Hallo!
Hab über die Festplatte Textsuche gemacht und einiges (do-search) in diversen
firefox und chromeverzeichnissen gefunden z.B Zitat:
FIREFOX MAINTENANCESERVICE. LOG
...
...
Passed in path: 'C:\Users\xxxxxxx\AppData\Local\Temp\MozUpdater\bgupdate\updater.exe'; Using this path for updating: 'C:\Program Files\Mozilla Maintenance Service\update\updater.exe'.
updater.exe was compared successfully to the installation directory updater.exe.
The updater.exe application contains the Mozilla updater identity.
The file "C:\Program Files\Mozilla Maintenance Service\update\updater.exe" is signed and the signature was verified.
Starting update process as the service in session 0.
Starting service with cmdline: "C:\Program Files\Mozilla Maintenance Service\update\updater.exe" C:\Users\xxxxxxx\AppData\Local\Mozilla\updates\308046B0AF4A39CB\updates\0 "C:\Program Files\Mozilla Firefox\updated" 5464/replace "C:\Program Files\Mozilla Firefox" "C:\Program Files\Mozilla Firefox\firefox.exe" hxxp://do-search.com/?type=sc&ts=1384687031&from=tugs&uid=WDCXWD10EARS-00Y5B1_WD-WMAV5098230982309
Process was started... waiting on result.
Process finished with return code 0.
updater.exe returned status: succeeded
...
...
|
und eine Verknüpfung Y auf dem desktop mit dem Ziel
"C:\Program Files\Mozilla Firefox\firefox.exe" hxxp://do-search.com/?type=sc&ts=1384687031&from=tugs&uid=WDCXWD10EARS-00Y5B1_WD-WMAV5098230982309
nach bißchen Nachdenken hab ich firefox und chrome komplett gelöscht und neu installiert.
(auch die profilverzeichnisse)
Firefox und Chrome sind wieder OK, nicht der IE, mit dem kann man ja nicht so verfahren.
meine FRST LOGS
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-12-2013
Ran by Helfert (administrator) on HELFERT-PC on 22-12-2013 17:27:20
Running from C:\Users\Helfert\Pictures\Downloads
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodag.exe
() C:\Windows\System32\PSIService.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(SMART Technologies) C:\Program Files\SMART Technologies\Education Software\SMARTHelperService.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Microsoft Corporation) \\?\C:\Windows\system32\wbem\WMIADAP.EXE
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(CyberLink) C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(O&O Software GmbH) C:\Program Files\OO Software\Defrag\oodtray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-10-02] (Intel Corporation)
HKLM\...\Run: [CLMLServer] - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-06-03] (CyberLink)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7703072 2009-08-04] (Realtek Semiconductor)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-21] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM\...\Run: [OODefragTray] - C:\Program Files\OO Software\Defrag\oodtray.exe [2729800 2011-01-25] (O&O Software GmbH)
HKCU\...\Run: [Spybot-S&D Cleaning] - C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe [3666224 2013-09-20] (Safer-Networking Ltd.)
HKU\Default\...\RunOnce: [HKCU] - C:\Windows\System32\oobe\info\HKCU.vbs [ 2009-11-12] ()
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [ 2009-10-23] ()
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
HKLM\...\AppCertDlls: [x64] -> c:\program files\movies toolbar\datamngr\x64\apcrtldr.dll <===== ATTENTION
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://medion.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=394&systemid=406&v=a9396-115&apn_uid=3733537006034506&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=135&systemid=414&v=u9397-129&apn_uid=3733537006034506&apn_dtid=BND414&o=APN10649&apn_ptnrs=AGA&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=394&systemid=406&v=a9396-115&apn_uid=3733537006034506&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=135&systemid=414&v=u9397-129&apn_uid=3733537006034506&apn_dtid=BND414&o=APN10649&apn_ptnrs=AGA&q={searchTerms}
SearchScopes: HKCU - {B06AF44E-5A04-49EC-99EA-C143C09BE002} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=de_DE&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^DE&apn_uid=0C862655-094A-4228-BDD0-4B74D45793EE&apn_sauid=02EA20AD-785E-4576-8FDF-133218F9412B
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO: No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM - No Name - {e5d4f4fd-a039-4670-8354-633c30a5f54e} - No File
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {1E3F1348-4370-4BBE-A67A-CC7ED824CA85} hxxp://download.microsoft.com/download/7/4/9/749b0dc5-2175-4d5b-a6dd-9c4bc923683e/Selfhelpcontrol.cab
DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 19 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
FireFox:
========
FF ProfilePath: C:\Users\Helfert\AppData\Roaming\Mozilla\Firefox\Profiles\squ6w4la.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.4 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101727.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Helfert\AppData\Roaming\Mozilla\Firefox\Profiles\squ6w4la.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [fiddlerhook@fiddler2.com] - C:\Program Files\Fiddler2\FiddlerHook
FF Extension: FiddlerHook - C:\Program Files\Fiddler2\FiddlerHook
Chrome:
=======
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\Helfert\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh\30.2_0
CHR Extension: (Docs) - C:\Users\Helfert\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\Helfert\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Helfert\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Helfert\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Google Wallet) - C:\Users\Helfert\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Helfert\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx
CHR HKLM\...\Chrome\Extension: [ifohbjbgfchkkfhphahclmkpgejiplfo] - C:\Users\Helfert\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
========================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-21] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-21] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1155072 2009-02-03] (MAGIX AG)
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1044816 2012-09-23] (Flexera Software, Inc.)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
R2 OODefragAgent; C:\Program Files\OO Software\Defrag\oodag.exe [2336072 2011-01-25] (O&O Software GmbH)
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 SMARTHelperService; C:\Program Files\SMART Technologies\Education Software\SMARTHelperService.exe [580976 2012-03-21] (SMART Technologies)
==================== Drivers (Whitelisted) ====================
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2010-11-01] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-21] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-21] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-25] (Avira Operations GmbH & Co. KG)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2010-11-01] ()
R3 SMARTMouseFilterx86; C:\Windows\System32\DRIVERS\SMARTMouseFilterx86.sys [11632 2012-03-21] (SMART Technologies ULC)
R3 SMARTVHidMini2000x86; C:\Windows\System32\DRIVERS\SMARTVHidMini2000x86.sys [14704 2012-03-21] (SMART Technologies ULC)
R3 SMARTVTabletPCx86; C:\Windows\System32\DRIVERS\SMARTVTabletPCx86.sys [21872 2012-03-21] (SMART Technologies ULC)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-09-04] (Avira GmbH)
S3 TelekomNM3; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM3.sys [35040 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-22 17:19 - 2013-12-22 17:19 - 00001272 _____ C:\Windows\PFRO.log
2013-12-22 17:10 - 2013-12-22 17:10 - 00000000 ____D C:\FRST
2013-12-22 16:48 - 2013-12-22 16:48 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-22 15:14 - 2013-12-22 15:14 - 00001115 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-12-22 15:14 - 2013-12-22 15:14 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-22 15:14 - 2013-12-22 15:14 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-22 15:04 - 2013-12-22 15:04 - 00009653 _____ C:\Users\Helfert\Desktop\bookmarks-2013-12-22.json
2013-12-22 15:03 - 2013-12-22 16:51 - 00001258 _____ C:\Users\Helfert\Desktop\miststück.txt
2013-12-22 14:53 - 2013-12-22 14:53 - 00000000 ____D C:\Windows\system32\oodag
2013-12-22 14:21 - 2013-12-22 14:21 - 00000000 ____D C:\Program Files\Security Task Manager
2013-12-22 14:19 - 2013-12-22 14:19 - 00000000 ____D C:\Users\Helfert\Desktop\prozessexplorer
2013-12-22 14:18 - 2013-12-22 14:18 - 00345839 _____ C:\Users\Helfert\Desktop\suche.xps
2013-12-22 14:17 - 2013-12-22 14:17 - 00002560 _____ C:\Users\Helfert\Documents\seCache.tmp
2013-12-22 13:05 - 2013-12-22 13:05 - 00000903 _____ C:\Users\Helfert\Desktop\InfoRapid Suchen & Ersetzen.lnk
2013-12-22 13:05 - 2013-12-22 13:05 - 00000000 ____D C:\Program Files\seRapid
2013-12-22 12:51 - 2013-12-22 12:56 - 00000000 ____D C:\Users\Helfert\Documents\Fiddler2
2013-12-22 12:50 - 2013-12-22 12:50 - 00000000 ____D C:\Program Files\Fiddler2
2013-12-22 12:29 - 2013-12-22 12:29 - 00002757 _____ C:\Users\Public\Desktop\O&O Defrag.lnk
2013-12-22 12:29 - 2013-12-22 12:29 - 00000000 ____D C:\Users\Helfert\AppData\Local\O&O
2013-12-22 12:29 - 2013-12-22 12:29 - 00000000 ____D C:\Program Files\OO Software
2013-12-22 12:28 - 2013-12-22 12:28 - 00000000 ____D C:\Users\Helfert\Documents\Media Go
2013-12-22 12:19 - 2013-12-22 17:20 - 00000907 _____ C:\Windows\setupact.log
2013-12-22 12:19 - 2013-12-22 12:19 - 00000000 _____ C:\Windows\setuperr.log
2013-12-22 12:17 - 2013-12-22 12:17 - 00000030 _____ C:\Users\Helfert\AppData\Roaming\WB.CFG
2013-12-22 11:53 - 2013-12-22 11:53 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.txt
2013-12-22 11:41 - 2013-12-22 11:41 - 00000000 ____D C:\Users\Helfert\AppData\Roaming\Notepad++
2013-12-22 11:41 - 2013-12-22 11:41 - 00000000 ____D C:\Users\Helfert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2013-12-22 11:41 - 2013-12-22 11:41 - 00000000 ____D C:\Program Files\Notepad++
2013-12-21 22:10 - 2013-12-21 22:10 - 00221184 _____ C:\Windows\system32\config\DEFAULT.jv16pt_bak
2013-12-21 21:44 - 2013-12-22 12:10 - 00000000 ____D C:\Program Files\jv16 PowerTools 2014
2013-12-21 21:44 - 2013-12-21 21:44 - 00001851 _____ C:\Users\Public\Desktop\jv16 PowerTools 2014.lnk
2013-12-21 21:44 - 2013-12-21 21:44 - 00000024 ___SH C:\Users\Helfert\AppData\Roaming\System5908ConfigCollection.dat
2013-12-21 21:44 - 2013-12-21 21:44 - 00000024 ___SH C:\Users\Helfert\AppData\Roaming\1D959CA221C7573.sys
2013-12-21 21:44 - 2013-12-21 21:44 - 00000000 ____D C:\Users\Helfert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jv16 PowerTools 2014
2013-12-21 20:51 - 2013-12-22 14:44 - 00319462 _____ C:\Users\Helfert\AppData\Local\census.cache
2013-12-21 20:51 - 2013-12-22 14:44 - 00146338 _____ C:\Users\Helfert\AppData\Local\ars.cache
2013-12-21 20:24 - 2013-12-21 20:24 - 00000036 _____ C:\Users\Helfert\AppData\Local\housecall.guid.cache
2013-12-21 18:53 - 2013-12-21 18:53 - 00000098 _____ C:\Windows\wininit.ini
2013-12-21 18:48 - 2013-12-21 18:48 - 00000000 ____D C:\Windows\pss
2013-12-21 18:46 - 2013-12-21 18:46 - 00000000 ____D C:\Users\Helfert\AppData\Local\AskPartnerNetwork
2013-12-21 18:25 - 2013-12-21 18:52 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-12-21 18:25 - 2013-12-21 18:30 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2013-12-21 18:25 - 2013-12-21 18:25 - 00002123 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-12-21 18:25 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
2013-12-21 18:06 - 2013-12-21 18:06 - 00258146 _____ C:\Users\Helfert\Documents\cc_20131221_180611.reg
2013-12-21 18:04 - 2013-12-22 17:19 - 00095697 _____ C:\Windows\WindowsUpdate.log
2013-12-11 20:19 - 2013-12-11 20:19 - 00002174 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-11 06:59 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 06:59 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 06:59 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 06:59 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 06:59 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 06:59 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 06:59 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 06:59 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 06:59 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 06:59 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 06:59 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 06:59 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 06:59 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 06:59 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 06:59 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 06:59 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 06:59 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 06:59 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 06:59 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 06:58 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 06:58 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 06:25 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 06:25 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 06:25 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 06:25 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 06:25 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 06:25 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 06:25 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 06:25 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 06:25 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 06:25 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 06:25 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-11-30 01:04 - 2013-11-30 01:04 - 00000969 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-30 01:04 - 2013-11-30 01:04 - 00000000 ____D C:\Program Files\CCleaner
2013-11-26 23:27 - 2013-11-26 23:27 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-26 23:27 - 2013-11-26 23:27 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-26 23:27 - 2013-11-26 23:27 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-26 23:27 - 2013-11-26 23:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
==================== One Month Modified Files and Folders =======
2013-12-22 17:27 - 2009-11-16 10:59 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-22 17:27 - 2009-07-14 05:34 - 00010096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-22 17:27 - 2009-07-14 05:34 - 00010096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-22 17:25 - 2013-12-21 18:04 - 00095697 _____ C:\Windows\WindowsUpdate.log
2013-12-22 17:25 - 2010-05-17 16:47 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-22 17:20 - 2013-12-22 12:19 - 00000907 _____ C:\Windows\setupact.log
2013-12-22 17:20 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-22 17:19 - 2013-12-22 17:19 - 00001272 _____ C:\Windows\PFRO.log
2013-12-22 17:18 - 2010-05-17 16:47 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-22 17:10 - 2013-12-22 17:10 - 00000000 ____D C:\FRST
2013-12-22 16:51 - 2013-12-22 15:03 - 00001258 _____ C:\Users\Helfert\Desktop\miststück.txt
2013-12-22 16:48 - 2013-12-22 16:48 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-22 16:48 - 2010-05-17 16:47 - 00000000 ____D C:\Users\Helfert\AppData\Local\Google
2013-12-22 16:48 - 2010-05-17 16:47 - 00000000 ____D C:\Program Files\Google
2013-12-22 15:14 - 2013-12-22 15:14 - 00001115 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-12-22 15:14 - 2013-12-22 15:14 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-22 15:14 - 2013-12-22 15:14 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-22 15:14 - 2010-02-26 21:01 - 00000000 ____D C:\Users\Helfert\AppData\Roaming\Mozilla
2013-12-22 15:04 - 2013-12-22 15:04 - 00009653 _____ C:\Users\Helfert\Desktop\bookmarks-2013-12-22.json
2013-12-22 14:53 - 2013-12-22 14:53 - 00000000 ____D C:\Windows\system32\oodag
2013-12-22 14:44 - 2013-12-21 20:51 - 00319462 _____ C:\Users\Helfert\AppData\Local\census.cache
2013-12-22 14:44 - 2013-12-21 20:51 - 00146338 _____ C:\Users\Helfert\AppData\Local\ars.cache
2013-12-22 14:21 - 2013-12-22 14:21 - 00000000 ____D C:\Program Files\Security Task Manager
2013-12-22 14:19 - 2013-12-22 14:19 - 00000000 ____D C:\Users\Helfert\Desktop\prozessexplorer
2013-12-22 14:18 - 2013-12-22 14:18 - 00345839 _____ C:\Users\Helfert\Desktop\suche.xps
2013-12-22 14:17 - 2013-12-22 14:17 - 00002560 _____ C:\Users\Helfert\Documents\seCache.tmp
2013-12-22 13:05 - 2013-12-22 13:05 - 00000903 _____ C:\Users\Helfert\Desktop\InfoRapid Suchen & Ersetzen.lnk
2013-12-22 13:05 - 2013-12-22 13:05 - 00000000 ____D C:\Program Files\seRapid
2013-12-22 12:56 - 2013-12-22 12:51 - 00000000 ____D C:\Users\Helfert\Documents\Fiddler2
2013-12-22 12:50 - 2013-12-22 12:50 - 00000000 ____D C:\Program Files\Fiddler2
2013-12-22 12:29 - 2013-12-22 12:29 - 00002757 _____ C:\Users\Public\Desktop\O&O Defrag.lnk
2013-12-22 12:29 - 2013-12-22 12:29 - 00000000 ____D C:\Users\Helfert\AppData\Local\O&O
2013-12-22 12:29 - 2013-12-22 12:29 - 00000000 ____D C:\Program Files\OO Software
2013-12-22 12:29 - 2011-04-16 13:13 - 00000000 ____D C:\Users\Helfert\AppData\Local\Downloaded Installations
2013-12-22 12:28 - 2013-12-22 12:28 - 00000000 ____D C:\Users\Helfert\Documents\Media Go
2013-12-22 12:28 - 2011-04-16 13:13 - 00000000 ____D C:\Users\Helfert\Podcasts
2013-12-22 12:28 - 2010-02-26 20:56 - 00000000 ____D C:\Users\Helfert
2013-12-22 12:26 - 2010-10-17 06:26 - 00000000 ____D C:\Users\Helfert\AppData\Local\PokerStars.EU
2013-12-22 12:25 - 2012-07-01 01:41 - 00000000 ____D C:\Users\Helfert\AppData\Local\PokerStars.NET
2013-12-22 12:19 - 2013-12-22 12:19 - 00000000 _____ C:\Windows\setuperr.log
2013-12-22 12:17 - 2013-12-22 12:17 - 00000030 _____ C:\Users\Helfert\AppData\Roaming\WB.CFG
2013-12-22 12:10 - 2013-12-21 21:44 - 00000000 ____D C:\Program Files\jv16 PowerTools 2014
2013-12-22 11:53 - 2013-12-22 11:53 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.txt
2013-12-22 11:41 - 2013-12-22 11:41 - 00000000 ____D C:\Users\Helfert\AppData\Roaming\Notepad++
2013-12-22 11:41 - 2013-12-22 11:41 - 00000000 ____D C:\Users\Helfert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2013-12-22 11:41 - 2013-12-22 11:41 - 00000000 ____D C:\Program Files\Notepad++
2013-12-21 22:11 - 2009-07-14 03:03 - 56623104 _____ C:\Windows\system32\config\SOFTWARE.jv16pt_bak2
2013-12-21 22:11 - 2009-07-14 03:03 - 27525120 _____ C:\Windows\system32\config\SYSTEM.jv16pt_bak2
2013-12-21 22:10 - 2013-12-21 22:10 - 00221184 _____ C:\Windows\system32\config\DEFAULT.jv16pt_bak
2013-12-21 21:44 - 2013-12-21 21:44 - 00001851 _____ C:\Users\Public\Desktop\jv16 PowerTools 2014.lnk
2013-12-21 21:44 - 2013-12-21 21:44 - 00000024 ___SH C:\Users\Helfert\AppData\Roaming\System5908ConfigCollection.dat
2013-12-21 21:44 - 2013-12-21 21:44 - 00000024 ___SH C:\Users\Helfert\AppData\Roaming\1D959CA221C7573.sys
2013-12-21 21:44 - 2013-12-21 21:44 - 00000000 ____D C:\Users\Helfert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jv16 PowerTools 2014
2013-12-21 20:24 - 2013-12-21 20:24 - 00000036 _____ C:\Users\Helfert\AppData\Local\housecall.guid.cache
2013-12-21 18:53 - 2013-12-21 18:53 - 00000098 _____ C:\Windows\wininit.ini
2013-12-21 18:52 - 2013-12-21 18:25 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-12-21 18:48 - 2013-12-21 18:48 - 00000000 ____D C:\Windows\pss
2013-12-21 18:46 - 2013-12-21 18:46 - 00000000 ____D C:\Users\Helfert\AppData\Local\AskPartnerNetwork
2013-12-21 18:30 - 2013-12-21 18:25 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2013-12-21 18:25 - 2013-12-21 18:25 - 00002123 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2013-12-21 18:24 - 2013-10-08 20:36 - 00000000 ____D C:\Users\Helfert\AppData\Local\Torch
2013-12-21 18:11 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2013-12-21 18:06 - 2013-12-21 18:06 - 00258146 _____ C:\Users\Helfert\Documents\cc_20131221_180611.reg
2013-12-21 09:28 - 2013-09-05 13:57 - 00069240 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-21 09:28 - 2013-09-05 13:55 - 00135648 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-21 09:28 - 2013-09-05 13:55 - 00090400 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-11 20:28 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-11 20:19 - 2013-12-11 20:19 - 00002174 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-12-11 19:41 - 2009-07-14 05:33 - 00407232 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-11 19:39 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-12-11 06:59 - 2009-11-16 12:26 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 06:33 - 2012-09-30 21:01 - 00000000 ____D C:\Users\Helfert\AppData\Local\Deployment
2013-11-30 01:20 - 2013-10-09 11:05 - 00000000 ____D C:\Windows\Minidump
2013-11-30 01:20 - 2009-11-16 19:39 - 00000000 ____D C:\Windows\Panther
2013-11-30 01:04 - 2013-11-30 01:04 - 00000969 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-11-30 01:04 - 2013-11-30 01:04 - 00000000 ____D C:\Program Files\CCleaner
2013-11-26 23:27 - 2013-11-26 23:27 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-26 23:27 - 2013-11-26 23:27 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-26 23:27 - 2013-11-26 23:27 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-26 23:27 - 2013-11-26 23:27 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-26 23:27 - 2013-11-26 23:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-26 23:27 - 2013-11-26 23:27 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-26 11:11 - 2013-12-11 06:59 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-11 06:59 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-11 06:59 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-11 06:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-11 06:59 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-11 06:59 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-11 06:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-11 06:59 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-11 06:59 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-11 06:59 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-11 06:59 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-11 06:59 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-11 06:59 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-11 06:59 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-11 06:59 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-11 06:59 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-11 06:59 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-11 06:59 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-11 06:59 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-25 13:06 - 2013-09-05 13:55 - 00037352 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-11-24 20:53 - 2013-10-08 20:33 - 00000000 ____D C:\Program Files\Free Video Converter
2013-11-23 19:26 - 2013-12-11 06:25 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
Some content of TEMP:
====================
C:\Users\Helfert\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-21 09:50
==================== End Of Log ============================
--- --- ---
--- --- --- Zitat:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 22-12-2013
Ran by Helfert at 2013-12-22 17:11:24
Running from C:\Users\Helfert\Pictures\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
==================== Installed Programs ======================
Update for Microsoft Office 2007 (KB2508958)
Activation Assistant for the 2007 Microsoft Office suites
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0)
Adobe Flash Player 10 ActiveX (Version: 10.2.152.26)
Adobe Flash Player 11 Plugin (Version: 11.4.402.265)
Adobe Reader XI (11.0.05) - Deutsch (Version: 11.0.05)
Adobe Shockwave Player 11.5 (Version: 11.5.2.602)
ALDI Süd Foto Service (Version: 4.5.9.140)
Aldi Süd Fotoservice
ALDI SÜD Mah Jong
ALDI Süd Online Druck Service (Version: 4.5.1.0)
Amazon MP3-Downloader 1.0.17 (Version: 1.0.17)
Anno 1404 (Version: 1.00.0000)
Apple Application Support (Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (Version: 2.1.3.127)
Ask Toolbar (Version: 1.15.15.0) <==== ATTENTION
Audacity 1.3.12 (Unicode)
Avira Free Antivirus (Version: 14.0.2.286)
Avira SearchFree Toolbar (Version: 12.10.0.2948)
Bing Bar (Version: 7.0.791.0)
Bonjour (Version: 3.0.0.10)
CCleaner (Version: 4.08)
CDex - Open Source Digital Audio CD Extractor (Version: 1.70.4.2009)
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
Corel MediaOne (Version: 2.100.0000)
CorelDRAW Essential Edition 3 (Version: 3.0)
CyberLink LabelPrint (Version: 2.5.1916)
CyberLink Power2Go (Version: 6.1.3213)
CyberLink PowerDVD Copy (Version: 1.0.6720)
DE (Version: 3.0)
Divinity II - DKS (Version: (#version})
EasyBits GO
Fiddler (Version: 4.4.5.8)
Firebird SQL Server - MAGIX Edition (Version: 2.1.23.0)
Google Chrome (Version: 31.0.1650.63)
Google Earth (Version: 7.1.2.2041)
Google Update Helper (Version: 1.3.22.3)
Image Resizer Powertoy Clone for Windows (Version: 2.0.0.0)
InfoRapid Suchen & Ersetzen (Version: 3.1f)
Intel(R) Rapid Storage Technology (Version: 9.5.0.1037)
iTunes (Version: 11.1.3.8)
Java 7 Update 15 (Version: 7.0.150)
Java Auto Updater (Version: 2.1.9.0)
Java(TM) 6 Update 29 (Version: 6.0.290)
Junk Mail filter update (Version: 14.0.8089.726)
jv16 PowerTools 2014 (Version: )
Kompetent in Kurzgeschichten (Version: 1.00.0000)
Media Go (Version: 1.7.254)
Media Go Video Playback Engine 1.64.102.02270 (Version: 1.64.102.02270)
MEDION Fotos auf CD & DVD SE Sued (Version: 8.0.3.4)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.4 (Version: 2.0.3008.0)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint Viewer 2007 (German) (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [DEU] (Version: 3.1.0000)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (Version: 9.0.21022.218)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (Version: 10.0.40303)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (Version: 10.0.40308)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU (Version: 10.0.40303)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU (Version: 10.0.40303)
Microsoft Works (Version: 9.7.0621)
Microsoft WSE 3.0 Runtime (Version: 3.0.5305.0)
Mozilla Firefox 26.0 (x86 de) (Version: 26.0)
Mozilla Maintenance Service (Version: 26.0)
Mozilla Thunderbird 17.0.2 (x86 de) (Version: 17.0.2)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Netzmanager (Version: 1.071)
Notepad++ (Version: 6.5.2)
NVIDIA Display Control Panel (Version: 1.6)
NVIDIA Drivers (Version: 1.10)
NVIDIA PhysX (Version: 9.09.1112)
O&O Defrag Free Edition (Version: 14.1.431)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0)
OpenOffice.org 3.2 (Version: 3.2.9502)
phase-6 2.1.1.4c (Version: 2.1.1.4c)
PlayStation(R)Network Downloader (Version: 2.05.00710)
PlayStation(R)Store (Version: 4.1.8.11883)
QuickTime (Version: 7.74.80.86)
Realtek High Definition Audio Driver (Version: 6.0.1.5910)
Security Task Manager 1.8d (Version: 1.8d)
Skype Toolbars (Version: 1.0.4051)
Skype™ 6.0 (Version: 6.0.126)
SMART Common Files (Version: 11.0.246.0)
SMART German Language Pack (Version: 11.0.35.0)
SMART Ink (Version: 1.0.416.0)
SMART Notebook (Version: 11.0.579.0)
SMART Product Drivers (Version: 11.0.220.0)
Spelling Dictionaries Support For Adobe Reader 9 (Version: 9.0.0)
Spybot - Search & Destroy (Version: 2.2.25)
TeamViewer 8 (Version: 8.0.22298)
TIPP10 Version 2.1.0
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update für Microsoft Office Excel 2007 Help (KB963678)
Update für Microsoft Office Powerpoint 2007 Help (KB963669)
Update für Microsoft Office Word 2007 Help (KB963665)
Update Manager (Version: 4.60)
Windows Live Call (Version: 14.0.8064.0206)
Windows Live Communications Platform (Version: 14.0.8064.206)
Windows Live Essentials (Version: 14.0.8089.0726)
Windows Live Essentials (Version: 14.0.8089.726)
Windows Live Fotogalerie (Version: 14.0.8081.709)
Windows Live ID-Anmelde-Assistent (Version: 6.500.3146.0)
Windows Live Mail (Version: 14.0.8089.0726)
Windows Live Messenger (Version: 14.0.8089.0726)
Windows Live Movie Maker (Version: 14.0.8091.0730)
Windows Live Sync (Version: 14.0.8089.726)
Windows Live Writer (Version: 14.0.8089.0726)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
WINZD 2010-08
==================== Restore Points =========================
==================== Hosts content: ==========================
2009-07-14 03:04 - 2013-12-22 11:57 - 00000883 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 hxxp://do-search.com
127.0.0.1 do-search.com
==================== Scheduled Tasks (whitelisted) =============
Task: {062B463A-E6E2-4845-8503-60BB9C7CC618} - System32\Tasks\LaunchApp => C:\Program Files\MyPC Backup\MyPC Backup.exe
Task: {0D03186F-471A-43BC-80AC-8722A61EC354} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {1F2D6214-BE28-499E-9307-DA3F15100275} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-17] (Google Inc.)
Task: {21CD727E-F072-41FB-ABDF-E0714B5B4A2D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd)
Task: {4B01BB9E-93B8-4E6D-8155-EE8FBB632D82} - System32\Tasks\DealPlyUpdate => C:\Program
Task: {4C21C7F8-9CD0-4B87-A465-84AB50AA2CA9} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe
Task: {7757F9D9-85EC-41DA-B727-36FEF8EFAF5A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {AA5A7453-7A6D-4763-AA69-C7AF5E5DE836} - System32\Tasks\{B6171CBE-E4AE-4FA6-897A-D2FF5683FF73} => C:\Program Files\Skype\Phone\Skype.exe [2012-11-09] (Skype Technologies S.A.)
Task: {B2E624BB-0315-480A-95CA-8EC147A57E4B} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {BDB62C5C-773B-4109-8F53-9081A9FB6B55} - System32\Tasks\DealPly => C:\Users\Helfert\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe [2013-03-19] () <==== ATTENTION
Task: {C9B20C9B-C7F1-4145-84D2-AF9D70A599CE} - System32\Tasks\{81DA86E5-0CCD-4E52-9CC1-15306EC1CA46} => C:\Program Files\T-Home\Kinderschutz-Software_2\TO_KSSW.exe
Task: {CE4A4ECD-2C33-464C-A8A2-354E6D94ADB8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-17] (Google Inc.)
Task: {D5365EDA-80ED-459C-968D-5CAA4AA09EAA} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: {FD63808C-2805-47D8-9381-CF85D68B42DA} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-12-22 13:05 - 2003-07-12 08:20 - 00077824 _____ () C:\Program Files\seRapid\SEStart.dll
2013-12-21 18:25 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2013-12-21 18:25 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2012-06-18 16:24 - 2012-06-18 16:24 - 00260096 _____ () C:\Program Files\Notepad++\NppShell_05.dll
2009-06-03 20:59 - 2009-06-03 20:59 - 00619816 ____N () C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll
2009-06-03 20:59 - 2009-06-03 20:59 - 00013096 ____N () C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll
2012-10-11 21:56 - 2012-10-11 21:56 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2012-10-11 21:56 - 2012-10-11 21:56 - 01242512 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-12-22 15:14 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (12/22/2013 03:46:46 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/21/2013 07:04:48 PM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.16428 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1654
Startzeit: 01cefe7719e8e34a
Endzeit: 0
Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe
Berichts-ID:
Error: (12/21/2013 09:53:24 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/17/2013 09:12:35 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/16/2013 08:55:55 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/13/2013 09:49:37 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/12/2013 05:28:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/11/2013 08:22:57 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/10/2013 08:18:58 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
Error: (12/09/2013 07:17:16 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
System errors:
=============
Error: (12/21/2013 10:10:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (12/21/2013 10:10:12 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Live ID Sign-in Assistant erreicht.
Error: (12/21/2013 10:09:42 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Skype Updater erreicht.
Error: (12/21/2013 10:09:12 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (12/21/2013 10:09:12 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.
Error: (12/18/2013 09:33:49 AM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005
Error: (12/16/2013 10:59:08 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk5\DR5 gefunden.
Error: (12/16/2013 10:59:08 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk5\DR5 gefunden.
Error: (12/16/2013 10:59:07 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk5\DR5 gefunden.
Error: (12/16/2013 08:17:36 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005
Microsoft Office Sessions:
=========================
Error: (11/03/2013 01:20:42 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 7 seconds with 0 seconds of active time. This session ended with a crash.
Error: (11/07/2012 07:25:34 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6662.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 2 seconds with 0 seconds of active time. This session ended with a crash.
==================== Memory info ===========================
Percentage of memory in use: 47%
Total physical RAM: 3063.11 MB
Available physical RAM: 1615.61 MB
Total Pagefile: 6124.52 MB
Available Pagefile: 4206.9 MB
Total Virtual: 2047.88 MB
Available Virtual: 1890.23 MB
==================== Drives ================================
Drive c: (Boot) (Fixed) (Total:910.41 GB) (Free:839.79 GB) NTFS
Drive d: (Recover) (Fixed) (Total:20 GB) (Free:11.66 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 932 GB) (Disk ID: 8D9E96FE)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=910 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)
==================== End Of Log ============================
| |
FRST 32-Bit | FRST 64-Bit
So funktioniert es:
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
