Trojaner-Board - GenVariant.Jaik.462, Zugriff durch rundll32.exe

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - GenVariant.Jaik.462, Zugriff durch rundll32.exe (https://www.trojaner-board.de/149285-genvariant-jaik-462-zugriff-rundll32-exe.html)

GenVariant.Jaik.462, Zugriff durch rundll32.exe

Hallo liebes Trojaner-Board,

auf dem PC meines Vaters hat Bitdefender heute einen Virus blockiert und desinfiziert (ein paar Minuten nach dem booten, beim checken von Mails in Thunderbird, allerdings wurden nur zwei Anhänge mit pdfs von vertrauenswürdigen Quellen geöffnet, die auch geprüft habe).

Virusname
GenVariant.Jaik.462

Zugriff durch
rundll32.exe

Adresse
C:\Program Files(x86)\Zarb 4\Zarb.exe

Zarb ist ein Programm für Word mit dem man Arbeitsblätter erstellen kann.

Ein Tiefenscan hat anschließend nichts gefunden, ich traue dem Braten aber nicht ganz. Daher würde ich gerne wissen, was ich noch prüfen soll, damit ich (relativ) sicher sein kann, dass der PC sauber ist.

bitfedender log:

Code:

BitDefender Protokolldatei 
 
 

Produkt BitDefender Internet Security 2011

Prüfaufgabe: Tiefensystem-Scan

Berichtsdatum: Dienstag, 4. Februar 2014 21:22:13

Berichtspfad: C:\ProgramData\BitDefender\Desktop\Profiles\Logs\dcf483c4-26d0-4e6f-ba28-6a53a00adae1\1391541061_1_01.xml
 

 

Prüfpfad: 

Pfad : C:\

Pfad : D:\

Pfad : I:\

Pfad : M:\

 
 

[-]Zusammenfassung Scan-Ergebnisse 
 

[-]Nicht geprüfte Objekte: 

Objektpfad Grund: Abschluss Status 
 

Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_04einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: D:\Eigene Dokumente\Telekom\2007_05einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_05einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: D:\Eigene Dokumente\Telekom\2007_06einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_06einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: D:\Eigene Dokumente\Telekom\2007_07einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_07einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: D:\Eigene Dokumente\Telekom\2007_08einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_08einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: D:\Eigene Dokumente\Telekom\2007_10einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: D:\Eigene Dokumente\Telekom\2007_09einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: D:\Eigene Dokumente\Telekom\2006_11einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_10einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_09einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2006_11einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: D:\Eigene Dokumente\Telekom\2007_02einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: D:\Eigene Dokumente\Telekom\2006_12einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2007_02einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: I:\WD SmartWare.swstor\***\Volume.56c3adec.a6c6.11df.8ba6.806e6f6e6963\Eigene Dokumente\Telekom\2006_12einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

Datei: D:\Eigene Dokumente\Telekom\2007_04einzelverbindungen_***_schluessel.pdf Passwortgeschützt Nicht geprüft (Datei war passwortgeschützt) 

 
 

[-]Ausführliche Scan-Zusammenfassung 
 

[-]Standard 

Geprüfte Objekte: 688143

Infizierte Objekte: 0 (es wurden keine infizierten Objekte gefunden)

Verdächtige Objekte: 0 (es wurden keine verdächtigen Objekte gefunden)

Geklärte Objekte: 0 (keine Bedrohungen während des Prüfvorgangs gefunden)

Ungeklärte Objekte: 0 (keine ungelösten Probleme)

 

[-]Erweitert 

Vergangene Zeit: 01: 11: 11

Dateien pro Sekunde: 161

Übersprungene Objekte: 218135

Passwortgeschützte Objekte: 20

Überkomprimierte Objekte: 0

Geprüfte Archive: 2243

Input-Output Fehler: 58

Geprüfte Boot-Sektoren: 8

Geprüfte Prozesse: 4860

Infizierte Prozesse: 0

Geprüfte Registry Schlüssel: 4722

Infizierte Registry Schlüssel: 0

Geprüfte Cookies: 75

Infizierte Cookies: 0

FRST.txt

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2014

Ran by *** (administrator) on *** on 04-02-2014 22:18:04

Running from C:\Users\***\Downloads

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 

The only official download link for FRST:

Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 

Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 

Download link from any site other than Bleeping Computer is unpermitted or outdated.

See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Processes (Whitelisted) =================
 

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\pchooklaunch64.exe

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\Antispam32\pchooklaunch32.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

() C:\Windows\SysWOW64\XSrvSetup.exe

(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe

() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(CANON INC.) C:\Program Files (x86)\Canon\MyPrinter\BJMYPRT.EXE

(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe

() C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe

(Western Digital) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

(Logitech, Inc.) C:\Program Files (x86)\Logitech\SetPoint\SetPoint.exe

(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe

(Dropbox, Inc.) C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(Western Digital) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

() C:\Program Files (x86)\Logitech\SetPoint\x86\SetPoint32.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NANotify.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2009-12-08] (Realtek Semiconductor)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files (x86)\Canon\MyPrinter\BJMyPrt.exe [2710856 2009-11-02] (CANON INC.)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2011\ieshow.exe [109344 2011-06-02] (BitDefender S.R.L.)

HKLM\...\Run: [BDAgent] - C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe [2026680 2011-07-11] (BitDefender S.R.L.)

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()

HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [OpwareSE4] - C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2011\Antispam32\ieshow.exe [92352 2011-06-02] (BitDefender S.R.L.)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [WD Drive Unlocker] - C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1688008 2012-06-13] (Western Digital)

HKLM-x32\...\Run: [WD Quick View] - C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5237256 2012-12-20] (Western Digital Technologies, Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)

HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [Remote Control Editor] - C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1689088 2010-06-09] (Elgato Systems)

HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [dradio-RecorderTimer] - C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()

HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [385024 2010-05-04] (AMD)

HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [FileHippo.com] - C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)

HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\MountPoints2: {162a9588-c8b7-11df-97db-6cf049e199b3} - G:\setup.EXE /AUTORUN

Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x44C531B77941CC01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -  No File

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

Toolbar: HKLM - Bitdefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2011\IEToolbar.dll (BitDefender S.R.L.)

Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)

Toolbar: HKLM-x32 - Bitdefender Toolbar - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2011\Antispam32\IEToolbar.dll (BitDefender S.R.L.)

Toolbar: HKLM-x32 - No Name - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} -  No File

Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=1.1.11 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll No File

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: TVU Web Player - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\firefox@tvunetworks.com [2010-08-14]

FF Extension: TCAST Plugin - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\tcastv1@tom.com [2010-08-14]

FF Extension: WOT - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-26]

FF Extension: DownloadHelper - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]

FF Extension: Flash and Video Download - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-01-23]

FF Extension: Ghostery - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\firefox@ghostery.com.xpi [2013-08-18]

FF Extension: 1-Click YouTube Video Downloader - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014-01-19]

FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]

FF Extension: Adblock Plus - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-30]

FF HKLM\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\

FF Extension: BitDefender Antiphishing Toolbar - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\ []

FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\

FF Extension: bdToolbar - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\ []

FF HKLM-x32\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\

FF Extension: BitDefender Antiphishing Toolbar - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\ []

FF HKLM-x32\...\Firefox\Extensions: [{09F060FA-566D-42D7-BF79-97AB30863433}] - C:\Program Files (x86)\Steganos Privacy Suite 12\pfplugin

FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 12\spmplugin3

FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\

FF Extension: bdToolbar - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\ []
 

Chrome: 

=======

CHR HomePage: about:blank

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll No File

CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File

CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Nitro PDF Plug-In) - C:\Program Files\Nitro PDF Reader\npnitromozilla.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-04-28]

CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-04-28]

CHR Extension: (WOT) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2013-04-28]

CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-28]

CHR Extension: (Google-Suche) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-28]

CHR Extension: (AdBlock) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-04-28]

CHR Extension: (Ghostery) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2013-04-28]

CHR Extension: (Google Wallet) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-28]

CHR Extension: (Google Mail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-28]
 

==================== Services (Whitelisted) =================
 

R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [65536 2009-08-06] ()

R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-03-26] (Nitro PDF Software)

S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)

R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [271760 2009-04-15] ()

S3 Update Server; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [467248 2010-11-30] (BitDefender)

R2 Updatesrv; C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe [53224 2011-06-02] (BitDefender S.R.L.)

R2 VSSERV; C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe [2660624 2011-07-11] (BitDefender S.R.L.)

S2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1155088 2012-12-20] (Western Digital )

R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [248248 2012-09-06] (Western Digital)

S2 WDRulesService; C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe [1178128 2012-12-20] (Western Digital )

S2 Secunia Update Agent; "C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service [X]
 

==================== Drivers (Whitelisted) ====================
 

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138872 2011-07-28] (SlySoft, Inc.)

R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138872 2011-07-28] (SlySoft, Inc.)

S3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [591968 2010-11-29] (BitDefender)

S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [1186272 2010-11-29] (BitDefender)

R3 BDFM; C:\Windows\System32\DRIVERS\bdfm.sys [162896 2010-05-13] (BitDefender S.R.L. Bucharest, ROMANIA)

R1 Bdfndisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [88144 2010-08-20] (BitDefender)

R0 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [431176 2011-04-01] (BitDefender)

R1 bdfwfpf; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [99408 2010-08-20] (BitDefender)

R3 MTSBDA; C:\Windows\System32\DRIVERS\MtsBda.sys [348224 2009-11-09] (TerraTec Provide)

R3 MtsHID; C:\Windows\System32\DRIVERS\MtsHid.sys [25664 2009-11-09] (TerraTec Provide)

R1 SLEE_17_DRIVER; C:\Windows\Sleen1764.sys [108256 2011-09-12] (Softwareentwicklung Remus - ArchiCrypt - )

S4 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-10-19] (Duplex Secure Ltd.)

R1 STGMFEngine64; C:\Windows\system32\drivers\STGMFEngine64.sys [28576 2011-09-12] (Softwareentwicklung Remus - ArchiCrypt.com)

S3 gdrv; \??\C:\Windows\gdrv.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-04 22:18 - 2014-02-04 22:18 - 00021880 _____ () C:\Users\***\Downloads\FRST.txt

2014-02-04 22:17 - 2014-02-04 22:18 - 00000000 ____D () C:\FRST

2014-02-04 22:16 - 2014-02-04 22:16 - 00380416 _____ () C:\Users\***\Downloads\gqsfq858.exe

2014-02-04 22:15 - 2014-02-04 22:16 - 02080256 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe

2014-02-04 22:15 - 2014-02-04 22:15 - 00000000 _____ () C:\Users\***\AppData\Roaming\.NANotifyHere

2014-02-04 22:08 - 2014-02-04 22:08 - 00000584 _____ () C:\Users\***\Downloads\defogger_disable.log

2014-02-04 22:08 - 2014-02-04 22:08 - 00000020 _____ () C:\Users\***\defogger_reenable

2014-02-04 22:07 - 2014-02-04 22:07 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe

2014-02-03 20:10 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\Public\Foxit Software

2014-02-02 21:06 - 2014-02-03 10:05 - 00000000 ____D () C:\Users\***\Desktop\Wohnungen

2014-01-22 18:10 - 2014-01-22 19:03 - 00000000 ____D () C:\Users\***\AppData\Roaming\vlc

2014-01-22 18:07 - 2014-01-22 18:07 - 24097311 _____ () C:\Users\***\Downloads\vlc-2.1.2-win32.exe

2014-01-21 10:32 - 2014-01-21 18:00 - 00000000 ____D () C:\Users\***\AppData\Local\Nero

2014-01-21 10:32 - 2014-01-21 10:33 - 00000000 ____D () C:\Users\***\AppData\Roaming\Nero

2014-01-21 10:24 - 2014-01-21 10:24 - 00000000 ____D () C:\Windows\System32\Tasks\Nero

2014-01-21 09:54 - 2014-01-21 10:06 - 288310920 _____ (Nero AG) C:\Users\***\Downloads\Nero2014-15.0.07100_trial.exe

2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Roaming\Ashampoo

2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Local\ashampoo

2014-01-21 09:51 - 2014-01-21 09:52 - 00000000 ____D () C:\ProgramData\Ashampoo

2014-01-21 09:45 - 2014-01-21 09:48 - 92789928 _____ (Ashampoo GmbH & Co. KG ) C:\Users\***\Downloads\ashampoo_burning_studio_2014_12.0.5_15376.exe

2014-01-19 11:35 - 2014-01-19 11:18 - 139448593 _____ () C:\Users\***\Desktop\Afrika TV.flv

2014-01-19 10:52 - 2014-01-19 11:02 - 93897148 _____ () C:\Users\***\Desktop\WissensWerte_ Migration - YouTube [720p].mp4

2014-01-18 15:35 - 2014-01-18 15:35 - 00000000 ____D () C:\Users\***\Desktop\Wohnungsgedöns

2014-01-15 20:14 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\***\AppData\Roaming\Foxit Software

2014-01-15 20:12 - 2014-01-15 20:13 - 23867560 _____ (Mozilla) C:\Users\***\Downloads\Firefox_Setup_26.0.exe

2014-01-15 20:11 - 2014-01-15 20:14 - 32747816 _____ (Nero AG) C:\Users\***\Downloads\Nero_BurnLite-10.0.10600.exe

2014-01-15 19:53 - 2014-01-15 19:53 - 03765592 _____ () C:\Users\***\Downloads\Paint.NET.3.5.11.Install.exe

2014-01-15 19:51 - 2014-01-15 19:53 - 33440584 _____ (Foxit Corporation ) C:\Users\***\Downloads\FoxitReader612.1224_enu_Setup.exe

2014-01-15 19:46 - 2014-01-15 19:46 - 01977432 _____ () C:\Users\***\Downloads\winrar-x64-501.exe

2014-01-15 19:45 - 2014-01-15 19:45 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-15 19:45 - 2014-01-15 19:44 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-15 19:44 - 2014-01-15 19:44 - 00000000 ____D () C:\Program Files\Java

2014-01-15 19:13 - 2014-01-15 19:15 - 50837888 _____ (Adobe Systems Incorporated) C:\Users\***\Downloads\AdbeRdr11006_en_US.exe

2014-01-15 19:13 - 2014-01-15 19:15 - 30796712 _____ (Oracle Corporation) C:\Users\***\Downloads\jre-7u51-windows-x64.exe

2014-01-15 10:00 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-15 10:00 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-15 10:00 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-01-05 19:56 - 2014-01-05 19:56 - 00000000 ____D () C:\Users\***\dwhelper
 

==================== One Month Modified Files and Folders =======
 

2014-02-04 22:18 - 2014-02-04 22:18 - 00021880 _____ () C:\Users\***\Downloads\FRST.txt

2014-02-04 22:18 - 2014-02-04 22:17 - 00000000 ____D () C:\FRST

2014-02-04 22:16 - 2014-02-04 22:16 - 00380416 _____ () C:\Users\***\Downloads\gqsfq858.exe

2014-02-04 22:16 - 2014-02-04 22:15 - 02080256 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe

2014-02-04 22:16 - 2010-08-13 11:37 - 01485345 _____ () C:\Windows\WindowsUpdate.log

2014-02-04 22:15 - 2014-02-04 22:15 - 00000000 _____ () C:\Users\***\AppData\Roaming\.NANotifyHere

2014-02-04 22:13 - 2013-02-25 19:21 - 00000000 ____D () C:\Users\***\AppData\Roaming\Dropbox

2014-02-04 22:11 - 2013-04-28 09:34 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-02-04 22:11 - 2010-08-14 16:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Sunbird

2014-02-04 22:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-04 22:10 - 2009-07-14 05:51 - 00143414 _____ () C:\Windows\setupact.log

2014-02-04 22:09 - 2009-07-14 05:45 - 00015344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-04 22:09 - 2009-07-14 05:45 - 00015344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-04 22:08 - 2014-02-04 22:08 - 00000584 _____ () C:\Users\***\Downloads\defogger_disable.log

2014-02-04 22:08 - 2014-02-04 22:08 - 00000020 _____ () C:\Users\***\defogger_reenable

2014-02-04 22:08 - 2010-08-13 11:42 - 00000000 ____D () C:\Users\***

2014-02-04 22:07 - 2014-02-04 22:07 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe

2014-02-04 21:42 - 2013-12-11 16:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-04 21:42 - 2013-12-11 16:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-04 20:49 - 2013-12-12 19:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

2014-02-04 19:54 - 2010-09-20 16:48 - 00000000 ____D () C:\Program Files (x86)\Zarb 4

2014-02-04 19:42 - 2013-12-11 16:41 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-04 19:05 - 2013-04-28 09:34 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-02-03 20:10 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\Public\Foxit Software

2014-02-03 20:10 - 2014-01-15 20:14 - 00000000 ____D () C:\Users\***\AppData\Roaming\Foxit Software

2014-02-03 10:05 - 2014-02-02 21:06 - 00000000 ____D () C:\Users\***\Desktop\Wohnungen

2014-02-03 10:04 - 2010-08-14 14:04 - 00000000 ____D () C:\Users\***\AppData\Roaming\Canon

2014-01-29 16:52 - 2010-08-14 14:04 - 00044085 _____ () C:\Users\***\Sti_Trace.log

2014-01-27 16:49 - 2010-08-13 11:58 - 00100752 _____ () C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT

2014-01-27 16:48 - 2009-07-14 05:45 - 00388096 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-26 11:01 - 2013-06-21 16:04 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-22 19:03 - 2014-01-22 18:10 - 00000000 ____D () C:\Users\***\AppData\Roaming\vlc

2014-01-22 18:07 - 2014-01-22 18:07 - 24097311 _____ () C:\Users\***\Downloads\vlc-2.1.2-win32.exe

2014-01-22 17:12 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-01-21 20:36 - 2013-12-11 16:41 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-01-21 19:11 - 2010-08-13 13:08 - 00000000 ____D () C:\ProgramData\CyberLink

2014-01-21 18:00 - 2014-01-21 10:32 - 00000000 ____D () C:\Users\***\AppData\Local\Nero

2014-01-21 15:47 - 2010-08-13 12:35 - 00647274 _____ () C:\Windows\PFRO.log

2014-01-21 10:33 - 2014-01-21 10:32 - 00000000 ____D () C:\Users\***\AppData\Roaming\Nero

2014-01-21 10:32 - 2010-08-26 12:52 - 00000000 ____D () C:\ProgramData\Nero

2014-01-21 10:24 - 2014-01-21 10:24 - 00000000 ____D () C:\Windows\System32\Tasks\Nero

2014-01-21 10:24 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Cursors

2014-01-21 10:23 - 2010-08-26 12:52 - 00000000 ____D () C:\Program Files (x86)\Nero

2014-01-21 10:06 - 2014-01-21 09:54 - 288310920 _____ (Nero AG) C:\Users\***\Downloads\Nero2014-15.0.07100_trial.exe

2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Roaming\Ashampoo

2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Local\ashampoo

2014-01-21 09:52 - 2014-01-21 09:51 - 00000000 ____D () C:\ProgramData\Ashampoo

2014-01-21 09:48 - 2014-01-21 09:45 - 92789928 _____ (Ashampoo GmbH & Co. KG ) C:\Users\***\Downloads\ashampoo_burning_studio_2014_12.0.5_15376.exe

2014-01-19 11:34 - 2009-07-14 18:58 - 00654150 _____ () C:\Windows\system32\perfh007.dat

2014-01-19 11:34 - 2009-07-14 18:58 - 00130022 _____ () C:\Windows\system32\perfc007.dat

2014-01-19 11:34 - 2009-07-14 06:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-01-19 11:18 - 2014-01-19 11:35 - 139448593 _____ () C:\Users\***\Desktop\Afrika TV.flv

2014-01-19 11:02 - 2014-01-19 10:52 - 93897148 _____ () C:\Users\***\Desktop\WissensWerte_ Migration - YouTube [720p].mp4

2014-01-18 15:35 - 2014-01-18 15:35 - 00000000 ____D () C:\Users\***\Desktop\Wohnungsgedöns

2014-01-18 10:37 - 2013-02-25 19:21 - 00000000 ____D () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-01-18 10:37 - 2010-08-13 11:42 - 00000000 ___RD () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-01-15 20:19 - 2013-07-16 21:29 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-15 20:17 - 2010-08-13 12:22 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-15 20:14 - 2014-01-15 20:11 - 32747816 _____ (Nero AG) C:\Users\***\Downloads\Nero_BurnLite-10.0.10600.exe

2014-01-15 20:14 - 2013-12-22 10:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-01-15 20:14 - 2012-05-12 13:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-01-15 20:14 - 2010-08-14 14:16 - 00000000 ____D () C:\Program Files (x86)\Foxit Software

2014-01-15 20:13 - 2014-01-15 20:12 - 23867560 _____ (Mozilla) C:\Users\***\Downloads\Firefox_Setup_26.0.exe

2014-01-15 19:56 - 2010-08-14 14:18 - 00000000 ____D () C:\Program Files (x86)\Paint.net

2014-01-15 19:55 - 2010-08-14 14:17 - 00000000 ____D () C:\Users\***\AppData\Local\Paint.NET

2014-01-15 19:54 - 2013-07-14 22:05 - 00000000 ____D () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2014-01-15 19:54 - 2011-07-14 16:27 - 00000000 ____D () C:\Program Files\Winrar

2014-01-15 19:53 - 2014-01-15 19:53 - 03765592 _____ () C:\Users\***\Downloads\Paint.NET.3.5.11.Install.exe

2014-01-15 19:53 - 2014-01-15 19:51 - 33440584 _____ (Foxit Corporation ) C:\Users\***\Downloads\FoxitReader612.1224_enu_Setup.exe

2014-01-15 19:46 - 2014-01-15 19:46 - 01977432 _____ () C:\Users\***\Downloads\winrar-x64-501.exe

2014-01-15 19:45 - 2014-01-15 19:45 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-15 19:44 - 2014-01-15 19:45 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-15 19:44 - 2014-01-15 19:44 - 00000000 ____D () C:\Program Files\Java

2014-01-15 19:15 - 2014-01-15 19:13 - 50837888 _____ (Adobe Systems Incorporated) C:\Users\***\Downloads\AdbeRdr11006_en_US.exe

2014-01-15 19:15 - 2014-01-15 19:13 - 30796712 _____ (Oracle Corporation) C:\Users\***\Downloads\jre-7u51-windows-x64.exe

2014-01-05 19:56 - 2014-01-05 19:56 - 00000000 ____D () C:\Users\***\dwhelper
 

Some content of TEMP:

====================

C:\Users\***\AppData\Local\Temp\AskSLib.dll

C:\Users\***\AppData\Local\Temp\DE_de_Avery_AW31.exe

C:\Users\***\AppData\Local\Temp\DTLite4454-0316.exe

C:\Users\***\AppData\Local\Temp\DTLite4461-0327.exe

C:\Users\***\AppData\Local\Temp\DTLite4471-0333.exe

C:\Users\***\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe

C:\Users\***\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe

C:\Users\***\AppData\Local\Temp\jre-6u22-windows-i586-iftw-rv.exe

C:\Users\***\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe

C:\Users\***\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe

C:\Users\***\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe

C:\Users\***\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe

C:\Users\***\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe

C:\Users\***\AppData\Local\Temp\nitro_pdf_reader_x64.exe

C:\Users\***\AppData\Local\Temp\nitro_reader3_x64.exe

C:\Users\***\AppData\Local\Temp\ose00000.exe

C:\Users\***\AppData\Local\Temp\TerraTec_Home_Cinema_6.11.05.exe

C:\Users\***\AppData\Local\Temp\TerraTec_Home_Cinema_6.15.11.exe

C:\Users\***\AppData\Local\Temp\uninstall-temp.exe

C:\Users\***\AppData\Local\Temp\vlc-2.0.4-win32.exe

C:\Users\***\AppData\Local\Temp\vlc-2.0.5-win32.exe

C:\Users\***\AppData\Local\Temp\vlc-2.1.2-win64.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-01-29 08:36
 

==================== End Of Log ============================

Defogger hab ich benutzt, der hat aber kein log erstellt.
Die restlichen logs gibt's in neuen Beiträgen, da sonst der Text zu lang ist.

Tausend Dank im Voraus!

addition.txt

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2014

Ran by *** at 2014-02-04 22:19:13

Running from C:\Users\***\Downloads

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: BitDefender Antivirus (Enabled - Up to date) {50909708-FF80-02AF-F814-B28405891E92}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: BitDefender AntiSpyware (Enabled - Up to date) {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F}

FW: BitDefender Firewall (Enabled) {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9}
 

==================== Installed Programs ======================
 

Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)

Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)

Adobe Photoshop Elements 2.0 (x32 Version: 2.0 - Adobe Systems, Inc.)

Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.06) (x32 Version: 11.0.06 - Adobe Systems Incorporated)

AMD Catalyst Install Manager (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)

AMD Drag and Drop Transcoding (Version: 2.00.0000 - ATI Technologies Inc.) Hidden

AnyDVD (x32 Version: 6.8.5.0 - SlySoft)

ArcSoft PhotoStudio 5.5 (x32 Version:  - ArcSoft)

ATI AVIVO64 Codecs (Version: 11.1.0.50504 - ATI Technologies Inc.) Hidden

Avery Wizard 3.1 (x32 Version: 3.1.8 - Avery)

BitDefender Internet Security 2011 (Version: 14.0.29 - BitDefender)

BitDefender Internet Security 2011 (Version: 14.0.29 - BitDefender) Hidden

Canon CanoScan Toolbox 4.9 (x32 Version:  - )

Canon Utilities Easy-PhotoPrint EX (x32 Version:  - )

Canon Utilities My Printer (x32 Version:  - )

Canon Utilities Solution Menu (x32 Version:  - )

CanoScan LiDE 200 Scanner Driver (Version:  - )

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

CDDRV_Installer (Version: 4.60 - Logitech) Hidden

Cinergy S2 PCI V1.01.01.901 (x32 Version: 1.01.01.901 - )

CloneDVD2 (x32 Version: 2.9.3.0 - Elaborate Bytes)

CloudReading (x32 Version: 1.1.47.1220 - Foxit Corporation)

Cuttermaran 1.70 (x32 Version: 1.7.0 - to***)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)

dradio-Recorder Version 3.02.6 (x32 Version:  - )

Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)

erLT (x32 Version: 1.20.0137 - Logitech, Inc.) Hidden

FileHippo.com Update Checker (x32 Version:  - )

Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Foxit Reader (x32 Version: 6.1.2.1224 - Foxit Corporation)

Free Video Dub version 1.8 (x32 Version:  - DVDVideoSoft Limited.)

Free YouTube Download version 3.1.30.627 (x32 Version: 3.1.30.627 - DVDVideoSoft Ltd.)

Gigabyte Raid Cinfigurer (x32 Version: 1.00.0001 - GIGABYTE Technologies, Inc.)

Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)

Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden

HashTab 4.0.0.1 (Version: 4.0.0.1 - Implbits Software)

HydraVision (x32 Version: 4.2.162.0 - ATI Technologies Inc.) Hidden

ImgBurn (x32 Version: 2.5.5.0 - LIGHTNING UK!)

Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle)

KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden

LG CyberLink Power2Go (x32 Version: 6.2.3325 - CyberLink Corp.)

LG CyberLink Power2Go (x32 Version: 6.2.3325 - CyberLink Corp.) Hidden

LG CyberLink PowerBackup (x32 Version: 2.5.5529 - CyberLink Corp.)

LG CyberLink PowerDVD (x32 Version: 8.0.2815d - CyberLink Corp.)

LG CyberLink PowerDVD (x32 Version: 8.0.2815d - CyberLink Corp.) Hidden

LG CyberLink PowerProducer (x32 Version: 5.0.2.2130 - CyberLink Corp.)

LG CyberLink PowerProducer (x32 Version: 5.0.2.2130 - CyberLink Corp.) Hidden

LG Power Tools (x32 Version: 6.0.3316 - CyberLink Corp.)

LG Power Tools (x32 Version: 6.0.3316 - CyberLink Corp.) Hidden

Logitech SetPoint (x32 Version: 4.80 - Logitech)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)

Manual CanoScan 8400F (x32 Version:  - )

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office 2000 Premium (x32 Version: 9.00.2816 - Microsoft Corporation)

Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Home and Student 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319 - Microsoft Corporation)

Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0 - Microsoft Corporation)

Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0 - Microsoft Corporation) Hidden

Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

MozBackup 1.4.10 (x32 Version:  - Pavel Cvrcek)

Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)

Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)

Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)

NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0 - NEC Electronics Corporation)

NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0 - NEC Electronics Corporation) Hidden

Nero 2014 (x32 Version: 15.0.07100 - Nero AG)

Nero 7 Premium (x32 Version: 7.02.6445 - Nero AG)

Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden

Nero Blu-ray Player (x32 Version: 12.0.20064 - Nero AG) Hidden

Nero Blu-ray Player Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden

Nero Burning Core (x32 Version: 15.0.25001 - Nero AG) Hidden

Nero Burning ROM (x32 Version: 15.0.25001 - Nero AG) Hidden

Nero Burning ROM Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden

Nero ControlCenter (x32 Version: 11.0.16700 - Nero AG) Hidden

Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden

Nero Core Components (x32 Version: 11.0.23200 - Nero AG) Hidden

Nero Device Updates (x32 Version: 15.0.1002 - Nero AG) Hidden

Nero Disc Menus Basic (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Disc to Device (x32 Version: 15.0.12032 - Nero AG) Hidden

Nero Effects Basic (x32 Version: 15.0.10011 - Nero AG) Hidden

Nero Express (x32 Version: 15.0.25001 - Nero AG) Hidden

Nero Express Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden

Nero Info (x32 Version: 15.1.0030 - Nero AG)

Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Launcher (x32 Version: 15.0.12000 - Nero AG) Hidden

Nero MediaHome (x32 Version: 1.22.3600 - Nero AG) Hidden

Nero MediaHome Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden

Nero PiP Effects Basic (x32 Version: 15.0.10008 - Nero AG) Hidden

Nero Recode (x32 Version: 15.0.25000 - Nero AG) Hidden

Nero Recode Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden

Nero RescueAgent (x32 Version: 15.0.2000 - Nero AG) Hidden

Nero RescueAgent Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden

Nero SharedVideoCodecs (x32 Version: 1.0.15005 - Nero AG) Hidden

Nero Update (x32 Version: 11.0.13300.42.0 - Nero AG) Hidden

Nero Video (x32 Version: 15.0.23000 - Nero AG) Hidden

Nero Video Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden

neroxml (x32 Version: 1.0.0 - Nero AG) Hidden

Nitro Reader 3 (Version: 3.5.2.10 - Nitro)

OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation)

Paint.NET v3.5.11 (Version: 3.61.0 - dotPDN LLC)

PDFCreator (x32 Version: 1.2.1 - Frank Heindörfer, Philip Chinery)

PDF-Viewer (Version: 2.5.208.0 - Tracker Software Products Ltd)

Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Prerequisite installer (x32 Version: 15.0.0005 - Nero AG) Hidden

Realtek Ethernet Controller Driver For Windows Vista and Later (x32 Version: 1.00.0009 - Realtek)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.5998 - Realtek Semiconductor Corp.)

Revo Uninstaller 1.93 (x32 Version: 1.93 - VS Revo Group)

ScanSoft OmniPage SE 4 (x32 Version: 15.2.0020 - Nuance Communications, Inc.)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden

StreamTransport version: 1.0.2.2171 (x32 Version:  - )

SUPER © Version 2010.bld.38 (May 2, 2010) (x32 Version: Version 2010.bld.38 (May 2, 2010) - eRightSoft)

TerraTec Home Cinema (x32 Version: 6.15.11 - )

TerraTec Remote Control (x32 Version: 5.28 - )

TrueCrypt (x32 Version: 7.1a - TrueCrypt Foundation)

Ugrib RC1 (x32 Version: Release Candidate 0.2.4 - GRIB.US)

Uninstall 1.0.0.1 (x32 Version:  - )

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)

Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden

VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN)

VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)

WD Drive Utilities (x32 Version: 1.0.1.5 - Western Digital)

WD Security (x32 Version: 1.0.3.3 - Western Digital Technologies, Inc.)

WD SmartWare (Version: 1.6.5.2 - Western Digital Technologies, Inc.)

WDR RadioRecorder (x32 Version:  - Tobit.Software)

Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

WinRAR 5.01 (64-bit) (Version: 5.01.0 - win.rar GmbH)

Yahoo! Detect (x32 Version:  - )

Zarb 4.1 (x32 Version: 4.1 - Hans Zybura Software)
 

==================== Restore Points  =========================
 

26-01-2014 09:58:31 Configured Microsoft Office Home and Student 2010

02-02-2014 16:47:10 Geplanter Prüfpunkt
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {22C59227-92C9-4552-9C68-71BBA9E2E998} - System32\Tasks\{7B66487D-722B-402D-AE0D-3084BD5C555C} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {3E503BE1-A33F-4D0C-9FDC-187DFE3B59A8} - System32\Tasks\{B90E5441-29D9-4A1C-9C50-1F51E93D821D} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {46024402-51FB-42C5-8660-53E049A23C6B} - System32\Tasks\{657291B0-0BFD-4A3A-9A1F-F5889CB08446} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {47708429-E7F9-4D15-B33C-44C88F04735F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-04] (Adobe Systems Incorporated)

Task: {4FD4F9A5-4534-4D21-9086-8E2CEDDBA845} - System32\Tasks\{3D85CAF6-E721-4BA9-9617-33BAC2333FC3} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {5DE738D0-0838-4610-A126-1C779BE1914A} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2013-10-16] (Nero AG)

Task: {6E974F43-8706-41CC-B826-36F116E96B7D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-28] (Google Inc.)

Task: {89EAB45E-892D-4159-BD8A-E146DBA9DDCD} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)

Task: {8F27EFB3-D478-470A-8DEB-B0ABF5657D89} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)

Task: {9AA10EF2-71A7-4F21-8FE7-6073CCD2EFA4} - System32\Tasks\{993C17D7-C415-40E6-9475-E9E72F17CA20} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {ADEF4491-09C4-4D59-8231-2EBC0F1B87B4} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)

Task: {C96BDE44-BDDC-4AEB-A314-DDD871F4E6C8} - System32\Tasks\{D0D1ACEA-CF31-41CC-B365-C41803D46BE7} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {CEC4AD92-6D96-49D7-81D6-7D0DB2142127} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)

Task: {D67B1C9B-58C5-4C69-8748-D88A65E53FE1} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)

Task: {DB762D46-CEE1-49C4-A09A-8EA9B65D9C51} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-28] (Google Inc.)

Task: {EB220798-E1B2-4E61-A157-BE1F39ACAE40} - System32\Tasks\{B9BD9FF2-6B43-4239-9C88-E1FD1F07544C} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2011-06-02 16:23 - 2011-06-02 16:23 - 00239648 _____ () C:\Program Files\BitDefender\BitDefender 2011\txmlutil.dll

2011-06-02 16:22 - 2011-06-02 16:22 - 00161368 _____ () C:\Program Files\BitDefender\BitDefender 2011\connector.dll

2011-07-11 19:19 - 2011-07-11 19:19 - 00245328 _____ () C:\Program Files\BitDefender\BitDefender 2011\framework.dll

2010-09-06 17:05 - 2009-07-20 11:35 - 00018960 _____ () C:\Program Files (x86)\Logitech\SetPoint\khalwrapper.dll

2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\***\AppData\Roaming\Dropbox\bin\libcef.dll

2013-12-22 10:46 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (02/04/2014 07:53:26 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.

Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
 

Error: (02/04/2014 07:52:50 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (02/03/2014 06:33:28 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.

Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
 

Error: (02/03/2014 06:32:56 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (02/02/2014 05:43:19 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.

Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
 

Error: (02/02/2014 05:42:50 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (01/30/2014 08:32:09 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.

Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
 

Error: (01/30/2014 08:31:38 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 

Error: (01/28/2014 08:42:09 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.

Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
 

Error: (01/28/2014 08:41:40 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in

Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit

einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 
 

System errors:

=============

Error: (02/04/2014 10:11:38 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "WD Backup" ist vom Dienst "WD Rules" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1053
 

Error: (02/04/2014 10:11:34 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "WD Rules" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (02/04/2014 10:11:34 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst WD Rules erreicht.
 

Error: (02/04/2014 10:11:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (02/04/2014 06:57:13 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "WD Backup" ist vom Dienst "WD Rules" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

%%1053
 

Error: (02/04/2014 06:57:03 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "WD Rules" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (02/04/2014 06:57:03 PM) (Source: Service Control Manager) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst WD Rules erreicht.
 

Error: (02/04/2014 06:56:30 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (02/03/2014 10:24:08 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (02/03/2014 05:57:04 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Secunia Update Agent" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 
 

Microsoft Office Sessions:

=========================

Error: (02/04/2014 07:53:26 PM) (Source: SideBySide)(User: )

Description: assemblyIdentitylanguage*c:\program files (x86)\mozbackup\dll\DelZip179.dllc:\program files (x86)\mozbackup\dll\DelZip179.dll8
 

Error: (02/04/2014 07:52:50 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\dradio-recorder\phonostar.exe
 

Error: (02/03/2014 06:33:28 PM) (Source: SideBySide)(User: )

Description: assemblyIdentitylanguage*c:\program files (x86)\mozbackup\dll\DelZip179.dllc:\program files (x86)\mozbackup\dll\DelZip179.dll8
 

Error: (02/03/2014 06:32:56 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\dradio-recorder\phonostar.exe
 

Error: (02/02/2014 05:43:19 PM) (Source: SideBySide)(User: )

Description: assemblyIdentitylanguage*c:\program files (x86)\mozbackup\dll\DelZip179.dllc:\program files (x86)\mozbackup\dll\DelZip179.dll8
 

Error: (02/02/2014 05:42:50 PM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\dradio-recorder\phonostar.exe
 

Error: (01/30/2014 08:32:09 AM) (Source: SideBySide)(User: )

Description: assemblyIdentitylanguage*c:\program files (x86)\mozbackup\dll\DelZip179.dllc:\program files (x86)\mozbackup\dll\DelZip179.dll8
 

Error: (01/30/2014 08:31:38 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\dradio-recorder\phonostar.exe
 

Error: (01/28/2014 08:42:09 AM) (Source: SideBySide)(User: )

Description: assemblyIdentitylanguage*c:\program files (x86)\mozbackup\dll\DelZip179.dllc:\program files (x86)\mozbackup\dll\DelZip179.dll8
 

Error: (01/28/2014 08:41:40 AM) (Source: SideBySide)(User: )

Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestc:\program files (x86)\dradio-recorder\phonostar.exe
 
 

CodeIntegrity Errors:

===================================

  Date: 2014-02-04 22:17:24.495

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-04 22:08:19.249

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-04 22:02:36.308

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-04 21:45:14.964

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-04 21:36:16.950

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-04 20:26:11.371

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-04 20:06:18.436

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-04 19:45:35.404

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-04 19:25:36.310

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-03 20:10:01.127

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 58%

Total physical RAM: 4091.49 MB

Available physical RAM: 1713.35 MB

Total Pagefile: 8181.16 MB

Available Pagefile: 5344.24 MB

Total Virtual: 8192 MB

Available Virtual: 8191.69 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:97.56 GB) (Free:32.4 GB) NTFS

Drive d: () (Fixed) (Total:833.85 GB) (Free:745.01 GB) NTFS

Drive i: (My Passport) (Fixed) (Total:931.48 GB) (Free:916.86 GB) NTFS

Drive m: (Medien HDD) (Fixed) (Total:1863.01 GB) (Free:1213.15 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A133C234)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=98 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=834 GB) - (Type=OF Extended)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: D574F000)

Partition 1: (Not Active) - (Size=-198626508800) - (Type=07 NTFS)
 

========================================================

Disk: 2 (MBR Code: Windows XP) (Size: 931 GB) (Disk ID: 00023F15)

Partition 1: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

gmer.txt
im Archiv (hoffe, das ist ok, auch wenn mich noch keiner dazu aufgefordert hat)

So, das wäre erstmal alles, was ich habe.
Gruß!

Riecht nach Fehlalarm...

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Genial, wie schnell ihr seid!

mbar log:

Code:

Malwarebytes Anti-Rootkit BETA 1.07.0.1009

www.malwarebytes.org
 

Database version: v2014.02.05.05
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

*** :: *** [administrator]
 

05.02.2014 13:26:26

mbar-log-2014-02-05 (13-26-26).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 253056

Time elapsed: 22 minute(s), 31 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

Sieht gut aus, ne? :)

Jup :) machen wir noch evtl Adware weg

Adware/Junkware/Toolbars entfernen

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

So, hier schon mal die logs von adwcleaner und JRT:

adwcleaner
AdwCleaner Logfile:

Code:

# AdwCleaner v3.018 - Bericht erstellt am 05/02/2014 um 15:24:05

# Updated 28/01/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : *** - ***

# Gestartet von : C:\Users\***\Desktop\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB

Ordner Gelöscht : C:\Users\***\AppData\Local\Temp\OCS

Ordner Gelöscht : C:\Users\***\AppData\Roaming\dvdvideosoftiehelpers
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

-\\ Mozilla Firefox v27.0 (de)
 

[ Datei : C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\prefs.js ]
 
 

-\\ Google Chrome v32.0.1700.107
 

[ Datei : C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 

*************************
 

AdwCleaner[R0].txt - [1881 octets] - [05/02/2014 15:22:13]

AdwCleaner[S0].txt - [1700 octets] - [05/02/2014 15:24:05]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1760 octets] ##########

--- --- ---

JRT
JRT Logfile:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.1 (02.04.2014:1)

OS: Windows 7 Home Premium x64

Ran by *** on 05.02.2014 at 15:29:34,17

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dt soft\daemon tools toolbar

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\***\AppData\Roaming\mozilla\firefox\profiles\jv1exzom.default\minidumps [19 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 05.02.2014 at 17:00:27,05

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--- --- ---

Mache jetzt noch nen frisches Log mit FRST.

frisches FRST:

FRST Logfile:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-02-2014

Ran by *** (administrator) on *** on 05-02-2014 17:14:31

Running from C:\Users\***\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe

(AMD) C:\Windows\System32\atiesrxx.exe

(AMD) C:\Windows\System32\atieclxx.exe

() C:\Windows\SysWOW64\XSrvSetup.exe

(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe

() C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe

(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\pchooklaunch64.exe

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\Antispam32\pchooklaunch32.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe

(Western Digital) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Western Digital ) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe

(CANON INC.) C:\Program Files (x86)\Canon\MyPrinter\BJMYPRT.EXE

(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe

() C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Logitech, Inc.) C:\Program Files (x86)\Logitech\SetPoint\SetPoint.exe

(Dropbox, Inc.) C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe

(AMD) C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe

(Western Digital) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

() C:\Program Files (x86)\Logitech\SetPoint\x86\SetPoint32.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe

(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2009-12-08] (Realtek Semiconductor)

HKLM\...\Run: [CanonMyPrinter] - C:\Program Files (x86)\Canon\MyPrinter\BJMyPrt.exe [2710856 2009-11-02] (CANON INC.)

HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)

HKLM\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2011\ieshow.exe [109344 2011-06-02] (BitDefender S.R.L.)

HKLM\...\Run: [BDAgent] - C:\Program Files\BitDefender\BitDefender 2011\bdagent.exe [2026680 2011-07-11] (BitDefender S.R.L.)

HKLM-x32\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()

HKLM-x32\...\Run: [SSBkgdUpdate] - C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [OpwareSE4] - C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)

HKLM-x32\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2011\Antispam32\ieshow.exe [92352 2011-06-02] (BitDefender S.R.L.)

HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)

HKLM-x32\...\Run: [WD Drive Unlocker] - C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1688008 2012-06-13] (Western Digital)

HKLM-x32\...\Run: [WD Quick View] - C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5237256 2012-12-20] (Western Digital Technologies, Inc.)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)

HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [Remote Control Editor] - C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1689088 2010-06-09] (Elgato Systems)

HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [dradio-RecorderTimer] - C:\Program Files (x86)\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()

HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [HydraVisionDesktopManager] - C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [385024 2010-05-04] (AMD)

HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\Run: [FileHippo.com] - C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)

HKU\S-1-5-21-512264234-1616448173-2520258103-1000\...\MountPoints2: {162a9588-c8b7-11df-97db-6cf049e199b3} - G:\setup.EXE /AUTORUN

Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk

ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x44C531B77941CC01

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: No Name - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -  No File

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

Toolbar: HKLM - Bitdefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2011\IEToolbar.dll (BitDefender S.R.L.)

Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)

Toolbar: HKLM-x32 - Bitdefender Toolbar - {381FFDE8-2394-4F90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2011\Antispam32\IEToolbar.dll (BitDefender S.R.L.)

Toolbar: HKLM-x32 - No Name - {9C65D12D-CF9D-454D-8049-61965D8C6FFF} -  No File

Handler: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} -  No File

Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: http\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: https\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: ipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default

FF Homepage: hxxp://www.google.de/

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()

FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=1.1.11 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll No File

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: TVU Web Player - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\firefox@tvunetworks.com [2010-08-14]

FF Extension: TCAST Plugin - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\tcastv1@tom.com [2010-08-14]

FF Extension: WOT - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2013-11-26]

FF Extension: DownloadHelper - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]

FF Extension: Flash and Video Download - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-01-23]

FF Extension: Ghostery - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\firefox@ghostery.com.xpi [2013-08-18]

FF Extension: 1-Click YouTube Video Downloader - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014-01-19]

FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]

FF Extension: Adblock Plus - C:\Users\***\AppData\Roaming\Mozilla\Firefox\Profiles\jv1exzom.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-30]

FF HKLM\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\

FF Extension: BitDefender Antiphishing Toolbar - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\ []

FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\

FF Extension: bdToolbar - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\ []

FF HKLM-x32\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\

FF Extension: BitDefender Antiphishing Toolbar - C:\Program Files\BitDefender\BitDefender 2011\bdaphffext\ []

FF HKLM-x32\...\Firefox\Extensions: [{09F060FA-566D-42D7-BF79-97AB30863433}] - C:\Program Files (x86)\Steganos Privacy Suite 12\pfplugin

FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 12\spmplugin3

FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\

FF Extension: bdToolbar - C:\Program Files\BitDefender\BitDefender 2011\bdtbext\ []
 

Chrome: 

=======

CHR HomePage: about:blank

CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File

CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files (x86)\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll No File

CHR Plugin: (CANON iMAGE GATEWAY Album Plugin Utility) - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File

CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File

CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

CHR Plugin: (Nitro PDF Plug-In) - C:\Program Files\Nitro PDF Reader\npnitromozilla.dll No File

CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

CHR Plugin: (Windows Activation Technologies) - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

CHR Extension: (Google Docs) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-04-28]

CHR Extension: (Google Drive) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-04-28]

CHR Extension: (WOT) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2013-04-28]

CHR Extension: (YouTube) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-04-28]

CHR Extension: (Google-Suche) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-04-28]

CHR Extension: (AdBlock) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-04-28]

CHR Extension: (Ghostery) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2013-04-28]

CHR Extension: (Google Wallet) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-28]

CHR Extension: (Google Mail) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-04-28]
 

==================== Services (Whitelisted) =================
 

R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [65536 2009-08-06] ()

R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-03-26] (Nitro PDF Software)

S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)

R2 Radio.fx; C:\Program Files (x86)\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()

R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [271760 2009-04-15] ()

S3 Update Server; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [467248 2010-11-30] (BitDefender)

R2 Updatesrv; C:\Program Files\BitDefender\BitDefender 2011\updatesrv.exe [53224 2011-06-02] (BitDefender S.R.L.)

R2 VSSERV; C:\Program Files\BitDefender\BitDefender 2011\vsserv.exe [2660624 2011-07-11] (BitDefender S.R.L.)

R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1155088 2012-12-20] (Western Digital )

R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [248248 2012-09-06] (Western Digital)

R2 WDRulesService; C:\Program Files (x86)\Western Digital\WD SmartWare\WDRulesEngine.exe [1178128 2012-12-20] (Western Digital )

S2 Secunia Update Agent; "C:\Program Files (x86)\Secunia\PSI\sua.exe" --start-service [X]
 

==================== Drivers (Whitelisted) ====================
 

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [138872 2011-07-28] (SlySoft, Inc.)

R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [138872 2011-07-28] (SlySoft, Inc.)

S3 avc3; C:\Windows\System32\DRIVERS\avc3.sys [591968 2010-11-29] (BitDefender)

S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [1186272 2010-11-29] (BitDefender)

R3 BDFM; C:\Windows\System32\DRIVERS\bdfm.sys [162896 2010-05-13] (BitDefender S.R.L. Bucharest, ROMANIA)

R1 Bdfndisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [88144 2010-08-20] (BitDefender)

R0 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [431176 2011-04-01] (BitDefender)

R1 bdfwfpf; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdfwfpf.sys [99408 2010-08-20] (BitDefender)

R3 MTSBDA; C:\Windows\System32\DRIVERS\MtsBda.sys [348224 2009-11-09] (TerraTec Provide)

R3 MtsHID; C:\Windows\System32\DRIVERS\MtsHid.sys [25664 2009-11-09] (TerraTec Provide)

R1 SLEE_17_DRIVER; C:\Windows\Sleen1764.sys [108256 2011-09-12] (Softwareentwicklung Remus - ArchiCrypt - )

S4 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-10-19] (Duplex Secure Ltd.)

R1 STGMFEngine64; C:\Windows\system32\drivers\STGMFEngine64.sys [28576 2011-09-12] (Softwareentwicklung Remus - ArchiCrypt.com)

S3 gdrv; \??\C:\Windows\gdrv.sys [X]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-05 17:14 - 2014-02-04 22:16 - 02080256 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe

2014-02-05 17:00 - 2014-02-05 17:00 - 00001466 _____ () C:\Users\***\Desktop\JRT.txt

2014-02-05 15:29 - 2014-02-05 15:29 - 00001818 _____ () C:\Users\***\Desktop\AdwCleaner[S0].txt

2014-02-05 15:29 - 2014-02-05 15:29 - 00000000 ____D () C:\Windows\ERUNT

2014-02-05 15:22 - 2014-02-05 15:24 - 00000000 ____D () C:\AdwCleaner

2014-02-05 15:21 - 2014-02-05 15:21 - 01037530 _____ (Thisisu) C:\Users\***\Desktop\JRT.exe

2014-02-05 15:20 - 2014-02-05 15:20 - 01166132 _____ () C:\Users\***\Desktop\adwcleaner.exe

2014-02-05 13:55 - 2014-02-05 13:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-02-05 13:26 - 2014-02-05 14:16 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2014-02-05 13:26 - 2014-02-05 13:26 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-02-05 13:25 - 2014-02-05 14:16 - 00000000 ____D () C:\Users\***\Desktop\mbar

2014-02-05 13:25 - 2014-02-05 13:25 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-02-05 13:24 - 2014-02-05 13:25 - 12589848 _____ (Malwarebytes Corp.) C:\Users\***\Downloads\mbar-1.07.0.1009.exe

2014-02-05 13:08 - 2014-02-05 13:08 - 00237800 _____ () C:\Users\***\Desktop\gmer.rar

2014-02-04 23:00 - 2014-02-04 23:01 - 00308144 _____ () C:\Users\***\Desktop\asd.txt

2014-02-04 22:56 - 2014-02-04 22:57 - 00237728 _____ () C:\Users\***\Desktop\gmer.log

2014-02-04 22:32 - 2014-02-05 13:04 - 00039609 _____ () C:\Users\***\Desktop\Addition.txt

2014-02-04 22:27 - 2014-02-05 17:14 - 00021928 _____ () C:\Users\***\Desktop\FRST.txt

2014-02-04 22:19 - 2014-02-04 22:19 - 00039621 _____ () C:\Users\***\Downloads\Addition.txt

2014-02-04 22:18 - 2014-02-05 17:13 - 00019017 _____ () C:\Users\***\Downloads\FRST.txt

2014-02-04 22:17 - 2014-02-05 17:13 - 00000000 ____D () C:\FRST

2014-02-04 22:16 - 2014-02-04 22:16 - 00380416 _____ () C:\Users\***\Downloads\gqsfq858.exe

2014-02-04 22:15 - 2014-02-04 22:16 - 02080256 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe

2014-02-04 22:08 - 2014-02-04 22:08 - 00000584 _____ () C:\Users\***\Downloads\defogger_disable.log

2014-02-04 22:08 - 2014-02-04 22:08 - 00000020 _____ () C:\Users\***\defogger_reenable

2014-02-04 22:07 - 2014-02-04 22:07 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe

2014-02-03 20:10 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\Public\Foxit Software

2014-02-02 21:06 - 2014-02-03 10:05 - 00000000 ____D () C:\Users\***\Desktop\Wohnungen

2014-01-22 18:10 - 2014-01-22 19:03 - 00000000 ____D () C:\Users\***\AppData\Roaming\vlc

2014-01-22 18:07 - 2014-01-22 18:07 - 24097311 _____ () C:\Users\***\Downloads\vlc-2.1.2-win32.exe

2014-01-21 10:32 - 2014-01-21 18:00 - 00000000 ____D () C:\Users\***\AppData\Local\Nero

2014-01-21 10:32 - 2014-01-21 10:33 - 00000000 ____D () C:\Users\***\AppData\Roaming\Nero

2014-01-21 10:24 - 2014-01-21 10:24 - 00000000 ____D () C:\Windows\System32\Tasks\Nero

2014-01-21 09:54 - 2014-01-21 10:06 - 288310920 _____ (Nero AG) C:\Users\***\Downloads\Nero2014-15.0.07100_trial.exe

2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Roaming\Ashampoo

2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Local\ashampoo

2014-01-21 09:51 - 2014-01-21 09:52 - 00000000 ____D () C:\ProgramData\Ashampoo

2014-01-21 09:45 - 2014-01-21 09:48 - 92789928 _____ (Ashampoo GmbH & Co. KG ) C:\Users\***\Downloads\ashampoo_burning_studio_2014_12.0.5_15376.exe

2014-01-19 11:35 - 2014-01-19 11:18 - 139448593 _____ () C:\Users\***\Desktop\Afrika TV.flv

2014-01-19 10:52 - 2014-01-19 11:02 - 93897148 _____ () C:\Users\***\Desktop\WissensWerte_ Migration - YouTube [720p].mp4

2014-01-18 15:35 - 2014-01-18 15:35 - 00000000 ____D () C:\Users\***\Desktop\Wohnungsgedöns

2014-01-15 20:14 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\***\AppData\Roaming\Foxit Software

2014-01-15 20:12 - 2014-01-15 20:13 - 23867560 _____ (Mozilla) C:\Users\***\Downloads\Firefox_Setup_26.0.exe

2014-01-15 20:11 - 2014-01-15 20:14 - 32747816 _____ (Nero AG) C:\Users\***\Downloads\Nero_BurnLite-10.0.10600.exe

2014-01-15 19:53 - 2014-01-15 19:53 - 03765592 _____ () C:\Users\***\Downloads\Paint.NET.3.5.11.Install.exe

2014-01-15 19:51 - 2014-01-15 19:53 - 33440584 _____ (Foxit Corporation ) C:\Users\***\Downloads\FoxitReader612.1224_enu_Setup.exe

2014-01-15 19:46 - 2014-01-15 19:46 - 01977432 _____ () C:\Users\***\Downloads\winrar-x64-501.exe

2014-01-15 19:45 - 2014-01-15 19:45 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-15 19:45 - 2014-01-15 19:44 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-15 19:44 - 2014-01-15 19:44 - 00000000 ____D () C:\Program Files\Java

2014-01-15 19:13 - 2014-01-15 19:15 - 50837888 _____ (Adobe Systems Incorporated) C:\Users\***\Downloads\AdbeRdr11006_en_US.exe

2014-01-15 19:13 - 2014-01-15 19:15 - 30796712 _____ (Oracle Corporation) C:\Users\***\Downloads\jre-7u51-windows-x64.exe

2014-01-15 10:00 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-15 10:00 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-15 10:00 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-15 10:00 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
 

==================== One Month Modified Files and Folders =======
 

2014-02-05 17:14 - 2014-02-04 22:27 - 00021928 _____ () C:\Users\***\Desktop\FRST.txt

2014-02-05 17:13 - 2014-02-04 22:18 - 00019017 _____ () C:\Users\***\Downloads\FRST.txt

2014-02-05 17:13 - 2014-02-04 22:17 - 00000000 ____D () C:\FRST

2014-02-05 17:05 - 2013-04-28 09:34 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-02-05 17:00 - 2014-02-05 17:00 - 00001466 _____ () C:\Users\***\Desktop\JRT.txt

2014-02-05 16:42 - 2013-12-11 16:41 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-05 15:34 - 2009-07-14 05:45 - 00015344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-05 15:34 - 2009-07-14 05:45 - 00015344 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-05 15:29 - 2014-02-05 15:29 - 00001818 _____ () C:\Users\***\Desktop\AdwCleaner[S0].txt

2014-02-05 15:29 - 2014-02-05 15:29 - 00000000 ____D () C:\Windows\ERUNT

2014-02-05 15:29 - 2010-08-13 11:37 - 01600496 _____ () C:\Windows\WindowsUpdate.log

2014-02-05 15:28 - 2013-02-25 19:21 - 00000000 ____D () C:\Users\***\AppData\Roaming\Dropbox

2014-02-05 15:27 - 2010-08-14 16:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Sunbird

2014-02-05 15:25 - 2013-04-28 09:34 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-02-05 15:25 - 2012-05-12 13:42 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

2014-02-05 15:25 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-05 15:25 - 2009-07-14 05:51 - 00143638 _____ () C:\Windows\setupact.log

2014-02-05 15:24 - 2014-02-05 15:22 - 00000000 ____D () C:\AdwCleaner

2014-02-05 15:21 - 2014-02-05 15:21 - 01037530 _____ (Thisisu) C:\Users\***\Desktop\JRT.exe

2014-02-05 15:20 - 2014-02-05 15:20 - 01166132 _____ () C:\Users\***\Desktop\adwcleaner.exe

2014-02-05 14:16 - 2014-02-05 13:26 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2014-02-05 14:16 - 2014-02-05 13:25 - 00000000 ____D () C:\Users\***\Desktop\mbar

2014-02-05 13:55 - 2014-02-05 13:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox

2014-02-05 13:26 - 2014-02-05 13:26 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-02-05 13:25 - 2014-02-05 13:25 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-02-05 13:25 - 2014-02-05 13:24 - 12589848 _____ (Malwarebytes Corp.) C:\Users\***\Downloads\mbar-1.07.0.1009.exe

2014-02-05 13:08 - 2014-02-05 13:08 - 00237800 _____ () C:\Users\***\Desktop\gmer.rar

2014-02-05 13:04 - 2014-02-04 22:32 - 00039609 _____ () C:\Users\***\Desktop\Addition.txt

2014-02-05 06:50 - 2013-12-12 19:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird

2014-02-05 06:36 - 2010-09-20 16:48 - 00000000 ____D () C:\Program Files (x86)\Zarb 4

2014-02-04 23:09 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-02-04 23:01 - 2014-02-04 23:00 - 00308144 _____ () C:\Users\***\Desktop\asd.txt

2014-02-04 22:57 - 2014-02-04 22:56 - 00237728 _____ () C:\Users\***\Desktop\gmer.log

2014-02-04 22:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

2014-02-04 22:19 - 2014-02-04 22:19 - 00039621 _____ () C:\Users\***\Downloads\Addition.txt

2014-02-04 22:16 - 2014-02-05 17:14 - 02080256 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe

2014-02-04 22:16 - 2014-02-04 22:16 - 00380416 _____ () C:\Users\***\Downloads\gqsfq858.exe

2014-02-04 22:16 - 2014-02-04 22:15 - 02080256 _____ (Farbar) C:\Users\***\Downloads\FRST64.exe

2014-02-04 22:08 - 2014-02-04 22:08 - 00000584 _____ () C:\Users\***\Downloads\defogger_disable.log

2014-02-04 22:08 - 2014-02-04 22:08 - 00000020 _____ () C:\Users\***\defogger_reenable

2014-02-04 22:08 - 2010-08-13 11:42 - 00000000 ____D () C:\Users\***

2014-02-04 22:07 - 2014-02-04 22:07 - 00050477 _____ () C:\Users\***\Downloads\Defogger.exe

2014-02-04 21:42 - 2013-12-11 16:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-02-04 21:42 - 2013-12-11 16:41 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-02-03 20:10 - 2014-02-03 20:10 - 00000000 ____D () C:\Users\Public\Foxit Software

2014-02-03 20:10 - 2014-01-15 20:14 - 00000000 ____D () C:\Users\***\AppData\Roaming\Foxit Software

2014-02-03 10:05 - 2014-02-02 21:06 - 00000000 ____D () C:\Users\***\Desktop\Wohnungen

2014-02-03 10:04 - 2010-08-14 14:04 - 00000000 ____D () C:\Users\***\AppData\Roaming\Canon

2014-01-29 16:52 - 2010-08-14 14:04 - 00044085 _____ () C:\Users\***\Sti_Trace.log

2014-01-27 16:49 - 2010-08-13 11:58 - 00100752 _____ () C:\Users\***\AppData\Local\GDIPFONTCACHEV1.DAT

2014-01-27 16:48 - 2009-07-14 05:45 - 00388096 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-26 11:01 - 2013-06-21 16:04 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-22 19:03 - 2014-01-22 18:10 - 00000000 ____D () C:\Users\***\AppData\Roaming\vlc

2014-01-22 18:07 - 2014-01-22 18:07 - 24097311 _____ () C:\Users\***\Downloads\vlc-2.1.2-win32.exe

2014-01-22 17:12 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

2014-01-21 20:36 - 2013-12-11 16:41 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-01-21 19:11 - 2010-08-13 13:08 - 00000000 ____D () C:\ProgramData\CyberLink

2014-01-21 18:00 - 2014-01-21 10:32 - 00000000 ____D () C:\Users\***\AppData\Local\Nero

2014-01-21 15:47 - 2010-08-13 12:35 - 00647274 _____ () C:\Windows\PFRO.log

2014-01-21 10:33 - 2014-01-21 10:32 - 00000000 ____D () C:\Users\***\AppData\Roaming\Nero

2014-01-21 10:32 - 2010-08-26 12:52 - 00000000 ____D () C:\ProgramData\Nero

2014-01-21 10:24 - 2014-01-21 10:24 - 00000000 ____D () C:\Windows\System32\Tasks\Nero

2014-01-21 10:24 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Cursors

2014-01-21 10:23 - 2010-08-26 12:52 - 00000000 ____D () C:\Program Files (x86)\Nero

2014-01-21 10:06 - 2014-01-21 09:54 - 288310920 _____ (Nero AG) C:\Users\***\Downloads\Nero2014-15.0.07100_trial.exe

2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Roaming\Ashampoo

2014-01-21 09:52 - 2014-01-21 09:52 - 00000000 ____D () C:\Users\***\AppData\Local\ashampoo

2014-01-21 09:52 - 2014-01-21 09:51 - 00000000 ____D () C:\ProgramData\Ashampoo

2014-01-21 09:48 - 2014-01-21 09:45 - 92789928 _____ (Ashampoo GmbH & Co. KG ) C:\Users\***\Downloads\ashampoo_burning_studio_2014_12.0.5_15376.exe

2014-01-19 11:34 - 2009-07-14 18:58 - 00654150 _____ () C:\Windows\system32\perfh007.dat

2014-01-19 11:34 - 2009-07-14 18:58 - 00130022 _____ () C:\Windows\system32\perfc007.dat

2014-01-19 11:34 - 2009-07-14 06:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-01-19 11:18 - 2014-01-19 11:35 - 139448593 _____ () C:\Users\***\Desktop\Afrika TV.flv

2014-01-19 11:02 - 2014-01-19 10:52 - 93897148 _____ () C:\Users\***\Desktop\WissensWerte_ Migration - YouTube [720p].mp4

2014-01-18 15:35 - 2014-01-18 15:35 - 00000000 ____D () C:\Users\***\Desktop\Wohnungsgedöns

2014-01-18 10:37 - 2013-02-25 19:21 - 00000000 ____D () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-01-18 10:37 - 2010-08-13 11:42 - 00000000 ___RD () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-01-15 20:19 - 2013-07-16 21:29 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-15 20:17 - 2010-08-13 12:22 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-15 20:14 - 2014-01-15 20:11 - 32747816 _____ (Nero AG) C:\Users\***\Downloads\Nero_BurnLite-10.0.10600.exe

2014-01-15 20:14 - 2010-08-14 14:16 - 00000000 ____D () C:\Program Files (x86)\Foxit Software

2014-01-15 20:13 - 2014-01-15 20:12 - 23867560 _____ (Mozilla) C:\Users\***\Downloads\Firefox_Setup_26.0.exe

2014-01-15 19:56 - 2010-08-14 14:18 - 00000000 ____D () C:\Program Files (x86)\Paint.net

2014-01-15 19:55 - 2010-08-14 14:17 - 00000000 ____D () C:\Users\***\AppData\Local\Paint.NET

2014-01-15 19:54 - 2013-07-14 22:05 - 00000000 ____D () C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2014-01-15 19:54 - 2011-07-14 16:27 - 00000000 ____D () C:\Program Files\Winrar

2014-01-15 19:53 - 2014-01-15 19:53 - 03765592 _____ () C:\Users\***\Downloads\Paint.NET.3.5.11.Install.exe

2014-01-15 19:53 - 2014-01-15 19:51 - 33440584 _____ (Foxit Corporation ) C:\Users\***\Downloads\FoxitReader612.1224_enu_Setup.exe

2014-01-15 19:46 - 2014-01-15 19:46 - 01977432 _____ () C:\Users\***\Downloads\winrar-x64-501.exe

2014-01-15 19:45 - 2014-01-15 19:45 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-15 19:44 - 2014-01-15 19:45 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-01-15 19:44 - 2014-01-15 19:44 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll

2014-01-15 19:44 - 2014-01-15 19:44 - 00000000 ____D () C:\Program Files\Java

2014-01-15 19:15 - 2014-01-15 19:13 - 50837888 _____ (Adobe Systems Incorporated) C:\Users\***\Downloads\AdbeRdr11006_en_US.exe

2014-01-15 19:15 - 2014-01-15 19:13 - 30796712 _____ (Oracle Corporation) C:\Users\***\Downloads\jre-7u51-windows-x64.exe
 

Some content of TEMP:

====================

C:\Users\***\AppData\Local\Temp\AskSLib.dll

C:\Users\***\AppData\Local\Temp\DE_de_Avery_AW31.exe

C:\Users\***\AppData\Local\Temp\DTLite4454-0316.exe

C:\Users\***\AppData\Local\Temp\DTLite4461-0327.exe

C:\Users\***\AppData\Local\Temp\DTLite4471-0333.exe

C:\Users\***\AppData\Local\Temp\FP_PL_PFS_INSTALLER.exe

C:\Users\***\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe

C:\Users\***\AppData\Local\Temp\jre-6u22-windows-i586-iftw-rv.exe

C:\Users\***\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe

C:\Users\***\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe

C:\Users\***\AppData\Local\Temp\jre-6u30-windows-i586-iftw-rv.exe

C:\Users\***\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe

C:\Users\***\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe

C:\Users\***\AppData\Local\Temp\nitro_pdf_reader_x64.exe

C:\Users\***\AppData\Local\Temp\nitro_reader3_x64.exe

C:\Users\***\AppData\Local\Temp\ose00000.exe

C:\Users\***\AppData\Local\Temp\Quarantine.exe

C:\Users\***\AppData\Local\Temp\TerraTec_Home_Cinema_6.11.05.exe

C:\Users\***\AppData\Local\Temp\TerraTec_Home_Cinema_6.15.11.exe

C:\Users\***\AppData\Local\Temp\uninstall-temp.exe

C:\Users\***\AppData\Local\Temp\vlc-2.0.4-win32.exe

C:\Users\***\AppData\Local\Temp\vlc-2.0.5-win32.exe

C:\Users\***\AppData\Local\Temp\vlc-2.1.2-win64.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-01-29 08:36
 

==================== End Of Log ============================

--- --- ---

--- --- ---

und die addtion.txt

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-02-2014

Ran by *** at 2014-02-05 17:15:18

Running from C:\Users\***\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: BitDefender Antivirus (Enabled - Up to date) {50909708-FF80-02AF-F814-B28405891E92}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: BitDefender AntiSpyware (Enabled - Up to date) {EBF176EC-D9BA-0D21-C2A4-89F67E0E542F}

FW: BitDefender Firewall (Enabled) {68AB162D-B5EF-03F7-D34B-1BB1FB5A59E9}
 

==================== Installed Programs ======================
 

Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)

Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)

Adobe Photoshop Elements 2.0 (x32 Version: 2.0 - Adobe Systems, Inc.)

Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.06) (x32 Version: 11.0.06 - Adobe Systems Incorporated)

AMD Catalyst Install Manager (Version: 8.0.903.0 - Advanced Micro Devices, Inc.)

AMD Drag and Drop Transcoding (Version: 2.00.0000 - ATI Technologies Inc.) Hidden

AnyDVD (x32 Version: 6.8.5.0 - SlySoft)

ArcSoft PhotoStudio 5.5 (x32 Version:  - ArcSoft)

ATI AVIVO64 Codecs (Version: 11.1.0.50504 - ATI Technologies Inc.) Hidden

Avery Wizard 3.1 (x32 Version: 3.1.8 - Avery)

BitDefender Internet Security 2011 (Version: 14.0.29 - BitDefender)

BitDefender Internet Security 2011 (Version: 14.0.29 - BitDefender) Hidden

Canon CanoScan Toolbox 4.9 (x32 Version:  - )

Canon Utilities Easy-PhotoPrint EX (x32 Version:  - )

Canon Utilities My Printer (x32 Version:  - )

Canon Utilities Solution Menu (x32 Version:  - )

CanoScan LiDE 200 Scanner Driver (Version:  - )

Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center (x32 Version: 2012.1219.1521.27485 - Ihr Firmenname) Hidden

Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Czech (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Danish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Dutch (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help English (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Finnish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help French (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help German (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Greek (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Hungarian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Italian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Japanese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Korean (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Norwegian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Polish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Portuguese (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Russian (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Spanish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Swedish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Thai (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

CCC Help Turkish (x32 Version: 2012.1219.1520.27485 - Advanced Micro Devices, Inc.) Hidden

ccc-utility64 (Version: 2012.1219.1521.27485 - Advanced Micro Devices, Inc.) Hidden

CDDRV_Installer (Version: 4.60 - Logitech) Hidden

Cinergy S2 PCI V1.01.01.901 (x32 Version: 1.01.01.901 - )

CloneDVD2 (x32 Version: 2.9.3.0 - Elaborate Bytes)

CloudReading (x32 Version: 1.1.47.1220 - Foxit Corporation)

Cuttermaran 1.70 (x32 Version: 1.7.0 - to***)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version:  - Microsoft)

dradio-Recorder Version 3.02.6 (x32 Version:  - )

Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)

erLT (x32 Version: 1.20.0137 - Logitech, Inc.) Hidden

FileHippo.com Update Checker (x32 Version:  - )

Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Foxit Reader (x32 Version: 6.1.2.1224 - Foxit Corporation)

Free Video Dub version 1.8 (x32 Version:  - DVDVideoSoft Limited.)

Free YouTube Download version 3.1.30.627 (x32 Version: 3.1.30.627 - DVDVideoSoft Ltd.)

Gigabyte Raid Cinfigurer (x32 Version: 1.00.0001 - GIGABYTE Technologies, Inc.)

Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)

Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden

HashTab 4.0.0.1 (Version: 4.0.0.1 - Implbits Software)

HydraVision (x32 Version: 4.2.162.0 - ATI Technologies Inc.) Hidden

ImgBurn (x32 Version: 2.5.5.0 - LIGHTNING UK!)

Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle)

KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden

LG CyberLink Power2Go (x32 Version: 6.2.3325 - CyberLink Corp.)

LG CyberLink Power2Go (x32 Version: 6.2.3325 - CyberLink Corp.) Hidden

LG CyberLink PowerBackup (x32 Version: 2.5.5529 - CyberLink Corp.)

LG CyberLink PowerDVD (x32 Version: 8.0.2815d - CyberLink Corp.)

LG CyberLink PowerDVD (x32 Version: 8.0.2815d - CyberLink Corp.) Hidden

LG CyberLink PowerProducer (x32 Version: 5.0.2.2130 - CyberLink Corp.)

LG CyberLink PowerProducer (x32 Version: 5.0.2.2130 - CyberLink Corp.) Hidden

LG Power Tools (x32 Version: 6.0.3316 - CyberLink Corp.)

LG Power Tools (x32 Version: 6.0.3316 - CyberLink Corp.) Hidden

Logitech SetPoint (x32 Version: 4.80 - Logitech)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)

Manual CanoScan 8400F (x32 Version:  - )

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden

Microsoft Office 2000 Premium (x32 Version: 9.00.2816 - Microsoft Corporation)

Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Home and Student 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319 - Microsoft Corporation)

Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0 - Microsoft Corporation)

Microsoft-Maus- und Tastatur-Center (Version: 2.1.177.0 - Microsoft Corporation) Hidden

Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

MozBackup 1.4.10 (x32 Version:  - Pavel Cvrcek)

Mozilla Firefox 27.0 (x86 de) (x32 Version: 27.0 - Mozilla)

Mozilla Maintenance Service (x32 Version: 27.0 - Mozilla)

Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)

MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)

NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0 - NEC Electronics Corporation)

NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0 - NEC Electronics Corporation) Hidden

Nero 2014 (x32 Version: 15.0.07100 - Nero AG)

Nero 7 Premium (x32 Version: 7.02.6445 - Nero AG)

Nero Audio Pack 1 (x32 Version: 11.0.11500.110.0 - Nero AG) Hidden

Nero Blu-ray Player (x32 Version: 12.0.20064 - Nero AG) Hidden

Nero Blu-ray Player Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden

Nero Burning Core (x32 Version: 15.0.25001 - Nero AG) Hidden

Nero Burning ROM (x32 Version: 15.0.25001 - Nero AG) Hidden

Nero Burning ROM Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden

Nero ControlCenter (x32 Version: 11.0.16700 - Nero AG) Hidden

Nero ControlCenter Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden

Nero Core Components (x32 Version: 11.0.23200 - Nero AG) Hidden

Nero Device Updates (x32 Version: 15.0.1002 - Nero AG) Hidden

Nero Disc Menus Basic (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Disc to Device (x32 Version: 15.0.12032 - Nero AG) Hidden

Nero Effects Basic (x32 Version: 15.0.10011 - Nero AG) Hidden

Nero Express (x32 Version: 15.0.25001 - Nero AG) Hidden

Nero Express Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden

Nero Info (x32 Version: 15.1.0030 - Nero AG)

Nero Kwik Themes Basic (x32 Version: 12.0.11500 - Nero AG) Hidden

Nero Launcher (x32 Version: 15.0.12000 - Nero AG) Hidden

Nero MediaHome (x32 Version: 1.22.3600 - Nero AG) Hidden

Nero MediaHome Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden

Nero PiP Effects Basic (x32 Version: 15.0.10008 - Nero AG) Hidden

Nero Recode (x32 Version: 15.0.25000 - Nero AG) Hidden

Nero Recode Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden

Nero RescueAgent (x32 Version: 15.0.2000 - Nero AG) Hidden

Nero RescueAgent Help (CHM) (x32 Version: 15.0.00015 - Nero AG) Hidden

Nero SharedVideoCodecs (x32 Version: 1.0.15005 - Nero AG) Hidden

Nero Update (x32 Version: 11.0.13300.42.0 - Nero AG) Hidden

Nero Video (x32 Version: 15.0.23000 - Nero AG) Hidden

Nero Video Help (CHM) (x32 Version: 15.0.00021 - Nero AG) Hidden

neroxml (x32 Version: 1.0.0 - Nero AG) Hidden

Nitro Reader 3 (Version: 3.5.2.10 - Nitro)

OpenOffice.org 3.4.1 (x32 Version: 3.41.9593 - Apache Software Foundation)

Paint.NET v3.5.11 (Version: 3.61.0 - dotPDN LLC)

PDFCreator (x32 Version: 1.2.1 - Frank Heindörfer, Philip Chinery)

PDF-Viewer (Version: 2.5.208.0 - Tracker Software Products Ltd)

Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Prerequisite installer (x32 Version: 15.0.0005 - Nero AG) Hidden

Realtek Ethernet Controller Driver For Windows Vista and Later (x32 Version: 1.00.0009 - Realtek)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.5998 - Realtek Semiconductor Corp.)

Revo Uninstaller 1.93 (x32 Version: 1.93 - VS Revo Group)

ScanSoft OmniPage SE 4 (x32 Version: 15.2.0020 - Nuance Communications, Inc.)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden

StreamTransport version: 1.0.2.2171 (x32 Version:  - )

SUPER © Version 2010.bld.38 (May 2, 2010) (x32 Version: Version 2010.bld.38 (May 2, 2010) - eRightSoft)

TerraTec Home Cinema (x32 Version: 6.15.11 - )

TerraTec Remote Control (x32 Version: 5.28 - )

TrueCrypt (x32 Version: 7.1a - TrueCrypt Foundation)

Ugrib RC1 (x32 Version: Release Candidate 0.2.4 - GRIB.US)

Uninstall 1.0.0.1 (x32 Version:  - )

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)

Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version:  - Microsoft)

Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden

VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN)

VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)

WD Drive Utilities (x32 Version: 1.0.1.5 - Western Digital)

WD Security (x32 Version: 1.0.3.3 - Western Digital Technologies, Inc.)

WD SmartWare (Version: 1.6.5.2 - Western Digital Technologies, Inc.)

WDR RadioRecorder (x32 Version:  - Tobit.Software)

Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)

Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden

Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden

WinRAR 5.01 (64-bit) (Version: 5.01.0 - win.rar GmbH)

Yahoo! Detect (x32 Version:  - )

Zarb 4.1 (x32 Version: 4.1 - Hans Zybura Software)
 

==================== Restore Points  =========================
 

26-01-2014 09:58:31 Configured Microsoft Office Home and Student 2010

02-02-2014 16:47:10 Geplanter Prüfpunkt
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {22C59227-92C9-4552-9C68-71BBA9E2E998} - System32\Tasks\{7B66487D-722B-402D-AE0D-3084BD5C555C} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {3E503BE1-A33F-4D0C-9FDC-187DFE3B59A8} - System32\Tasks\{B90E5441-29D9-4A1C-9C50-1F51E93D821D} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {46024402-51FB-42C5-8660-53E049A23C6B} - System32\Tasks\{657291B0-0BFD-4A3A-9A1F-F5889CB08446} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {47708429-E7F9-4D15-B33C-44C88F04735F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-04] (Adobe Systems Incorporated)

Task: {4FD4F9A5-4534-4D21-9086-8E2CEDDBA845} - System32\Tasks\{3D85CAF6-E721-4BA9-9617-33BAC2333FC3} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {5DE738D0-0838-4610-A126-1C779BE1914A} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2013-10-16] (Nero AG)

Task: {6E974F43-8706-41CC-B826-36F116E96B7D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-28] (Google Inc.)

Task: {89EAB45E-892D-4159-BD8A-E146DBA9DDCD} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)

Task: {8F27EFB3-D478-470A-8DEB-B0ABF5657D89} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-01-29] (Microsoft Corporation)

Task: {9AA10EF2-71A7-4F21-8FE7-6073CCD2EFA4} - System32\Tasks\{993C17D7-C415-40E6-9475-E9E72F17CA20} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {ADEF4491-09C4-4D59-8231-2EBC0F1B87B4} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2013-01-29] (Microsoft)

Task: {C96BDE44-BDDC-4AEB-A314-DDD871F4E6C8} - System32\Tasks\{D0D1ACEA-CF31-41CC-B365-C41803D46BE7} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: {CEC4AD92-6D96-49D7-81D6-7D0DB2142127} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)

Task: {D67B1C9B-58C5-4C69-8748-D88A65E53FE1} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-01-29] (Microsoft Corporation)

Task: {DB762D46-CEE1-49C4-A09A-8EA9B65D9C51} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-28] (Google Inc.)

Task: {EB220798-E1B2-4E61-A157-BE1F39ACAE40} - System32\Tasks\{B9BD9FF2-6B43-4239-9C88-E1FD1F07544C} => C:\Program Files (x86)\Klett Arbeitsblätter Technik\ABUT1.exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Loaded Modules (whitelisted) =============
 

2011-06-02 16:23 - 2011-06-02 16:23 - 00239648 _____ () C:\Program Files\BitDefender\BitDefender 2011\txmlutil.dll

2011-06-02 16:22 - 2011-06-02 16:22 - 00161368 _____ () C:\Program Files\BitDefender\BitDefender 2011\connector.dll

2011-07-11 19:19 - 2011-07-11 19:19 - 00245328 _____ () C:\Program Files\BitDefender\BitDefender 2011\framework.dll

2010-09-06 17:05 - 2009-07-20 11:35 - 00018960 _____ () C:\Program Files (x86)\Logitech\SetPoint\khalwrapper.dll

2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\***\AppData\Roaming\Dropbox\bin\libcef.dll

2014-02-05 13:55 - 2014-02-05 13:55 - 03583600 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================
 

System errors:

=============
 

Microsoft Office Sessions:

=========================
 

CodeIntegrity Errors:

===================================

  Date: 2014-02-05 17:10:19.873

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-05 15:40:58.920

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-05 15:21:00.336

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-05 14:17:02.595

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-05 13:25:22.271

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-05 13:03:13.503

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-05 12:57:56.682

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-05 06:51:14.564

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-04 22:56:30.382

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2014-02-04 22:39:50.198

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\BitDefender\BitDefender 2011\Active Virus Control\Midas_00089_023\midas64.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 49%

Total physical RAM: 4091.49 MB

Available physical RAM: 2076.82 MB

Total Pagefile: 8181.16 MB

Available Pagefile: 5496.9 MB

Total Virtual: 8192 MB

Available Virtual: 8191.69 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:97.56 GB) (Free:30.72 GB) NTFS

Drive d: () (Fixed) (Total:833.85 GB) (Free:745.01 GB) NTFS

Drive i: (My Passport) (Fixed) (Total:931.48 GB) (Free:916.86 GB) NTFS

Drive m: (Medien HDD) (Fixed) (Total:1863.01 GB) (Free:1213.15 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A133C234)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=98 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=834 GB) - (Type=OF Extended)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: D574F000)

Partition 1: (Not Active) - (Size=-198626508800) - (Type=07 NTFS)
 

========================================================

Disk: 2 (MBR Code: Windows XP) (Size: 931 GB) (Disk ID: 00023F15)

Partition 1: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

MBAM hat 3 PUP gefunden. Löschen lassen?

Log:

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2014.02.06.03
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

*** :: *** [Administrator]
 

06.02.2014 08:28:01

MBAM-log-2014-02-06 (10-47-37).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 227644

Laufzeit: 11 Minute(n), 11 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 3

C:\Users\***\AppData\Local\Temp\DTLite4454-0316.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

C:\Users\***\AppData\Local\Temp\DTLite4461-0327.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

C:\Users\***\AppData\Local\Temp\DTLite4471-0333.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
 

(Ende)

Ist nur tmp, löschen

Der ESET Scanner braucht Jahre...
Ich melde mich wieder, wenn er endlich fertig ist.

An diesem Punkte aber noch mal ein dickes Dankeschön! :)

So.

ESET Log:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=49403b17ad091b459aaa7b50dc501223

# engine=16991

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-02-08 03:01:50

# local_time=2014-02-08 04:01:50 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=5893 16776574 100 94 18163480 143501560 0 0

# scanned=259046

Was steht jetzt noch an? Oder war's das? :)

TFC - Temp File Cleaner

Lade dir

TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

Öffne die TFC.exe.
Vista und Win 7 User mit Rechtsklick "als Administrator starten".
Schließe alle anderen Programme.
Drücke auf den Button Start.
Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Sieht soweit ok aus :daumenhoc

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?