Trojaner-Board - Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1 (https://www.trojaner-board.de/146000-absturz-internet-explorer-firefox-gelegendlich-bluescreen-win7-sp1.html)

Absturz Internet Explorer und Firefox gelegendlich auch mit Bluescreen Win7/SP1

Erst mal guten Tag,

jetzt bin ich auch betroffen und zwar stürzt der Internet-Explorer oder auch Firefox ab
mit einer Problemmeldung und manchmal auch der ganze Rechner mit Bluescreen.

Lenovo TC-A57
Betriebssystem:Windows 7 Enterprise Sp1
Intel Core TM 2 DUO CPU E8200 2,66 GHz
Arbeitsspeicher 2GB
BS:32bit

Ich habe verschiedene Versionen der I-Netexplorer installiert, sowie chkdsk/f/r duchlaufen lassen.
Zurück gesetzt habe ich den PC noch nicht, da alle anderen Funktionen normal laufen.

Antiviren- und Webschutz über Sophos und kein Virenbefind angezeigt nach scan.
Memory Test auch negativ. Allerdings im abgesicherten Modus kam es nicht zum Absturz.
Welche Routine müsste ich jetzt befolgen?
Vielen Dank im Voraus!

Achim

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hallo Schrauber,

läuft alles wie geplant und nach dem Start (scan) hat sich die Statusanzeige die letzte halbe Stunde vielleicht ca.8mm bewegt.
Dauert der Scan länger und ist das normal dann ist alles in Ordnung und ich lasse den Rechner über Nacht an?

Ich habe die 32bit Version gewählt.

Erst mal schon recht herzlichen Dank im Voraus.:dankeschoen:

Nee normal geht der ganz scnell. Abbrechen, FRST löschen und neu laden, nochmal versuchen :)

Hallo

Ich muss noch die Web-Plattform neu installieren.

Dann muss ich versuchen,dass mir der Browser nicht abstürzt oder der PC mit Blue Screen.

Dauert noch etwas,dann melde ich mich wieder?

Viele Grüsse Achim

Hallo Schrauber,

ich habe es jetzt im abgesicherten Modus geschafft,da der Browser hier nicht abstürzt.

Ich hoffe die addition-Datei ist die Richtige,da ich eine auf dem Desktop hatte und eine zweite im Verzeichnis wo der Doenload gestartet wurde?

Ansonsten kann ich den scan nochmals durchführen.

Vielen Dank
Achim

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Hallo Schrauber,

ich habe den scan nochmal durchlaufen lassen und funktioniert.
Hier ist erst mal der Text oder besser das Ergebnis:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-12-2013 01

Ran by Achim (administrator) on GEORGE on 14-12-2013 09:02:54

Running from C:\Users\Achim\Desktop

Microsoft Windows 7 Enterprise  Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Eaton Corporation) C:\Program Files\Powerware\LanSafe\Bin\PowerMonitor.exe

(LogMeIn, Inc.) C:\Program Files\LogMeIn Ignition\LMIGuardianSvc.exe

(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\ramaint.exe

(NCP engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\ncpclcfg.exe

(NCP Engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\ncprwsnt.exe

() C:\Program Files\LANCOM\Advanced VPN Client\NCPSEC.EXE

(Nuance Communications, Inc.) C:\Program Files\Nuance\PDF Professional 6\PDFProFiltSrv.exe

(Microsoft Corporation) C:\Windows\System32\Locator.exe

(Sophos Limited) C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Axis Communications) C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmService.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

() C:\Program Files\Powerware\LanSafe\Bin\LSTrayAgent.exe

(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeIn.exe

(Eaton Corporation) C:\Program Files\Powerware\LanSafe\Bin\XYNTService.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

(Powerware) C:\Program Files\Powerware\LanSafe\Bin\httpserver.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe

(Powerware) C:\Program Files\Powerware\LanSafe\Bin\status_glance.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe

(Wondershare) C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Nuance Communications, Inc.) C:\Program Files\Nuance\PDF Professional 6\PdfPro6Hook.exe

(NCP engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\NcpBudgetGui.exe

(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeInSystray.exe

(CANON INC.) C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE

(Axis Communications) C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmAdmin.exe

(Spotify Ltd) C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Spotify Ltd) C:\Users\Achim\AppData\Roaming\Spotify\spotify.exe

(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Dropbox, Inc.) C:\Users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(AVM Berlin) C:\Users\Achim\AppData\Local\Apps\2.0\VQ9HEPM4.KK8\OQATJMLW.1MX\frit..tion_1acae14e4778b8d2_0002.0003_7c9366a34786c7f9\fritzbox-usb-fernanschluss.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(CANON INC.) C:\Program Files\Canon\Solution Menu EX\CNSEUPDT.EXE

() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\agent.exe

(Microsoft Corporation) C:\Program Files\Windows Live\Mail\wlmail.exe

(Microsoft Corporation) C:\Program Files\Windows Live\Contacts\wlcomm.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\prevhost.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [NWEReboot] - [x]

HKLM\...\Run: [SCLicense] - [x]

HKLM\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1743648 2013-06-13] (Wondershare)

HKLM\...\Run: [tvncontrol] - C:\Program Files\TightVNC\tvnserver.exe [1690096 2013-07-19] (GlavSoft LLC.)

HKLM\...\Run: [TrayServer] - C:\Program Files\MAGIX\Video_deluxe_17_Premium\Trayserver.exe [90112 2008-08-07] (MAGIX AG)

HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM\...\Run: [Sophos AutoUpdate Monitor] - C:\Program Files\Sophos\AutoUpdate\ALMon.exe [929272 2013-01-11] (Sophos Limited)

HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)

HKLM\...\Run: [PDFHook] - C:\Program Files\Nuance\PDF Professional 6\PdfPro6Hook.exe [1275168 2009-07-27] (Nuance Communications, Inc.)

HKLM\...\Run: [PDF6 Registry Controller] - C:\Program Files\Nuance\PDF Professional 6\RegistryController.exe [110880 2009-07-27] (Nuance Communications, Inc.)

HKLM\...\Run: [Nuance PDF Professional 6-reminder] - C:\Program Files\Nuance\PDF Professional 6\Ereg\Ereg.exe [54560 2008-11-03] (Nuance Communications, Inc.)

HKLM\...\Run: [Nuance PDF Converter Professional 7-reminder] - "C:\Program Files\Nuance\PDF Professional 7\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Converter Professional 7\Ereg\Ereg.ini"

HKLM\...\Run: [NcpPopup] - C:\Program Files\LANCOM\Advanced VPN Client\NCPPOPUP.EXE [1011280 2012-03-20] (NCP engineering GmbH)

HKLM\...\Run: [NcpBudgetGui] - C:\Program Files\LANCOM\Advanced VPN Client\NcpBudgetGui.exe [999424 2013-08-08] (NCP engineering GmbH)

HKLM\...\Run: [LogMeIn GUI] - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [63048 2012-11-29] (LogMeIn, Inc.)

HKLM\...\Run: [KeePass 2 PreLoad] - C:\Program Files\KeePass Password Safe 2\KeePass.exe [1960448 2013-04-05] (Dominik Reichl)

HKLM\...\Run: [IJNetworkScannerSelectorEX] - C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [439440 2011-09-27] (CANON INC.)

HKLM\...\Run: [ControlCenter3] - C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun

HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [1637496 2011-08-04] (CANON INC.)

HKLM\...\Run: [BrowserPlugInHelper] - C:\Program Files\Wondershare\Video Converter Ultimate\BrowserPlugInHelper.exe [1966992 2013-09-04] ()

HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)

HKLM\...\Run: [AXIS Camera Management Service Control] - C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmAdmin.exe [1831320 2013-07-11] (Axis Communications)

HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKCU\...\Run: [Spotify Web Helper] - C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-05] (Spotify Ltd)

HKCU\...\Run: [Spotify] - C:\Users\Achim\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-05] (Spotify Ltd)

HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [210208 2008-11-17] (Acresso Corporation)

HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)

HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20133824 2013-09-25] (Google)

HKCU\...\Run: [D78C92992BD5DF6C33342FFA1CEF81EA1030193A._service_run] - "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=service

HKCU\...\Run: [AVMUSBFernanschluss] - C:\Users\Achim\AppData\Local\Apps\2.0\VQ9HEPM4.KK8\OQATJMLW.1MX\frit..tion_1acae14e4778b8d2_0002.0003_7c9366a34786c7f9\AVMAutoStart.exe [139264 2013-07-13] (AVM Berlin)

MountPoints2: {1d58cb6e-0c86-11e3-a93a-001e909e0c7e} - F:\FingerVerify.exe

MountPoints2: {79f09736-611b-11e3-8ca7-001e909e0c7e} - F:\pushinst.exe

MountPoints2: {d484f749-8641-11e2-bedb-806e6f6e6963} - E:\setup.exe

AppInit_DLLs: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll [ 2013-05-17] (Sophos Limited)

Startup: C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x147CCD919DF6CE01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files\Nuance\PDF Professional 6\bin\PlusIEContextMenu.dll (Zeon Corporation)

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: FRITZ!Box Addon BHO - {C0C86BBE-9509-4296-8459-FDBFDAF4B673} - C:\Program Files\FRITZ!Box\AddOn (IE)\FBoxIESplitButton.dll (AVM Berlin)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab

DPF: {7191F0AC-D686-46A8-BFCC-EA61778C74DD} hxxp://192.168.178.54/aplugLite.cab

DPF: {721700FE-7F0E-49C5-BDED-CA92B7CB1245} hxxp://192.168.178.23:84/camclictrl.cab

DPF: {82E5DF24-51E8-47CD-864A-F4BD5005AA73} https://www.icloud.com/system/iCloud.cab

DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} hxxp://192.168.178.50/activex/AxisCamControl.cab

DPF: {9464D0CA-5BD8-4175-AB33-A61A4A67AA97} hxxp://192.168.178.23:84/camclictrl.cab

DPF: {9C3EFB8A-DC20-484B-B905-5E337A988C5D} hxxp://192.168.178.20:81/LNetCam.cab

DPF: {B015B944-7316-49AE-AC84-ACCA9379EA32} hxxp://192.168.178.25:82/IPCamPluginMJPEG.cab

DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Winsock: Catalog9 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 19 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Tcpip\..\Interfaces\{1C2EF6A4-791E-4D02-B6D4-2358FABE2256}: [NameServer]192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default

FF Homepage: https://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll ()

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @TRENDnet.com/CameraPlugin - C:\Program Files\TRENDnet\Plugin\npcamstreamctrl.dll (TRENDnet)

FF Plugin: ZEON/PDF,version=2.0 - C:\Program Files\Nuance\PDF Professional 6\bin\nppdf.dll (Zeon Corporation)

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: nuance - C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default\Extensions\nuance@pdf6

FF HKLM\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\

FF Extension: Wondershare Video Converter Ultimate - C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
 

========================== Services (Whitelisted) =================
 

R2 AXIS Camera Management; C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmService.exe [17920 2013-07-11] (Axis Communications)

S4 DcRaidMoSrv; C:\Program Files\Dawicontrol GmbH\Dawicontrol RAID Monitor\RAIDservice.exe [341504 2012-05-30] (Dawicontrol GmbH)

S4 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG)

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®)

R2 LanSafe PM; C:\Program Files\Powerware\LanSafe\Bin\PowerMonitor.exe [532480 2009-12-05] (Eaton Corporation)

R3 LanSafe Process Manager; C:\Program Files\Powerware\LanSafe\bin\xyntservice.exe [49152 2009-12-02] (Eaton Corporation)

R2 LMIGuardianSvc; C:\Program Files\LogMeIn Ignition\LMIGuardianSvc.exe [374160 2011-05-17] (LogMeIn, Inc.)

R2 ncpclcfg; C:\Program Files\LANCOM\Advanced VPN Client\ncpclcfg.exe [150800 2013-10-28] (NCP engineering GmbH)

R2 ncprwsnt; C:\Program Files\LANCOM\Advanced VPN Client\ncprwsnt.exe [1395464 2013-11-08] (NCP Engineering GmbH)

R2 NcpSec; C:\Program Files\LANCOM\Advanced VPN Client\NCPSEC.EXE [119808 2011-04-21] ()

R2 PDFProFiltSrv; C:\Program Files\Nuance\PDF Professional 6\PDFProFiltSrv.exe [134944 2009-07-27] (Nuance Communications, Inc.)

R2 SAVAdminService; C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [290296 2013-05-17] (Sophos Limited)

S4 SAVService; C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe [206328 2013-05-17] (Sophos Limited)

S4 Sophos AutoUpdate Service; C:\Program Files\Sophos\AutoUpdate\ALsvc.exe [237048 2013-01-11] (Sophos Limited)

S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22888 2013-09-17] ()

S4 swi_service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [3109880 2013-09-17] (Sophos Limited)

S4 swi_update; C:\ProgramData\Sophos\Web Intelligence\swi_update.exe [1471992 2013-05-17] (Sophos Limited)

S4 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [1690096 2013-07-19] (GlavSoft LLC.)

S3 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [3602752 2013-03-04] (RealVNC Ltd)
 

==================== Drivers (Whitelisted) ====================
 

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [46976 2009-07-14] (Microsoft Corporation)

R3 avmaura; C:\Windows\System32\DRIVERS\avmaura.sys [105728 2013-07-13] (AVM Berlin)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)

R0 DC300e; C:\Windows\System32\DRIVERS\DC300e.sys [39872 2013-03-09] (Dawicontrol GmbH)

R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [25160 2007-08-07] (Elaborate Bytes AG)

R3 ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [11984 2007-02-16] (Elaborate Bytes AG)

S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2010-10-22] (AVM GmbH)

S3 ncpfilt; C:\Windows\System32\DRIVERS\ncplelhp.sys [87280 2013-09-11] (NCP Engineering GmbH)

R3 ncplelhp; C:\Windows\System32\DRIVERS\ncplelhp.sys [87280 2013-09-11] (NCP Engineering GmbH)

S3 RTL8192cu; C:\Windows\System32\DRIVERS\WNA1000M.sys [734824 2011-02-21] (Realtek Semiconductor Corporation                           )

R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [132424 2013-05-17] (Sophos Limited)

S3 Ser2plx86; C:\Windows\System32\DRIVERS\ser2pl.sys [134144 2013-02-22] (Prolific Technology Inc.)

R0 Si3132r5; C:\Windows\System32\DRIVERS\Si3132r5.sys [215856 2007-06-01] (Silicon Image, Inc)

R0 SiFilter; C:\Windows\System32\DRIVERS\SiWinAcc.sys [17328 2007-05-25] (Silicon Image, Inc.)

R0 SiRemFil; C:\Windows\System32\DRIVERS\SiRemFil.sys [12464 2007-05-25] (Silicon Image, Inc.)

R1 SKMScan; C:\Windows\System32\DRIVERS\skmscan.sys [33096 2013-05-17] (Sophos Limited)

S4 SophosBootDriver; C:\Windows\System32\DRIVERS\SophosBootDriver.sys [22536 2011-10-23] (Sophos Plc)

R3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [4608 2013-03-04] (RealVNC Ltd.)

S4 LMIRfsClientNP; No ImagePath

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]

S3 tsusbhub; system32\drivers\tsusbhub.sys [x]

S3 VGPU; System32\drivers\rdvgkmd.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-14 09:02 - 2013-12-14 09:02 - 00020081 _____ C:\Users\Achim\Desktop\FRST.txt

2013-12-14 00:05 - 2013-12-14 00:05 - 00000000 ____D C:\Users\Achim\AppData\Local\{2C2739FB-BC09-46C8-93DE-C51E519DA94F}

2013-12-13 23:33 - 2013-12-13 23:33 - 00889416 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\dotNetFx40_Full_setup.exe

2013-12-13 23:32 - 2013-12-13 23:32 - 24805592 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\Windows-KB890830-V5.7.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-13 23:19 - 2013-12-13 23:19 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-13 23:19 - 2013-12-13 23:19 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 23:19 - 2013-12-13 23:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 23:19 - 2013-12-13 23:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 23:19 - 2013-12-13 23:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-13 23:17 - 2013-12-13 23:17 - 02077392 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE11-Windows6.1.exe

2013-12-13 23:07 - 2013-12-13 23:07 - 00027125 _____ C:\Users\Achim\Downloads\Addition.txt

2013-12-13 23:06 - 2013-12-13 23:06 - 00000000 ____D C:\Users\Achim\Downloads\FRST-OlderVersion

2013-12-13 20:30 - 2013-12-13 20:30 - 00000000 ____D C:\Users\Achim\AppData\Local\{DBBE0DAE-37CF-4C2D-AE48-9D5281B2E5DA}

2013-12-13 17:56 - 2013-12-13 23:12 - 00000000 ____D C:\Program Files\IIS Express

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Users\Achim\AppData\Roaming\npm

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\nodejs

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\iisnode-dev

2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\runphp

2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\Microsoft SDKs

2013-12-13 07:23 - 2013-12-13 07:23 - 00116384 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\wpilauncher.exe

2013-12-13 06:58 - 2013-12-13 06:58 - 00000000 ____D C:\Users\Achim\AppData\Local\{C1DA257A-C66F-42C8-9BA0-6D840235018D}

2013-12-12 22:28 - 2013-12-13 23:06 - 01060575 _____ (Farbar) C:\Users\Achim\Desktop\FRST.exe

2013-12-12 22:28 - 2013-12-13 23:06 - 00000000 ____D C:\FRST

2013-12-12 22:12 - 2013-12-12 22:12 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Mozilla

2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-12-12 21:22 - 2013-12-12 21:29 - 00000000 ____D C:\ldiag

2013-12-12 20:50 - 2013-12-12 20:50 - 00072892 _____ C:\Users\Achim\Desktop\GEORGE.html

2013-12-12 20:47 - 2013-12-12 20:47 - 00001022 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk

2013-12-12 20:47 - 2013-12-12 20:47 - 00000000 ____D C:\Program Files\CPUID

2013-12-12 19:37 - 2013-12-12 19:37 - 00003544 ____N C:\bootsqm.dat

2013-12-12 18:26 - 2013-12-12 18:26 - 00000000 ____D C:\Users\Achim\AppData\Local\{E10E834A-B165-4DA9-AB94-570C52339AFA}

2013-12-12 07:58 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL

2013-12-12 07:58 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll

2013-12-12 07:45 - 2013-12-12 07:45 - 00422914 _____ C:\Users\Achim\Documents\VHS-kaki-umschlag-2014.pptx

2013-12-12 07:02 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-12-12 07:02 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-12-12 07:02 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll

2013-12-12 07:02 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-12-12 07:02 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-12-12 07:02 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx

2013-12-12 07:02 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll

2013-12-12 07:02 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe

2013-12-12 07:02 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe

2013-12-12 07:02 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys

2013-12-12 07:02 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

2013-12-12 00:20 - 2013-12-13 23:31 - 00026640 _____ C:\Windows\IE11_main.log

2013-12-11 20:23 - 2013-12-11 20:23 - 00059862 _____ C:\Windows\PFRO.log

2013-12-11 20:19 - 2013-12-12 07:07 - 00000095 _____ C:\Users\Achim\Desktop\CMD-Archiv.txt

2013-12-11 18:55 - 2013-12-11 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\Tvsukernel

2013-12-11 18:54 - 2013-12-11 18:54 - 00000000 ____D C:\Program Files\ThinkVantage

2013-12-11 18:36 - 2013-12-11 18:36 - 00000000 ____D C:\Users\Achim\AppData\Local\{E2D1553E-0F76-4874-B75C-9D76E8751983}

2013-12-11 18:34 - 2013-12-11 18:49 - 00007337 _____ C:\Windows\IE10_main.log

2013-12-11 18:24 - 2013-12-11 18:24 - 00000000 ___HD C:\Windows\msdownld.tmp

2013-12-11 18:17 - 2013-12-14 08:35 - 00001749 _____ C:\Windows\setupact.log

2013-12-11 18:17 - 2013-12-11 18:17 - 00000000 _____ C:\Windows\setuperr.log

2013-12-11 07:52 - 2013-12-11 18:24 - 00034573 _____ C:\Windows\ie8_main.log

2013-12-10 20:33 - 2013-12-10 20:33 - 00192888 _____ C:\Users\Achim\cc_20131210_203255.reg

2013-12-10 19:52 - 2013-12-10 19:52 - 00001356 _____ C:\Users\Achim\Desktop\CCleaner.exe - Verknüpfung.lnk

2013-12-10 19:13 - 2010-10-22 02:00 - 00480632 ____N (AVM Berlin) C:\Windows\instwcli.dex

2013-12-10 18:51 - 2013-12-10 18:51 - 00000000 ____D C:\Users\Achim\AppData\Local\{91763463-211A-4527-B882-B35102CF258A}

2013-12-09 23:07 - 2010-10-22 02:00 - 00074240 _____ (AVM Berlin) C:\Windows\system32\fwlanci.org

2013-12-09 23:05 - 2013-12-09 23:05 - 00000000 ____D C:\Program Files\AVM_update

2013-12-09 17:03 - 2013-12-09 17:03 - 00000000 ____D C:\Users\Achim\AppData\Local\{8465BFAE-761F-45B7-A165-2F207C12DCC8}

2013-12-08 19:25 - 2013-12-08 19:25 - 00000000 ____D C:\Users\Achim\AppData\Local\{5DE8D5F8-2105-4566-A3BA-04358E8A7289}

2013-12-08 13:59 - 2013-12-08 14:00 - 37059280 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE11_w7_Windows6.1-x86-de-de.exe

2013-12-08 11:33 - 2013-12-08 11:33 - 00659968 _____ C:\Users\Achim\Downloads\MicrosoftFixit50195.msi

2013-12-08 11:05 - 1998-10-21 18:43 - 00328704 _____ (InstallShield Software Corporation ) C:\Windows\IsUn0407.exe

2013-12-07 11:37 - 2013-12-12 21:01 - 00000000 ____D C:\Users\Achim\Documents\DriverGenius

2013-12-07 10:50 - 2013-12-07 10:51 - 00000000 ____D C:\Users\Achim\AppData\Local\{73248BC2-7A96-4ABE-8A60-1483D1091D51}

2013-12-06 19:57 - 2013-12-06 19:57 - 00000000 ____D C:\Users\Achim\AppData\Local\{15238591-D7D5-4729-AE47-B0C19B081F88}

2013-12-05 19:40 - 2013-12-05 19:40 - 00000000 ____D C:\Users\Achim\AppData\Local\{7D47938A-4131-42E4-9835-A4AA50C8BC30}

2013-12-04 20:52 - 2013-12-04 20:52 - 00000000 ____D C:\Users\Achim\AppData\Local\{BB81DD55-396C-4CB5-9987-4D6599505CC8}

2013-12-04 20:43 - 2013-12-04 20:43 - 00000000 ____D C:\Users\Achim\AppData\Local\vsmedia.de

2013-12-04 20:39 - 2013-12-04 20:39 - 00001128 _____ C:\Users\Achim\Desktop\Continue Image Editor Installation.lnk

2013-12-04 19:43 - 2013-12-04 20:05 - 00000000 ____D C:\Users\Achim\Desktop\FP_2980_1

2013-12-04 07:35 - 2013-12-04 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{D64317D2-6704-4DFF-B1DC-4FC6C9D35CFE}

2013-12-03 17:59 - 2013-12-03 17:59 - 00000000 ____D C:\Users\Achim\AppData\Local\{1AF41660-AD34-48D4-8A36-7A760A548293}

2013-12-02 22:14 - 2013-12-02 22:14 - 00000000 ____D C:\Users\Achim\AppData\Local\{1105C651-2A16-4FE7-BD70-B298078BF86F}

2013-12-02 19:52 - 2013-12-10 19:57 - 00000000 ____D C:\Users\Achim\AppData\Roaming\NCH Software

2013-12-02 19:51 - 2013-12-10 19:57 - 00000000 ____D C:\ProgramData\NCH Software

2013-12-02 19:51 - 2013-12-10 19:57 - 00000000 ____D C:\Program Files\NCH Software

2013-12-01 18:54 - 2013-12-01 18:54 - 00001120 _____ C:\Users\Achim\Desktop\TeamViewer 8.lnk

2013-12-01 09:10 - 2013-12-01 09:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{0E4F093B-18D9-4563-896D-BFD99F598C22}

2013-11-30 17:47 - 2013-11-30 17:47 - 22099928 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Achim\Downloads\FreeDiscBurner-3.0.19.1125.exe

2013-11-30 11:46 - 2013-11-30 11:47 - 00000000 ____D C:\Users\Achim\AppData\Local\{EC8686D9-D1FC-48AE-BB6A-38FE540BAD42}

2013-11-29 18:55 - 2013-11-29 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\{59930784-6774-456E-9C09-4C3BEC76C278}

2013-11-28 19:10 - 2013-11-28 19:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{3128A4B2-EE2E-4A75-B3C8-61F98196943B}

2013-11-28 07:10 - 2013-11-28 07:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{416E6F95-46A3-48C0-8801-0CA0DA5B9D1B}

2013-11-27 18:11 - 2013-11-27 18:12 - 00000000 ____D C:\Users\Achim\AppData\Local\{DABA9068-D1EA-4E5A-9CD9-49E791E000CE}

2013-11-26 23:04 - 2013-11-26 23:03 - 00001774 _____ C:\Users\Achim\Desktop\qr_code_ohne_logo_plus_informationsmappe.zip

2013-11-26 17:29 - 2013-11-26 17:29 - 00000000 ____D C:\Users\Achim\AppData\Local\{57C2A3E0-4208-4E77-A0B3-590638E0C6DA}

2013-11-25 21:36 - 2013-11-25 21:36 - 00000000 ____D C:\Users\Achim\AppData\Local\{DAAF6226-50BF-476F-867D-536E123ACE20}

2013-11-25 18:46 - 2013-11-25 18:46 - 00002161 _____ C:\Users\Achim\Desktop\Klassik-DB.xlsx - Verknüpfung.lnk

2013-11-25 07:00 - 2013-11-25 07:00 - 00000000 ____D C:\Users\Achim\AppData\Local\{E84B5DE1-1B75-4249-BE29-5896583A8F94}

2013-11-24 09:17 - 2013-11-24 09:18 - 00000000 ____D C:\Users\Achim\AppData\Local\{7613B49A-7575-4675-B410-8A94C8E1D1C2}

2013-11-23 11:30 - 2013-11-23 11:31 - 00000000 ____D C:\Users\Achim\AppData\Local\{07AB9F67-046D-4651-A407-E9FF4CCE79A7}

2013-11-23 11:16 - 2013-11-23 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\libimobiledevice

2013-11-23 11:12 - 2013-11-23 11:12 - 00000000 ____D C:\Users\Achim\Documents\evasi0n-win-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-release

2013-11-22 15:57 - 2013-11-26 07:42 - 00011284 _____ C:\Users\Achim\Documents\Klassik-DB.xlsx

2013-11-22 15:41 - 2013-12-02 22:00 - 00000292 _____ C:\Users\Achim\AppData\Roaming\burnaware.ini

2013-11-22 14:23 - 2013-11-22 14:23 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spesoft Audio Converter

2013-11-22 14:11 - 2013-11-22 14:11 - 00001829 _____ C:\Users\Achim\Desktop\P-touch Editor 5.0.lnk

2013-11-22 13:59 - 2013-11-22 13:59 - 00000000 ____D C:\Program Files\Common Files\Brother

2013-11-22 12:41 - 2013-11-22 12:41 - 00001271 _____ C:\Users\Achim\Desktop\Kufer-WEB-Zugangsdaten.txt - Verknüpfung.lnk

2013-11-22 12:27 - 2013-11-22 12:28 - 00000000 ____D C:\Users\Achim\AppData\Local\{CD813A04-B917-4D47-8713-1EF427C12C00}

2013-11-21 19:44 - 2013-11-21 19:44 - 00000000 ____D C:\Users\Achim\AppData\Local\{86EFDEDB-6E62-43B9-89FA-18B35D328DC5}

2013-11-21 07:35 - 2013-11-21 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{EA9FC986-450B-48AF-B133-D79D012AC790}

2013-11-20 07:35 - 2013-11-20 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{31DC784B-644F-4A12-B0B0-08DA5DE82850}

2013-11-19 07:00 - 2013-11-19 07:00 - 00000000 ____D C:\Users\Achim\AppData\Local\{8EBAA0DE-E38E-4695-A149-352C77218C92}

2013-11-17 17:50 - 2013-11-17 17:50 - 00000000 ____D C:\Users\Achim\AppData\Local\{30E09A1C-77BD-42E9-B422-5D15346259F9}

2013-11-16 08:40 - 2013-11-16 08:40 - 00000000 ____D C:\Users\Achim\AppData\Local\{FA5FC6FE-11D0-4B24-9D67-062FEB1CEDCD}

2013-11-14 16:22 - 2013-11-14 16:22 - 00000000 ____D C:\Users\Achim\AppData\Local\{D660F8F1-43CC-42A5-B816-99CD9BEC8830}
 

==================== One Month Modified Files and Folders =======
 

2013-12-14 09:03 - 2013-12-14 09:02 - 00020081 _____ C:\Users\Achim\Desktop\FRST.txt

2013-12-14 08:58 - 2013-04-15 18:08 - 00000000 ____D C:\Users\Achim\AppData\Local\6CE0D6AC-6EB9-4808-A530-20BD3892313C.aplzod

2013-12-14 08:44 - 2009-07-14 05:34 - 00015264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-14 08:44 - 2009-07-14 05:34 - 00015264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-14 08:39 - 2013-03-15 19:54 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Dropbox

2013-12-14 08:38 - 2013-07-11 18:42 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spotify

2013-12-14 08:38 - 2013-03-16 11:48 - 00000000 ___RD C:\Users\Achim\Google Drive

2013-12-14 08:38 - 2013-03-15 19:57 - 00000000 ___RD C:\Users\Achim\Dropbox

2013-12-14 08:37 - 2013-03-06 11:54 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-14 08:37 - 2013-03-06 10:43 - 01203062 _____ C:\Windows\WindowsUpdate.log

2013-12-14 08:35 - 2013-12-11 18:17 - 00001749 _____ C:\Windows\setupact.log

2013-12-14 08:35 - 2013-08-09 15:10 - 00000000 ____D C:\ProgramData\firebird

2013-12-14 08:35 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-14 00:11 - 2013-03-06 11:20 - 00000000 ____D C:\ProgramData\LogMeIn

2013-12-14 00:05 - 2013-12-14 00:05 - 00000000 ____D C:\Users\Achim\AppData\Local\{2C2739FB-BC09-46C8-93DE-C51E519DA94F}

2013-12-14 00:04 - 2013-07-11 18:42 - 00000000 ____D C:\Users\Achim\AppData\Local\Spotify

2013-12-13 23:35 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE

2013-12-13 23:33 - 2013-12-13 23:33 - 00889416 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\dotNetFx40_Full_setup.exe

2013-12-13 23:32 - 2013-12-13 23:32 - 24805592 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\Windows-KB890830-V5.7.exe

2013-12-13 23:31 - 2013-12-12 00:20 - 00026640 _____ C:\Windows\IE11_main.log

2013-12-13 23:19 - 2013-12-13 23:19 - 17142784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 11220992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 04240384 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-13 23:19 - 2013-12-13 23:19 - 02166272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 01926656 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-13 23:19 - 2013-12-13 23:19 - 01818112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 01156608 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-13 23:19 - 2013-12-13 23:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-13 23:19 - 2013-12-13 23:19 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-13 23:19 - 2013-12-13 23:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-13 23:19 - 2013-12-13 23:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-13 23:19 - 2013-12-13 23:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2013-12-13 23:17 - 2013-12-13 23:17 - 02077392 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE11-Windows6.1.exe

2013-12-13 23:12 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\IIS Express

2013-12-13 23:07 - 2013-12-13 23:07 - 00027125 _____ C:\Users\Achim\Downloads\Addition.txt

2013-12-13 23:06 - 2013-12-13 23:06 - 00000000 ____D C:\Users\Achim\Downloads\FRST-OlderVersion

2013-12-13 23:06 - 2013-12-12 22:28 - 01060575 _____ (Farbar) C:\Users\Achim\Desktop\FRST.exe

2013-12-13 23:06 - 2013-12-12 22:28 - 00000000 ____D C:\FRST

2013-12-13 20:30 - 2013-12-13 20:30 - 00000000 ____D C:\Users\Achim\AppData\Local\{DBBE0DAE-37CF-4C2D-AE48-9D5281B2E5DA}

2013-12-13 17:57 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Users\Achim\AppData\Roaming\npm

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\nodejs

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\iisnode-dev

2013-12-13 17:55 - 2013-03-11 21:44 - 00000000 ____D C:\Windows\pss

2013-12-13 16:35 - 2013-03-06 11:54 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-13 16:33 - 2013-03-06 11:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\runphp

2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\Microsoft SDKs

2013-12-13 07:23 - 2013-12-13 07:23 - 00116384 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\wpilauncher.exe

2013-12-13 07:03 - 2009-07-14 10:03 - 00000000 ____D C:\Windows\system32\Drivers\de-DE

2013-12-13 06:58 - 2013-12-13 06:58 - 00000000 ____D C:\Users\Achim\AppData\Local\{C1DA257A-C66F-42C8-9BA0-6D840235018D}

2013-12-13 00:08 - 2013-03-06 11:33 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-12-12 22:18 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF

2013-12-12 22:14 - 2013-09-22 08:53 - 00000000 ____D C:\found.002

2013-12-12 22:14 - 2013-05-25 07:17 - 00000000 ____D C:\found.000

2013-12-12 22:12 - 2013-12-12 22:12 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Mozilla

2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-12-12 22:02 - 2013-03-07 23:42 - 00000000 ____D C:\Windows\Minidump

2013-12-12 21:55 - 2013-03-06 11:30 - 00000000 ____D C:\ProgramData\NVIDIA

2013-12-12 21:55 - 2013-03-06 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\Deployment

2013-12-12 21:50 - 2013-03-06 10:46 - 00000000 __SHD C:\Recovery

2013-12-12 21:33 - 2013-03-07 23:02 - 00000000 ____D C:\Program Files\Common Files\Adobe

2013-12-12 21:29 - 2013-12-12 21:22 - 00000000 ____D C:\ldiag

2013-12-12 21:22 - 2013-03-10 11:58 - 00000000 ____D C:\SWTOOLS

2013-12-12 21:06 - 2013-05-06 21:18 - 00000000 ____D C:\Users\Achim\Downloads\Grafik

2013-12-12 21:01 - 2013-12-07 11:37 - 00000000 ____D C:\Users\Achim\Documents\DriverGenius

2013-12-12 20:50 - 2013-12-12 20:50 - 00072892 _____ C:\Users\Achim\Desktop\GEORGE.html

2013-12-12 20:47 - 2013-12-12 20:47 - 00001022 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk

2013-12-12 20:47 - 2013-12-12 20:47 - 00000000 ____D C:\Program Files\CPUID

2013-12-12 19:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET

2013-12-12 19:37 - 2013-12-12 19:37 - 00003544 ____N C:\bootsqm.dat

2013-12-12 18:26 - 2013-12-12 18:26 - 00000000 ____D C:\Users\Achim\AppData\Local\{E10E834A-B165-4DA9-AB94-570C52339AFA}

2013-12-12 18:22 - 2013-03-06 10:51 - 01565170 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-12 18:18 - 2009-07-14 05:33 - 00515320 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-12 07:45 - 2013-12-12 07:45 - 00422914 _____ C:\Users\Achim\Documents\VHS-kaki-umschlag-2014.pptx

2013-12-12 07:35 - 2013-06-03 18:16 - 00002194 ____H C:\Users\Achim\Documents\Default.rdp

2013-12-12 07:07 - 2013-12-11 20:19 - 00000095 _____ C:\Users\Achim\Desktop\CMD-Archiv.txt

2013-12-12 06:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles

2013-12-12 00:11 - 2013-03-09 16:30 - 00000000 ____D C:\Users\Achim\Downloads\System

2013-12-11 20:23 - 2013-12-11 20:23 - 00059862 _____ C:\Windows\PFRO.log

2013-12-11 19:33 - 2013-03-06 11:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2013-12-11 19:33 - 2013-03-06 11:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2013-12-11 18:55 - 2013-12-11 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\Tvsukernel

2013-12-11 18:54 - 2013-12-11 18:54 - 00000000 ____D C:\Program Files\ThinkVantage

2013-12-11 18:52 - 2013-03-11 22:19 - 00000000 ____D C:\ProgramData\Lenovo

2013-12-11 18:49 - 2013-12-11 18:34 - 00007337 _____ C:\Windows\IE10_main.log

2013-12-11 18:42 - 2013-03-06 10:39 - 00000000 ____D C:\Windows\Panther

2013-12-11 18:36 - 2013-12-11 18:36 - 00000000 ____D C:\Users\Achim\AppData\Local\{E2D1553E-0F76-4874-B75C-9D76E8751983}

2013-12-11 18:36 - 2013-03-11 18:45 - 00000000 ____D C:\Users\Achim\AppData\Local\Windows Live Writer

2013-12-11 18:31 - 2013-03-16 09:38 - 00000000 ____D C:\Users\Achim\Desktop\Systemprogramme

2013-12-11 18:24 - 2013-12-11 18:24 - 00000000 ___HD C:\Windows\msdownld.tmp

2013-12-11 18:24 - 2013-12-11 07:52 - 00034573 _____ C:\Windows\ie8_main.log

2013-12-11 18:17 - 2013-12-11 18:17 - 00000000 _____ C:\Windows\setuperr.log

2013-12-10 22:22 - 2013-03-10 19:03 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Skype

2013-12-10 22:06 - 2013-03-06 11:54 - 00000000 ____D C:\Program Files\Google

2013-12-10 22:05 - 2013-03-06 11:54 - 00000000 ____D C:\Users\Achim\AppData\Local\Google

2013-12-10 20:43 - 2013-03-06 11:16 - 00157928 _____ C:\Users\Achim\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-10 20:43 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-12-10 20:33 - 2013-12-10 20:33 - 00192888 _____ C:\Users\Achim\cc_20131210_203255.reg

2013-12-10 20:33 - 2013-03-06 10:46 - 00000000 ____D C:\Users\Achim

2013-12-10 20:26 - 2013-10-22 17:09 - 00000000 ____D C:\Users\Achim\AppData\Roaming\FileZilla

2013-12-10 19:57 - 2013-12-02 19:52 - 00000000 ____D C:\Users\Achim\AppData\Roaming\NCH Software

2013-12-10 19:57 - 2013-12-02 19:51 - 00000000 ____D C:\ProgramData\NCH Software

2013-12-10 19:57 - 2013-12-02 19:51 - 00000000 ____D C:\Program Files\NCH Software

2013-12-10 19:52 - 2013-12-10 19:52 - 00001356 _____ C:\Users\Achim\Desktop\CCleaner.exe - Verknüpfung.lnk

2013-12-10 19:15 - 2013-03-06 11:35 - 00000000 ____D C:\Program Files\Microsoft.NET

2013-12-10 18:51 - 2013-12-10 18:51 - 00000000 ____D C:\Users\Achim\AppData\Local\{91763463-211A-4527-B882-B35102CF258A}

2013-12-09 23:05 - 2013-12-09 23:05 - 00000000 ____D C:\Program Files\AVM_update

2013-12-09 17:03 - 2013-12-09 17:03 - 00000000 ____D C:\Users\Achim\AppData\Local\{8465BFAE-761F-45B7-A165-2F207C12DCC8}

2013-12-08 19:25 - 2013-12-08 19:25 - 00000000 ____D C:\Users\Achim\AppData\Local\{5DE8D5F8-2105-4566-A3BA-04358E8A7289}

2013-12-08 17:07 - 2013-03-10 19:28 - 00000000 ____D C:\Users\Achim\.dreamstream

2013-12-08 15:02 - 2013-03-10 19:28 - 00000000 ____D C:\Users\Achim\.gstreamer-0.10

2013-12-08 14:00 - 2013-12-08 13:59 - 37059280 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE11_w7_Windows6.1-x86-de-de.exe

2013-12-08 11:42 - 2013-03-06 11:34 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Adobe

2013-12-08 11:33 - 2013-12-08 11:33 - 00659968 _____ C:\Users\Achim\Downloads\MicrosoftFixit50195.msi

2013-12-07 11:30 - 2013-09-22 09:14 - 00000000 ___RD C:\Users\Achim\Desktop\Multimedia

2013-12-07 10:51 - 2013-12-07 10:50 - 00000000 ____D C:\Users\Achim\AppData\Local\{73248BC2-7A96-4ABE-8A60-1483D1091D51}

2013-12-06 21:10 - 2013-07-12 20:41 - 00000000 _____ C:\Windows\system32\vireng.log

2013-12-06 19:57 - 2013-12-06 19:57 - 00000000 ____D C:\Users\Achim\AppData\Local\{15238591-D7D5-4729-AE47-B0C19B081F88}

2013-12-06 19:56 - 2013-03-07 18:23 - 00000000 ____D C:\ProgramData\Adobe

2013-12-05 19:40 - 2013-12-05 19:40 - 00000000 ____D C:\Users\Achim\AppData\Local\{7D47938A-4131-42E4-9835-A4AA50C8BC30}

2013-12-04 20:52 - 2013-12-04 20:52 - 00000000 ____D C:\Users\Achim\AppData\Local\{BB81DD55-396C-4CB5-9987-4D6599505CC8}

2013-12-04 20:43 - 2013-12-04 20:43 - 00000000 ____D C:\Users\Achim\AppData\Local\vsmedia.de

2013-12-04 20:39 - 2013-12-04 20:39 - 00001128 _____ C:\Users\Achim\Desktop\Continue Image Editor Installation.lnk

2013-12-04 20:05 - 2013-12-04 19:43 - 00000000 ____D C:\Users\Achim\Desktop\FP_2980_1

2013-12-04 07:35 - 2013-12-04 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{D64317D2-6704-4DFF-B1DC-4FC6C9D35CFE}

2013-12-04 07:01 - 2013-05-06 16:17 - 00000000 ___RD C:\Users\Achim\SkyDrive

2013-12-03 22:01 - 2013-03-06 11:03 - 00002043 _____ C:\Users\Public\Desktop\LANCOM Advanced VPN Client.lnk

2013-12-03 22:01 - 2009-07-14 03:04 - 00000521 _____ C:\Windows\win.ini

2013-12-03 17:59 - 2013-12-03 17:59 - 00000000 ____D C:\Users\Achim\AppData\Local\{1AF41660-AD34-48D4-8A36-7A760A548293}

2013-12-02 22:22 - 2013-03-07 23:05 - 00000000 ____D C:\Users\Achim\AppData\Local\Adobe

2013-12-02 22:14 - 2013-12-02 22:14 - 00000000 ____D C:\Users\Achim\AppData\Local\{1105C651-2A16-4FE7-BD70-B298078BF86F}

2013-12-02 22:00 - 2013-11-22 15:41 - 00000292 _____ C:\Users\Achim\AppData\Roaming\burnaware.ini

2013-12-01 18:54 - 2013-12-01 18:54 - 00001120 _____ C:\Users\Achim\Desktop\TeamViewer 8.lnk

2013-12-01 14:42 - 2013-03-06 21:17 - 88123800 ____N (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-12-01 09:10 - 2013-12-01 09:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{0E4F093B-18D9-4563-896D-BFD99F598C22}

2013-11-30 17:47 - 2013-11-30 17:47 - 22099928 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Achim\Downloads\FreeDiscBurner-3.0.19.1125.exe

2013-11-30 11:47 - 2013-11-30 11:46 - 00000000 ____D C:\Users\Achim\AppData\Local\{EC8686D9-D1FC-48AE-BB6A-38FE540BAD42}

2013-11-29 18:55 - 2013-11-29 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\{59930784-6774-456E-9C09-4C3BEC76C278}

2013-11-28 19:10 - 2013-11-28 19:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{3128A4B2-EE2E-4A75-B3C8-61F98196943B}

2013-11-28 07:10 - 2013-11-28 07:10 - 00000000 ____D C:\Users\Achim\AppData\Local\{416E6F95-46A3-48C0-8801-0CA0DA5B9D1B}

2013-11-27 19:49 - 2013-03-09 14:02 - 00000000 ____D C:\Users\Achim\AppData\Roaming\PingTesterDataBas

2013-11-27 18:12 - 2013-11-27 18:11 - 00000000 ____D C:\Users\Achim\AppData\Local\{DABA9068-D1EA-4E5A-9CD9-49E791E000CE}

2013-11-26 23:03 - 2013-11-26 23:04 - 00001774 _____ C:\Users\Achim\Desktop\qr_code_ohne_logo_plus_informationsmappe.zip

2013-11-26 20:39 - 2013-08-09 21:31 - 00000000 ____D C:\Users\Achim\AppData\Local\FreePDF_XP

2013-11-26 17:29 - 2013-11-26 17:29 - 00000000 ____D C:\Users\Achim\AppData\Local\{57C2A3E0-4208-4E77-A0B3-590638E0C6DA}

2013-11-26 07:42 - 2013-11-22 15:57 - 00011284 _____ C:\Users\Achim\Documents\Klassik-DB.xlsx

2013-11-25 21:36 - 2013-11-25 21:36 - 00000000 ____D C:\Users\Achim\AppData\Local\{DAAF6226-50BF-476F-867D-536E123ACE20}

2013-11-25 18:46 - 2013-11-25 18:46 - 00002161 _____ C:\Users\Achim\Desktop\Klassik-DB.xlsx - Verknüpfung.lnk

2013-11-25 07:00 - 2013-11-25 07:00 - 00000000 ____D C:\Users\Achim\AppData\Local\{E84B5DE1-1B75-4249-BE29-5896583A8F94}

2013-11-24 09:18 - 2013-11-24 09:17 - 00000000 ____D C:\Users\Achim\AppData\Local\{7613B49A-7575-4675-B410-8A94C8E1D1C2}

2013-11-23 19:26 - 2013-12-12 07:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-11-23 11:31 - 2013-11-23 11:30 - 00000000 ____D C:\Users\Achim\AppData\Local\{07AB9F67-046D-4651-A407-E9FF4CCE79A7}

2013-11-23 11:16 - 2013-11-23 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\libimobiledevice

2013-11-23 11:12 - 2013-11-23 11:12 - 00000000 ____D C:\Users\Achim\Documents\evasi0n-win-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-release

2013-11-22 14:23 - 2013-11-22 14:23 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spesoft Audio Converter

2013-11-22 14:22 - 2013-03-06 12:08 - 00000000 ___RD C:\Users\Achim\AppData\Roaming\Brother

2013-11-22 14:11 - 2013-11-22 14:11 - 00001829 _____ C:\Users\Achim\Desktop\P-touch Editor 5.0.lnk

2013-11-22 13:59 - 2013-11-22 13:59 - 00000000 ____D C:\Program Files\Common Files\Brother

2013-11-22 12:41 - 2013-11-22 12:41 - 00001271 _____ C:\Users\Achim\Desktop\Kufer-WEB-Zugangsdaten.txt - Verknüpfung.lnk

2013-11-22 12:28 - 2013-11-22 12:27 - 00000000 ____D C:\Users\Achim\AppData\Local\{CD813A04-B917-4D47-8713-1EF427C12C00}

2013-11-21 19:44 - 2013-11-21 19:44 - 00000000 ____D C:\Users\Achim\AppData\Local\{86EFDEDB-6E62-43B9-89FA-18B35D328DC5}

2013-11-21 07:35 - 2013-11-21 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{EA9FC986-450B-48AF-B133-D79D012AC790}

2013-11-20 07:35 - 2013-11-20 07:35 - 00000000 ____D C:\Users\Achim\AppData\Local\{31DC784B-644F-4A12-B0B0-08DA5DE82850}

2013-11-19 07:00 - 2013-11-19 07:00 - 00000000 ____D C:\Users\Achim\AppData\Local\{8EBAA0DE-E38E-4695-A149-352C77218C92}

2013-11-19 03:33 - 2013-03-06 11:04 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2013-11-17 17:50 - 2013-11-17 17:50 - 00000000 ____D C:\Users\Achim\AppData\Local\{30E09A1C-77BD-42E9-B422-5D15346259F9}

2013-11-16 08:40 - 2013-11-16 08:40 - 00000000 ____D C:\Users\Achim\AppData\Local\{FA5FC6FE-11D0-4B24-9D67-062FEB1CEDCD}

2013-11-14 16:22 - 2013-11-14 16:22 - 00000000 ____D C:\Users\Achim\AppData\Local\{D660F8F1-43CC-42A5-B816-99CD9BEC8830}

2013-11-14 16:20 - 2013-03-07 07:32 - 00000000 ____D C:\Users\Achim\AppData\Roaming\KeePass
 

Files to move or delete:

====================

C:\Users\Achim\cc_20131210_203255.reg
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-11 22:24
 

==================== End Of Log ============================

--- --- ---

Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

Hallo guten Abend,

jetzt komme ich schon besser zurecht mit dem Posten und der Analyse.

Schon mal vielen Dank

Viele Grüße Achim

Code:

ComboFix 13-12-13.01 - Achim 14.12.2013  18:45:29.1.2 - x86

Microsoft Windows 7 Enterprise   6.1.7601.1.1252.49.1031.18.2047.794 [GMT 1:00]

ausgeführt von:: c:\users\Achim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WRB0LC45\ComboFix.exe

AV: Sophos Anti-Virus *Disabled/Updated* {65FBD860-96D8-75EF-C7ED-7BE27E6C498A}

FW: LANCOM Advanced VPN Client *Disabled* {BEB21647-135A-7893-42A0-BBC3960C218D}

SP: Sophos Anti-Virus *Disabled/Updated* {DE9A3984-B0E2-7A61-FD5D-409005EB0337}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Achim\AppData\Local\lame_enc.dll

c:\users\Achim\AppData\Local\no23xwrapper.dll

c:\users\Achim\AppData\Local\ogg.dll

c:\users\Achim\AppData\Local\Temp\_MEI49002\_ctypes.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\_elementtree.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\_hashlib.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\_multiprocessing.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\_socket.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\_ssl.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\msvcp100.dll

c:\users\Achim\AppData\Local\Temp\_MEI49002\msvcr100.dll

c:\users\Achim\AppData\Local\Temp\_MEI49002\pyexpat.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\pysqlite2._sqlite.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\python27.dll

c:\users\Achim\AppData\Local\Temp\_MEI49002\pythoncom27.dll

c:\users\Achim\AppData\Local\Temp\_MEI49002\PyWinTypes27.dll

c:\users\Achim\AppData\Local\Temp\_MEI49002\select.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\unicodedata.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\win32api.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\win32com.shell.shell.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\win32crypt.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\win32event.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\win32file.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\win32inet.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\win32pdh.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\win32process.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\win32profile.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\win32security.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\win32ts.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\windows._cacheinvalidation.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._controls_.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._core_.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._gdi_.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._html2.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._misc_.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._windows_.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\wx._wizard.pyd

c:\users\Achim\AppData\Local\Temp\_MEI49002\wxbase294u_net_vc90.dll

c:\users\Achim\AppData\Local\Temp\_MEI49002\wxbase294u_vc90.dll

c:\users\Achim\AppData\Local\Temp\_MEI49002\wxmsw294u_adv_vc90.dll

c:\users\Achim\AppData\Local\Temp\_MEI49002\wxmsw294u_core_vc90.dll

c:\users\Achim\AppData\Local\Temp\_MEI49002\wxmsw294u_html_vc90.dll

c:\users\Achim\AppData\Local\Temp\_MEI49002\wxmsw294u_webview_vc90.dll

c:\users\Achim\AppData\Local\vorbisenc.dll

c:\users\Achim\AppData\Local\vorbisfile.dll

c:\windows\IsUn0407.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-11-14 bis 2013-12-14  ))))))))))))))))))))))))))))))

.

.

2013-12-13 23:06 . 2013-12-14 08:08        62576        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{FBDE6901-AD7F-4333-9F5C-28AE83103248}\offreg.dll

2013-12-13 22:35 . 2013-12-13 22:35        --------        d-----w-        c:\windows\system32\wbem\en-US

2013-12-13 16:56 . 2013-12-13 22:12        --------        d-----w-        c:\program files\IIS Express

2013-12-13 16:56 . 2013-12-13 16:56        --------        d-----w-        c:\program files\iisnode-dev

2013-12-13 16:56 . 2013-12-13 16:56        --------        d-----w-        c:\program files\nodejs

2013-12-13 16:56 . 2013-12-13 16:56        --------        d-----w-        c:\users\Achim\AppData\Roaming\npm

2013-12-13 14:39 . 2013-11-08 01:15        7772552        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{FBDE6901-AD7F-4333-9F5C-28AE83103248}\mpengine.dll

2013-12-13 06:25 . 2013-12-13 06:25        --------        d-----w-        c:\program files\Microsoft SDKs

2013-12-13 06:25 . 2013-12-13 06:25        --------        d-----w-        c:\program files\runphp

2013-12-13 06:24 . 2013-12-13 06:24        --------        d-----w-        c:\program files\Microsoft

2013-12-12 21:28 . 2013-12-13 22:06        --------        d-----w-        C:\FRST

2013-12-12 20:22 . 2013-12-12 20:29        --------        d-----w-        C:\ldiag

2013-12-12 19:47 . 2013-12-12 19:47        --------        d-----w-        c:\program files\CPUID

2013-12-12 06:58 . 2013-05-10 04:56        12625408        ----a-w-        c:\windows\system32\wmploc.DLL

2013-12-12 06:58 . 2013-05-10 03:48        164864        ----a-w-        c:\program files\Windows Media Player\wmplayer.exe

2013-12-12 06:02 . 2013-10-30 02:19        301568        ----a-w-        c:\windows\system32\msieftp.dll

2013-12-12 06:02 . 2013-10-19 01:36        159232        ----a-w-        c:\windows\system32\imagehlp.dll

2013-12-12 06:02 . 2013-10-12 02:04        121856        ----a-w-        c:\windows\system32\wshom.ocx

2013-12-12 06:02 . 2013-10-12 02:03        163840        ----a-w-        c:\windows\system32\scrrun.dll

2013-12-12 06:02 . 2013-10-12 01:15        141824        ----a-w-        c:\windows\system32\wscript.exe

2013-12-12 06:02 . 2013-11-23 18:26        417792        ----a-w-        c:\windows\system32\WMPhoto.dll

2013-12-12 06:02 . 2013-10-12 01:15        126976        ----a-w-        c:\windows\system32\cscript.exe

2013-12-12 06:02 . 2013-11-12 02:07        2048        ----a-w-        c:\windows\system32\tzres.dll

2013-12-12 06:02 . 2013-10-30 01:27        2349056        ----a-w-        c:\windows\system32\win32k.sys

2013-12-12 06:02 . 2013-10-04 01:49        81408        ----a-w-        c:\windows\system32\drivers\drmk.sys

2013-12-12 06:02 . 2013-10-04 01:17        177152        ----a-w-        c:\windows\system32\drivers\portcls.sys

2013-12-11 17:55 . 2013-12-11 17:55        --------        d-----w-        c:\users\Achim\AppData\Local\Tvsukernel

2013-12-11 17:24 . 2013-12-11 17:24        --------        d--h--w-        c:\windows\msdownld.tmp

2013-12-10 19:33 . 2013-12-10 19:33        192888        ----a-w-        c:\users\Achim\cc_20131210_203255.reg

2013-12-10 18:13 . 2010-10-22 01:00        480632        ------w-        c:\windows\instwcli.dex

2013-12-09 22:07 . 2010-10-22 01:00        74240        ----a-w-        c:\windows\system32\fwlanci.org

2013-12-09 22:05 . 2013-12-09 22:05        --------        d-----w-        c:\program files\AVM_update

2013-12-04 19:43 . 2013-12-04 19:43        --------        d-----w-        c:\users\Achim\AppData\Local\vsmedia.de

2013-12-02 18:52 . 2013-12-10 18:57        --------        d-----w-        c:\users\Achim\AppData\Roaming\NCH Software

2013-12-02 18:51 . 2013-12-10 18:57        --------        d-----w-        c:\programdata\NCH Software

2013-12-02 18:51 . 2013-12-10 18:57        --------        d-----w-        c:\program files\NCH Software

2013-11-23 10:16 . 2013-11-23 10:16        --------        d-----w-        c:\users\Achim\AppData\Local\libimobiledevice

2013-11-22 13:23 . 2013-11-22 13:23        --------        d-----w-        c:\users\Achim\AppData\Roaming\Spesoft Audio Converter

2013-11-22 12:59 . 2013-11-22 12:59        --------        d-----w-        c:\program files\Common Files\Brother

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-12-14 08:33 . 2013-03-06 10:34        71048        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl

2013-12-14 08:33 . 2013-03-06 10:34        692616        ----a-w-        c:\windows\system32\FlashPlayerApp.exe

2013-11-19 02:33 . 2013-03-06 10:04        230048        ------w-        c:\windows\system32\MpSigStub.exe

2013-11-01 19:10 . 2013-03-06 10:20        86888        ----a-w-        c:\windows\system32\LMIRfsClientNP.dll

2013-11-01 19:10 . 2013-03-06 10:20        53064        ----a-w-        c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll

2013-11-01 19:10 . 2013-03-06 10:20        31560        ----a-w-        c:\windows\system32\LMIport.dll

2013-11-01 19:10 . 2013-03-06 10:20        85832        ----a-w-        c:\windows\system32\LMIinit.dll

2013-10-29 13:07 . 2013-03-06 10:03        2069776        ----a-w-        c:\windows\system32\NcpCredentialProvider.dll

2013-10-23 16:44 . 2013-03-06 10:20        86888        ----a-w-        c:\windows\system32\LMIRfsClientNP.dll.000.bak

2013-10-23 16:44 . 2013-03-06 10:20        85832        ----a-w-        c:\windows\system32\LMIinit.dll.000.bak

2013-10-12 02:03 . 2013-11-13 20:44        656896        ----a-w-        c:\windows\system32\nshwfp.dll

2013-10-12 02:01 . 2013-11-13 20:44        679424        ----a-w-        c:\windows\system32\IKEEXT.DLL

2013-10-12 02:01 . 2013-11-13 20:44        216576        ----a-w-        c:\windows\system32\FWPUCLNT.DLL

2013-10-08 05:50 . 2013-10-20 19:19        94632        ----a-w-        c:\windows\system32\WindowsAccessBridge.dll

2013-10-05 19:57 . 2013-11-13 20:43        1168384        ----a-w-        c:\windows\system32\crypt32.dll

2013-10-04 01:58 . 2013-11-13 20:44        152576        ----a-w-        c:\windows\system32\SmartcardCredentialProvider.dll

2013-10-04 01:56 . 2013-11-13 20:44        168960        ----a-w-        c:\windows\system32\credui.dll

2013-10-04 01:56 . 2013-11-13 20:44        1796096        ----a-w-        c:\windows\system32\authui.dll

2013-10-03 01:58 . 2013-11-13 20:44        305152        ----a-w-        c:\windows\system32\gdi32.dll

2013-09-26 05:18 . 2013-09-26 05:18        0        --sh--w-        c:\windows\S069F0100.tmp

2013-09-25 02:01 . 2013-11-13 20:44        136640        ----a-w-        c:\windows\system32\drivers\ksecpkg.sys

2013-09-25 02:01 . 2013-11-13 20:44        67520        ----a-w-        c:\windows\system32\drivers\ksecdd.sys

2013-09-25 01:57 . 2013-11-13 20:44        99840        ----a-w-        c:\windows\system32\sspicli.dll

2013-09-25 01:57 . 2013-11-13 20:44        22016        ----a-w-        c:\windows\system32\secur32.dll

2013-09-25 01:57 . 2013-11-13 20:44        247808        ----a-w-        c:\windows\system32\schannel.dll

2013-09-25 01:56 . 2013-11-13 20:44        220160        ----a-w-        c:\windows\system32\ncrypt.dll

2013-09-25 01:56 . 2013-11-13 20:44        1038848        ----a-w-        c:\windows\system32\lsasrv.dll

2013-09-25 00:49 . 2013-11-13 20:44        22016        ----a-w-        c:\windows\system32\lsass.exe

2013-09-25 00:49 . 2013-11-13 20:44        15872        ----a-w-        c:\windows\system32\sspisrv.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]

@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"

[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]

2013-08-14 15:36        222832        ----a-w-        c:\users\Achim\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]

@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"

[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]

2013-08-14 15:36        222832        ----a-w-        c:\users\Achim\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]

@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"

[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]

2013-08-14 15:36        222832        ----a-w-        c:\users\Achim\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveShell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\Achim\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\Achim\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\Achim\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]

2013-09-25 15:37        579024        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]

2013-09-25 15:37        579024        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]

2013-09-25 15:37        579024        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]

2013-09-25 15:37        579024        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]

2013-09-25 15:37        579024        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]

@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"

[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]

2013-09-25 15:37        579024        ----a-w-        c:\program files\Google\Drive\googledrivesync32.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Spotify Web Helper"="c:\users\Achim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-12-05 1168896]

"Spotify"="c:\users\Achim\AppData\Roaming\Spotify\spotify.exe" [2013-12-05 5951488]

"ISUSPM"="c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2008-11-17 210208]

"iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-09-14 59720]

"GoogleDriveSync"="c:\program files\Google\Drive\googledrivesync.exe" [2013-09-25 20133824]

"AVMUSBFernanschluss"="c:\users\Achim\AppData\Local\Apps\2.0\VQ9HEPM4.KK8\OQATJMLW.1MX\frit..tion_1acae14e4778b8d2_0002.0003_7c9366a34786c7f9\AVMAutoStart.exe" [2013-07-13 139264]

.

c:\users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dropbox.lnk - c:\users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-11-1 29769432]

OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"SoftwareSASGeneration"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]

"AppInit_DLLs"=c:\progra~1\Sophos\SOPHOS~1\sophos_detoured.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService]

@="service"

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SophosAntiVirus]

"DisableMonitoring"=dword:00000001

.

R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-01-08 161536]

R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys [2010-10-22 4352]

R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]

R3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys [2010-10-22 265088]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-12-13 108032]

R3 ncpfilt;LANCOM Filter;c:\windows\system32\DRIVERS\ncplelhp.sys [2013-09-11 87280]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]

R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]

R3 RTL8192cu;NETGEAR WNA1000M N150 Wireless USB Micro Adapter;c:\windows\system32\DRIVERS\WNA1000M.sys [2011-02-21 734824]

R3 Ser2plx86;Prolific Serial port WDF driver;c:\windows\system32\DRIVERS\ser2pl.sys [2013-02-22 134144]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]

R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2013-04-12 104720]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]

R3 vncserver;VNC Server;c:\program files\RealVNC\VNC Server\vncserver.exe [2013-03-04 3602752]

R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys [2009-07-14 20480]

R4 DcRaidMoSrv;Dawicontrol RAID Monitor Service V3.3.8.0;c:\program files\Dawicontrol GmbH\Dawicontrol RAID Monitor\RAIDservice.exe [2012-05-30 341504]

R4 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]

R4 SAVService;Sophos Anti-Virus;c:\program files\Sophos\Sophos Anti-Virus\SavService.exe [2013-05-17 206328]

R4 SophosBootDriver;SophosBootDriver;c:\windows\system32\DRIVERS\SophosBootDriver.sys [2011-10-23 22536]

R4 swi_service;Sophos Web Intelligence Service;c:\program files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [2013-09-17 3109880]

R4 swi_update;Sophos Web Intelligence Update;c:\programdata\Sophos\Web Intelligence\swi_update.exe [2013-05-17 1471992]

R4 tvnserver;TightVNC Server;c:\program files\TightVNC\tvnserver.exe [2013-07-19 1690096]

S0 DC300e;DC300e;c:\windows\system32\DRIVERS\DC300e.sys [2013-03-09 39872]

S1 SAVOnAccess;SAVOnAccess;c:\windows\system32\DRIVERS\savonaccess.sys [2013-05-17 132424]

S1 SKMScan;SKMScan;c:\windows\system32\DRIVERS\skmscan.sys [2013-05-17 33096]

S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2013-04-12 188176]

S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2013-04-12 94480]

S2 AXIS Camera Management;AXIS Camera Management;c:\program files\Axis Communications\AXIS Camera Management 4\AcmService.exe [2013-07-11 17920]

S2 LMIGuardianSvc;Support LogMeIn processes with quality assurance feedback;c:\program files\LogMeIn Ignition\LMIGuardianSvc.exe [2011-05-17 374160]

S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\RaInfo.sys [2013-05-23 13624]

S2 ncpclcfg;NCP Client Configuration Support;c:\program files\LANCOM\Advanced VPN Client\ncpclcfg.exe [2013-10-28 150800]

S2 ncprwsnt;NCP Client VPN und Dialing Service;c:\program files\LANCOM\Advanced VPN Client\ncprwsnt.exe [2013-11-08 1395464]

S2 NcpSec;NCP Client PKI Support;c:\program files\LANCOM\Advanced VPN Client\NCPSEC.EXE [2011-04-21 119808]

S2 PDFProFiltSrv;PDFProFiltSrv;c:\program files\Nuance\PDF Professional 6\PDFProFiltSrv.exe [2009-07-27 134944]

S2 SAVAdminService;Sophos Anti-Virus Statusreporter;c:\program files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [2013-05-17 290296]

S2 TeamViewer8;TeamViewer 8;c:\program files\TeamViewer\Version8\TeamViewer_Service.exe [2013-10-01 5087584]

S3 avmaura;AVM USB-Fernanschluss;c:\windows\system32\DRIVERS\avmaura.sys [2013-07-13 105728]

S3 ncplelhp;LANCOM Secure Client NDIS6 Driver;c:\windows\system32\DRIVERS\ncplelhp.sys [2013-09-11 87280]

S3 VBoxNetFlt;VirtualBox Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2013-04-12 115984]

S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [2012-01-25 319264]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

WindowsMobile        REG_MULTI_SZ           wcescomm rapimgr

LocalServiceRestricted        REG_MULTI_SZ           WcesComm RapiMgr

.

Inhalt des "geplante Tasks" Ordners

.

2013-12-14 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-06 08:33]

.

2013-12-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2013-03-06 10:54]

.

2013-12-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2013-03-06 10:54]

.

.

------- Zusätzlicher Suchlauf -------

.

uStart Page = https://www.google.de/

uInternet Settings,ProxyOverride = *.local

IE: Mit Nuance PDF Converter 6.0 öffnen - c:\program files\Nuance\PDF Professional 6\cnvres_ger.dll /100

IE: {{328ECD19-C167-40eb-A0C7-16FE7634105F} - {CC68A724-B5F7-4bd3-865C-7D97141A140F} - c:\program files\FRITZ!Box\AddOn (IE)\FBoxIESplitButton.dll

LSP: c:\programdata\Sophos\Web Intelligence\swi_ifslsp.dll

TCP: Interfaces\{1C2EF6A4-791E-4D02-B6D4-2358FABE2256}: NameServer = 192.168.178.1

DPF: {721700FE-7F0E-49C5-BDED-CA92B7CB1245} - hxxp://192.168.178.23:84/camclictrl.cab

DPF: {9464D0CA-5BD8-4175-AB33-A61A4A67AA97} - hxxp://192.168.178.23:84/camclictrl.cab

DPF: {9C3EFB8A-DC20-484B-B905-5E337A988C5D} - hxxp://192.168.178.20:81/LNetCam.cab

DPF: {B015B944-7316-49AE-AC84-ACCA9379EA32} - hxxp://192.168.178.25:82/IPCamPluginMJPEG.cab

FF - ProfilePath - c:\users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default\

FF - prefs.js: browser.startup.homepage - hxxps://www.google.de/

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

HKCU-Run-D78C92992BD5DF6C33342FFA1CEF81EA1030193A._service_run - c:\program files\Google\Chrome\Application\chrome.exe

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\NCP engineering GmbH\NCP Secure Client\restricted*Path]

"NcpDb_Nonce"="azpqk8gm1A7GSrXbmRSMMLpoJR5HlKO"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

.

- - - - - - - > 'Explorer.exe'(5788)

c:\program files\Common Files\Apple\Internet Services\ShellStreams.dll

c:\program files\Nuance\PDF Professional 6\bin\DirectShellExt.dll

c:\windows\System32\WSCM32.dll

c:\program files\TeraCopy\TeraCopyExt.dll

c:\program files\Nuance\PDF Professional 6\ShellExt60.dll

c:\program files\Nuance\PDF Professional 6\cnvres_ger.dll

c:\program files\7-Zip\7-zip.dll

.

------------------------ Weitere laufende Prozesse ------------------------

.

c:\windows\system32\nvvsvc.exe

c:\program files\NVIDIA Corporation\Display\nvxdsync.exe

c:\windows\system32\nvvsvc.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\windows\system32\PrintIsolationHost.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\program files\Powerware\LanSafe\Bin\PowerMonitor.exe

c:\program files\LogMeIn\x86\RaMaint.exe

c:\windows\system32\locator.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

c:\program files\Powerware\LanSafe\Bin\LSTrayAgent.exe

c:\program files\LogMeIn\x86\LogMeIn.exe

c:\program files\Powerware\LanSafe\bin\xyntservice.exe

c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

c:\program files\Windows Media Player\wmpnetwk.exe

c:\program files\TeamViewer\Version8\TeamViewer.exe

c:\windows\system32\taskhost.exe

c:\program files\Powerware\LanSafe\bin\httpserver.exe

c:\windows\system32\conhost.exe

c:\program files\TeamViewer\Version8\tv_w32.exe

c:\windows\system32\conhost.exe

c:\program files\Powerware\LanSafe\bin\status_glance.exe

c:\windows\system32\conhost.exe

c:\program files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

c:\program files\Common Files\Java\Java Update\jusched.exe

c:\program files\Nuance\PDF Professional 6\PdfPro6Hook.exe

c:\program files\LANCOM\Advanced VPN Client\NcpBudgetGui.exe

c:\program files\LogMeIn\x86\LogMeInSystray.exe

c:\program files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

c:\program files\Canon\Solution Menu EX\CNSEMAIN.EXE

c:\program files\Axis Communications\AXIS Camera Management 4\AcmAdmin.exe

c:\users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe

c:\program files\Microsoft Office\Office14\ONENOTEM.EXE

c:\program files\NVIDIA Corporation\Display\nvtray.exe

c:\windows\system32\prevhost.exe

.

**************************************************************************

.

Zeit der Fertigstellung: 2013-12-14  19:26:27 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2013-12-14 18:26

.

Vor Suchlauf: 4.882.395.136 Bytes frei

Nach Suchlauf: 4.706.930.688 Bytes frei

.

- - End Of File - - 3CAB25BDF0CBB9F0D2961305E0B5355F

A36C5E4F47E84449FF07ED3517B43A31

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Guten Tag Schrauber,

ich habe die Malewarebytes gescannt und sende schon mal das Protokoll.
Bin mir nicht sicher ob ich wirklich alles Scanns löschen sollte, die rot markiert sind.
Ich habe auch administrative Tools, welche ich beruflich nutze.Z.B. Lancom oder Radmin etc.

Aber kann ich auch neu installieren keine Problem.

Viele Grüße Achim

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.12.15.02
 

Windows 7 Service Pack 1 x86 NTFS

Internet Explorer 11.0.9600.16428

Achim :: GEORGE [Administrator]
 

15.12.2013 10:29:11

mbam-log-2013-12-15 (10-29-11).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 574744

Laufzeit: 1 Stunde(n), 58 Minute(n), 10 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 27

C:\Users\Achim\Downloads\Multimedia\FreeDiscBurner-3.0.19.1125.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

C:\Users\Achim\Dropbox\Software\Netztools\wirelesskeyview.zip (PUP.WirelessKeyView) -> Keine Aktion durchgeführt.

C:\Users\Achim\Software\Administrator-Tools\keyfinder\pantsoff.exe (PUP.Pantsoff.PasswordFinder) -> Keine Aktion durchgeführt.

C:\Users\Achim\Software\Images\Imagebuilder\WUCDCreatorSetup-0.9.4\WUCDCreatorSetup-0.9.4.exe (PUP.Tool) -> Keine Aktion durchgeführt.

C:\Users\Achim\Software\Netzwerk\WLAN\Monitoring\wirelessnetview_setup.exe (PUP.WirelessNetworkTool) -> Keine Aktion durchgeführt.

C:\Users\Achim\Software\USB-Tools\Setup_USB\USB_MultiBoot_10.zip (PUP.PSWTool.ProductKey) -> Keine Aktion durchgeführt.

D:\Dropbox\Software\Software\Netztools\wirelesskeyview.zip (PUP.WirelessKeyView) -> Keine Aktion durchgeführt.

D:\Eigene Dateien\VHS\VHSKK-Archiv\KVP50\Software\Unattend\WUCDCreatorSetup-0.9.9\WUCDCreatorSetup-0.9.4.exe (PUP.Tool) -> Keine Aktion durchgeführt.

D:\Eigene Dateien\EDV\Lancom\Lancomschulung_2008\pantsoff.exe (PUP.Pantsoff.PasswordFinder) -> Keine Aktion durchgeführt.

D:\Eigene Dateien\EDV\Lancom\Lancomschulung_200905\pantsoff.exe (PUP.Pantsoff.PasswordFinder) -> Keine Aktion durchgeführt.

D:\Eigene Dateien\EDV\Software\Images\Imagebuilder\WUCDCreatorSetup-0.9.4\WUCDCreatorSetup-0.9.4.exe (PUP.Tool) -> Keine Aktion durchgeführt.

D:\Eigene Dateien\EDV\Software\Administrator-Tools\keyfinder\pantsoff.exe (PUP.Pantsoff.PasswordFinder) -> Keine Aktion durchgeführt.

D:\Eigene Dateien\EDV\Software\Brennprogramme\FreeAudioCDBurner.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

D:\Eigene Dateien\EDV\Software\Netzwerk\WLAN\Monitoring\wirelessnetview_setup.exe (PUP.WirelessNetworkTool) -> Keine Aktion durchgeführt.

D:\Eigene Dateien\EDV\Software\Treiber\Samsung_YP-R1\Samsung Kies.exe (PUP.Optional.Solimba) -> Keine Aktion durchgeführt.

D:\Eigene Dateien\EDV\Software\USB-Tools\Setup_USB\USB_MultiBoot_10.zip (PUP.PSWTool.ProductKey) -> Keine Aktion durchgeführt.

C:\Users\Achim\Software\Multimedia\Brennertools\Clone CD 4.4.3.1.0 + serial + keygen\SetupCloneCD 4.4.3.1.exe (Trojan.Agent.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Achim\Software\Netzwerk\httptunnel_setup.exe (Adware.BetterInternet) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Achim\Software\Netzwerk\Remote Control\Radmin 3.2 Remote Control With Crack.rar (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\Achim\Software\Netzwerk\Remote Control\Radmin 3.2 Remote Control With Crack\NewTrialStop v1.1.rar (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt.

D:\Eigene Dateien\Bilder\Animation&Clips\Bildschirmschoner\Kaminfeuer.exe (Adware.ADON) -> Erfolgreich gelöscht und in Quarantäne gestellt.

D:\Eigene Dateien\Eigene Datenquellen\Kommunikation\Mobile & Smartphones\Sony_Ericson\MyPhoneExplorer_Setup_1.7.1.exe (Adware.ADON) -> Erfolgreich gelöscht und in Quarantäne gestellt.

D:\Eigene Dateien\Sicherungen\Mobile-Datenträger\USB-Stick\USB- 8GB Hama\Software\System\Packer\WinACE WinRAR WinZip WinISO + password & cracker.zip (Malware.Packer.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.

D:\Eigene Dateien\EDV\Software\Multimedia\Brennertools\Clone CD 4.4.3.1.0 + serial + keygen\SetupCloneCD 4.4.3.1.exe (Trojan.Agent.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.

D:\Eigene Dateien\EDV\Software\Netzwerk\httptunnel_setup.exe (Adware.BetterInternet) -> Erfolgreich gelöscht und in Quarantäne gestellt.

D:\Eigene Dateien\EDV\Software\Netzwerk\Remote Control\Radmin 3.2 Remote Control With Crack.rar (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt.

D:\Eigene Dateien\EDV\Software\Netzwerk\Remote Control\Radmin 3.2 Remote Control With Crack\NewTrialStop v1.1.rar (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Hallo Schrauber,

AdWCleaner:

ich habe jetzt die NCH Dateien oder Reg-Key ausgenommen den Rest gelöscht.
NCH gehört zu der Lancom-Config.

Mit den anderen Ergebnissen in der Registry konnte ich nichts anfangen.

Viele Grüße Achim

Code:

# AdwCleaner v3.015 - Bericht erstellt am 15/12/2013 um 13:00:31

# Updated 10/12/2013 von Xplode

# Betriebssystem : Windows 7 Enterprise Service Pack 1 (32 bits)

# Benutzername : Achim - GEORGE

# Gestartet von : C:\Users\Achim\Desktop\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

[x] Nicht Gelöscht : C:\ProgramData\NCH Software

[x] Nicht Gelöscht : C:\Program Files\driver-soft

[x] Nicht Gelöscht : C:\Program Files\NCH Software

[x] Nicht Gelöscht : C:\Users\Achim\AppData\Roaming\NCH Software

[x] Nicht Gelöscht : C:\Windows\System32\Tasks\NCH Software
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\FLEXnet

[x] Nicht Gelöscht : HKCU\Software\NCH Software

Schlüssel Gelöscht : HKLM\Software\Conduit

[x] Nicht Gelöscht : HKLM\Software\NCH Software

[x] Nicht Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LanConfig

[x] Nicht Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094

Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

-\\ Mozilla Firefox v23.0 (de)
 

[ Datei : C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default\prefs.js ]
 
 

*************************
 

AdwCleaner[R0].txt - [2013 octets] - [15/12/2013 12:44:17]

AdwCleaner[R1].txt - [2073 octets] - [15/12/2013 12:50:47]

AdwCleaner[S0].txt - [2018 octets] - [15/12/2013 13:00:31]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2078 octets] ##########

Code:


 

Hallo,
 

jetzt das letzte Logfile von Junkware Rem.
 

viele Grüße Achim
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.8 (11.05.2013:1)

OS: Windows 7 Enterprise x86

Ran by Achim on 15.12.2013 at 13:15:15,10

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{02DD8284-A49F-43E5-9D84-CF19DC9AD21D}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{27DE7D30-BCCD-44D1-ADCB-A74A4259EBEF}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3A0EFC4E-F167-4D0E-9C24-FC5519237993}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{55D63393-DB17-4A2B-9052-15D85B4B1344}
 
 
 

~~~ Files
 

Successfully deleted: [File] "C:\Users\Achim\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\taskbar\startfenster.lnk"

Failed to delete: [File] "C:\Windows\system32\wscm32.dll"

Successfully deleted: [File] "C:\Windows\system32\wscm64.dll"
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\Program Files\driver-soft"

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{02FF4F9A-C793-4E15-B0ED-968F74B3D202}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{07AB9F67-046D-4651-A407-E9FF4CCE79A7}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{07CF07C8-A2FF-4F44-86C5-FC9C6D93BA99}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{09C6F2EA-C122-416F-A596-537561D067AF}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{0AAB0561-13F0-474F-B7AF-8FB9622D816C}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{0E4F093B-18D9-4563-896D-BFD99F598C22}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1105C651-2A16-4FE7-BD70-B298078BF86F}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{11F0098B-239E-41F5-B15A-F2A0494B796B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{12CEE497-546F-4481-A446-961F6936ACCA}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{14B39092-85FA-49F0-BE92-0A7193D30ADD}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1507072E-9C79-4214-B428-EEF8D25C8C7B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{15238591-D7D5-4729-AE47-B0C19B081F88}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1889BCD1-8A7F-47BA-A43B-232CD2344860}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{198E128E-0EFE-4460-B0AC-01F876BC2CCB}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1A9563AF-8BA6-42D9-B650-14FE1877FA39}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1AF41660-AD34-48D4-8A36-7A760A548293}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1B02A2BA-E48B-4DD9-8176-CC5890297A53}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1B679731-CC2F-4E07-85AB-26566BD258AE}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1B9F801F-65B7-48B3-BD57-1CC8F54D0C5B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1BE525D9-A4B8-45E5-9193-38CF7A885E86}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1C538B7B-E789-43C1-BB1A-A0AEA78D59DE}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{1C761308-8F78-4DD4-BB73-6E6DB9FBC61F}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2014C074-EBF0-4C0C-929E-207A32AB0DC1}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{205ACBB2-5134-4206-B724-FE94397EA622}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{20EE335E-15AE-4E25-95E0-B506EB734562}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{210F68B9-E925-47EE-B27E-78E0DBD85202}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{230A69BB-AC24-494D-97FB-6C27B14DBE6B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{24891B46-30C1-4C52-8F0F-F76FE728E34E}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{274B2C62-ADAB-4EF1-AAD2-9639E92F8DE4}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{289232CA-64EA-4496-B512-F763A3B7CD0F}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2A39A0BF-52CA-4CB1-A31E-86A8A4AB9EF6}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2B28669F-7494-47F8-BA71-8BF3B0EBFE48}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2BCD4384-F2FC-4DCB-97DF-038D9E7B9AC4}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2C2739FB-BC09-46C8-93DE-C51E519DA94F}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2C7B258B-7FD6-4597-96FA-F686392AA9C3}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2CA680CD-23BB-48C0-9672-6B1F4922E206}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2CD3EC02-0137-4BFF-ACE1-4B1ED627D40F}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2DEE1F1F-20E0-4A42-8423-C28FB1A68531}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2F698C05-7998-48D9-B4BC-0413121904DA}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2FA67400-595C-43A9-8019-133A214BA239}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2FDBA244-B67A-4353-A333-767E761D0910}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{2FE3C742-C302-47A7-9B08-827F1A5D881A}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{30056A4F-887E-4030-AB50-2BE04101818F}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{302A60E8-15A0-4979-B355-97A39C4F13F0}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{30E09A1C-77BD-42E9-B422-5D15346259F9}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{3128A4B2-EE2E-4A75-B3C8-61F98196943B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{312B7D02-BBEE-4A5B-B713-B2FC8BD75426}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{31DC784B-644F-4A12-B0B0-08DA5DE82850}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{344EC5D0-F854-44DD-B594-7AE0C05C9E33}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{356F216B-1013-4F24-9AF3-1B4EC98939D5}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{36315D45-C468-4222-A490-BA63827AF278}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{368D32F8-01AC-4DDD-A641-241F530C11A2}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{37EE02AB-D2C0-4D6F-A659-CE2496A6F7CC}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{3983CF62-7A99-417C-9F7C-1385AD103CDA}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{3A8937AF-97F5-4F21-AB6A-E93FA2769F69}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{3D028883-18A9-4578-8823-219FE3B6F20C}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{4097809C-FE95-4DCE-9574-9C1A2F956254}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{416E6F95-46A3-48C0-8801-0CA0DA5B9D1B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{425A0F43-FF00-4384-9D0B-9EEE4CA77674}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{44F87AD6-3360-48E2-BFDB-4260F6662EDA}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{451D172C-403C-47F3-8D84-A6B781ECC971}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{4679E110-9887-40CD-A734-946F079741F4}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{46FB6120-F071-4478-8B23-946E518D5481}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{47CF8AA9-3F32-4D7C-88FC-EF8DEA1F71B8}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{499DB3F9-A14D-478F-A96E-BE67C6008AA6}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{49ADAF55-DD7D-454D-B75B-826088E0663E}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{4A2094A7-FD08-4815-85ED-B872DD1BE3E5}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{4DC945BD-EE77-4E26-8782-28F1432F2C6B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{4F9C98EE-54C7-40CF-A45F-17B83023760A}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{527FC730-BCCA-4A1C-84B4-76A2039E5187}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{542773FA-220A-4602-90E8-8E368D88A816}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{548FBD25-0BE7-461D-AEEC-A5AB189FF8DB}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{56D28441-29B1-4595-9B7B-085335EA0164}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{57C2A3E0-4208-4E77-A0B3-590638E0C6DA}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{59930784-6774-456E-9C09-4C3BEC76C278}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5A960DA0-E63E-4144-BB77-0CD0F3D1D7AC}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5C3CF234-FFAE-44B9-835E-942C98B4FED6}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5D4C811F-D924-4FB5-A770-B21631CE48E0}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5D8CCCAB-448C-4300-B8FA-0AB3AFCB0E1A}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5DD2C5F9-8998-4140-A953-C3CE2591D091}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5DE8D5F8-2105-4566-A3BA-04358E8A7289}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{5EE7E9A1-4325-4C4B-91DF-6224B097270C}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{632F16DC-CC68-4D64-9E88-430CA0FA2F69}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{63B3FACF-82FF-4A47-90A8-A13D9BB33241}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{646D5236-F748-455D-9006-1EDEBB28CB2A}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{64A3BBBD-E4EE-4C01-8C2C-77E1776002E5}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{64B6DB5E-D1E3-4773-A43D-594D48068E1E}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{65478AD9-5109-4DC3-A0E0-79551EA0967C}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{657BDD32-6C69-4EB6-8EF5-D4C931678421}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{657C6677-B40E-47BA-AD94-37A8AB620870}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{66D5CD69-0174-48BA-8DA3-DB49CB4C88B6}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{67793097-7003-4402-A192-96ABA840E6FB}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{68D5DDC0-A3D9-4687-9D71-026DF26E2B7C}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{68D611EA-8CB9-4A5E-B524-BB0F6243926A}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{6ABBA195-82D8-4E5D-8BA1-BA61BED57DD8}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{6C70A72E-0015-4E0A-8893-C746F5E2F86B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{6EF5C770-094D-4C98-8978-EA87516F9D29}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{70370004-F7A5-4B63-8987-A146FAD3586D}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{717B350F-2E65-4B4D-AB49-9A83143D116B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{71A558CE-F818-40AC-AA93-AB44757EF5FB}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{71A8D102-D0CA-4F05-AC99-198447807C27}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{72C67495-5366-4144-B5BB-E04FBE4EEC07}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{73248BC2-7A96-4ABE-8A60-1483D1091D51}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{74806CE5-E98F-46D8-8D93-4906E3EBF40F}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7613B49A-7575-4675-B410-8A94C8E1D1C2}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{76911A3E-746B-4812-AEA2-111C7A60D11A}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{78341F2B-7C3E-4F7A-A04C-F5C612D9E798}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7A0B4DFB-36B1-452E-818D-53B7C84CB779}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7C06A0B9-ECB4-4C62-885D-65ACF9DA08E2}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7D47938A-4131-42E4-9835-A4AA50C8BC30}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7DAF2C73-A072-42CF-A001-0C9079144746}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7DCCE21F-FD7C-4934-977B-AD2328D163BB}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{7FD35153-D52F-49F0-A84F-98E07C4C9D40}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{8385BE4C-45B4-48F9-A867-C86099ECD5EB}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{83E9971F-D4A4-49FD-89F3-1D1FA64DF269}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{843E0648-58B7-4265-ABA3-8926D3A4E9A0}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{8465BFAE-761F-45B7-A165-2F207C12DCC8}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{84C82291-1110-49F6-B46C-E8314BE7B1FC}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{85DA34DD-4EE3-47A8-A8A2-3DA91E85C6D1}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{85E62991-11A0-42D6-BAA2-940A70DE249F}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{860E2A54-89F9-489C-94F3-BA1CC63A1399}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{865DDC6B-8B01-4211-B90B-45FA490B2DD0}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{86EFDEDB-6E62-43B9-89FA-18B35D328DC5}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{89BA9B14-C2C2-4B6B-8CC4-B96B24DE043D}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{8B50B85F-A6F0-4EF3-BD09-A477807BBFC3}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{8D1D08D7-4494-4499-B148-BB6D270085C9}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{8EBAA0DE-E38E-4695-A149-352C77218C92}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9068C431-9DD6-4CB9-9C45-25D6160567B5}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{91763463-211A-4527-B882-B35102CF258A}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{924A7878-0F14-4EFF-83D8-2CC437A796F6}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9449FE15-CBC0-4A65-8BA7-AA3C6FF3FEAB}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{95B893EE-9C5B-44DB-B45A-E43EA0D0E664}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{99D1129E-7D23-4312-8283-9FCE2FDB0924}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9A20FE6B-445A-4391-B9BE-9B85B58C7075}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9A7DAD58-0B12-4EB5-BA6F-9A293FFC98CD}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9A7EBE40-BECE-4074-884C-2CC387AC76A6}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{9DB6FAD1-68F2-471F-B8F8-3C67D127C92C}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{A213A7BC-2AC1-47BA-ABEA-65568173D87D}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{A50B7E98-EC28-4AF1-B48F-002DA2FD17A2}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{A5D00684-C659-44CC-BE23-E891C394BFE4}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{A6FA656D-BFB9-4F84-9935-E188A87A508B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{A7402562-465E-4A84-A784-A3CEF649531C}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AA17ECD2-2BF9-4396-B616-87EAB131B3FA}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AA1D3B8B-8B21-476C-8F8D-70592512D49E}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AADB2210-B4D7-437F-973D-E8F0FC5F6BDF}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AB5D0B85-ADAB-4FC0-AFCD-0ACE118FF62B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AC87DEF0-6E18-43C6-BAE6-3715C69ABCD7}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AD0E33DE-E155-4DBB-AA07-C7CD66742CFC}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AD0E42DE-7138-4DBC-9B4E-3393B9C2E028}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AD385422-EE66-4407-8C5E-7F2F5079D2F7}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AE21D1BF-CCEF-4FE5-A9C6-07BEB4262A4A}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AE322729-CDDE-4D3B-A073-15A9FC193DD7}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{AFC29F13-AA9D-477B-867D-E75B15FA868C}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B0EF7C8D-208C-4B10-807C-A8362282382E}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B1A9BB1F-8AD4-4F0E-9272-891040AFF3EF}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B1F900E7-51AA-4B8F-AA00-862EC6732201}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B209390F-7DC1-46A5-9CEC-0276ADDDF9FC}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B2BDF7E0-1915-45FA-A66F-B514451CA469}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B4E13DF9-4314-4FE8-BC82-99A50A4A9DFA}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B5AA3394-FE14-4BE2-A365-E14F28B97CDB}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{B6043DD9-A9AE-449E-9707-D7545A26AE24}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BA512F6F-711C-49C7-B1B4-6812E3737075}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BB81DD55-396C-4CB5-9987-4D6599505CC8}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BC5F8293-B81A-4665-BBBB-2B8917D67206}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BC94E718-DFD2-415E-94D4-1668850D51B5}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BCE3A198-6C11-4FC8-87FF-91EAD809B2CD}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BFEC13D4-3C82-4274-AA85-39281C995B46}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{BFEF113A-26C1-4E24-96DC-42569058B001}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C0B4C685-9B53-46BF-B64F-8D2CBCD4359C}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C1DA257A-C66F-42C8-9BA0-6D840235018D}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C4679834-3434-471C-A451-F574F0C46F76}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C4904E14-4507-4DB2-8B4D-1E7E478D56C9}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C5520CB0-A3CC-41AA-B5BA-42937C3E9F1B}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C5F6506A-8988-4867-AF7A-802E67FAA594}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{C7B662BD-57CA-4F4B-AECC-B485A6E975B4}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{CB245A3E-D215-4AC7-9964-1E5B6EBE368A}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{CD813A04-B917-4D47-8713-1EF427C12C00}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{CE58D2CE-D295-4913-BA87-0D8097365F1E}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D0662934-E9DD-4BEE-88BE-8467B88DBC5D}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D0D3D9C7-1E54-4049-819C-97AF3ACA8B3F}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D10BD8F7-B560-445A-B3A1-2C9938AAE189}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D41832F3-C8D5-4185-8CDE-173F1A1511B3}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D50457FD-4817-4B12-A68A-CB7826575D56}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D5E1C1CC-827F-4AE5-AB47-406739801B94}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D64317D2-6704-4DFF-B1DC-4FC6C9D35CFE}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D660F8F1-43CC-42A5-B816-99CD9BEC8830}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D732676C-F139-48E0-B541-821BCF8405B0}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{D9480935-C2CD-435B-B0C4-A5327AEBD822}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DA891977-AD27-4877-ACD7-78DB00167FFE}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DAAF6226-50BF-476F-867D-536E123ACE20}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DABA9068-D1EA-4E5A-9CD9-49E791E000CE}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DBBE0DAE-37CF-4C2D-AE48-9D5281B2E5DA}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DBF2E742-02B0-4049-B6AE-2556881F4224}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DBF4C0AB-2335-4DF5-BEEF-22F39FE3265A}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DDBC17F7-7B78-432C-AEB4-67C89BEBEB27}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{DDC21B7F-FE09-422C-A7C7-F4DC020D4F3E}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E0F73BCF-4546-442D-BA51-10572D411BEC}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E10E834A-B165-4DA9-AB94-570C52339AFA}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E12889DD-7730-4A23-A73D-4A495CEEBBD5}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E249F7E7-4041-4BB1-AE2A-89BB66B56777}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E2BDA137-7B28-427F-A8D4-27BE3599DA8A}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E2D1553E-0F76-4874-B75C-9D76E8751983}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E32484B0-4EAC-4ABB-BB4F-2DC03E743570}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E330E9CF-0DDA-4BC1-962A-B96272FD5D89}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E46A7047-407F-4CC8-8A81-8D6EAB793FCC}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E55829BA-6236-4703-A27F-1622CEAC12CD}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E5623AA6-DA92-4B35-B38B-22BBAA17EB7E}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E584E2F1-C6DA-4948-82DC-66773F60F46D}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E657F8F7-26F6-4457-8C62-735E21588C99}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E6DB3028-98CA-4884-9C15-8F5E5CAB8D79}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E84B5DE1-1B75-4249-BE29-5896583A8F94}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E87B477E-66B2-4C59-B1EF-A215B436D064}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{E9C949CE-3DE9-41B6-8F83-D1C7467B6C6C}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EA69DA05-D99C-4FD9-9F86-E6819C373F57}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EA9FC986-450B-48AF-B133-D79D012AC790}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EAB90A71-307B-4335-BE2C-6FC713F533D7}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EB001120-4130-4293-AB26-CD4F70D8E37E}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EB512AA5-64D0-4823-8859-2C04D910E362}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EC7C2A56-34BD-4C82-8F4C-B617E8A50408}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{EC8686D9-D1FC-48AE-BB6A-38FE540BAD42}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F27DB56E-81F8-4505-8194-92711E582E09}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F2F865F0-CB3C-4D3F-A5AB-C398BF74A104}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F375F557-1243-4475-A2C2-A2DCD7145E94}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F87F7CE5-5E6E-4676-8D9B-5C7D53D52F1E}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F89CC813-5B78-4910-A2BA-3AA00CF8AE93}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{F9DA8166-5F40-4FB5-8884-8A661E9AE782}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{FA5FC6FE-11D0-4B24-9D67-062FEB1CEDCD}

Successfully deleted: [Empty Folder] C:\Users\Achim\appdata\local\{FB0C23BC-7BD7-4E3B-B6D9-85982D2FA5E2}
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\Achim\AppData\Roaming\mozilla\firefox\profiles\191fagwf.default\minidumps [2 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 15.12.2013 at 13:17:50,75

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Ja was Du kennst kannste rausnehmen :)

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

Hallo Schreiber,

ich hatte beim Download von Eset Smartinstaller die Fehlermeldung,die ich auch beim Internet-Explorer erhalte. "Internetexplorer hat ein Problem...". Nur beim Firefox in abgeänderter Form und hatte jetzt den Security Check vorgezogen und sende erst mal das Logfile.
Momentan läuft jetzt jedoch der Scan vom Eset-Smartinstaller und hat 2 Infektionen bislang gefunden.

Bis morgen

Viele Grüße Achim

Code:

 Results of screen317's Security Check version 0.99.77  

 Windows 7 Service Pack 1 x86 (UAC is enabled)  
 ``````````````Antivirus/Firewall Check:`````````````` 

Sophos Anti-Virus   

 WMI entry may not exist for antivirus; attempting automatic update. 
 `````````Anti-malware/Other Utilities Check:````````` 

 CCleaner     

 Java 7 Update 45  

 Adobe Flash Player         11.9.900.170  

 Mozilla Firefox 23.0 Firefox out of Date!  
 ````````Process Check: objlist.exe by Laurent````````  
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

Guten Morgen,

hatte den Rechner die ganze Nacht durch gescannt und habe jetzt das Logfile:

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=9e350b8f15f07e40aa0585b4ed1a1426
# engine=16289
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-17 05:16:06
# local_time=2013-12-17 06:16:06 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 44159 138888557 0 0
# compatibility_mode=8449 16775166 50 93 44480 67871684 37267 0
# scanned=352886
# found=5
# cleaned=0
# scan_time=38892
sh=9656EF4E921F06EA5186907822419A2C54F7959A ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Achim\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\75e4e68a-44d5baa5"
sh=3448412B5AC95AE687852AA1270F05C0BC65E7B5 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Achim\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\4e413706-3eb8d15f"
sh=25659F3A88FE5FAC28CBB6F1F1F11AB17AB8277D ft=0 fh=0000000000000000 vn="Win32/Bagle.UN worm" ac=I fn="D:\Eigene Dateien\Sicherungen\DB-Konfigurationen\VHSKK\Wechseldatenträger (M)\VHSKK-Anwendungen\System\Packer\WinRAR v3.20 German.zip"
sh=25659F3A88FE5FAC28CBB6F1F1F11AB17AB8277D ft=0 fh=0000000000000000 vn="Win32/Bagle.UN worm" ac=I fn="D:\Eigene Dateien\Sicherungen\Mobile-Datenträger\USB-Stick\USB-VHS-4GB-rot\Wechseldatenträger (H)\VHSKK-Anwendungen\System\Packer\WinRAR v3.20 German.zip"
sh=F8AE3582A3ED05994D9BF3F2FA9807CAE2D0A312 ft=1 fh=32d8f13a7cfc7c55 vn="Win32/RiskWare.PsShutdown.232 application" ac=I fn="D:\Eigene Dateien\VHS\VHSKK-Archiv\KVP50\Software\Tools\Hotfixes_all\XP_Update_2.6.exe"

Viele Grüße Achim

Hallo Schrauber,

jetzt erst noch mal der Sacn-Log:
Hatte I-Netexplorer installiert und Rechner läuft optimal, aber dann die Meldung:Internet-Explorer hat ein Problem festgestellt und muss geschlossen werden.Es wird nach einer Lösing gesucht....
FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-12-2013 01

Ran by Achim (administrator) on GEORGE on 17-12-2013 07:46:38

Running from C:\Users\Achim\Downloads\Antivir\Trojan

Microsoft Windows 7 Enterprise  Service Pack 1 (X86) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) ===================
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Windows\System32\CISVC.EXE

(Eaton Corporation) C:\Program Files\Powerware\LanSafe\Bin\PowerMonitor.exe

(LogMeIn, Inc.) C:\Program Files\LogMeIn Ignition\LMIGuardianSvc.exe

(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\ramaint.exe

(NCP engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\ncpclcfg.exe

(NCP Engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\ncprwsnt.exe

() C:\Program Files\LANCOM\Advanced VPN Client\NCPSEC.EXE

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

(Nuance Communications, Inc.) C:\Program Files\Nuance\PDF Professional 6\PDFProFiltSrv.exe

(Microsoft Corporation) C:\Windows\System32\Locator.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE

(Axis Communications) C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmService.exe

(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE

() C:\Program Files\Powerware\LanSafe\Bin\LSTrayAgent.exe

(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeIn.exe

(Eaton Corporation) C:\Program Files\Powerware\LanSafe\Bin\XYNTService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Powerware) C:\Program Files\Powerware\LanSafe\Bin\httpserver.exe

(Powerware) C:\Program Files\Powerware\LanSafe\Bin\status_glance.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LogMeInSystray.exe

(Spotify Ltd) C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(Spotify Ltd) C:\Users\Achim\AppData\Roaming\Spotify\spotify.exe

(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

(Dropbox, Inc.) C:\Users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

(AVM Berlin) C:\Users\Achim\AppData\Local\Apps\2.0\YNXPA4GH.66H\K0GCG6C7.7CZ\frit..tion_1acae14e4778b8d2_0002.0003_7c9366a34786c7f9\fritzbox-usb-fernanschluss.exe

(Microsoft Corporation) C:\Windows\System32\wuauclt.exe

(Google) C:\Program Files\Google\Drive\googledrivesync.exe

() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

() C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyHelper.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_11_9_900_170_ActiveX.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [LogMeIn GUI] - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [63048 2012-11-29] (LogMeIn, Inc.)

HKCU\...\Run: [Spotify Web Helper] - C:\Users\Achim\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-05] (Spotify Ltd)

HKCU\...\Run: [Spotify] - C:\Users\Achim\AppData\Roaming\Spotify\spotify.exe [5951488 2013-12-05] (Spotify Ltd)

HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [210208 2008-11-17] (Acresso Corporation)

HKCU\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-09-14] (Apple Inc.)

HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20133824 2013-09-25] (Google)

HKCU\...\Run: [AVMUSBFernanschluss] - C:\Users\Achim\AppData\Local\Apps\2.0\YNXPA4GH.66H\K0GCG6C7.7CZ\frit..tion_1acae14e4778b8d2_0002.0003_7c9366a34786c7f9\AVMAutoStart.exe [139264 2013-12-14] (AVM Berlin)

AppInit_DLLs: C:\Program Files\Sophos\Sophos Anti-Virus\sophos_detoured.dll [ 2013-05-17] (Sophos Limited)

Startup: C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\Achim\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF75D143CF3FACE01

BHO: PlusIEEventHelper Class - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files\Nuance\PDF Professional 6\bin\PlusIEContextMenu.dll (Zeon Corporation)

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: FRITZ!Box Addon BHO - {C0C86BBE-9509-4296-8459-FDBFDAF4B673} - C:\Program Files\FRITZ!Box\AddOn (IE)\FBoxIESplitButton.dll (AVM Berlin)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab

DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab

DPF: {7191F0AC-D686-46A8-BFCC-EA61778C74DD} hxxp://192.168.178.54/aplugLite.cab

DPF: {721700FE-7F0E-49C5-BDED-CA92B7CB1245} hxxp://192.168.178.23:84/camclictrl.cab

DPF: {82E5DF24-51E8-47CD-864A-F4BD5005AA73} https://www.icloud.com/system/iCloud.cab

DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} hxxp://192.168.178.50/activex/AxisCamControl.cab

DPF: {9464D0CA-5BD8-4175-AB33-A61A4A67AA97} hxxp://192.168.178.23:84/camclictrl.cab

DPF: {9C3EFB8A-DC20-484B-B905-5E337A988C5D} hxxp://192.168.178.20:81/LNetCam.cab

DPF: {B015B944-7316-49AE-AC84-ACCA9379EA32} hxxp://192.168.178.25:82/IPCamPluginMJPEG.cab

DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  No File

Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  No File

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Winsock: Catalog9 01 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 02 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 03 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 04 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 05 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 06 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 07 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 08 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Winsock: Catalog9 47 C:\ProgramData\Sophos\Web Intelligence\swi_ifslsp.dll [89592] (Sophos Limited)

Tcpip\..\Interfaces\{1C2EF6A4-791E-4D02-B6D4-2358FABE2256}: [NameServer]192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default

FF Homepage: https://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @TRENDnet.com/CameraPlugin - C:\Program Files\TRENDnet\Plugin\npcamstreamctrl.dll (TRENDnet)

FF Plugin: ZEON/PDF,version=2.0 - C:\Program Files\Nuance\PDF Professional 6\bin\nppdf.dll (Zeon Corporation)

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: nuance - C:\Users\Achim\AppData\Roaming\Mozilla\Firefox\Profiles\191fagwf.default\Extensions\nuance@pdf6

FF HKLM\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\

FF Extension: Wondershare Video Converter Ultimate - C:\Program Files\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
 

========================== Services (Whitelisted) =================
 

R2 AXIS Camera Management; C:\Program Files\Axis Communications\AXIS Camera Management 4\AcmService.exe [17920 2013-07-11] (Axis Communications)

S4 DcRaidMoSrv; C:\Program Files\Dawicontrol GmbH\Dawicontrol RAID Monitor\RAIDservice.exe [341504 2012-05-30] (Dawicontrol GmbH)

S4 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG)

S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®)

R2 LanSafe PM; C:\Program Files\Powerware\LanSafe\Bin\PowerMonitor.exe [532480 2009-12-05] (Eaton Corporation)

R3 LanSafe Process Manager; C:\Program Files\Powerware\LanSafe\bin\xyntservice.exe [49152 2009-12-02] (Eaton Corporation)

R2 LMIGuardianSvc; C:\Program Files\LogMeIn Ignition\LMIGuardianSvc.exe [374160 2011-05-17] (LogMeIn, Inc.)

R2 ncpclcfg; C:\Program Files\LANCOM\Advanced VPN Client\ncpclcfg.exe [150800 2013-10-28] (NCP engineering GmbH)

R2 ncprwsnt; C:\Program Files\LANCOM\Advanced VPN Client\ncprwsnt.exe [1395464 2013-11-08] (NCP Engineering GmbH)

R2 NcpSec; C:\Program Files\LANCOM\Advanced VPN Client\NCPSEC.EXE [119808 2011-04-21] ()

R2 PDFProFiltSrv; C:\Program Files\Nuance\PDF Professional 6\PDFProFiltSrv.exe [134944 2009-07-27] (Nuance Communications, Inc.)

S4 SAVAdminService; C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [290296 2013-05-17] (Sophos Limited)

S4 SAVService; C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe [206328 2013-05-17] (Sophos Limited)

S4 Sophos AutoUpdate Service; C:\Program Files\Sophos\AutoUpdate\ALsvc.exe [237048 2013-01-11] (Sophos Limited)

S3 SUService; C:\Program Files\Lenovo\System Update\SUService.exe [22888 2013-09-17] ()

S4 swi_service; C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe [3109880 2013-09-17] (Sophos Limited)

S2 swi_update; C:\ProgramData\Sophos\Web Intelligence\swi_update.exe [1471992 2013-05-17] (Sophos Limited)

S4 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [1690096 2013-07-19] (GlavSoft LLC.)

S3 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [3602752 2013-03-04] (RealVNC Ltd)
 

==================== Drivers (Whitelisted) ====================
 

S3 61883; C:\Windows\System32\DRIVERS\61883.sys [46976 2009-07-14] (Microsoft Corporation)

R3 avmaura; C:\Windows\System32\DRIVERS\avmaura.sys [105728 2013-07-13] (AVM Berlin)

S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [4352 2010-10-22] (AVM Berlin)

R0 DC300e; C:\Windows\System32\DRIVERS\DC300e.sys [39872 2013-03-09] (Dawicontrol GmbH)

R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [25160 2007-08-07] (Elaborate Bytes AG)

R3 ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [11984 2007-02-16] (Elaborate Bytes AG)

S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [265088 2010-10-22] (AVM GmbH)

S3 ncpfilt; C:\Windows\System32\DRIVERS\ncplelhp.sys [87280 2013-09-11] (NCP Engineering GmbH)

R3 ncplelhp; C:\Windows\System32\DRIVERS\ncplelhp.sys [87280 2013-09-11] (NCP Engineering GmbH)

S3 RTL8192cu; C:\Windows\System32\DRIVERS\WNA1000M.sys [734824 2011-02-21] (Realtek Semiconductor Corporation                           )

R1 SAVOnAccess; C:\Windows\System32\DRIVERS\savonaccess.sys [132424 2013-05-17] (Sophos Limited)

S3 Ser2plx86; C:\Windows\System32\DRIVERS\ser2pl.sys [134144 2013-02-22] (Prolific Technology Inc.)

R0 Si3132r5; C:\Windows\System32\DRIVERS\Si3132r5.sys [215856 2007-06-01] (Silicon Image, Inc)

R0 SiFilter; C:\Windows\System32\DRIVERS\SiWinAcc.sys [17328 2007-05-25] (Silicon Image, Inc.)

R0 SiRemFil; C:\Windows\System32\DRIVERS\SiRemFil.sys [12464 2007-05-25] (Silicon Image, Inc.)

R1 SKMScan; C:\Windows\System32\DRIVERS\skmscan.sys [33096 2013-05-17] (Sophos Limited)

S4 SophosBootDriver; C:\Windows\System32\DRIVERS\SophosBootDriver.sys [22536 2011-10-23] (Sophos Plc)

R3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [4608 2013-03-04] (RealVNC Ltd.)

S3 catchme; \??\C:\Users\Achim\AppData\Local\Temp\catchme.sys [x]

S4 LMIRfsClientNP; No ImagePath

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]

S3 tsusbhub; system32\drivers\tsusbhub.sys [x]

S3 VGPU; System32\drivers\rdvgkmd.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-12-17 07:46 - 2013-12-17 07:46 - 00000000 ____D C:\FRST

2013-12-17 07:41 - 2013-12-17 07:41 - 00000000 ____D C:\Users\Achim\Downloads\Win7

2013-12-17 07:38 - 2013-12-17 07:38 - 00001409 _____ C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-17 06:47 - 2013-12-17 06:49 - 00000000 ____D C:\Windows\rescache

2013-12-16 20:49 - 2013-12-16 20:49 - 12344320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-16 20:49 - 2013-12-16 20:49 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-16 20:49 - 2013-12-16 20:49 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-16 20:49 - 2013-12-16 20:49 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-16 20:49 - 2013-12-16 20:49 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-16 20:49 - 2013-12-16 20:49 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-16 20:43 - 2013-12-16 20:53 - 00004281 _____ C:\Windows\IE9_main.log

2013-12-16 20:42 - 2013-12-16 20:42 - 18690352 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE9-Windows7-x86-deu.exe

2013-12-16 18:57 - 2013-12-16 18:57 - 00000000 ____D C:\Users\Achim\AppData\Local\{CDB2A70E-C29F-4706-9289-6A96FF188945}

2013-12-15 14:25 - 2013-12-15 14:26 - 00043067 _____ C:\Windows\iis7.log

2013-12-15 14:21 - 2013-12-15 14:21 - 00000000 ____D C:\Windows\system32\BestPractices

2013-12-15 14:21 - 2013-12-15 14:21 - 00000000 ____D C:\inetpub

2013-12-15 13:15 - 2013-12-15 13:15 - 00000000 ____D C:\Windows\ERUNT

2013-12-15 10:23 - 2013-12-15 10:23 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Achim\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-15 10:17 - 2013-12-15 10:19 - 00000000 ____D C:\Users\Achim\Downloads\Internetexplorer

2013-12-14 19:41 - 2013-12-14 19:41 - 00000807 _____ C:\Windows\avmacc.log

2013-12-14 18:43 - 2013-12-14 19:26 - 00000000 ____D C:\Qoobox

2013-12-14 18:43 - 2013-12-14 19:24 - 00000000 ____D C:\Windows\erdnt

2013-12-14 18:43 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe

2013-12-14 18:43 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe

2013-12-14 18:43 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-12-14 18:43 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-12-14 18:43 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-12-14 18:43 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe

2013-12-14 18:43 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe

2013-12-14 18:43 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe

2013-12-13 23:33 - 2013-12-13 23:33 - 00889416 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\dotNetFx40_Full_setup.exe

2013-12-13 23:32 - 2013-12-13 23:32 - 24805592 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\Windows-KB890830-V5.7.exe

2013-12-13 23:06 - 2013-12-13 23:06 - 00000000 ____D C:\Users\Achim\Downloads\FRST-OlderVersion

2013-12-13 17:56 - 2013-12-13 23:12 - 00000000 ____D C:\Program Files\IIS Express

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Users\Achim\AppData\Roaming\npm

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\nodejs

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\iisnode-dev

2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\runphp

2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\Microsoft SDKs

2013-12-13 07:23 - 2013-12-13 07:23 - 00116384 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\wpilauncher.exe

2013-12-12 22:12 - 2013-12-12 22:12 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Mozilla

2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-12-12 21:22 - 2013-12-12 21:29 - 00000000 ____D C:\ldiag

2013-12-12 20:50 - 2013-12-12 20:50 - 00072892 _____ C:\Users\Achim\Desktop\GEORGE.html

2013-12-12 20:47 - 2013-12-12 20:47 - 00000000 ____D C:\Program Files\CPUID

2013-12-12 07:45 - 2013-12-12 07:45 - 00422914 _____ C:\Users\Achim\Documents\VHS-kaki-umschlag-2014.pptx

2013-12-12 00:20 - 2013-12-13 23:31 - 00026640 _____ C:\Windows\IE11_main.log

2013-12-11 20:23 - 2013-12-17 07:31 - 00067218 _____ C:\Windows\PFRO.log

2013-12-11 20:19 - 2013-12-12 07:07 - 00000095 _____ C:\Users\Achim\Desktop\CMD-Archiv.txt

2013-12-11 18:55 - 2013-12-11 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\Tvsukernel

2013-12-11 18:54 - 2013-12-11 18:54 - 00000000 ____D C:\Program Files\ThinkVantage

2013-12-11 18:34 - 2013-12-11 18:49 - 00007337 _____ C:\Windows\IE10_main.log

2013-12-11 18:24 - 2013-12-11 18:24 - 00000000 ___HD C:\Windows\msdownld.tmp

2013-12-11 18:17 - 2013-12-17 07:31 - 00002309 _____ C:\Windows\setupact.log

2013-12-11 18:17 - 2013-12-11 18:17 - 00000000 _____ C:\Windows\setuperr.log

2013-12-11 07:52 - 2013-12-11 18:24 - 00034573 _____ C:\Windows\ie8_main.log

2013-12-10 20:33 - 2013-12-10 20:33 - 00192888 _____ C:\Users\Achim\cc_20131210_203255.reg

2013-12-10 19:52 - 2013-12-10 19:52 - 00001356 _____ C:\Users\Achim\Desktop\CCleaner.exe - Verknüpfung.lnk

2013-12-10 19:13 - 2010-10-22 02:00 - 00480632 ____N (AVM Berlin) C:\Windows\instwcli.dex

2013-12-09 23:07 - 2010-10-22 02:00 - 00074240 _____ (AVM Berlin) C:\Windows\system32\fwlanci.org

2013-12-09 23:05 - 2013-12-09 23:05 - 00000000 ____D C:\Program Files\AVM_update

2013-12-07 11:37 - 2013-12-12 21:01 - 00000000 ____D C:\Users\Achim\Documents\DriverGenius

2013-12-04 20:43 - 2013-12-04 20:43 - 00000000 ____D C:\Users\Achim\AppData\Local\vsmedia.de

2013-12-04 20:39 - 2013-12-04 20:39 - 00001128 _____ C:\Users\Achim\Desktop\Continue Image Editor Installation.lnk

2013-12-04 19:43 - 2013-12-04 20:05 - 00000000 ____D C:\Users\Achim\Desktop\FP_2980_1

2013-12-02 19:52 - 2013-12-10 19:57 - 00000000 ____D C:\Users\Achim\AppData\Roaming\NCH Software

2013-12-02 19:51 - 2013-12-10 19:57 - 00000000 ____D C:\ProgramData\NCH Software

2013-12-02 19:51 - 2013-12-10 19:57 - 00000000 ____D C:\Program Files\NCH Software

2013-12-01 18:54 - 2013-12-01 18:54 - 00001120 _____ C:\Users\Achim\Desktop\TeamViewer 8.lnk

2013-11-26 23:04 - 2013-11-26 23:03 - 00001774 _____ C:\Users\Achim\Desktop\qr_code_ohne_logo_plus_informationsmappe.zip

2013-11-25 18:46 - 2013-11-25 18:46 - 00002161 _____ C:\Users\Achim\Desktop\Klassik-DB.xlsx - Verknüpfung.lnk

2013-11-23 11:16 - 2013-11-23 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\libimobiledevice

2013-11-23 11:12 - 2013-11-23 11:12 - 00000000 ____D C:\Users\Achim\Documents\evasi0n-win-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-release

2013-11-22 15:57 - 2013-11-26 07:42 - 00011284 _____ C:\Users\Achim\Documents\Klassik-DB.xlsx

2013-11-22 15:41 - 2013-12-02 22:00 - 00000292 _____ C:\Users\Achim\AppData\Roaming\burnaware.ini

2013-11-22 14:23 - 2013-11-22 14:23 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spesoft Audio Converter

2013-11-22 14:11 - 2013-11-22 14:11 - 00001829 _____ C:\Users\Achim\Desktop\P-touch Editor 5.0.lnk

2013-11-22 13:59 - 2013-11-22 13:59 - 00000000 ____D C:\Program Files\Common Files\Brother

2013-11-22 12:41 - 2013-11-22 12:41 - 00001271 _____ C:\Users\Achim\Desktop\Kufer-WEB-Zugangsdaten.txt - Verknüpfung.lnk
 

==================== One Month Modified Files and Folders =======
 

2013-12-17 07:46 - 2013-12-17 07:46 - 00000000 ____D C:\FRST

2013-12-17 07:41 - 2013-12-17 07:41 - 00000000 ____D C:\Users\Achim\Downloads\Win7

2013-12-17 07:41 - 2013-03-09 16:30 - 00000000 ____D C:\Users\Achim\Downloads\System

2013-12-17 07:40 - 2013-03-06 10:51 - 01786372 _____ C:\Windows\system32\PerfStringBackup.INI

2013-12-17 07:39 - 2013-03-15 19:57 - 00000000 ___RD C:\Users\Achim\Dropbox

2013-12-17 07:39 - 2013-03-15 19:54 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Dropbox

2013-12-17 07:39 - 2013-03-06 10:43 - 02074641 _____ C:\Windows\WindowsUpdate.log

2013-12-17 07:38 - 2013-12-17 07:38 - 00001409 _____ C:\Users\Achim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-12-17 07:38 - 2013-07-11 18:42 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spotify

2013-12-17 07:38 - 2013-03-16 11:48 - 00000000 ___RD C:\Users\Achim\Google Drive

2013-12-17 07:37 - 2013-03-06 11:54 - 00001092 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2013-12-17 07:37 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET

2013-12-17 07:35 - 2013-03-06 11:54 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2013-12-17 07:33 - 2013-03-06 11:34 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-12-17 07:31 - 2013-12-11 20:23 - 00067218 _____ C:\Windows\PFRO.log

2013-12-17 07:31 - 2013-12-11 18:17 - 00002309 _____ C:\Windows\setupact.log

2013-12-17 07:31 - 2013-08-09 15:10 - 00000000 ____D C:\ProgramData\firebird

2013-12-17 07:31 - 2013-03-06 11:20 - 00000000 ____D C:\ProgramData\LogMeIn

2013-12-17 07:31 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-12-17 07:21 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE

2013-12-17 07:15 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\inetsrv

2013-12-17 06:49 - 2013-12-17 06:47 - 00000000 ____D C:\Windows\rescache

2013-12-16 22:28 - 2013-04-15 18:08 - 00000000 ____D C:\Users\Achim\AppData\Local\6CE0D6AC-6EB9-4808-A530-20BD3892313C.aplzod

2013-12-16 20:53 - 2013-12-16 20:43 - 00004281 _____ C:\Windows\IE9_main.log

2013-12-16 20:49 - 2013-12-16 20:49 - 12344320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 09739264 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-12-16 20:49 - 2013-12-16 20:49 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-12-16 20:49 - 2013-12-16 20:49 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-12-16 20:49 - 2013-12-16 20:49 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 01105408 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00434176 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-12-16 20:49 - 2013-12-16 20:49 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00353584 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00130560 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-12-16 20:49 - 2013-12-16 20:49 - 00054272 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-12-16 20:49 - 2013-12-16 20:49 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-12-16 20:49 - 2013-12-16 20:49 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-12-16 20:42 - 2013-12-16 20:42 - 18690352 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\IE9-Windows7-x86-deu.exe

2013-12-16 19:07 - 2013-03-09 16:30 - 00000000 ____D C:\Users\Achim\Downloads\Antivir

2013-12-16 18:57 - 2013-12-16 18:57 - 00000000 ____D C:\Users\Achim\AppData\Local\{CDB2A70E-C29F-4706-9289-6A96FF188945}

2013-12-16 18:56 - 2009-07-14 05:34 - 00015264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-12-16 18:56 - 2009-07-14 05:34 - 00015264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-12-16 18:53 - 2013-07-11 18:42 - 00000000 ____D C:\Users\Achim\AppData\Local\Spotify

2013-12-15 14:26 - 2013-12-15 14:25 - 00043067 _____ C:\Windows\iis7.log

2013-12-15 14:24 - 2009-07-14 05:33 - 00515320 _____ C:\Windows\system32\FNTCACHE.DAT

2013-12-15 14:21 - 2013-12-15 14:21 - 00000000 ____D C:\Windows\system32\BestPractices

2013-12-15 14:21 - 2013-12-15 14:21 - 00000000 ____D C:\inetpub

2013-12-15 13:52 - 2013-03-06 10:46 - 00000000 ____D C:\Users\Achim

2013-12-15 13:43 - 2013-03-16 09:38 - 00000000 ____D C:\Users\Achim\Desktop\Systemprogramme

2013-12-15 13:38 - 2013-03-10 19:03 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Skype

2013-12-15 13:15 - 2013-12-15 13:15 - 00000000 ____D C:\Windows\ERUNT

2013-12-15 13:01 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\LiveKernelReports

2013-12-15 12:35 - 2013-03-09 16:30 - 00000000 ____D C:\Users\Achim\Downloads\Netzwerk

2013-12-15 12:10 - 2013-08-25 07:52 - 00001490 _____ C:\Users\Achim\AppData\Local\RecConfig.xml

2013-12-15 10:23 - 2013-12-15 10:23 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Achim\Downloads\mbam-setup-1.75.0.1300.exe

2013-12-15 10:19 - 2013-12-15 10:17 - 00000000 ____D C:\Users\Achim\Downloads\Internetexplorer

2013-12-15 10:18 - 2013-08-03 13:22 - 00000000 ____D C:\Users\Achim\Downloads\Multimedia

2013-12-15 10:18 - 2013-03-09 16:32 - 00000000 ____D C:\Users\Achim\Downloads\Druck&Scan

2013-12-15 09:57 - 2013-03-06 11:20 - 00086888 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIRfsClientNP.dll

2013-12-15 09:57 - 2013-03-06 11:20 - 00085832 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIinit.dll

2013-12-15 09:57 - 2013-03-06 11:20 - 00031560 _____ (LogMeIn, Inc.) C:\Windows\system32\LMIport.dll

2013-12-15 09:57 - 2013-03-06 11:19 - 00000000 ____D C:\Program Files\LogMeIn

2013-12-14 19:41 - 2013-12-14 19:41 - 00000807 _____ C:\Windows\avmacc.log

2013-12-14 19:41 - 2013-03-06 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\Deployment

2013-12-14 19:26 - 2013-12-14 18:43 - 00000000 ____D C:\Qoobox

2013-12-14 19:26 - 2013-03-06 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\Apps\2.0

2013-12-14 19:26 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default

2013-12-14 19:26 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public

2013-12-14 19:24 - 2013-12-14 18:43 - 00000000 ____D C:\Windows\erdnt

2013-12-14 19:22 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini

2013-12-14 09:33 - 2013-03-06 11:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2013-12-14 09:33 - 2013-03-06 11:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2013-12-13 23:33 - 2013-12-13 23:33 - 00889416 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\dotNetFx40_Full_setup.exe

2013-12-13 23:32 - 2013-12-13 23:32 - 24805592 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\Windows-KB890830-V5.7.exe

2013-12-13 23:31 - 2013-12-12 00:20 - 00026640 _____ C:\Windows\IE11_main.log

2013-12-13 23:12 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\IIS Express

2013-12-13 23:06 - 2013-12-13 23:06 - 00000000 ____D C:\Users\Achim\Downloads\FRST-OlderVersion

2013-12-13 17:57 - 2009-07-14 05:53 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Users\Achim\AppData\Roaming\npm

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\nodejs

2013-12-13 17:56 - 2013-12-13 17:56 - 00000000 ____D C:\Program Files\iisnode-dev

2013-12-13 17:55 - 2013-03-11 21:44 - 00000000 ____D C:\Windows\pss

2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\runphp

2013-12-13 07:25 - 2013-12-13 07:25 - 00000000 ____D C:\Program Files\Microsoft SDKs

2013-12-13 07:23 - 2013-12-13 07:23 - 00116384 _____ (Microsoft Corporation) C:\Users\Achim\Downloads\wpilauncher.exe

2013-12-13 07:03 - 2009-07-14 10:03 - 00000000 ____D C:\Windows\system32\Drivers\de-DE

2013-12-13 00:08 - 2013-03-06 11:33 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-12-12 22:18 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF

2013-12-12 22:12 - 2013-12-12 22:12 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Mozilla

2013-12-12 22:12 - 2013-12-12 22:12 - 00000000 ____D C:\Program Files\Mozilla Firefox

2013-12-12 22:02 - 2013-03-07 23:42 - 00000000 ____D C:\Windows\Minidump

2013-12-12 21:55 - 2013-03-06 11:30 - 00000000 ____D C:\ProgramData\NVIDIA

2013-12-12 21:50 - 2013-03-06 10:46 - 00000000 ____D C:\Recovery

2013-12-12 21:33 - 2013-03-07 23:02 - 00000000 ____D C:\Program Files\Common Files\Adobe

2013-12-12 21:29 - 2013-12-12 21:22 - 00000000 ____D C:\ldiag

2013-12-12 21:22 - 2013-03-10 11:58 - 00000000 ____D C:\SWTOOLS

2013-12-12 21:06 - 2013-05-06 21:18 - 00000000 ____D C:\Users\Achim\Downloads\Grafik

2013-12-12 21:01 - 2013-12-07 11:37 - 00000000 ____D C:\Users\Achim\Documents\DriverGenius

2013-12-12 20:50 - 2013-12-12 20:50 - 00072892 _____ C:\Users\Achim\Desktop\GEORGE.html

2013-12-12 20:47 - 2013-12-12 20:47 - 00000000 ____D C:\Program Files\CPUID

2013-12-12 07:45 - 2013-12-12 07:45 - 00422914 _____ C:\Users\Achim\Documents\VHS-kaki-umschlag-2014.pptx

2013-12-12 07:35 - 2013-06-03 18:16 - 00002194 ____H C:\Users\Achim\Documents\Default.rdp

2013-12-12 07:07 - 2013-12-11 20:19 - 00000095 _____ C:\Users\Achim\Desktop\CMD-Archiv.txt

2013-12-12 06:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles

2013-12-11 18:55 - 2013-12-11 18:55 - 00000000 ____D C:\Users\Achim\AppData\Local\Tvsukernel

2013-12-11 18:54 - 2013-12-11 18:54 - 00000000 ____D C:\Program Files\ThinkVantage

2013-12-11 18:52 - 2013-03-11 22:19 - 00000000 ____D C:\ProgramData\Lenovo

2013-12-11 18:49 - 2013-12-11 18:34 - 00007337 _____ C:\Windows\IE10_main.log

2013-12-11 18:42 - 2013-03-06 10:39 - 00000000 ____D C:\Windows\Panther

2013-12-11 18:36 - 2013-03-11 18:45 - 00000000 ____D C:\Users\Achim\AppData\Local\Windows Live Writer

2013-12-11 18:24 - 2013-12-11 18:24 - 00000000 ___HD C:\Windows\msdownld.tmp

2013-12-11 18:24 - 2013-12-11 07:52 - 00034573 _____ C:\Windows\ie8_main.log

2013-12-11 18:17 - 2013-12-11 18:17 - 00000000 _____ C:\Windows\setuperr.log

2013-12-10 22:06 - 2013-03-06 11:54 - 00000000 ____D C:\Program Files\Google

2013-12-10 22:05 - 2013-03-06 11:54 - 00000000 ____D C:\Users\Achim\AppData\Local\Google

2013-12-10 20:43 - 2013-03-06 11:16 - 00157928 _____ C:\Users\Achim\AppData\Local\GDIPFONTCACHEV1.DAT

2013-12-10 20:43 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp

2013-12-10 20:33 - 2013-12-10 20:33 - 00192888 _____ C:\Users\Achim\cc_20131210_203255.reg

2013-12-10 20:26 - 2013-10-22 17:09 - 00000000 ____D C:\Users\Achim\AppData\Roaming\FileZilla

2013-12-10 19:57 - 2013-12-02 19:52 - 00000000 ____D C:\Users\Achim\AppData\Roaming\NCH Software

2013-12-10 19:57 - 2013-12-02 19:51 - 00000000 ____D C:\ProgramData\NCH Software

2013-12-10 19:57 - 2013-12-02 19:51 - 00000000 ____D C:\Program Files\NCH Software

2013-12-10 19:52 - 2013-12-10 19:52 - 00001356 _____ C:\Users\Achim\Desktop\CCleaner.exe - Verknüpfung.lnk

2013-12-10 19:15 - 2013-03-06 11:35 - 00000000 ____D C:\Program Files\Microsoft.NET

2013-12-09 23:05 - 2013-12-09 23:05 - 00000000 ____D C:\Program Files\AVM_update

2013-12-08 17:07 - 2013-03-10 19:28 - 00000000 ____D C:\Users\Achim\.dreamstream

2013-12-08 15:02 - 2013-03-10 19:28 - 00000000 ____D C:\Users\Achim\.gstreamer-0.10

2013-12-08 11:42 - 2013-03-06 11:34 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Adobe

2013-12-07 11:30 - 2013-09-22 09:14 - 00000000 ___RD C:\Users\Achim\Desktop\Multimedia

2013-12-06 21:10 - 2013-07-12 20:41 - 00000000 _____ C:\Windows\system32\vireng.log

2013-12-06 19:56 - 2013-03-07 18:23 - 00000000 ____D C:\ProgramData\Adobe

2013-12-04 20:43 - 2013-12-04 20:43 - 00000000 ____D C:\Users\Achim\AppData\Local\vsmedia.de

2013-12-04 20:39 - 2013-12-04 20:39 - 00001128 _____ C:\Users\Achim\Desktop\Continue Image Editor Installation.lnk

2013-12-04 20:05 - 2013-12-04 19:43 - 00000000 ____D C:\Users\Achim\Desktop\FP_2980_1

2013-12-04 07:01 - 2013-05-06 16:17 - 00000000 ___RD C:\Users\Achim\SkyDrive

2013-12-03 22:01 - 2013-03-06 11:03 - 00002043 _____ C:\Users\Public\Desktop\LANCOM Advanced VPN Client.lnk

2013-12-03 22:01 - 2009-07-14 03:04 - 00000521 _____ C:\Windows\win.ini

2013-12-02 22:22 - 2013-03-07 23:05 - 00000000 ____D C:\Users\Achim\AppData\Local\Adobe

2013-12-02 22:00 - 2013-11-22 15:41 - 00000292 _____ C:\Users\Achim\AppData\Roaming\burnaware.ini

2013-12-01 18:54 - 2013-12-01 18:54 - 00001120 _____ C:\Users\Achim\Desktop\TeamViewer 8.lnk

2013-12-01 14:42 - 2013-03-06 21:17 - 88123800 ____N (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-11-27 19:49 - 2013-03-09 14:02 - 00000000 ____D C:\Users\Achim\AppData\Roaming\PingTesterDataBas

2013-11-26 23:03 - 2013-11-26 23:04 - 00001774 _____ C:\Users\Achim\Desktop\qr_code_ohne_logo_plus_informationsmappe.zip

2013-11-26 20:39 - 2013-08-09 21:31 - 00000000 ____D C:\Users\Achim\AppData\Local\FreePDF_XP

2013-11-26 07:42 - 2013-11-22 15:57 - 00011284 _____ C:\Users\Achim\Documents\Klassik-DB.xlsx

2013-11-25 18:46 - 2013-11-25 18:46 - 00002161 _____ C:\Users\Achim\Desktop\Klassik-DB.xlsx - Verknüpfung.lnk

2013-11-23 11:16 - 2013-11-23 11:16 - 00000000 ____D C:\Users\Achim\AppData\Local\libimobiledevice

2013-11-23 11:12 - 2013-11-23 11:12 - 00000000 ____D C:\Users\Achim\Documents\evasi0n-win-1.3-1cb32faf1e4f4f6c890e6fcbeb004cb694c386f5-release

2013-11-22 14:23 - 2013-11-22 14:23 - 00000000 ____D C:\Users\Achim\AppData\Roaming\Spesoft Audio Converter

2013-11-22 14:22 - 2013-03-06 12:08 - 00000000 ___RD C:\Users\Achim\AppData\Roaming\Brother

2013-11-22 14:11 - 2013-11-22 14:11 - 00001829 _____ C:\Users\Achim\Desktop\P-touch Editor 5.0.lnk

2013-11-22 13:59 - 2013-11-22 13:59 - 00000000 ____D C:\Program Files\Common Files\Brother

2013-11-22 12:41 - 2013-11-22 12:41 - 00001271 _____ C:\Users\Achim\Desktop\Kufer-WEB-Zugangsdaten.txt - Verknüpfung.lnk

2013-11-19 03:33 - 2013-03-06 11:04 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
 

Files to move or delete:

====================

C:\Users\Achim\cc_20131210_203255.reg
 
 

Some content of TEMP:

====================

C:\Users\Achim\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-12-11 22:24
 

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Hallo hier ist noch der addition.txtFRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-12-2013 01

Ran by Achim at 2013-12-17 07:47:17

Running from C:\Users\Achim\Downloads\Antivir\Trojan

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Sophos Anti-Virus (Disabled - Up to date) {65FBD860-96D8-75EF-C7ED-7BE27E6C498A}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Sophos Anti-Virus (Disabled - Up to date) {DE9A3984-B0E2-7A61-FD5D-409005EB0337}

FW: LANCOM Advanced VPN Client (Disabled) {BEB21647-135A-7893-42A0-BBC3960C218D}
 

==================== Installed Programs ======================
 

7-Zip 9.20

Adobe Flash Player 11 ActiveX (Version: 11.9.900.170)

Adobe Flash Player 11 Plugin (Version: 11.9.900.170)

Any Video Converter 5.0.5

Apple Application Support (Version: 2.3.6)

Apple Mobile Device Support (Version: 7.0.0.117)

Apple Software Update (Version: 2.1.3.127)

AVM FRITZ!Box AddOn (IE) (Version: 1.7.0)

AXIS Camera Companion 2.1 (Version: 2.1.14)

AXIS Camera Management 4.00 (Version: 4.00.064)

AXIS IP JumpStarter

AXIS Media Control Embedded

AXIS Media Control Embedded Installer (Version: 6.3.100)

BiAdmin

Bonjour (Version: 3.0.0.10)

camerastreamcontrol (Version: 1.0.7316)

Canon IJ Network Scanner Selector EX

Canon IJ Network Tool (Version: 3.1.1)

Canon Inkjet Printer Driver Add-On Module

Canon iP4200

Canon Kurzwahlprogramm (Version: 1.3.0)

Canon MP Navigator EX 5.1

Canon MX430 series MP Drivers

Canon MX430 series On-screen Manual

Canon My Printer

Canon Solution Menu EX

CCleaner (Version: 4.00)

CDBurnerXP (Version: 4.5.2.4291)

CD-LabelPrint

CloneDVD2OEM

ContentSAFER for Wizmax

CPUID CPU-Z 1.67.1

D3DX10 (Version: 15.4.2368.0902)

Dawicontrol RAID Monitor (Version: 3.3.9)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

DocWallet (HKCU Version: 2.0.0.9873)

dreamboxEDIT -- The one and only settings editor for your Dreambox

DreamStream E2 (Version: 0.4.0 (Beta 14a))

Driver Genius Professional Edition

Dropbox (HKCU Version: 2.4.6)

DVD Shrink 3.2 deutsch (DeCSS-frei)

elmeg WIN-Tools V7.63 (Version: 7.63.0000)

EVEREST Home Edition v2.20 (Version: 2.20)

Evernote v. 4.6.6 (Version: 4.6.6.8360)

ffdshow [rev 2033] [2008-07-05] (Version: 1.0)

FileZilla Client 3.7.3 (Version: 3.7.3)

Firebird SQL Server - MAGIX Edition (Version: 2.1.27.0)

FreePDF (Remove only)

FRITZ!Box USB-Fernanschluss (HKCU Version: 2.3.1.0)

Fwink (Version: 1.0.96)

Google Drive (Version: 1.12.5329.1887)

Google Update Helper (Version: 1.3.22.3)

GPL Ghostscript (Version: 9.04)

HyperTerminal Private Edition v7.0

iCloud (Version: 3.0.2.163)

IIS 8.0 Express (Version: 8.0.1557)

IIS Express Application Compatibility Database for x86

iisnode for iis 7.x dev package (Version: 0.1.21.0)

IrfanView (remove only) (Version: 4.35)

ISO Recorder (Version: 3.0.0)

iTunes (Version: 11.1.3.8)

Java 7 Update 45 (Version: 7.0.450)

Java Auto Updater (Version: 2.1.9.8)

Junk Mail filter update (Version: 15.4.3502.0922)

KeePass Password Safe 2.22

LANCOM Advanced VPN Client (Version: 2.32 Build 160)

LANconfig (Version: 8.82.44.0)

LANmonitor/WLANmonitor (Version: 8.82.20.0)

LanSafe (Version: 6.0.4)

Lenovo System Update (Version: 5.03.0005)

LogMeIn (Version: 4.1.2651)

LogMeIn Ignition (Version: 1.2.264)

MAGIX Screenshare (Version: 4.3.6.1987)

MAGIX Speed burnR (MSI) (Version: 7.0.2.6)

MAGIX Video deluxe 17 Premium (Version: 10.0.1.14)

Marvell Miniport Driver (Version: 11.45.3.3)

MEDION GoPal Assistant (Version: 6.3.1.12905)

Medion GoPal Assistant 4.00.0044 (Version: 4.0.44.0)

Microsoft .NET Framework 4.5 (Version: 4.5.50709)

Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)

Microsoft Application Error Reporting (Version: 12.0.6012.5000)

Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Groove MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Outlook Connector (Version: 14.0.6123.5001)

Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Professional Plus 2010 (Version: 14.0.7015.1000)

Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000)

Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000)

Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (Version: 14.0.5120.5000)

Microsoft SkyDrive (HKCU Version: 17.0.2015.0811)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Web Platform Installer 4.6 (Version: 4.0.40719.0)

Morgan Multimedia Motion JPEG Codec 3.0.0.9 (Version: 3.0.0.9)

Mozilla Firefox 23.0 (x86 de) (Version: 23.0)

mRemoteNG (Version: 1.70.4814.21440)

MSVCRT (Version: 15.4.2862.0708)

MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)

Native Instruments Traktor DJ Player

No23 Recorder (Version: 2.1.0.3)

node.js (Version: 0.6.20)

Nuance PDF Professional 6 (Version: 6.00.3201)

NVIDIA Grafiktreiber 307.83 (Version: 307.83)

NVIDIA Install Application (Version: 2.1002.109.706)

NVIDIA Systemsteuerung 307.83 (Version: 307.83)

NVIDIA Update 1.10.8 (Version: 1.10.8)

NVIDIA Update Components (Version: 1.10.8)

Oracle VM VirtualBox 4.2.12 (Version: 4.2.12)

pcwSIcons 2

PDAViewer

Ping tester

QuickTime (Version: 7.74.80.86)

Realtek High Definition Audio Driver (Version: 6.0.1.6662)

RedMon - Redirection Port Monitor

Revo Uninstaller Pro 3.0.7 (Version: 3.0.7)

Scansoft PDF Professional

SecurView Pro 2.1.2 (Version: 2.1.2)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition

SetupWizard (Version: 1.0.3604)

Skype™ 6.1 (Version: 6.1.129)

Sophos Anti-Virus (Version: 10.3.1)

Sophos AutoUpdate (Version: 2.9.0.344)

Spesoft Audio Converter 1.90

Spotify (HKCU Version: 0.9.6.81.gd359a796)

swMSM (Version: 12.0.0.1)

System Migration Assistant (Version: 6.00.0009)

System Requirements Lab for Intel (Version: 4.5.13.0)

TeamViewer 8 (Version: 8.0.22298)

TeraCopy 2.27

TightVNC (Version: 2.7.10.0)

Total Commander (Remove or Repair) (Version: 8.01)

UBitMenuDE (Version: 01.04)

Update for Microsoft .NET Framework 4.5 (KB2750147) (Version: 1)

Update for Microsoft .NET Framework 4.5 (KB2805221) (Version: 1)

Update for Microsoft .NET Framework 4.5 (KB2805226) (Version: 1)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition

Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition

Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition

Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition

Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition

VideoLAN VLC media player 0.8.6i (Version: 0.8.6i)

VisionGS BE

Visual Watermark 2.9.34

VNC Mirror Driver 1.8.0 (Version: 1.8.0)

VNC Printer Driver 1.8.0 (Version: 1.8.0)

VNC Server 5.0.5 (Version: 5.0.5)

VNC Viewer 5.0.5 (Version: 5.0.5)

VS 2008 CRT Package (Version: 1.1.0)

Windows 7 USB/DVD Download Tool (Version: 1.0.30)

Windows Azure Authoring Tools - v2.2 (Version: 2.2.6492.2)

Windows Azure Storage Tools - v2.2 (Version: 2.2.0.0)

Windows Live Communications Platform (Version: 15.4.3502.0922)

Windows Live Essentials (Version: 15.4.3502.0922)

Windows Live Essentials (Version: 15.4.3538.0513)

Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)

Windows Live Installer (Version: 15.4.3502.0922)

Windows Live Mail (Version: 15.4.3502.0922)

Windows Live Messenger (Version: 15.4.3538.0513)

Windows Live MIME IFilter (Version: 15.4.3502.0922)

Windows Live Photo Common (Version: 15.4.3502.0922)

Windows Live PIMT Platform (Version: 15.4.3508.1109)

Windows Live SOXE (Version: 15.4.3502.0922)

Windows Live SOXE Definitions (Version: 15.4.3502.0922)

Windows Live UX Platform (Version: 15.4.3502.0922)

Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)

Windows Live Writer (Version: 15.4.3502.0922)

Windows Live Writer Resources (Version: 15.4.3502.0922)

Windows Mobile Device Center Driver Update (Version: 6.1.6965.0)

Windows Mobile-Gerätecenter (Version: 6.1.6965.0)

Wondershare Video Converter Ultimate(Build 6.6.0.5) (Version: 6.6.0.5)

Xilisoft iPhone to PC Copy (Version: 5.5.1.20130920)

XMedia Recode Version 3.1.6.6 (Version: 3.1.6.6)
 

==================== Restore Points  =========================
 

15-12-2013 12:31:08 Windows Modules Installer

15-12-2013 12:31:46 Windows Modules Installer

15-12-2013 12:50:14 Revo Uninstaller Pro's restore point - Malwarebytes Anti-Malware Version 1.75.0.1300

15-12-2013 12:54:38 Revo Uninstaller Pro's restore point - Microsoft Office Proof (French) 2010

15-12-2013 12:54:51 Supprimé Microsoft Office Proof (French) 2010

16-12-2013 19:47:29 Windows Modules Installer

17-12-2013 06:14:32 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 03:04 - 2013-12-14 19:22 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0CAB94CE-A9C1-4CDC-98B0-FC25BE25495F} - System32\Tasks\{2003F68E-45F7-4F36-BD75-A8443664497C} => C:\Users\Achim\Downloads\APC-Smart-UAS750i\PCPEInstaller.exe

Task: {1B6D75AE-EF44-438F-8892-B1CC6082567F} - System32\Tasks\{411FCCF8-75C0-42DF-B5A9-C00E5DC28090} => C:\Users\Achim\Downloads\APC-Smart-UAS750i\PCPEInstaller.exe

Task: {2D651CA5-640B-4494-B153-F72C05CD5493} - System32\Tasks\{9388E8B2-4B0A-4CE8-99E1-349BA535C24F} => C:\SWTOOLS\DRIVERS\AUDIO\v7aud12us17\Setup.exe [2005-11-14] (Macrovision Corporation)

Task: {355C99FE-A554-4188-8DF0-C2E3B247DD53} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)

Task: {582558E5-8067-4152-BBFA-699D57D61E37} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files\Lenovo\System Update\tvsuShim.exe [2013-09-17] ()

Task: {5FD76A49-E787-48D4-8886-E4DA61359BFD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-06] (Google Inc.)

Task: {6BEC2CBE-EEA8-4BA4-B8D7-4E0575502D9F} - System32\Tasks\{C8A84A64-D446-495A-807E-F9060E3215D9} => C:\Users\Achim\Downloads\APC-Smart-UAS750i\PCPEInstaller.exe

Task: {8EF03B67-DA26-4060-8A5D-0CB4A0E2F979} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-14] (Adobe Systems Incorporated)

Task: {D0C618F7-F4FC-4DEF-BEC4-522CAFCFD190} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {D626F050-AFAA-43CD-9182-8D50D56131AE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-06] (Google Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-04-20 10:07 - 2011-10-26 16:41 - 00305664 _____ () C:\Program Files\TeraCopy\TeraCopyExt.dll

2013-08-07 20:25 - 2013-08-07 20:25 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll

2013-07-11 18:42 - 2013-12-05 07:19 - 36967424 _____ () C:\Users\Achim\AppData\Roaming\Spotify\Data\libcef.dll

2013-09-14 00:51 - 2013-09-14 00:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll

2013-09-14 00:50 - 2013-09-14 00:50 - 01242952 _____ () C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll

2013-08-23 20:01 - 2013-08-23 20:01 - 25100288 _____ () C:\Users\Achim\AppData\Roaming\Dropbox\bin\libcef.dll

2013-12-17 07:38 - 2013-12-17 07:38 - 00098816 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32api.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00110080 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\pywintypes27.dll

2013-12-17 07:38 - 2013-12-17 07:38 - 00364544 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\pythoncom27.dll

2013-12-17 07:38 - 2013-12-17 07:38 - 00044032 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_socket.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 01153024 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_ssl.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00320512 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32com.shell.shell.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00711680 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_hashlib.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 01175040 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._core_.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00805888 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._gdi_.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00811008 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._windows_.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 01062400 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._controls_.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00735232 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._misc_.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00128512 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_elementtree.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00127488 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\pyexpat.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00557056 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\pysqlite2._sqlite.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00087040 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_ctypes.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00119808 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32file.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00108544 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32security.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00018432 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32event.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00038912 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32inet.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00122368 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._wizard.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00686080 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\unicodedata.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00026624 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\_multiprocessing.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00070656 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\wx._html2.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00010240 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\select.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00025600 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32pdh.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00504832 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\windows._cacheinvalidation.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00011264 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32crypt.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00035840 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32process.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00017408 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32profile.pyd

2013-12-17 07:38 - 2013-12-17 07:38 - 00022528 _____ () C:\Users\Achim\AppData\Local\Temp\_MEI56962\win32ts.pyd
 

==================== Alternate Data Streams (whitelisted) =========
 

AlternateDataStreams: C:\ProgramData\TEMP:0574215C

AlternateDataStreams: C:\ProgramData\TEMP:527B6DAD

AlternateDataStreams: C:\ProgramData\TEMP:8E55808C

AlternateDataStreams: C:\ProgramData\TEMP:D95ACC7D
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service"
 

==================== Faulty Device Manager Devices =============
 

Name: Unknown Device

Description: Unknown Device

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standard-USB-Hostcontroller)

Service: 

Problem: : Windows has stopped this device because it has reported problems. (Code 43)

Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 
 

Name: VirtualBox Host-Only Ethernet Adapter

Description: VirtualBox Host-Only Ethernet Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Oracle Corporation

Service: VBoxNetAdp

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (12/17/2013 07:45:27 AM) (Source: Windows Search Service) (User: )

Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/17/2013 07:45:27 AM) (Source: Windows Search Service) (User: )

Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=3800} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.
 

Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
 

Error: (12/17/2013 07:45:27 AM) (Source: ESENT) (User: )

Description: Windows (4052) Windows:  Bei Überprüfung der aus Datei "C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" bei Offset 203456512 (0x000000000c208000) (Datenbankseite Windows0) für 32768 (0x00008000) Bytes gelesenen Datenbankseite ist durch eine Inkonsistenz der Seitenprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war [c9d2362da3693e4f:028bfd74a48eb01e:0000000000001840:10d4ef2b10f418ca], die tatsächliche Prüfsumme [c9c73638ed3bbf65:02defd21ea893161:0000000000001840:10d4ef2b10f418ca]. Fehler -1018 (0xfffffc06) bei Leseoperation. Wenn dieser Zustand andauert, stellen Sie die Datenbank aus einer vorherigen Sicherung wieder her. Dieses Problem ist vermutlich durch fehlerhafte Hardware bedingt. Wenden Sie sich für weitere Unterstützung bei der Diagnose des Problems an Ihren Hardwarehersteller.
 

Error: (12/17/2013 07:45:14 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 9.0.8112.16526, Zeitstempel: 0x52855173

Name des fehlerhaften Moduls: MSHTML.dll, Version: 9.0.8112.16526, Zeitstempel: 0x528558ea

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00417455

ID des fehlerhaften Prozesses: 0x14f0

Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0

Pfad der fehlerhaften Anwendung: iexplore.exe1

Pfad des fehlerhaften Moduls: iexplore.exe2

Berichtskennung: iexplore.exe3
 

Error: (12/17/2013 06:47:13 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (12/16/2013 07:28:05 PM) (Source: Winlogon) (User: )

Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
 

Error: (12/16/2013 07:27:42 PM) (Source: Winlogon) (User: )

Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
 

Error: (12/16/2013 07:27:16 PM) (Source: Winlogon) (User: )

Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
 

Error: (12/16/2013 07:26:47 PM) (Source: Winlogon) (User: )

Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
 

Error: (12/16/2013 07:25:50 PM) (Source: Winlogon) (User: )

Description: Der Windows-Anmeldeprozess wurde unerwartet beendet.
 
 

System errors:

=============

Error: (12/17/2013 07:44:49 AM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 51. Der interne Fehlerstatus lautet: 805.
 

Error: (12/17/2013 07:44:49 AM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 51. Der interne Fehlerstatus lautet: 805.
 

Error: (12/17/2013 07:44:49 AM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 51. Der interne Fehlerstatus lautet: 805.
 

Error: (12/17/2013 07:43:34 AM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 51. Der interne Fehlerstatus lautet: 805.
 

Error: (12/17/2013 07:43:34 AM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 51. Der interne Fehlerstatus lautet: 805.
 

Error: (12/17/2013 07:32:23 AM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (12/17/2013 07:21:32 AM) (Source: DCOM) (User: )

Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}
 

Error: (12/16/2013 07:29:28 PM) (Source: TermDD) (User: )

Description: Die RDP-Protokollkomponente "DATA ENCRYPTION" hat einen Fehler im Protokollablauf festgestellt und die Clientverbindung getrennt.
 

Error: (12/16/2013 06:49:51 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 

Error: (12/15/2013 08:19:15 PM) (Source: DCOM) (User: NT-AUTORITÄT)

Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)
 
 

Microsoft Office Sessions:

=========================

Error: (12/17/2013 07:45:27 AM) (Source: Windows Search Service)(User: )

Description: Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

The catalog is corrupt
 

Error: (12/17/2013 07:45:27 AM) (Source: Windows Search Service)(User: )

Description: Kontext: Windows Anwendung, SystemIndex Katalog
 
 

Details:

        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

3800
 

Error: (12/17/2013 07:45:27 AM) (Source: ESENT)(User: )

Description: Windows4052Windows: C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb203456512 (0x000000000c208000)32768 (0x00008000)-1018 (0xfffffc06)[c9d2362da3693e4f:028bfd74a48eb01e:0000000000001840:10d4ef2b10f418ca][c9c73638ed3bbf65:02defd21ea893161:0000000000001840:10d4ef2b10f418ca]6208 (0x1840)
 

Error: (12/17/2013 07:45:14 AM) (Source: Application Error)(User: )

Description: iexplore.exe9.0.8112.1652652855173MSHTML.dll9.0.8112.16526528558eac00000050041745514f001cefaf358e48e06C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\MSHTML.dllc831f814-66e6-11e3-87ad-001e909e0c7e
 

Error: (12/17/2013 06:47:13 AM) (Source: SideBySide)(User: )

Description: Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"c:\program files\Canon\mp navigator ex 5.1\mpnmlif64.exe
 

Error: (12/16/2013 07:28:05 PM) (Source: Winlogon)(User: )

Description: 
 

Error: (12/16/2013 07:27:42 PM) (Source: Winlogon)(User: )

Description: 
 

Error: (12/16/2013 07:27:16 PM) (Source: Winlogon)(User: )

Description: 
 

Error: (12/16/2013 07:26:47 PM) (Source: Winlogon)(User: )

Description: 
 

Error: (12/16/2013 07:25:50 PM) (Source: Winlogon)(User: )

Description: 
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-12-16 22:28:30.492

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sirenacm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-16 22:28:30.414

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-04 22:52:02.185

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sirenacm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-12-04 22:52:02.107

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-09-27 18:50:44.302

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sirenacm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-09-27 18:50:44.179

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-30 17:02:24.521

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\sirenacm.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-06-30 17:02:24.383

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-03-08 20:05:37.900

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2013-03-08 19:26:17.899

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\l3codeca.acm" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 66%

Total physical RAM: 2047.24 MB

Available physical RAM: 683.92 MB

Total Pagefile: 7300.86 MB

Available Pagefile: 5758.57 MB

Total Virtual: 2047.88 MB

Available Virtual: 1899.67 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:146.39 GB) (Free:2.01 GB) NTFS

Drive d: () (Fixed) (Total:785.03 GB) (Free:32.38 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: E535C9BE)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=146 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=785 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

--- --- ---

hi,

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.

Downloade dir bitte Windows Repair (All In One) von hier.

Installiere das Programm. Starte es, nachdem die Installation abgeschlossen wurde.
Klicke auf Step 2 und drücke unter Check Disk auf Do It.

http://i1224.photobucket.com/albums/...3/Capture3.gif
Wenn der Vorgang abgeschlossen ist, klicke auf Step 3 und drücke unter System File Check auf Do It.

http://i1224.photobucket.com/albums/...y3/Capture.gif
Nachdem der Vorgang abgeschlossen ist, klicke auf Start Repairs, wähle den Advanced Mode und drücke Start.

http://i1224.photobucket.com/albums/...3/Capture1.gif
Gehe bitte sicher, dass die Kästchen wie unten zu sehen angehakt sind. Bitte hake zusätzlich noch Set Windows Services to Default Startup an.
Hake Restart System when Finished an.
Drücke Start.

http://i1238.photobucket.com/albums/...eakingtool.jpg