000000 ____D C:\Program Files (x86)\Java

2013-12-07 16:36 - 2013-12-05 19:44 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\FileAdvisor

2013-12-07 16:31 - 2013-12-07 16:31 - 00159028 _____ C:\Users\Snoopy\Downloads\Minecraft-.rar

2013-12-07 12:54 - 2013-12-07 12:54 - 02465368 _____ (Check Point Software Technologies LTD) C:\Users\Snoopy\Downloads\zaSetupWeb_120_104_000.exe

2013-12-06 20:38 - 2013-12-06 20:38 - 00000000 ____D C:\Users\Snoopy\AppData\Local\LEGO

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\ProgramData\IVI Foundation

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\Program Files (x86)\IVI Foundation

2013-12-06 20:32 - 2012-11-18 17:55 - 00000000 ____D C:\ProgramData\National Instruments

2013-12-06 20:29 - 2012-11-18 17:58 - 00000000 ____D C:\Users\Snoopy\Documents\LEGO Creations

2013-12-06 20:29 - 2012-11-18 17:56 - 00000000 ____D C:\Program Files (x86)\National Instruments

2013-12-06 20:29 - 2012-11-18 17:56 - 00000000 ____D C:\Program Files (x86)\LEGO Software

2013-12-06 20:28 - 2013-12-06 20:28 - 00000000 ____D C:\ProgramData\LEGO MINDSTORMS EV3

2013-12-06 20:20 - 2012-09-25 18:18 - 00006474 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-12-06 10:49 - 2012-09-18 23:01 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001UA

2013-12-06 10:49 - 2012-09-18 23:01 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001Core

2013-12-05 08:51 - 2012-09-18 23:03 - 00002366 _____ C:\Users\Snoopy\Desktop\Google Chrome.lnk

2013-12-03 20:00 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-12-03 19:35 - 2013-12-03 19:35 - 00003524 _____ C:\Windows\System32\Tasks\FileAdvisorUpdate

2013-12-03 19:35 - 2013-12-03 19:35 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck

2013-12-03 19:33 - 2013-12-03 19:33 - 05834488 _____ (ManiacTools.com                                             ) C:\Users\Snoopy\Downloads\m4a-to80-mp3-converter.exe

2013-12-02 08:25 - 2013-12-02 08:25 - 00000000 _____ C:\Windows\setuperr.log

2013-12-01 18:38 - 2013-07-27 23:56 - 00000000 ____D C:\Windows\Minidump

2013-12-01 18:38 - 2012-09-19 07:53 - 00000000 ____D C:\Windows\Panther

2013-12-01 14:18 - 2013-12-01 14:18 - 00001466 _____ C:\Users\Snoopy\Desktop\MB - Verknüpfung.lnk

2013-11-28 07:52 - 2012-09-18 21:02 - 00001425 _____ C:\Users\Snoopy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-11-28 07:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-11-27 21:28 - 2013-11-27 21:28 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-27 21:28 - 2013-11-27 21:28 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-27 21:28 - 2013-11-27 21:28 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-27 21:27 - 2013-11-27 21:27 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-27 21:27 - 2013-11-27 21:27 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-27 21:27 - 2013-11-27 21:27 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-26 12:54 - 2013-12-12 00:59 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-26 11:19 - 2013-12-12 00:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-26 11:18 - 2013-12-12 00:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-26 11:11 - 2013-12-12 00:59 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-26 10:48 - 2013-12-12 00:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-26 10:46 - 2013-12-12 00:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-26 10:41 - 2013-12-12 00:59 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-26 10:29 - 2013-12-12 00:59 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-26 10:27 - 2013-12-12 00:59 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-26 10:23 - 2013-12-12 00:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-26 10:21 - 2013-12-12 00:59 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-26 10:18 - 2013-12-12 00:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-26 10:18 - 2013-12-12 00:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-26 10:16 - 2013-12-12 00:59 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-26 09:57 - 2013-12-12 00:59 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-26 09:38 - 2013-12-12 00:59 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-26 09:38 - 2013-12-12 00:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-26 09:35 - 2013-12-12 00:59 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-26 09:32 - 2013-12-12 00:59 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-26 09:28 - 2013-12-12 00:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-26 09:16 - 2013-12-12 00:59 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-26 09:02 - 2013-12-12 00:59 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-26 08:48 - 2013-12-12 00:59 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-26 08:32 - 2013-12-12 00:59 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-26 08:26 - 2013-12-12 00:59 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-26 08:07 - 2013-12-12 00:59 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-26 07:40 - 2013-12-12 00:59 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-26 07:34 - 2013-12-12 00:59 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-26 07:34 - 2013-12-12 00:59 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-26 07:33 - 2013-12-12 00:59 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-26 07:27 - 2013-12-12 00:59 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-25 20:20 - 2013-11-13 17:52 - 00000000 ____D C:\Reli Schülerzeitung

2013-11-23 19:26 - 2013-12-11 10:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-11-23 18:47 - 2013-12-11 10:02 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-11-23 14:04 - 2013-11-23 14:04 - 00675988 _____ C:\Users\Snoopy\Desktop\Minecraft.exe

2013-11-23 13:31 - 2013-11-23 13:26 - 00001550 _____ C:\Windows\Bert47055_0.ini

2013-11-23 13:31 - 2013-11-23 13:26 - 00000000 ____D C:\Bertrams

2013-11-23 13:27 - 2013-11-23 13:27 - 00000000 _____ C:\Windows\WdbInstW.INI

2013-11-20 20:51 - 2013-02-15 20:10 - 00007597 _____ C:\Users\Snoopy\AppData\Local\Resmon.ResmonCfg
 

Files to move or delete:

====================

C:\Users\Snoopy\AmazonMP3DownloaderInstall._V383787924_.exe

C:\Users\Snoopy\ANTAgent_233.exe
 
 

Some content of TEMP:

====================

C:\Users\Snoopy\AppData\Local\Temp\avgnt.exe

C:\Users\Snoopy\AppData\Local\Temp\Offercast_AVIRAV7_.exe

C:\Users\Snoopy\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-10 21:19
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Frage: Firewall + Virenscanner sinnvoll oder nur Scanner?
Programmempfehlung für bestmöglichen Schutz?
habe aktuell Antivir (Avira) + Zonealarm + Windows 7 - Firewall aktiv, ist wohl nicht sinnvoll.

Ich empfehle immer Emsisoft :)

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=b7872dc206c79945914702ba85c288a1

# engine=16289

# end=finished

# remove_checked=false

# archives_checked=false

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-12-16 10:48:43

# local_time=2013-12-16 11:48:43 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=1799 16775165 100 94 18281 652285 11033 0

# compatibility_mode=5893 16776574 100 94 184044 138863973 0 0

# compatibility_mode=9217 16776893 100 13 33356553 33888795 0 0

# scanned=236884

# found=0

# cleaned=0

# scan_time=9671

Code:

 Results of screen317's Security Check version 0.99.77  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

ZoneAlarm Antivirus   

Avira Desktop         

 Antivirus up to date!   
 `````````Anti-malware/Other Utilities Check:````````` 

 Malwarebytes Anti-Malware Version 1.75.0.1300  

 Adobe Reader 10.1.4 Adobe Reader out of Date!  

 Google Chrome 31.0.1650.57  

 Google Chrome 31.0.1650.63  
 ````````Process Check: objlist.exe by Laurent````````  

 Norton ccSvcHst.exe 

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbamgui.exe  

 Avira Antivir avgnt.exe 

 Avira Antivir avguard.exe 

 Malwarebytes' Anti-Malware mbamscheduler.exe   

 CheckPoint ZoneAlarm zatray.exe  

 CheckPoint ZoneAlarm vsmon.exe  
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-12-2013 02

Ran by Snoopy (administrator) on SNOOPY-PC on 17-12-2013 00:05:25

Running from C:\Users\Snoopy\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe

(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe

(Check Point Software Technologies) C:\Program Files\CheckPoint\ZAForceField\ForceField.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\chrome.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [CmPCIaudio] - C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd

HKLM\...\Run: [ISW] - C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [1127592 2012-11-02] (Check Point Software Technologies)

HKLM-x32\...\Run: [ZoneAlarm] - C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [73392 2012-11-19] (Check Point Software Technologies LTD)

HKLM-x32\...\Run: [InstallValidator.exe.FA87EC44_C38F_4148_93A1_FF4A64A2B707] - C:\Program Files (x86)\National Instruments\Shared\NIUninstaller\InstallValidator.exe [265096 2013-06-19] ()

HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
 

==================== Internet (Whitelisted) ====================
 

ProxyServer: http=;ftp=;https=;

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope value is missing.

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

Toolbar: HKLM - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

Toolbar: HKLM-x32 - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

Toolbar: HKCU - ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)

DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Filter: AutorunsDisabled - No CLSID Value - No File

Filter-x32: AutorunsDisabled - No CLSID Value - No File

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

Chrome: 

=======

CHR HomePage: hxxp://www.google.com

CHR RestoreOnStartup: "https://www.google.de/"

CHR DefaultSearchKeyword: ask search

CHR DefaultSearchProvider: Ask Search

CHR DefaultSearchURL: hxxp://www.search.ask.com/web?tpid=ORJ-V7C&o=APN11412&pf=V7&p2=%5EBBK%5EOSJ000%5EYY%5EDE&gct=&itbv=12.7.0.15&doi=2013-12-07&apn_uid=D1D686C8-741B-4D32-AB0D-7EAFC46087D7&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5EDE&apn_dbr=cr_31.0.1650.63&psv=&trgb=CR&tbv=&crxv=&q={searchTerms}

CHR DefaultNewTabURL: 

CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.1.376\_platform_specific\win_x86\widevinecdmadapter.dll ()

CHR Plugin: (Shockwave Flash) - C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Users\Snoopy\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll ()

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)

CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File

CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility for IJ) - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

CHR Plugin: (npFFApi) - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll ()

CHR Plugin: (Google Update) - C:\Users\Snoopy\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll No File

CHR Plugin: (AmazonMP3DownloaderPlugin) - C:\Users\Snoopy\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)

CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll No File

CHR Extension: (AdBlock) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0

CHR Extension: (Define your own new tab!) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nhjjapmfhhmcikhcfkiolockmndbbpng\3.2_0

CHR Extension: (Google Wallet) - C:\Users\Snoopy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)

S4 HOSTS Anti-PUPs; C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe [285795 2012-11-30] ()

R2 IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [827560 2012-11-02] (Check Point Software Technologies)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

S4 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe [132056 2012-07-17] (Symantec Corporation)

R2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe [126392 2011-11-07] (Symantec Corporation)

R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2447440 2012-11-19] (Check Point Software Technologies LTD)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)

R3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [1155072 2009-12-01] (C-Media Inc)

R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2012-12-23] (GFI Software)

R2 ISWKL; C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys [33712 2012-11-02] (Check Point Software Technologies)

R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [611160 2012-11-15] (Kaspersky Lab)

S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [44480 2011-05-17] (hxxp://libusb-win32.sourceforge.net)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450136 2012-11-01] (Check Point Software Technologies LTD)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]

U0 KL1; 

U5 klflt; C:\Windows\System32\Drivers\klflt.sys [89432 2012-11-15] (Kaspersky Lab)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-16 23:54 - 2013-12-16 23:54 - 00891200 _____ C:\Users\Snoopy\Downloads\SecurityCheck.exe

2013-12-16 21:02 - 2013-12-16 21:03 - 02347384 _____ (ESET) C:\Users\Snoopy\Downloads\esetsmartinstaller_enu.exe

2013-12-15 12:51 - 2013-12-17 00:05 - 00000000 ____D C:\Users\Snoopy\Downloads\FRST-OlderVersion

2013-12-15 12:39 - 2013-12-15 12:39 - 00002245 _____ C:\Users\Snoopy\Desktop\JRT.txt

2013-12-15 12:05 - 2013-12-15 12:05 - 00000000 ____D C:\Windows\ERUNT

2013-12-15 12:04 - 2013-12-15 12:04 - 01034531 _____ (Thisisu) C:\Users\Snoopy\Downloads\JRT.exe

2013-12-15 11:52 - 2013-12-15 11:55 - 00000000 ____D C:\AdwCleaner

2013-12-15 11:47 - 2013-12-15 11:48 - 01226802 _____ C:\Users\Snoopy\Downloads\adwcleaner (1).exe

2013-12-15 11:08 - 2013-12-15 11:08 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-12-15 11:08 - 2013-12-15 11:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-15 11:08 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-12-15 11:06 - 2013-12-15 11:07 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Snoopy\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-14 22:14 - 2013-12-14 22:14 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Avira

2013-12-14 22:13 - 2013-12-14 22:13 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-14 22:13 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-12-14 22:13 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-12-14 22:13 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-12-14 22:13 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-12-14 22:12 - 2013-12-14 22:12 - 00000000 ____D C:\ProgramData\Avira

2013-12-14 22:12 - 2013-12-14 22:12 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-14 21:50 - 2013-12-14 21:50 - 00062603 _____ C:\ComboFix.txt

2013-12-14 21:34 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe

2013-12-14 21:34 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe

2013-12-14 21:34 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-12-14 21:34 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-12-14 21:34 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-12-14 21:34 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe

2013-12-14 21:34 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe

2013-12-14 21:34 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe

2013-12-14 21:32 - 2013-12-14 21:50 - 00000000 ____D C:\Qoobox

2013-12-14 21:31 - 2013-12-14 21:47 - 00000000 ____D C:\Windows\erdnt

2013-12-14 21:26 - 2013-12-14 21:29 - 129598176 _____ C:\Users\Snoopy\Downloads\avira_free_antivirus_de_14.0.2.286.exe

2013-12-14 21:14 - 2013-12-14 21:15 - 05154339 ____R (Swearware) C:\Users\Snoopy\Downloads\ComboFix.exe

2013-12-14 09:36 - 2013-12-17 00:02 - 00000000 ____D C:\aaa_Trojanerbekaempfung

2013-12-14 09:33 - 2013-12-14 09:35 - 00027855 _____ C:\Users\Snoopy\Downloads\Addition.txt

2013-12-14 09:31 - 2013-12-17 00:05 - 00011961 _____ C:\Users\Snoopy\Downloads\FRST.txt

2013-12-14 09:31 - 2013-12-17 00:05 - 00000000 ____D C:\FRST

2013-12-14 09:29 - 2013-12-17 00:05 - 01927940 _____ (Farbar) C:\Users\Snoopy\Downloads\FRST64.exe

2013-12-12 01:01 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-12 01:01 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-12 01:01 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL

2013-12-12 01:01 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll

2013-12-12 00:59 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-12 00:59 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-12 00:59 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-12 00:59 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-12-12 00:59 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-12 00:59 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-12 00:59 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-12 00:59 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-12 00:59 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-12 00:59 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-12-12 00:59 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-12 00:59 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-12 00:59 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-12 00:59 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-12 00:59 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-12 00:59 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-12-12 00:59 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-12-12 00:59 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-12 00:59 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-12-12 00:59 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-12-12 00:59 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-12-12 00:59 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-12 00:59 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-12 00:59 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-12-12 00:59 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-12-12 00:59 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-12 00:59 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-12 00:59 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-12 00:59 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-12-12 00:59 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-12-12 00:59 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-12-11 10:02 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-12-11 10:02 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-11 10:02 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-11 10:02 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll

2013-12-11 10:02 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-11 10:02 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-11 10:02 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-12-11 10:01 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-11 10:01 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-12-11 10:01 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-11 10:01 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-11 10:01 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx

2013-12-11 10:01 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll

2013-12-11 10:01 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-11 10:01 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-11 10:01 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe

2013-12-11 10:01 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe

2013-12-11 10:01 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-11 10:01 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-08 20:49 - 2013-12-08 20:49 - 00827728 _____ (Microsoft Corporation) C:\Users\Snoopy\Downloads\msvcr100.dll

2013-12-08 20:39 - 2013-12-08 20:39 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-msvcr100.exe

2013-12-08 20:31 - 2013-12-08 20:31 - 04422992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc100u.dll

2013-12-08 20:17 - 2013-12-08 20:18 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-mfc100u.exe

2013-12-08 20:10 - 2013-12-15 11:58 - 00020194 _____ C:\Windows\PFRO.log

2013-12-08 19:56 - 2013-12-08 19:56 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\TuneUp Software

2013-12-08 19:55 - 2013-12-08 19:58 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-12-08 19:54 - 2013-12-08 20:07 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

2013-12-08 19:53 - 2013-12-08 19:54 - 28181408 _____ (TuneUp Software) C:\Users\Snoopy\Downloads\TuneUpUtilities2013_de-DE.exe

2013-12-07 17:25 - 2013-04-24 22:32 - 00258753 _____ C:\Users\Snoopy\Desktop\MinecraftDev.exe

2013-12-07 17:08 - 2013-12-07 17:26 - 00000000 ____D C:\Users\Snoopy\Desktop\MinecraftDev

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Program Files (x86)\WinRAR

2013-12-07 17:04 - 2013-12-07 17:05 - 01766784 _____ C:\Users\Snoopy\Downloads\wrar500.exe

2013-12-07 17:02 - 2013-12-07 17:26 - 00117781 _____ C:\Users\Snoopy\Desktop\MinecraftDev.rar

2013-12-07 17:02 - 2013-12-07 17:02 - 00116804 _____ C:\Users\Snoopy\Downloads\MinecraftDev.rar

2013-12-07 16:51 - 2013-12-07 16:51 - 00159028 _____ C:\Users\Snoopy\Desktop\Minecraft- (3).rar

2013-12-07 16:41 - 2013-12-07 16:51 - 00000000 ____D C:\ProgramData\Oracle

2013-12-07 16:39 - 2013-12-07 16:40 - 00005683 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log

2013-12-07 16:31 - 2013-12-07 16:31 - 00159028 _____ C:\Users\Snoopy\Downloads\Minecraft-.rar

2013-12-07 12:54 - 2013-12-07 12:54 - 02465368 _____ (Check Point Software Technologies LTD) C:\Users\Snoopy\Downloads\zaSetupWeb_120_104_000.exe

2013-12-06 20:38 - 2013-12-06 20:38 - 00000000 ____D C:\Users\Snoopy\AppData\Local\LEGO

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\ProgramData\IVI Foundation

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\Program Files (x86)\IVI Foundation

2013-12-06 20:28 - 2013-12-06 20:28 - 00000000 ____D C:\ProgramData\LEGO MINDSTORMS EV3

2013-12-05 19:44 - 2013-12-07 16:36 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\FileAdvisor

2013-12-03 19:35 - 2013-12-15 19:35 - 00000000 ____D C:\Program Files (x86)\File Type Advisor

2013-12-03 19:35 - 2013-12-03 19:35 - 00003524 _____ C:\Windows\System32\Tasks\FileAdvisorUpdate

2013-12-03 19:35 - 2013-12-03 19:35 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck

2013-12-03 19:33 - 2013-12-03 19:33 - 05834488 _____ (ManiacTools.com                                             ) C:\Users\Snoopy\Downloads\m4a-to80-mp3-converter.exe

2013-12-02 08:25 - 2013-12-16 10:01 - 00001960 _____ C:\Windows\setupact.log

2013-12-02 08:25 - 2013-12-02 08:25 - 00000000 _____ C:\Windows\setuperr.log

2013-12-01 14:18 - 2013-12-01 14:18 - 00001466 _____ C:\Users\Snoopy\Desktop\MB - Verknüpfung.lnk

2013-11-27 21:28 - 2013-11-27 21:28 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-27 21:28 - 2013-11-27 21:28 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-27 21:28 - 2013-11-27 21:28 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-27 21:27 - 2013-11-27 21:27 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-27 21:27 - 2013-11-27 21:27 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-27 21:27 - 2013-11-27 21:27 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-23 14:04 - 2013-11-23 14:04 - 00675988 _____ C:\Users\Snoopy\Desktop\Minecraft.exe

2013-11-23 13:27 - 2013-11-23 13:27 - 00000000 _____ C:\Windows\WdbInstW.INI

2013-11-23 13:26 - 2013-11-23 13:31 - 00001550 _____ C:\Windows\Bert47055_0.ini

2013-11-23 13:26 - 2013-11-23 13:31 - 00000000 ____D C:\Bertrams

2013-11-23 13:26 - 2000-09-07 10:08 - 00000481 _____ C:\Windows\Innentab.ini
 

==================== One Month Modified Files and Folders =======
 

2013-12-17 00:06 - 2013-12-14 09:31 - 00011961 _____ C:\Users\Snoopy\Downloads\FRST.txt

2013-12-17 00:05 - 2013-12-15 12:51 - 00000000 ____D C:\Users\Snoopy\Downloads\FRST-OlderVersion

2013-12-17 00:05 - 2013-12-14 09:31 - 00000000 ____D C:\FRST

2013-12-17 00:05 - 2013-12-14 09:29 - 01927940 _____ (Farbar) C:\Users\Snoopy\Downloads\FRST64.exe

2013-12-17 00:02 - 2013-12-14 09:36 - 00000000 ____D C:\aaa_Trojanerbekaempfung

2013-12-16 23:54 - 2013-12-16 23:54 - 00891200 _____ C:\Users\Snoopy\Downloads\SecurityCheck.exe

2013-12-16 23:54 - 2012-09-18 23:01 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001UA.job

2013-12-16 23:11 - 2013-02-04 23:28 - 01851229 _____ C:\Windows\WindowsUpdate.log

2013-12-16 21:03 - 2013-12-16 21:02 - 02347384 _____ (ESET) C:\Users\Snoopy\Downloads\esetsmartinstaller_enu.exe

2013-12-16 21:01 - 2012-09-19 00:53 - 00000000 ____D C:\Users\Snoopy\Documents\Outlook-Dateien

2013-12-16 10:57 - 2012-09-18 23:01 - 00001072 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001Core.job

2013-12-16 10:11 - 2009-07-14 05:45 - 00026496 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-16 10:11 - 2009-07-14 05:45 - 00026496 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-16 10:01 - 2013-12-02 08:25 - 00001960 _____ C:\Windows\setupact.log

2013-12-16 10:01 - 2012-09-21 19:18 - 00000000 ____D C:\ProgramData\NVIDIA

2013-12-16 10:01 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-15 19:35 - 2013-12-03 19:35 - 00000000 ____D C:\Program Files (x86)\File Type Advisor

2013-12-15 12:39 - 2013-12-15 12:39 - 00002245 _____ C:\Users\Snoopy\Desktop\JRT.txt

2013-12-15 12:05 - 2013-12-15 12:05 - 00000000 ____D C:\Windows\ERUNT

2013-12-15 12:04 - 2013-12-15 12:04 - 01034531 _____ (Thisisu) C:\Users\Snoopy\Downloads\JRT.exe

2013-12-15 11:58 - 2013-12-08 20:10 - 00020194 _____ C:\Windows\PFRO.log

2013-12-15 11:55 - 2013-12-15 11:52 - 00000000 ____D C:\AdwCleaner

2013-12-15 11:55 - 2012-09-20 19:43 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-12-15 11:48 - 2013-12-15 11:47 - 01226802 _____ C:\Users\Snoopy\Downloads\adwcleaner (1).exe

2013-12-15 11:41 - 2013-07-24 16:15 - 00000000 ____D C:\Windows\system32\MRT

2013-12-15 11:38 - 2012-09-23 09:23 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-15 11:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF

2013-12-15 11:08 - 2013-12-15 11:08 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-12-15 11:08 - 2013-12-15 11:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-12-15 11:07 - 2013-12-15 11:06 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Snoopy\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-14 22:14 - 2013-12-14 22:14 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Avira

2013-12-14 22:13 - 2013-12-14 22:13 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk

2013-12-14 22:12 - 2013-12-14 22:12 - 00000000 ____D C:\ProgramData\Avira

2013-12-14 22:12 - 2013-12-14 22:12 - 00000000 ____D C:\Program Files (x86)\Avira

2013-12-14 21:50 - 2013-12-14 21:50 - 00062603 _____ C:\ComboFix.txt

2013-12-14 21:50 - 2013-12-14 21:32 - 00000000 ____D C:\Qoobox

2013-12-14 21:50 - 2013-02-02 12:58 - 00000000 ____D C:\Users\Daniel

2013-12-14 21:47 - 2013-12-14 21:31 - 00000000 ____D C:\Windows\erdnt

2013-12-14 21:46 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini

2013-12-14 21:40 - 2012-09-19 07:50 - 03059614 _____ C:\Windows\system32\perfh007.dat

2013-12-14 21:40 - 2012-09-19 07:50 - 00883038 _____ C:\Windows\system32\perfc007.dat

2013-12-14 21:40 - 2009-07-14 06:13 - 00006492 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-14 21:29 - 2013-12-14 21:26 - 129598176 _____ C:\Users\Snoopy\Downloads\avira_free_antivirus_de_14.0.2.286.exe

2013-12-14 21:15 - 2013-12-14 21:14 - 05154339 ____R (Swearware) C:\Users\Snoopy\Downloads\ComboFix.exe

2013-12-14 09:35 - 2013-12-14 09:33 - 00027855 _____ C:\Users\Snoopy\Downloads\Addition.txt

2013-12-12 14:50 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

2013-12-12 08:43 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD

2013-12-12 08:35 - 2009-07-14 05:45 - 00408560 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-12 01:01 - 2012-09-18 22:36 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-12-12 00:56 - 2012-11-30 16:47 - 00036409 ____H C:\Windows\SysWOW64\BTImages.dat

2013-12-11 17:47 - 2013-10-27 19:41 - 00000000 ____D C:\Daniel

2013-12-11 11:09 - 2012-09-23 11:48 - 00000000 ____D C:\ProgramData\tmp

2013-12-10 23:35 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini

2013-12-09 11:37 - 2013-12-14 22:13 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2013-12-09 11:37 - 2013-12-14 22:13 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2013-12-09 11:37 - 2013-12-14 22:13 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2013-12-09 11:37 - 2013-12-14 22:13 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys

2013-12-08 20:49 - 2013-12-08 20:49 - 00827728 _____ (Microsoft Corporation) C:\Users\Snoopy\Downloads\msvcr100.dll

2013-12-08 20:39 - 2013-12-08 20:39 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-msvcr100.exe

2013-12-08 20:31 - 2013-12-08 20:31 - 04422992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc100u.dll

2013-12-08 20:18 - 2013-12-08 20:17 - 05341472 _____ (Dll-Files.com                                               ) C:\Users\Snoopy\Downloads\dffsetup-mfc100u.exe

2013-12-08 20:07 - 2013-12-08 19:54 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

2013-12-08 20:07 - 2012-12-23 19:02 - 00000000 ____D C:\Users\Snoopy\AppData\Local\Downloaded Installations

2013-12-08 20:07 - 2012-09-18 22:36 - 00000000 ____D C:\Users\Snoopy\AppData\Local\Microsoft Help

2013-12-08 19:58 - 2013-12-08 19:55 - 00000000 ____D C:\ProgramData\TuneUp Software

2013-12-08 19:56 - 2013-12-08 19:56 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\TuneUp Software

2013-12-08 19:54 - 2013-12-08 19:53 - 28181408 _____ (TuneUp Software) C:\Users\Snoopy\Downloads\TuneUpUtilities2013_de-DE.exe

2013-12-08 12:06 - 2012-09-23 11:48 - 00000000 ____D C:\ProgramData\hps

2013-12-08 10:25 - 2012-09-20 20:13 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\ZoomBrowser EX

2013-12-08 10:23 - 2012-09-20 19:58 - 00000000 ____D C:\ProgramData\ZoomBrowser

2013-12-08 10:03 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2013-12-08 10:01 - 2013-02-17 12:42 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software

2013-12-07 21:22 - 2013-10-03 18:14 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\.minecraft

2013-12-07 17:26 - 2013-12-07 17:08 - 00000000 ____D C:\Users\Snoopy\Desktop\MinecraftDev

2013-12-07 17:26 - 2013-12-07 17:02 - 00117781 _____ C:\Users\Snoopy\Desktop\MinecraftDev.rar

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-12-07 17:05 - 2013-12-07 17:05 - 00000000 ____D C:\Program Files (x86)\WinRAR

2013-12-07 17:05 - 2013-12-07 17:04 - 01766784 _____ C:\Users\Snoopy\Downloads\wrar500.exe

2013-12-07 17:02 - 2013-12-07 17:02 - 00116804 _____ C:\Users\Snoopy\Downloads\MinecraftDev.rar

2013-12-07 16:51 - 2013-12-07 16:51 - 00159028 _____ C:\Users\Snoopy\Desktop\Minecraft- (3).rar

2013-12-07 16:51 - 2013-12-07 16:41 - 00000000 ____D C:\ProgramData\Oracle

2013-12-07 16:40 - 2013-12-07 16:39 - 00005683 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log

2013-12-07 16:40 - 2013-06-10 20:34 - 00000000 ____D C:\Program Files (x86)\Java

2013-12-07 16:36 - 2013-12-05 19:44 - 00000000 ____D C:\Users\Snoopy\AppData\Roaming\FileAdvisor

2013-12-07 16:31 - 2013-12-07 16:31 - 00159028 _____ C:\Users\Snoopy\Downloads\Minecraft-.rar

2013-12-07 12:54 - 2013-12-07 12:54 - 02465368 _____ (Check Point Software Technologies LTD) C:\Users\Snoopy\Downloads\zaSetupWeb_120_104_000.exe

2013-12-06 20:38 - 2013-12-06 20:38 - 00000000 ____D C:\Users\Snoopy\AppData\Local\LEGO

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\ProgramData\IVI Foundation

2013-12-06 20:32 - 2013-12-06 20:32 - 00000000 ____D C:\Program Files (x86)\IVI Foundation

2013-12-06 20:32 - 2012-11-18 17:55 - 00000000 ____D C:\ProgramData\National Instruments

2013-12-06 20:29 - 2012-11-18 17:58 - 00000000 ____D C:\Users\Snoopy\Documents\LEGO Creations

2013-12-06 20:29 - 2012-11-18 17:56 - 00000000 ____D C:\Program Files (x86)\National Instruments

2013-12-06 20:29 - 2012-11-18 17:56 - 00000000 ____D C:\Program Files (x86)\LEGO Software

2013-12-06 20:28 - 2013-12-06 20:28 - 00000000 ____D C:\ProgramData\LEGO MINDSTORMS EV3

2013-12-06 20:20 - 2012-09-25 18:18 - 00006474 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-12-06 10:49 - 2012-09-18 23:01 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001UA

2013-12-06 10:49 - 2012-09-18 23:01 - 00003700 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3516118728-1142162036-4191355624-1001Core

2013-12-05 08:51 - 2012-09-18 23:03 - 00002366 _____ C:\Users\Snoopy\Desktop\Google Chrome.lnk

2013-12-03 20:00 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-12-03 19:35 - 2013-12-03 19:35 - 00003524 _____ C:\Windows\System32\Tasks\FileAdvisorUpdate

2013-12-03 19:35 - 2013-12-03 19:35 - 00003518 _____ C:\Windows\System32\Tasks\FileAdvisorCheck

2013-12-03 19:33 - 2013-12-03 19:33 - 05834488 _____ (ManiacTools.com                                             ) C:\Users\Snoopy\Downloads\m4a-to80-mp3-converter.exe

2013-12-02 08:25 - 2013-12-02 08:25 - 00000000 _____ C:\Windows\setuperr.log

2013-12-01 18:38 - 2013-07-27 23:56 - 00000000 ____D C:\Windows\Minidump

2013-12-01 18:38 - 2012-09-19 07:53 - 00000000 ____D C:\Windows\Panther

2013-12-01 14:18 - 2013-12-01 14:18 - 00001466 _____ C:\Users\Snoopy\Desktop\MB - Verknüpfung.lnk

2013-11-28 07:52 - 2012-09-18 21:02 - 00001425 _____ C:\Users\Snoopy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-11-28 07:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-11-27 21:28 - 2013-11-27 21:28 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-11-27 21:28 - 2013-11-27 21:28 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-11-27 21:28 - 2013-11-27 21:28 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-11-27 21:28 - 2013-11-27 21:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-11-27 21:28 - 2013-11-27 21:28 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-11-27 21:27 - 2013-11-27 21:27 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-11-27 21:27 - 2013-11-27 21:27 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-11-27 21:27 - 2013-11-27 21:27 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-11-27 21:27 - 2013-11-27 21:27 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-11-27 21:27 - 2013-11-27 21:27 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-11-26 12:54 - 2013-12-12 00:59 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-11-26 11:19 - 2013-12-12 00:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-11-26 11:18 - 2013-12-12 00:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-11-26 11:11 - 2013-12-12 00:59 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-11-26 10:48 - 2013-12-12 00:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-11-26 10:46 - 2013-12-12 00:59 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-11-26 10:41 - 2013-12-12 00:59 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-11-26 10:29 - 2013-12-12 00:59 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-11-26 10:27 - 2013-12-12 00:59 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-11-26 10:23 - 2013-12-12 00:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-11-26 10:21 - 2013-12-12 00:59 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-11-26 10:18 - 2013-12-12 00:59 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-11-26 10:18 - 2013-12-12 00:59 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-11-26 10:16 - 2013-12-12 00:59 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-11-26 09:57 - 2013-12-12 00:59 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-11-26 09:38 - 2013-12-12 00:59 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-11-26 09:38 - 2013-12-12 00:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-11-26 09:35 - 2013-12-12 00:59 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-11-26 09:32 - 2013-12-12 00:59 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-11-26 09:28 - 2013-12-12 00:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2013-11-26 09:16 - 2013-12-12 00:59 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-11-26 09:02 - 2013-12-12 00:59 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-11-26 08:48 - 2013-12-12 00:59 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-11-26 08:32 - 2013-12-12 00:59 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-11-26 08:26 - 2013-12-12 00:59 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-11-26 08:07 - 2013-12-12 00:59 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-11-26 07:40 - 2013-12-12 00:59 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-11-26 07:34 - 2013-12-12 00:59 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-11-26 07:34 - 2013-12-12 00:59 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-11-26 07:33 - 2013-12-12 00:59 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-11-26 07:27 - 2013-12-12 00:59 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-11-25 20:20 - 2013-11-13 17:52 - 00000000 ____D C:\Reli Schülerzeitung

2013-11-23 19:26 - 2013-12-11 10:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-11-23 18:47 - 2013-12-11 10:02 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-11-23 14:04 - 2013-11-23 14:04 - 00675988 _____ C:\Users\Snoopy\Desktop\Minecraft.exe

2013-11-23 13:31 - 2013-11-23 13:26 - 00001550 _____ C:\Windows\Bert47055_0.ini

2013-11-23 13:31 - 2013-11-23 13:26 - 00000000 ____D C:\Bertrams

2013-11-23 13:27 - 2013-11-23 13:27 - 00000000 _____ C:\Windows\WdbInstW.INI

2013-11-20 20:51 - 2013-02-15 20:10 - 00007597 _____ C:\Users\Snoopy\AppData\Local\Resmon.ResmonCfg
 

Files to move or delete:

====================

C:\Users\Snoopy\AmazonMP3DownloaderInstall._V383787924_.exe

C:\Users\Snoopy\ANTAgent_233.exe
 
 

Some content of TEMP:

====================

C:\Users\Snoopy\AppData\Local\Temp\avgnt.exe

C:\Users\Snoopy\AppData\Local\Temp\Offercast_AVIRAV7_.exe

C:\Users\Snoopy\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-10 21:19
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Hi,
keine Probleme. Frage mich nur, ob nun der ganze Mist weg ist und mein PC wieder sicher ist...

Adobe updaten.

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun :)

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Hi Schrauber,

alles bestens. Vielen vielen Dank für die prompte Hilfe!
Fazit: super professionell, sehr schnell und zuverlässig, sehr freundlich (auch wenn mein erster Post-Versuch falsch gemacht war).
Viele Dank und Grüße,
Tom