|
Plagegeister aller Art und deren Bekämpfung: Windows 7 läuft plötzlich sehr langsamWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
20.06.2013, 14:28 | #16 |
/// the machine /// TB-Ausbilder | Windows 7 läuft plötzlich sehr langsam Von welcher redest Du jetzt? WIndows? Noch Probleme mit dem System?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
20.06.2013, 14:35 | #17 |
| Windows 7 läuft plötzlich sehr langsam sorry, ja die windowsaktivierung
__________________war denn in den scans irgendwas zu finden? die probleme sind ja immer nur beim hochfahren, bis de pc normal läuft, vergehen ca 20-30 min. währenddessen passiert nicht viel, manchmal bleibt der bildschirm minutenlang schwarz bevor das desktop angezeigt wird, nur der mauszeiger ist da. und danach kann man dinge anklicken ohne reaktion, und irgendwann hört man wie der pc plötzlich zu arbeiten beginnt und alles geht wie immer. kann das damit zusammenhängen, dass in der taskleiste "intel rst service läuft nicht" angezeigt wird? statt einem grünen häckchen ist da ein blauer kreis.. |
20.06.2013, 18:06 | #18 |
/// the machine /// TB-Ausbilder | Windows 7 läuft plötzlich sehr langsam Klar. deinstalliere die Software, lad sie neu (Seite deines Laptop Herstellers). Und poste ein frisches FRST Log
__________________
__________________ |
21.06.2013, 07:24 | #19 |
| Windows 7 läuft plötzlich sehr langsam Hab die Software nirgends zum Download gefunden und wollte sie auch nicht einfach löschen, da ich in Foren gelesen habe, dass es dann einen Bluescreen (?) gibt. Allerdings habe ich in der Verwaltung einfach den Status von verzögert aktivieren auf aktivieren gesetzt, jetzt erscheint ein grünes Häkchen über dem IRS Store Technologie Zeichen. Scheint wohl nicht das Problem zu sein. Wollte grade nochmal einen FRST Scan laufen lassen, davon scheint es aber eine neue Version zu geben. Soll ich die runterladen? Kann es denn auch ein Hardwareproblem sein? Oder gibt es Anzeichen, dass irgendwas in der Software nicht rundläuft? Habe das Gefühl, dass es mit jedem Start länger dauert. Bis zur Benutzerkontenanmeldung geht alles normal, danach erscheint inzwischen minutenlang ein schwarzer Bildschirm. Irgendwann baut sich dann das Desktop auf, nach ca 20 min kann ich Firefox etc. verwenden. |
21.06.2013, 09:19 | #20 | ||
/// the machine /// TB-Ausbilder | Windows 7 läuft plötzlich sehr langsamZitat:
Zitat:
Bitte in FRST auch nen Haken bei Additional setzen, es entstehen dann wieder 2 Logfiles.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.06.2013, 09:43 | #21 | |
| Windows 7 läuft plötzlich sehr langsamZitat:
Hier die Logfiles: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2013 Ran by Antonia (administrator) on 21-06-2013 10:40:48 Running from C:\Users\Antonia\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE () C:\Windows\SysWOW64\NMSAccess32.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (Sony Corporation) C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Spotify Ltd) C:\Users\Antonia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe (ALPS) C:\Program Files\Apoint\Apvfb.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe (Sony Corporation) C:\Program Files\Sony\VAIO Personalization Manager\VpmIfPav.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\Admload.exe (Sony Corporation) C:\Program Files\Sony\VCM Manager Settings\VcmMgrNotification64.exe (Microsoft Corporation) C:\Windows\sysWOW64\wbem\wmiprvse.exe (Microsoft Corporation) C:\Windows\sysWOW64\wbem\wmiprvse.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (AVAST Software) C:\Program Files\AVAST Software\Avast\setup\avast.setup ==================== Registry (Whitelisted) ================== HKLM\...\Run: [cAudioFilterAgent] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.) HKLM\...\Run: [AtherosBtStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" [790688 2011-04-29] (Atheros Communications) HKLM\...\Run: [AthBtTray] "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" [657568 2011-04-29] (Atheros Commnucations) HKLM\...\Run: [Apoint] %ProgramFiles%\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.) HKLM\...\Run: [CanonSolutionMenu] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe /logon [689488 2008-03-10] (CANON INC.) HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [2114376 2008-03-17] (CANON INC.) HKCU\...\Run: [Elbserver] C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe /Stay [83344 2011-04-02] (Sony Corporation) HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-21] (Microsoft Corporation) HKCU\...\Run: [Spotify Web Helper] "C:\Users\Antonia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1104384 2013-06-18] (Spotify Ltd) HKCU\...\Policies\system: [DisableRegistryTools] 0 HKCU\...\Policies\system: [DisableTaskMgr] 0 HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation) HKLM-x32\...\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [2757312 2011-02-15] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-27] (Sony Corporation) HKLM-x32\...\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-04-15] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1263952 2013-02-13] () HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software) HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-05-11] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU SearchScopes: DefaultScope {3943E75D-6F7D-4309-9384-CCA454F6208C} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q311&_nkw={searchTerms} SearchScopes: HKCU - {3943E75D-6F7D-4309-9384-CCA454F6208C} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q311&_nkw={searchTerms} SearchScopes: HKCU - {43745D2F-4567-4267-9CD8-A4AED064005F} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 78.42.43.62 82.212.62.62 FireFox: ======== FF ProfilePath: C:\Users\Antonia\AppData\Roaming\Mozilla\Firefox\Profiles\oire5dcn.default FF SelectedSearchEngine: Google FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - E:\Mozilla Plugins\npitunes.dll No File FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: groovesharkUnlocker - C:\Users\Antonia\AppData\Roaming\Mozilla\Firefox\Profiles\oire5dcn.default\Extensions\groovesharkUnlocker@overlord1337.xpi FF Extension: No Name - C:\Users\Antonia\AppData\Roaming\Mozilla\Firefox\Profiles\oire5dcn.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: No Name - C:\Users\Antonia\AppData\Roaming\Mozilla\Firefox\Profiles\oire5dcn.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Users\Antonia\AppData\Roaming\Mozilla\Firefox\Profiles\oire5dcn.default\Extensions\{d62bb6fa-7192-47fd-b640-ad8855c444f3}.xpi Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.com/" CHR Extension: (YouTube) - C:\Users\Antonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 CHR Extension: (Google Search) - C:\Users\Antonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Antonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0 CHR Extension: (Gmail) - C:\Users\Antonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-04-29] (Atheros) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software) S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [104096 2011-07-19] (Atheros Communication Inc.) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] () R2 NMSAccess; C:\Windows\SysWOW64\NMSAccess32.exe [71096 2009-01-12] () R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation) ==================== Drivers (Whitelisted) ==================== R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-05-09] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378432 2013-05-09] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] () S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] () S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] () R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] () R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] () S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-06-21 10:40 - 2013-06-21 10:40 - 01930696 ____A (Farbar) C:\Users\Antonia\Desktop\FRST64.exe 2013-06-21 10:36 - 2013-06-21 10:37 - 01828262 ____A (Farbar) C:\Users\Antonia\Downloads\FRST64 (2).exe.1vqi9t0.partial 2013-06-21 10:33 - 2013-06-21 10:33 - 01930696 ____A (Farbar) C:\Users\Antonia\Downloads\FRST64.exe 2013-06-20 19:30 - 2013-06-20 19:30 - 00000000 ____D C:\Users\Antonia\SystemRequirementsLab 2013-06-20 19:30 - 2013-06-20 19:30 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab 2013-06-20 19:27 - 2013-06-20 19:27 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-20 19:22 - 2013-06-20 19:27 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-06-20 13:25 - 2013-06-20 13:25 - 00355927 ____A (Farbar) C:\Users\Antonia\Desktop\FSS.exe 2013-06-20 13:22 - 2013-06-20 13:22 - 00002019 ____A C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-06-20 10:38 - 2013-06-20 10:39 - 00890839 ____A C:\Users\Antonia\Desktop\SecurityCheck.exe 2013-06-19 18:06 - 2013-06-20 16:17 - 00000000 ____D C:\Users\Antonia\Desktop\Neuro 2013-06-19 17:48 - 2013-06-19 17:48 - 00000000 ____D C:\Windows\ERUNT 2013-06-19 17:48 - 2013-06-19 17:48 - 00000000 ____D C:\JRT 2013-06-19 17:17 - 2013-06-19 17:17 - 00005284 ____A C:\AdwCleaner[S1].txt 2013-06-19 17:16 - 2013-06-19 17:16 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Antonia\Desktop\JRT.exe 2013-06-18 20:03 - 2013-06-18 20:03 - 00648201 ____A C:\Users\Antonia\Desktop\adwcleaner.exe 2013-06-18 18:17 - 2013-06-18 18:17 - 00028469 ____A C:\ComboFix.txt 2013-06-18 18:03 - 2013-06-18 18:17 - 00000000 ____D C:\ComboFix 2013-06-17 19:38 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe 2013-06-17 19:38 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe 2013-06-17 19:38 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe 2013-06-17 19:38 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe 2013-06-17 19:38 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe 2013-06-17 19:38 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe 2013-06-17 19:38 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe 2013-06-17 19:38 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe 2013-06-17 19:37 - 2013-06-18 18:17 - 00000000 ____D C:\Qoobox 2013-06-17 19:37 - 2013-06-18 18:15 - 00000000 ____D C:\Windows\erdnt 2013-06-17 19:27 - 2013-06-17 19:27 - 00000000 ____D C:\Program Files (x86)\QuickTime 2013-06-17 19:25 - 2013-06-17 19:25 - 00001070 ____A C:\Users\Public\Desktop\VLC media player.lnk 2013-06-17 18:24 - 2013-06-17 18:24 - 00001922 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-06-17 18:24 - 2013-06-17 18:24 - 00000000 ____A C:\Windows\SysWOW64\config.nt 2013-06-17 18:24 - 2013-05-09 10:59 - 01025808 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSnx.sys 2013-06-17 18:24 - 2013-05-09 10:59 - 00378432 ____A (AVAST Software) C:\Windows\System32\Drivers\aswSP.sys 2013-06-17 18:24 - 2013-05-09 10:59 - 00189936 ____A C:\Windows\System32\Drivers\aswVmm.sys 2013-06-17 18:24 - 2013-05-09 10:59 - 00080816 ____A (AVAST Software) C:\Windows\System32\Drivers\aswMonFlt.sys 2013-06-17 18:24 - 2013-05-09 10:59 - 00072016 ____A (AVAST Software) C:\Windows\System32\Drivers\aswRdr2.sys 2013-06-17 18:24 - 2013-05-09 10:59 - 00065336 ____A C:\Windows\System32\Drivers\aswRvrt.sys 2013-06-17 18:24 - 2013-05-09 10:59 - 00064288 ____A (AVAST Software) C:\Windows\System32\Drivers\aswTdi.sys 2013-06-17 18:24 - 2013-05-09 10:59 - 00033400 ____A (AVAST Software) C:\Windows\System32\Drivers\aswFsBlk.sys 2013-06-17 18:24 - 2013-05-09 10:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe 2013-06-17 18:24 - 2013-05-09 10:58 - 00041664 ____A (AVAST Software) C:\Windows\avastSS.scr 2013-06-17 18:23 - 2013-06-17 18:23 - 00000000 ____D C:\ProgramData\AVAST Software 2013-06-17 18:23 - 2013-06-17 18:23 - 00000000 ____D C:\Program Files\AVAST Software 2013-06-17 18:19 - 2013-06-20 13:31 - 00000000 ____D C:\Users\Antonia\Desktop\PC 2013-06-17 18:18 - 2013-06-17 18:19 - 05079999 ____R (Swearware) C:\Users\Antonia\Desktop\ComboFix.exe 2013-06-17 15:15 - 2013-06-17 15:15 - 00000000 ____D C:\FRST 2013-06-16 23:38 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-16 23:38 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-16 23:38 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-16 23:38 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-16 23:38 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-16 23:38 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-16 23:38 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-16 23:38 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-16 23:38 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-16 23:38 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-16 23:38 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-16 23:38 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-16 20:45 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-06-16 20:45 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-16 20:45 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-06-16 20:45 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-06-16 20:45 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-06-16 20:45 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-06-13 16:21 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2013-06-13 16:21 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2013-06-13 16:21 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2013-06-13 16:21 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll 2013-06-13 16:21 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-06-13 16:21 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-06-13 16:21 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-06-13 16:21 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe 2013-06-13 16:21 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-06-13 16:21 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2013-06-13 16:21 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll 2013-06-13 16:21 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-06-13 16:21 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-06-13 16:21 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll 2013-06-13 16:21 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-06-13 16:21 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-13 16:21 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-13 16:21 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-13 16:21 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-09 17:50 - 2013-06-20 16:21 - 00105472 ____A C:\Users\Antonia\Desktop\M0313_Stundenplan.xls 2013-06-09 15:51 - 2013-06-09 15:51 - 00002535 ____A C:\Users\Antonia\Desktop\EndNote.lnk 2013-06-09 15:43 - 2013-06-09 15:51 - 00000000 ____D C:\Program Files (x86)\EndNote X7 2013-06-09 15:42 - 2013-06-09 15:42 - 00000000 ____D C:\Users\Antonia\Downloads\Endnote7_UBHD_Win 2013-06-09 15:40 - 2013-06-09 15:41 - 81973442 ____A C:\Users\Antonia\Downloads\Endnote7_UBHD_Win.zip ==================== One Month Modified Files and Folders ======= 2013-06-21 10:40 - 2013-06-21 10:40 - 01930696 ____A (Farbar) C:\Users\Antonia\Desktop\FRST64.exe 2013-06-21 10:37 - 2013-06-21 10:36 - 01828262 ____A (Farbar) C:\Users\Antonia\Downloads\FRST64 (2).exe.1vqi9t0.partial 2013-06-21 10:33 - 2013-06-21 10:33 - 01930696 ____A (Farbar) C:\Users\Antonia\Downloads\FRST64.exe 2013-06-21 09:56 - 2013-02-04 18:31 - 00000000 ____D C:\Users\Antonia\Documents\DrArbeit 2013-06-21 09:44 - 2012-04-21 18:39 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-06-21 08:31 - 2011-09-03 12:08 - 00700418 ____A C:\Windows\System32\perfh007.dat 2013-06-21 08:31 - 2011-09-03 12:08 - 00149182 ____A C:\Windows\System32\perfc007.dat 2013-06-21 08:31 - 2009-07-14 07:13 - 01621308 ____A C:\Windows\System32\PerfStringBackup.INI 2013-06-21 08:20 - 2011-12-21 13:47 - 01242259 ____A C:\Windows\WindowsUpdate.log 2013-06-21 07:48 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-06-21 07:48 - 2009-07-14 06:51 - 00093652 ____A C:\Windows\setupact.log 2013-06-21 07:07 - 2010-11-21 05:47 - 00144590 ____A C:\Windows\PFRO.log 2013-06-20 20:23 - 2011-12-21 14:58 - 00000000 ____D C:\Update 2013-06-20 19:49 - 2009-07-14 06:45 - 00020928 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-06-20 19:49 - 2009-07-14 06:45 - 00020928 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-06-20 19:30 - 2013-06-20 19:30 - 00000000 ____D C:\Users\Antonia\SystemRequirementsLab 2013-06-20 19:30 - 2013-06-20 19:30 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab 2013-06-20 19:30 - 2011-12-21 13:47 - 00000000 ____D C:\users\Antonia 2013-06-20 19:27 - 2013-06-20 19:27 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-20 19:27 - 2013-06-20 19:22 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-06-20 19:27 - 2011-09-03 02:29 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-06-20 19:27 - 2011-09-03 02:29 - 00000000 ____D C:\Program Files (x86)\Java 2013-06-20 16:21 - 2013-06-09 17:50 - 00105472 ____A C:\Users\Antonia\Desktop\M0313_Stundenplan.xls 2013-06-20 16:17 - 2013-06-19 18:06 - 00000000 ____D C:\Users\Antonia\Desktop\Neuro 2013-06-20 13:31 - 2013-06-17 18:19 - 00000000 ____D C:\Users\Antonia\Desktop\PC 2013-06-20 13:25 - 2013-06-20 13:25 - 00355927 ____A (Farbar) C:\Users\Antonia\Desktop\FSS.exe 2013-06-20 13:23 - 2011-12-21 17:21 - 00000000 ____D C:\Users\Antonia\AppData\Local\Adobe 2013-06-20 13:22 - 2013-06-20 13:22 - 00002019 ____A C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-06-20 13:22 - 2011-09-03 02:45 - 00000000 ____D C:\ProgramData\Adobe 2013-06-20 13:22 - 2011-09-03 02:45 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-06-20 10:39 - 2013-06-20 10:38 - 00890839 ____A C:\Users\Antonia\Desktop\SecurityCheck.exe 2013-06-19 17:48 - 2013-06-19 17:48 - 00000000 ____D C:\Windows\ERUNT 2013-06-19 17:48 - 2013-06-19 17:48 - 00000000 ____D C:\JRT 2013-06-19 17:28 - 2011-12-21 16:04 - 00000000 ____D C:\Users\Antonia\AppData\Local\CrashDumps 2013-06-19 17:17 - 2013-06-19 17:17 - 00005284 ____A C:\AdwCleaner[S1].txt 2013-06-19 17:16 - 2013-06-19 17:16 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Antonia\Desktop\JRT.exe 2013-06-18 23:33 - 2012-09-23 13:55 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\Spotify 2013-06-18 20:03 - 2013-06-18 20:03 - 00648201 ____A C:\Users\Antonia\Desktop\adwcleaner.exe 2013-06-18 19:12 - 2012-09-23 13:55 - 00000000 ____D C:\Users\Antonia\AppData\Local\Spotify 2013-06-18 18:17 - 2013-06-18 18:17 - 00028469 ____A C:\ComboFix.txt 2013-06-18 18:17 - 2013-06-18 18:03 - 00000000 ____D C:\ComboFix 2013-06-18 18:17 - 2013-06-17 19:37 - 00000000 ____D C:\Qoobox 2013-06-18 18:17 - 2009-07-14 05:20 - 00000000 __RHD C:\users\Default 2013-06-18 18:15 - 2013-06-17 19:37 - 00000000 ____D C:\Windows\erdnt 2013-06-18 18:14 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini 2013-06-17 19:27 - 2013-06-17 19:27 - 00000000 ____D C:\Program Files (x86)\QuickTime 2013-06-17 19:27 - 2012-10-16 13:36 - 00000000 ____D C:\ProgramData\Avira 2013-06-17 19:25 - 2013-06-17 19:25 - 00001070 ____A C:\Users\Public\Desktop\VLC media player.lnk 2013-06-17 19:24 - 2011-12-21 16:26 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\Adobe 2013-06-17 18:24 - 2013-06-17 18:24 - 00001922 ____A C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2013-06-17 18:24 - 2013-06-17 18:24 - 00000000 ____A C:\Windows\SysWOW64\config.nt 2013-06-17 18:23 - 2013-06-17 18:23 - 00000000 ____D C:\ProgramData\AVAST Software 2013-06-17 18:23 - 2013-06-17 18:23 - 00000000 ____D C:\Program Files\AVAST Software 2013-06-17 18:22 - 2013-04-09 16:50 - 00001113 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-06-17 18:22 - 2013-04-09 16:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-06-17 18:19 - 2013-06-17 18:18 - 05079999 ____R (Swearware) C:\Users\Antonia\Desktop\ComboFix.exe 2013-06-17 15:15 - 2013-06-17 15:15 - 00000000 ____D C:\FRST 2013-06-16 22:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF 2013-06-16 22:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-06-16 20:46 - 2011-12-22 22:42 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-06-14 14:33 - 2012-01-07 18:15 - 00000000 ____D C:\ProgramData\CanonIJPLM 2013-06-14 13:53 - 2011-12-21 14:50 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\Atheros 2013-06-13 20:41 - 2011-12-21 14:50 - 00000000 ____D C:\Users\Antonia\Documents\Bluetooth Folder 2013-06-12 17:44 - 2012-04-21 18:39 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-06-12 17:44 - 2012-01-06 16:13 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-06-09 17:50 - 2013-04-16 22:11 - 00000000 ____D C:\ProgramData\Thomson.ResearchSoft.Installers 2013-06-09 17:45 - 2013-04-16 22:23 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\EndNote 2013-06-09 15:51 - 2013-06-09 15:51 - 00002535 ____A C:\Users\Antonia\Desktop\EndNote.lnk 2013-06-09 15:51 - 2013-06-09 15:43 - 00000000 ____D C:\Program Files (x86)\EndNote X7 2013-06-09 15:42 - 2013-06-09 15:42 - 00000000 ____D C:\Users\Antonia\Downloads\Endnote7_UBHD_Win 2013-06-09 15:41 - 2013-06-09 15:40 - 81973442 ____A C:\Users\Antonia\Downloads\Endnote7_UBHD_Win.zip 2013-06-08 16:08 - 2013-06-16 23:38 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-08 16:07 - 2013-06-16 23:38 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-08 16:06 - 2013-06-16 23:38 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-08 16:06 - 2013-06-16 23:38 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-08 16:06 - 2013-06-16 23:38 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-08 14:28 - 2013-06-16 23:38 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-08 13:42 - 2013-06-16 23:38 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-08 13:40 - 2013-06-16 23:38 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-08 13:40 - 2013-06-16 23:38 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-08 13:40 - 2013-06-16 23:38 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-08 13:40 - 2013-06-16 23:38 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-08 13:13 - 2013-06-16 23:38 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-07 19:06 - 2012-02-05 14:45 - 00326256 ____A C:\test.xml 2013-06-03 18:13 - 2013-03-21 16:23 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\dvdcss 2013-05-28 21:24 - 2012-01-07 18:17 - 00000000 ____D C:\ProgramData\CanonIJ 2013-05-28 16:44 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2013-05-26 23:27 - 2011-12-21 13:48 - 00117384 ____A C:\Users\Antonia\AppData\Local\GDIPFONTCACHEV1.DAT 2013-05-26 23:27 - 2009-07-14 06:45 - 00448552 ____A C:\Windows\System32\FNTCACHE.DAT 2013-05-26 15:04 - 2012-01-10 18:21 - 00000000 ____D C:\ProgramData\DivX 2013-05-26 15:03 - 2013-05-15 17:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-05-26 15:03 - 2012-01-15 14:24 - 00000000 ____D C:\Program Files\DivX 2013-05-26 15:03 - 2012-01-11 22:43 - 00000000 ____D C:\Program Files (x86)\DivX ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-06-13 22:43 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-06-2013 Ran by Antonia at 2013-06-21 10:42:00 Run: Running from C:\Users\Antonia\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= ?????? Windows Live (Version: 15.4.3502.0922) ??????? ????????? Windows Live Mesh ActiveX ??? ?????????? ?????????? (Version: 15.4.5722.2) ??????? ?????????? Windows Live Mesh ActiveX ??? ????????? ??????????? (Version: 15.4.5722.2) ???????? ?????????? Windows Live (Version: 15.4.3502.0922) ?????????? Windows Live (Version: 15.4.3502.0922) ??????????? ?? Windows Live (Version: 15.4.3502.0922) ???????????? Windows Live (Version: 15.4.3502.0922) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) ActiveX ???????? ?? Windows Live Mesh ?? ?????????? ?????? (Version: 15.4.5722.2) ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (Version: 15.4.5722.2) Adobe AIR (Version: 3.7.0.2090) Adobe Flash Player 11 ActiveX (Version: 11.7.700.224) Adobe Flash Player 11 Plugin (Version: 11.7.700.224) Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03) Alps Pointing-device for VAIO Apple Application Support (Version: 2.3.3) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (Version: 2.1.3.127) ArcSoft Magic-i Visual Effects 2 (Version: 2.0.1.142) ArcSoft Panorama Maker 6 (Version: 6.0.8.85) ArcSoft WebCam Companion 4 (Version: 4.0.21.484) Atheros WiFi Driver Installation (Version: 3.0) avast! Free Antivirus (Version: 8.0.1489.0) Bing Bar (Version: 7.0.850.0) Bluetooth Win7 Suite (64) (Version: 7.3.0.100) Bonjour (Version: 3.0.0.10) Canon MP Navigator EX 2.0 Canon MP630 series Benutzerregistrierung Canon MP630 series MP Drivers Canon Utilities Easy-PhotoPrint EX Canon Utilities My Printer Canon Utilities Solution Menu CD-LabelPrint Cisco Systems VPN Client 5.0.07.0440 (Version: 5.0.7) Conexant HD Audio (Version: 8.54.0.53) Control ActiveX Windows Live Mesh pentru conexiuni la distan?a (Version: 15.4.5722.2) Contrôle ActiveX Windows Live Mesh pour connexions à distance (Version: 15.4.5722.2) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (Version: 15.4.5722.2) D3DX10 (Version: 15.4.2368.0902) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition DivX-Setup (Version: 2.6.1.41) EndNote X7 (Version: 17.0.0.7072) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsluge polaczen zdalnych (Version: 15.4.5722.2) Galeria de Fotografias do Windows Live (Version: 15.4.3502.0922) Galeria fotografii uslugi Windows Live (Version: 15.4.3502.0922) Galerie de photos Windows Live (Version: 15.4.3502.0922) Galerie foto Windows Live (Version: 15.4.3502.0922) Inkjet Printer/Scanner Extended Survey Program Intel(R) Control Center (Version: 1.2.1.1007) Intel(R) Management Engine Components (Version: 7.0.0.1144) Intel(R) Processor Graphics (Version: 8.15.10.2291) Intel(R) Rapid Storage Technology (Version: 10.0.0.1046) iTunes (Version: 11.0.2.26) Java 7 Update 25 (Version: 7.0.250) Java Auto Updater (Version: 2.1.9.5) Junk Mail filter update (Version: 15.4.3502.0922) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) Media Gallery (Version: 1.5.0.16020) Mesh Runtime (Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Home and Student 2010 (Version: 14.0.6029.1000) Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Outlook Connector (Version: 14.0.6106.5001) Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000) Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Single Image 2010 (Version: 14.0.6029.1000) Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Silverlight (Version: 5.1.20125.0) Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Mozilla Firefox 21.0 (x86 de) (Version: 21.0) Mozilla Maintenance Service (Version: 21.0) Mozilla Thunderbird 17.0.6 (x86 de) (Version: 17.0.6) MSVCRT (Version: 15.4.2862.0708) MSVCRT_amd64 (Version: 15.4.2862.0708) MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0) MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0) MSXML 4.0 SP3 Parser (Version: 4.30.2100.0) Nikon Message Center 2 (Version: 2.1.0) Nikon Movie Editor (Version: 2.3.1) Opera 12.15 (Version: 12.15.1748) Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená pripojení (Version: 15.4.5722.2) Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (Version: 15.4.5722.2) PDFCreator (Version: 1.2.3) Perfect Effects 3 Free (Version: 3.0.2) PhotoScape Picture Control Utility x64 (Version: 1.4.3) PMB (Version: 5.5.02.12220) PMB VAIO Edition Plug-in (Version: 1.5.10.05300) PMB VAIO Edition Plug-in (Version: 1.6.00.06010) Poczta uslugi Windows Live (Version: 15.4.3502.0922) Podstawowe programy Windows Live (Version: 15.4.3502.0922) Python 2.6.2 (Version: 2.6.2150) Qualcomm Atheros Direct Connect (Version: 3.0) QuickTime (Version: 7.73.80.64) Raccolta foto di Windows Live (Version: 15.4.3502.0922) Realtek PCIE Card Reader (Version: 6.1.7601.92) Remote Keyboard (Version: 1.1.1.07060) Remote Play with PlayStation 3 (Version: 1.1.0.15070) ResearchSoft Direct Export Helper S?????? f?t???af??? t?? Windows Live (Version: 15.4.3502.0922) Skype™ 5.10 (Version: 5.10.116) Sony Corporation (Version: 1.0.0) Spotify (Version: 0.9.1.53.g876fa9df) SSLx64 (Version: 1.0.0) SSLx86 (Version: 1.0.0) St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?µa???sµ??e? s??d?se?? (Version: 15.4.5722.2) System Requirements Lab for Intel (Version: 4.5.13.0) TIPP10 Version 2.1.0 Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1) Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2553065) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition Update for Microsoft Office 2010 (KB2566458) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition Uzak Baglantilar Için Windows Live Mesh ActiveX Denetimi (Version: 15.4.5722.2) VAIO - Media Gallery (Version: 1.5.0.16020) VAIO - PMB VAIO Edition Guide (Version: 1.6.00.06030) VAIO - PMB VAIO Edition Plug-in (Version: 1.6.00.06140) VAIO - Remote Play mit PlayStation®3 (Version: 1.1.0.15070) VAIO - Remote-Tastatur (Version: 1.1.0.07060) VAIO Care (Version: 6.4.2.11150) VAIO Control Center (Version: 4.5.0.03040) VAIO Data Restore Tool (Version: 1.6.0.13140) VAIO Easy Connect (Version: 1.1.2.01120) VAIO Event Service (Version: 5.5.0.03040) VAIO Gate (Version: 2.4.2.02200) VAIO Gate Default (Version: 2.4.0.03240) VAIO Hardware Diagnostics (Version: 4.2.0.14280) VAIO Hero Screensaver - Summer 2011 Screensaver VAIO Improvement (Version: 1.0.0.14150) VAIO Improvement Validation (Version: 1.0.4.01190) VAIO Quick Web Access (Version: 1.4.5.3) VAIO Sample Contents (Version: 1.4.2.09010) VAIO Smart Network (Version: 3.8.0.08120) VAIO Update (Version: 6.1.1.10250) VAIO-Handbuch (Version: 2.0.0.02250) VAIO-Support für Übertragungen (Version: 1.4.0.14230) VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0) VCCx86 (Version: 1.0.0) VESx64 (Version: 1.0.0) VESx86 (Version: 1.0.0) VGClientX64 (Version: 1.0.0) VGClientX86 (Version: 1.0.0) VidCoder 1.2.6 (x86) (Version: 1.2.6) ViewNX 2 (Version: 2.3.2) VIx64 (Version: 1.0.0) VIx86 (Version: 1.0.0) VLC media player 2.0.7 (Version: 2.0.7) VSNx64 (Version: 1.0.0) VSNx86 (Version: 1.0.0) VU5x64 (Version: 1.1.0) VU5x86 (Version: 1.0.0) VU5x86 (Version: 1.1.0) VWSTx86 (Version: 1.0.0) Windows Live Communications Platform (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3508.1109) Windows Live Fotogaléria (Version: 15.4.3502.0922) Windows Live Fotogalerie (Version: 15.4.3502.0922) Windows Live Fotogalleri (Version: 15.4.3502.0922) Windows Live Fotograf Galerisi (Version: 15.4.3502.0922) Windows Live Fotótár (Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3508.1109) Windows Live Mail (Version: 15.4.3502.0922) Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (Version: 15.4.5722.2) Windows Live Mesh (Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2) Windows Live Mesh ActiveX Control for Remote Connections (Version: 15.4.5722.2) Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (Version: 15.4.5722.2) Windows Live Mesh ActiveX-objekt til fjernforbindelser (Version: 15.4.5722.2) Windows Live Mesh ActiveX-vezérlo távoli kapcsolatokhoz (Version: 15.4.5722.2) Windows Live Meshin etäyhteyksien ActiveX-komponentti (Version: 15.4.5722.2) Windows Live Messenger (Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (Version: 15.4.3502.0922) Windows Live Photo Common (Version: 15.4.3502.0922) Windows Live Photo Gallery (Version: 15.4.3502.0922) Windows Live PIMT Platform (Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (Version: 15.4.3502.0922) Windows Live SOXE Definitions (Version: 15.4.3502.0922) Windows Live Temel Parçalar (Version: 15.4.3502.0922) Windows Live UX Platform (Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (Version: 15.4.3508.1109) Windows Live Writer (Version: 15.4.3502.0922) Windows Live Writer Resources (Version: 15.4.3502.0922) Windows Liven asennustyökalu (Version: 15.4.3502.0922) Windows Liven sähköposti (Version: 15.4.3502.0922) Windows Liven valokuvavalikoima (Version: 15.4.3502.0922) Z-DBackup (Version: 5.9) ==================== Restore Points ========================= 14-06-2013 12:08:59 Windows Update 16-06-2013 18:43:29 Windows Update 16-06-2013 21:38:00 Windows Update 17-06-2013 16:23:21 avast! Free Antivirus Setup 17-06-2013 17:00:12 Windows Update 20-06-2013 17:20:26 Installed Java 7 Update 25 20-06-2013 17:26:19 Removed Java 7 Update 25 20-06-2013 17:27:21 Installed Java 7 Update 25 20-06-2013 17:32:03 Removed Java 7 Update 25 21-06-2013 06:19:19 Windows Update ==================== Scheduled Tasks (whitelisted) ============= Task: {179191A5-72FB-4888-A710-F867B782F0FA} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation) Task: {29264509-F668-48DF-9A09-AB1DE1306D9D} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe No File Task: {45DB25BE-5559-423C-BCA2-2E6AE4485CCB} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation) Task: {56E1B993-AAD3-4177-AA1A-25028655FCA1} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation) Task: {60202E2E-E8C5-4ECB-AECC-3CAFF614230F} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation) Task: {6A5E040F-B331-4DF0-A388-5F2A5AF7DD9D} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music Antonia => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2011-02-08] (Sony Corporation) Task: {6AF7496F-44C4-4C5E-8042-EDEE159F485F} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software) Task: {7BCFAF2D-FFF1-49EB-88F0-91ECC5D4A604} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib TaskTray => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [2011-02-23] (Sony Corporation) Task: {A4C2D76D-6868-42F3-98A2-0B19EF2F4512} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClient No File Task: {A59E4089-410E-4216-B46A-0426BB7D6C48} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation) Task: {C60A80A0-4FE3-471D-B5BC-2145676CAC40} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2012-02-20] (Sony Corporation) Task: {CD29E9F1-02A7-4238-9AD0-ACE6E1E41846} - System32\Tasks\User_Feed_Synchronization-{53FE2196-6A8B-47F2-8708-47869A639D4B} => C:\Windows\system32\msfeedssync.exe [2013-04-08] (Microsoft Corporation) Task: {CDCAC787-CACF-497C-8DE0-A479F8CB9B34} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated) Task: {D1A90E0C-0821-448C-84B2-82F76177C6C4} - System32\Tasks\User_Feed_Synchronization-{5C497AA6-8DA4-4F51-9231-255D2BE41896} => C:\Windows\system32\msfeedssync.exe [2013-04-08] (Microsoft Corporation) Task: {D96EE2E7-8AE9-40BE-A846-391038E51219} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation) Task: {DC94672F-F8B4-4B06-B745-753FE95D6A4B} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {E5D8E073-4607-4733-9992-CCA42212DF61} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation) Task: {EF2B63AF-CC6E-4042-AA4E-C61EF60785AB} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {F1CBB605-1467-4244-AE84-8E1AA359E628} - System32\Tasks\SONY\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation) ==================== Faulty Device Manager Devices ============= Name: Cisco Systems VPN Adapter for 64-bit Windows Description: Cisco Systems VPN Adapter for 64-bit Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (06/21/2013 09:56:15 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (06/21/2013 08:16:36 AM) (Source: ESENT) (User: ) Description: taskhost (2824) WebCacheLocal: Versuch, aus Datei "C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" bei Offset 294912 (0x0000000000048000) für 32768 (0x00008000) Bytes zu lesen, ist nach taskhost0 Sekunden mit Systemfehler 1117 (0x0000045d): "Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. " fehlgeschlagen. Fehler -1022 (0xfffffc02) bei Leseoperation. Wenn dieser Zustand andauert, ist die Datei möglicherweise beschädigt und muss aus einer vorherigen Sicherung wiederhergestellt werden. Error: (06/21/2013 08:13:47 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/21/2013 08:03:40 AM) (Source: ESENT) (User: ) Description: taskhost (2824) WebCacheLocal: Versuch, aus Datei "C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" bei Offset 294912 (0x0000000000048000) für 32768 (0x00008000) Bytes zu lesen, ist nach taskhost0 Sekunden mit Systemfehler 1117 (0x0000045d): "Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. " fehlgeschlagen. Fehler -1022 (0xfffffc02) bei Leseoperation. Wenn dieser Zustand andauert, ist die Datei möglicherweise beschädigt und muss aus einer vorherigen Sicherung wiederhergestellt werden. Error: (06/21/2013 07:23:33 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 32214 Error: (06/21/2013 07:23:33 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 32214 Error: (06/21/2013 07:23:33 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (06/21/2013 07:23:17 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 16052 Error: (06/21/2013 07:23:17 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 16052 Error: (06/21/2013 07:23:17 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second System errors: ============= Error: (06/21/2013 08:15:17 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/21/2013 08:15:17 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht. Error: (06/21/2013 08:04:23 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Intel(R) Management and Security Application User Notification Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/21/2013 08:04:23 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) Management and Security Application User Notification Service erreicht. Error: (06/21/2013 08:03:51 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Update" wurde nicht richtig gestartet. Error: (06/21/2013 08:01:42 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Search" wurde nicht richtig gestartet. Error: (06/21/2013 07:59:17 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst eventlog erreicht. Error: (06/21/2013 07:58:33 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/21/2013 07:58:33 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Media Player-Netzwerkfreigabedienst erreicht. Error: (06/21/2013 07:57:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Software Protection" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Microsoft Office Sessions: ========================= Error: (06/21/2013 09:56:15 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\$Recycle.Bin\S-1-5-21-2436653716-1941050932-3337219284-1001\$RWQ8DQP.exe Error: (06/21/2013 08:16:36 AM) (Source: ESENT)(User: ) Description: taskhost2824WebCacheLocal: C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat294912 (0x0000000000048000)32768 (0x00008000)-1022 (0xfffffc02)1117 (0x0000045d)Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. 775 Error: (06/21/2013 08:13:47 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/21/2013 08:03:40 AM) (Source: ESENT)(User: ) Description: taskhost2824WebCacheLocal: C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat294912 (0x0000000000048000)32768 (0x00008000)-1022 (0xfffffc02)1117 (0x0000045d)Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. 923 Error: (06/21/2013 07:23:33 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 32214 Error: (06/21/2013 07:23:33 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 32214 Error: (06/21/2013 07:23:33 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (06/21/2013 07:23:17 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 16052 Error: (06/21/2013 07:23:17 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 16052 Error: (06/21/2013 07:23:17 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second CodeIntegrity Errors: =================================== Date: 2013-06-17 19:50:59.133 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-17 19:50:59.086 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 69% Total physical RAM: 4043.86 MB Available physical RAM: 1234.03 MB Total Pagefile: 8085.9 MB Available Pagefile: 5154.95 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:451.78 GB) (Free:384.68 GB) NTFS (Disk=0 Partition=3) Drive f: (Iomega_HDD) (Fixed) (Total:232.88 GB) (Free:83.04 GB) NTFS (Disk=1 Partition=1) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 1F222542) Partition 1: (Not Active) - (Size=14 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=452 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 233 GB) (Disk ID: 06C474E0) Partition 1: (Not Active) - (Size=233 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Geändert von freitag212 (21.06.2013 um 09:51 Uhr) |
21.06.2013, 12:41 | #22 |
/// the machine /// TB-Ausbilder | Windows 7 läuft plötzlich sehr langsam Deinstalliere mal bitte Avast und teste das System nochmal.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
22.06.2013, 17:05 | #23 |
| Windows 7 läuft plötzlich sehr langsamFRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2013 Ran by Antonia (administrator) on 22-06-2013 14:37:45 Running from C:\Users\Antonia\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE () C:\Windows\SysWOW64\NMSAccess32.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (Sony Corporation) C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe (Spotify Ltd) C:\Users\Antonia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe (ALPS) C:\Program Files\Apoint\Apvfb.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe (Sony Corporation) C:\Program Files\Sony\VAIO Personalization Manager\VpmIfPav.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\Admload.exe (Microsoft Corporation) C:\Windows\system32\msiexec.exe (Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [cAudioFilterAgent] C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.) HKLM\...\Run: [AtherosBtStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" [790688 2011-04-29] (Atheros Communications) HKLM\...\Run: [AthBtTray] "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" [657568 2011-04-29] (Atheros Commnucations) HKLM\...\Run: [Apoint] %ProgramFiles%\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.) HKLM\...\Run: [CanonSolutionMenu] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe /logon [689488 2008-03-10] (CANON INC.) HKLM\...\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [2114376 2008-03-17] (CANON INC.) HKCU\...\Run: [Elbserver] C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe /Stay [83344 2011-04-02] (Sony Corporation) HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-21] (Microsoft Corporation) HKCU\...\Run: [Spotify Web Helper] "C:\Users\Antonia\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [1104384 2013-06-18] (Spotify Ltd) HKCU\...\Policies\system: [DisableRegistryTools] 0 HKCU\...\Policies\system: [DisableTaskMgr] 0 HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation) HKLM-x32\...\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [2757312 2011-02-15] (Sony Corporation) HKLM-x32\...\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-27] (Sony Corporation) HKLM-x32\...\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-04-15] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1263952 2013-02-13] () HKLM-x32\...\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime [421888 2012-10-25] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-05-11] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU SearchScopes: DefaultScope {3943E75D-6F7D-4309-9384-CCA454F6208C} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q311&_nkw={searchTerms} SearchScopes: HKCU - {3943E75D-6F7D-4309-9384-CCA454F6208C} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q311&_nkw={searchTerms} SearchScopes: HKCU - {43745D2F-4567-4267-9CD8-A4AED064005F} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 78.42.43.62 82.212.62.62 FireFox: ======== FF ProfilePath: C:\Users\Antonia\AppData\Roaming\Mozilla\Firefox\Profiles\oire5dcn.default FF SelectedSearchEngine: Google FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - E:\Mozilla Plugins\npitunes.dll No File FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll No File FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: groovesharkUnlocker - C:\Users\Antonia\AppData\Roaming\Mozilla\Firefox\Profiles\oire5dcn.default\Extensions\groovesharkUnlocker@overlord1337.xpi FF Extension: No Name - C:\Users\Antonia\AppData\Roaming\Mozilla\Firefox\Profiles\oire5dcn.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: No Name - C:\Users\Antonia\AppData\Roaming\Mozilla\Firefox\Profiles\oire5dcn.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Users\Antonia\AppData\Roaming\Mozilla\Firefox\Profiles\oire5dcn.default\Extensions\{d62bb6fa-7192-47fd-b640-ad8855c444f3}.xpi Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR RestoreOnStartup: "hxxp://www.google.com/" CHR Extension: (YouTube) - C:\Users\Antonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0 CHR Extension: (Google Search) - C:\Users\Antonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Antonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0 CHR Extension: (Gmail) - C:\Users\Antonia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-04-29] (Atheros) S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [104096 2011-07-19] (Atheros Communication Inc.) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] () R2 NMSAccess; C:\Windows\SysWOW64\NMSAccess32.exe [71096 2009-01-12] () R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation) ==================== Drivers (Whitelisted) ==================== R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] () S3 cpudrv64; C:\Program Files (x86)\SystemRequirementsLab\cpudrv64.sys [17864 2011-06-02] () R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] () R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [306536 2011-03-04] () S3 catchme; \??\C:\ComboFix\catchme.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-06-21 10:48 - 2013-06-21 10:48 - 00007605 ____A C:\Users\Antonia\AppData\Local\Resmon.ResmonCfg 2013-06-21 10:40 - 2013-06-21 10:40 - 01930696 ____A (Farbar) C:\Users\Antonia\Desktop\FRST64.exe 2013-06-21 10:36 - 2013-06-21 10:37 - 01828262 ____A (Farbar) C:\Users\Antonia\Downloads\FRST64 (2).exe.1vqi9t0.partial 2013-06-21 10:33 - 2013-06-21 10:33 - 01930696 ____A (Farbar) C:\Users\Antonia\Downloads\FRST64.exe 2013-06-20 19:30 - 2013-06-20 19:30 - 00000000 ____D C:\Users\Antonia\SystemRequirementsLab 2013-06-20 19:30 - 2013-06-20 19:30 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab 2013-06-20 19:27 - 2013-06-20 19:27 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-20 19:22 - 2013-06-20 19:27 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-06-20 15:23 - 2013-06-20 15:23 - 00159144 ____A (Microsoft Corporation) C:\Users\Antonia\Desktop\WindowsActivationUpdate.exe 2013-06-20 13:25 - 2013-06-20 13:25 - 00355927 ____A (Farbar) C:\Users\Antonia\Desktop\FSS.exe 2013-06-20 13:22 - 2013-06-20 13:22 - 00002019 ____A C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-06-20 10:38 - 2013-06-20 10:39 - 00890839 ____A C:\Users\Antonia\Desktop\SecurityCheck.exe 2013-06-19 17:48 - 2013-06-19 17:48 - 00000000 ____D C:\Windows\ERUNT 2013-06-19 17:48 - 2013-06-19 17:48 - 00000000 ____D C:\JRT 2013-06-19 17:17 - 2013-06-19 17:17 - 00005284 ____A C:\AdwCleaner[S1].txt 2013-06-19 17:16 - 2013-06-19 17:16 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Antonia\Desktop\JRT.exe 2013-06-18 20:03 - 2013-06-18 20:03 - 00648201 ____A C:\Users\Antonia\Desktop\adwcleaner.exe 2013-06-18 18:17 - 2013-06-18 18:17 - 00028469 ____A C:\ComboFix.txt 2013-06-18 18:03 - 2013-06-18 18:17 - 00000000 ____D C:\ComboFix 2013-06-17 19:38 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe 2013-06-17 19:38 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe 2013-06-17 19:38 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe 2013-06-17 19:38 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe 2013-06-17 19:38 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe 2013-06-17 19:38 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe 2013-06-17 19:38 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe 2013-06-17 19:38 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe 2013-06-17 19:37 - 2013-06-18 18:17 - 00000000 ____D C:\Qoobox 2013-06-17 19:37 - 2013-06-18 18:15 - 00000000 ____D C:\Windows\erdnt 2013-06-17 19:27 - 2013-06-17 19:27 - 00000000 ____D C:\Program Files (x86)\QuickTime 2013-06-17 19:25 - 2013-06-17 19:25 - 00001070 ____A C:\Users\Public\Desktop\VLC media player.lnk 2013-06-17 18:24 - 2013-06-17 18:24 - 00000000 ____A C:\Windows\SysWOW64\config.nt 2013-06-17 18:24 - 2013-05-09 10:58 - 00287840 ____A (AVAST Software) C:\Windows\System32\aswBoot.exe 2013-06-17 18:23 - 2013-06-17 18:23 - 00000000 ____D C:\ProgramData\AVAST Software 2013-06-17 18:23 - 2013-06-17 18:23 - 00000000 ____D C:\Program Files\AVAST Software 2013-06-17 18:19 - 2013-06-21 10:44 - 00000000 ____D C:\Users\Antonia\Desktop\PC 2013-06-17 18:18 - 2013-06-17 18:21 - 117478104 ____A C:\Users\Antonia\Desktop\avast_free_antivirus_setup_8.0.1489.300.exe 2013-06-17 18:18 - 2013-06-17 18:19 - 05079999 ____R (Swearware) C:\Users\Antonia\Desktop\ComboFix.exe 2013-06-17 15:15 - 2013-06-17 15:15 - 00000000 ____D C:\FRST 2013-06-16 23:38 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-16 23:38 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-16 23:38 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-16 23:38 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-16 23:38 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-16 23:38 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-16 23:38 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-16 23:38 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-16 23:38 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-16 23:38 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-16 23:38 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-16 23:38 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-16 20:45 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-06-16 20:45 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-06-16 20:45 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-16 20:45 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-06-16 20:45 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-06-16 20:45 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-06-16 20:45 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-06-16 20:45 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-06-13 16:21 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2013-06-13 16:21 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2013-06-13 16:21 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2013-06-13 16:21 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll 2013-06-13 16:21 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-06-13 16:21 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-06-13 16:21 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-06-13 16:21 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe 2013-06-13 16:21 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-06-13 16:21 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2013-06-13 16:21 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll 2013-06-13 16:21 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-06-13 16:21 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-06-13 16:21 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll 2013-06-13 16:21 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-06-13 16:21 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-13 16:21 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-13 16:21 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-13 16:21 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-09 15:51 - 2013-06-09 15:51 - 00002535 ____A C:\Users\Antonia\Desktop\EndNote.lnk 2013-06-09 15:43 - 2013-06-09 15:51 - 00000000 ____D C:\Program Files (x86)\EndNote X7 2013-06-09 15:42 - 2013-06-09 15:42 - 00000000 ____D C:\Users\Antonia\Downloads\Endnote7_UBHD_Win 2013-06-09 15:40 - 2013-06-09 15:41 - 81973442 ____A C:\Users\Antonia\Downloads\Endnote7_UBHD_Win.zip ==================== One Month Modified Files and Folders ======= 2013-06-22 13:44 - 2012-04-21 18:39 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-06-22 11:22 - 2011-12-21 13:47 - 01308008 ____A C:\Windows\WindowsUpdate.log 2013-06-22 11:10 - 2011-09-03 12:08 - 00700418 ____A C:\Windows\System32\perfh007.dat 2013-06-22 11:10 - 2011-09-03 12:08 - 00149182 ____A C:\Windows\System32\perfc007.dat 2013-06-22 11:10 - 2009-07-14 07:13 - 01621308 ____A C:\Windows\System32\PerfStringBackup.INI 2013-06-22 11:01 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-06-22 11:01 - 2009-07-14 06:51 - 00093764 ____A C:\Windows\setupact.log 2013-06-21 22:53 - 2011-12-21 16:04 - 00000000 ____D C:\Users\Antonia\AppData\Local\CrashDumps 2013-06-21 15:12 - 2009-07-14 06:45 - 00020928 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-06-21 15:12 - 2009-07-14 06:45 - 00020928 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-06-21 10:48 - 2013-06-21 10:48 - 00007605 ____A C:\Users\Antonia\AppData\Local\Resmon.ResmonCfg 2013-06-21 10:44 - 2013-06-17 18:19 - 00000000 ____D C:\Users\Antonia\Desktop\PC 2013-06-21 10:40 - 2013-06-21 10:40 - 01930696 ____A (Farbar) C:\Users\Antonia\Desktop\FRST64.exe 2013-06-21 10:37 - 2013-06-21 10:36 - 01828262 ____A (Farbar) C:\Users\Antonia\Downloads\FRST64 (2).exe.1vqi9t0.partial 2013-06-21 10:33 - 2013-06-21 10:33 - 01930696 ____A (Farbar) C:\Users\Antonia\Downloads\FRST64.exe 2013-06-21 09:56 - 2013-02-04 18:31 - 00000000 ____D C:\Users\Antonia\Documents\DrArbeit 2013-06-21 07:07 - 2010-11-21 05:47 - 00144590 ____A C:\Windows\PFRO.log 2013-06-20 20:23 - 2011-12-21 14:58 - 00000000 ____D C:\Update 2013-06-20 19:30 - 2013-06-20 19:30 - 00000000 ____D C:\Users\Antonia\SystemRequirementsLab 2013-06-20 19:30 - 2013-06-20 19:30 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab 2013-06-20 19:30 - 2011-12-21 13:47 - 00000000 ____D C:\users\Antonia 2013-06-20 19:27 - 2013-06-20 19:27 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-06-20 19:27 - 2013-06-20 19:27 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-20 19:27 - 2013-06-20 19:22 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-06-20 19:27 - 2011-09-03 02:29 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-06-20 19:27 - 2011-09-03 02:29 - 00000000 ____D C:\Program Files (x86)\Java 2013-06-20 15:23 - 2013-06-20 15:23 - 00159144 ____A (Microsoft Corporation) C:\Users\Antonia\Desktop\WindowsActivationUpdate.exe 2013-06-20 13:25 - 2013-06-20 13:25 - 00355927 ____A (Farbar) C:\Users\Antonia\Desktop\FSS.exe 2013-06-20 13:23 - 2011-12-21 17:21 - 00000000 ____D C:\Users\Antonia\AppData\Local\Adobe 2013-06-20 13:22 - 2013-06-20 13:22 - 00002019 ____A C:\Users\Public\Desktop\Adobe Reader XI.lnk 2013-06-20 13:22 - 2011-09-03 02:45 - 00000000 ____D C:\ProgramData\Adobe 2013-06-20 13:22 - 2011-09-03 02:45 - 00000000 ____D C:\Program Files (x86)\Adobe 2013-06-20 10:39 - 2013-06-20 10:38 - 00890839 ____A C:\Users\Antonia\Desktop\SecurityCheck.exe 2013-06-19 17:48 - 2013-06-19 17:48 - 00000000 ____D C:\Windows\ERUNT 2013-06-19 17:48 - 2013-06-19 17:48 - 00000000 ____D C:\JRT 2013-06-19 17:17 - 2013-06-19 17:17 - 00005284 ____A C:\AdwCleaner[S1].txt 2013-06-19 17:16 - 2013-06-19 17:16 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Antonia\Desktop\JRT.exe 2013-06-18 23:33 - 2012-09-23 13:55 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\Spotify 2013-06-18 20:03 - 2013-06-18 20:03 - 00648201 ____A C:\Users\Antonia\Desktop\adwcleaner.exe 2013-06-18 19:12 - 2012-09-23 13:55 - 00000000 ____D C:\Users\Antonia\AppData\Local\Spotify 2013-06-18 18:17 - 2013-06-18 18:17 - 00028469 ____A C:\ComboFix.txt 2013-06-18 18:17 - 2013-06-18 18:03 - 00000000 ____D C:\ComboFix 2013-06-18 18:17 - 2013-06-17 19:37 - 00000000 ____D C:\Qoobox 2013-06-18 18:17 - 2009-07-14 05:20 - 00000000 __RHD C:\users\Default 2013-06-18 18:15 - 2013-06-17 19:37 - 00000000 ____D C:\Windows\erdnt 2013-06-18 18:14 - 2009-07-14 04:34 - 00000215 ____A C:\Windows\system.ini 2013-06-17 19:27 - 2013-06-17 19:27 - 00000000 ____D C:\Program Files (x86)\QuickTime 2013-06-17 19:27 - 2012-10-16 13:36 - 00000000 ____D C:\ProgramData\Avira 2013-06-17 19:25 - 2013-06-17 19:25 - 00001070 ____A C:\Users\Public\Desktop\VLC media player.lnk 2013-06-17 19:24 - 2011-12-21 16:26 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\Adobe 2013-06-17 18:24 - 2013-06-17 18:24 - 00000000 ____A C:\Windows\SysWOW64\config.nt 2013-06-17 18:23 - 2013-06-17 18:23 - 00000000 ____D C:\ProgramData\AVAST Software 2013-06-17 18:23 - 2013-06-17 18:23 - 00000000 ____D C:\Program Files\AVAST Software 2013-06-17 18:22 - 2013-04-09 16:50 - 00001113 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-06-17 18:22 - 2013-04-09 16:50 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-06-17 18:21 - 2013-06-17 18:18 - 117478104 ____A C:\Users\Antonia\Desktop\avast_free_antivirus_setup_8.0.1489.300.exe 2013-06-17 18:19 - 2013-06-17 18:18 - 05079999 ____R (Swearware) C:\Users\Antonia\Desktop\ComboFix.exe 2013-06-17 15:15 - 2013-06-17 15:15 - 00000000 ____D C:\FRST 2013-06-16 22:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF 2013-06-16 22:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-06-16 20:46 - 2011-12-22 22:42 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-06-14 14:33 - 2012-01-07 18:15 - 00000000 ____D C:\ProgramData\CanonIJPLM 2013-06-14 13:53 - 2011-12-21 14:50 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\Atheros 2013-06-13 20:41 - 2011-12-21 14:50 - 00000000 ____D C:\Users\Antonia\Documents\Bluetooth Folder 2013-06-12 17:44 - 2012-04-21 18:39 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-06-12 17:44 - 2012-01-06 16:13 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-06-09 17:50 - 2013-04-16 22:11 - 00000000 ____D C:\ProgramData\Thomson.ResearchSoft.Installers 2013-06-09 17:45 - 2013-04-16 22:23 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\EndNote 2013-06-09 15:51 - 2013-06-09 15:51 - 00002535 ____A C:\Users\Antonia\Desktop\EndNote.lnk 2013-06-09 15:51 - 2013-06-09 15:43 - 00000000 ____D C:\Program Files (x86)\EndNote X7 2013-06-09 15:42 - 2013-06-09 15:42 - 00000000 ____D C:\Users\Antonia\Downloads\Endnote7_UBHD_Win 2013-06-09 15:41 - 2013-06-09 15:40 - 81973442 ____A C:\Users\Antonia\Downloads\Endnote7_UBHD_Win.zip 2013-06-08 16:08 - 2013-06-16 23:38 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-08 16:07 - 2013-06-16 23:38 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-08 16:06 - 2013-06-16 23:38 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-08 16:06 - 2013-06-16 23:38 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-08 16:06 - 2013-06-16 23:38 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-08 14:28 - 2013-06-16 23:38 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-08 13:42 - 2013-06-16 23:38 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-08 13:40 - 2013-06-16 23:38 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-08 13:40 - 2013-06-16 23:38 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-08 13:40 - 2013-06-16 23:38 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-08 13:40 - 2013-06-16 23:38 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-08 13:13 - 2013-06-16 23:38 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-07 19:06 - 2012-02-05 14:45 - 00326256 ____A C:\test.xml 2013-06-03 18:13 - 2013-03-21 16:23 - 00000000 ____D C:\Users\Antonia\AppData\Roaming\dvdcss 2013-05-28 21:24 - 2012-01-07 18:17 - 00000000 ____D C:\ProgramData\CanonIJ 2013-05-28 16:44 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2013-05-26 23:27 - 2011-12-21 13:48 - 00117384 ____A C:\Users\Antonia\AppData\Local\GDIPFONTCACHEV1.DAT 2013-05-26 23:27 - 2009-07-14 06:45 - 00448552 ____A C:\Windows\System32\FNTCACHE.DAT 2013-05-26 15:04 - 2012-01-10 18:21 - 00000000 ____D C:\ProgramData\DivX 2013-05-26 15:03 - 2013-05-15 17:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-05-26 15:03 - 2012-01-15 14:24 - 00000000 ____D C:\Program Files\DivX 2013-05-26 15:03 - 2012-01-11 22:43 - 00000000 ____D C:\Program Files (x86)\DivX ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-06-13 22:43 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-06-2013 Ran by Antonia at 2013-06-22 14:38:14 Run: Running from C:\Users\Antonia\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= ?????? Windows Live (Version: 15.4.3502.0922) ??????? ????????? Windows Live Mesh ActiveX ??? ?????????? ?????????? (Version: 15.4.5722.2) ??????? ?????????? Windows Live Mesh ActiveX ??? ????????? ??????????? (Version: 15.4.5722.2) ???????? ?????????? Windows Live (Version: 15.4.3502.0922) ?????????? Windows Live (Version: 15.4.3502.0922) ??????????? ?? Windows Live (Version: 15.4.3502.0922) ???????????? Windows Live (Version: 15.4.3502.0922) 7-Zip 9.20 (x64 edition) (Version: 9.20.00.0) ActiveX ???????? ?? Windows Live Mesh ?? ?????????? ?????? (Version: 15.4.5722.2) ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (Version: 15.4.5722.2) Adobe AIR (Version: 3.7.0.2090) Adobe Flash Player 11 ActiveX (Version: 11.7.700.224) Adobe Flash Player 11 Plugin (Version: 11.7.700.224) Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03) Alps Pointing-device for VAIO Apple Application Support (Version: 2.3.3) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (Version: 2.1.3.127) ArcSoft Magic-i Visual Effects 2 (Version: 2.0.1.142) ArcSoft Panorama Maker 6 (Version: 6.0.8.85) ArcSoft WebCam Companion 4 (Version: 4.0.21.484) Atheros WiFi Driver Installation (Version: 3.0) Bing Bar (Version: 7.1.391.0) Bluetooth Win7 Suite (64) (Version: 7.3.0.100) Bonjour (Version: 3.0.0.10) Canon MP Navigator EX 2.0 Canon MP630 series Benutzerregistrierung Canon MP630 series MP Drivers Canon Utilities Easy-PhotoPrint EX Canon Utilities My Printer Canon Utilities Solution Menu CD-LabelPrint Cisco Systems VPN Client 5.0.07.0440 (Version: 5.0.7) Conexant HD Audio (Version: 8.54.0.53) Control ActiveX Windows Live Mesh pentru conexiuni la distan?a (Version: 15.4.5722.2) Contrôle ActiveX Windows Live Mesh pour connexions à distance (Version: 15.4.5722.2) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (Version: 15.4.5722.2) D3DX10 (Version: 15.4.2368.0902) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition DivX-Setup (Version: 2.6.1.41) EndNote X7 (Version: 17.0.0.7072) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsluge polaczen zdalnych (Version: 15.4.5722.2) Galeria de Fotografias do Windows Live (Version: 15.4.3502.0922) Galeria fotografii uslugi Windows Live (Version: 15.4.3502.0922) Galerie de photos Windows Live (Version: 15.4.3502.0922) Galerie foto Windows Live (Version: 15.4.3502.0922) Inkjet Printer/Scanner Extended Survey Program Intel(R) Control Center (Version: 1.2.1.1007) Intel(R) Management Engine Components (Version: 7.0.0.1144) Intel(R) Processor Graphics (Version: 8.15.10.2291) Intel(R) Rapid Storage Technology (Version: 10.0.0.1046) iTunes (Version: 11.0.2.26) Java 7 Update 25 (Version: 7.0.250) Java Auto Updater (Version: 2.1.9.5) Junk Mail filter update (Version: 15.4.3502.0922) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) Media Gallery (Version: 1.5.0.16020) Mesh Runtime (Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Home and Student 2010 (Version: 14.0.6029.1000) Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000) Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Outlook Connector (Version: 14.0.6106.5001) Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000) Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Single Image 2010 (Version: 14.0.6029.1000) Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Silverlight (Version: 5.1.20125.0) Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) Mozilla Firefox 21.0 (x86 de) (Version: 21.0) Mozilla Maintenance Service (Version: 21.0) Mozilla Thunderbird 17.0.6 (x86 de) (Version: 17.0.6) MSVCRT (Version: 15.4.2862.0708) MSVCRT_amd64 (Version: 15.4.2862.0708) MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0) MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (KB973685) (Version: 4.30.2107.0) MSXML 4.0 SP3 Parser (Version: 4.30.2100.0) Nikon Message Center 2 (Version: 2.1.0) Nikon Movie Editor (Version: 2.3.1) Opera 12.15 (Version: 12.15.1748) Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená pripojení (Version: 15.4.5722.2) Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (Version: 15.4.5722.2) PDFCreator (Version: 1.2.3) Perfect Effects 3 Free (Version: 3.0.2) PhotoScape Picture Control Utility x64 (Version: 1.4.3) PMB (Version: 5.5.02.12220) PMB VAIO Edition Plug-in (Version: 1.5.10.05300) PMB VAIO Edition Plug-in (Version: 1.6.00.06010) Poczta uslugi Windows Live (Version: 15.4.3502.0922) Podstawowe programy Windows Live (Version: 15.4.3502.0922) Python 2.6.2 (Version: 2.6.2150) Qualcomm Atheros Direct Connect (Version: 3.0) QuickTime (Version: 7.73.80.64) Raccolta foto di Windows Live (Version: 15.4.3502.0922) Realtek PCIE Card Reader (Version: 6.1.7601.92) Remote Keyboard (Version: 1.1.1.07060) Remote Play with PlayStation 3 (Version: 1.1.0.15070) ResearchSoft Direct Export Helper S?????? f?t???af??? t?? Windows Live (Version: 15.4.3502.0922) Skype™ 5.10 (Version: 5.10.116) Sony Corporation (Version: 1.0.0) Spotify (Version: 0.9.1.53.g876fa9df) SSLx64 (Version: 1.0.0) SSLx86 (Version: 1.0.0) St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?µa???sµ??e? s??d?se?? (Version: 15.4.5722.2) System Requirements Lab for Intel (Version: 4.5.13.0) TIPP10 Version 2.1.0 Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1) Update for Microsoft Office 2010 (KB2494150) Update for Microsoft Office 2010 (KB2553065) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition Update for Microsoft Office 2010 (KB2566458) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition Uzak Baglantilar Için Windows Live Mesh ActiveX Denetimi (Version: 15.4.5722.2) VAIO - Media Gallery (Version: 1.5.0.16020) VAIO - PMB VAIO Edition Guide (Version: 1.6.00.06030) VAIO - PMB VAIO Edition Plug-in (Version: 1.6.00.06140) VAIO - Remote Play mit PlayStation®3 (Version: 1.1.0.15070) VAIO - Remote-Tastatur (Version: 1.1.0.07060) VAIO Care (Version: 6.4.2.11150) VAIO Control Center (Version: 4.5.0.03040) VAIO Data Restore Tool (Version: 1.6.0.13140) VAIO Easy Connect (Version: 1.1.2.01120) VAIO Event Service (Version: 5.5.0.03040) VAIO Gate (Version: 2.4.2.02200) VAIO Gate Default (Version: 2.4.0.03240) VAIO Hardware Diagnostics (Version: 4.2.0.14280) VAIO Hero Screensaver - Summer 2011 Screensaver VAIO Improvement (Version: 1.0.0.14150) VAIO Improvement Validation (Version: 1.0.4.01190) VAIO Quick Web Access (Version: 1.4.5.3) VAIO Sample Contents (Version: 1.4.2.09010) VAIO Smart Network (Version: 3.8.0.08120) VAIO Update (Version: 6.1.1.10250) VAIO-Handbuch (Version: 2.0.0.02250) VAIO-Support für Übertragungen (Version: 1.4.0.14230) VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0) VCCx86 (Version: 1.0.0) VESx64 (Version: 1.0.0) VESx86 (Version: 1.0.0) VGClientX64 (Version: 1.0.0) VGClientX86 (Version: 1.0.0) VidCoder 1.2.6 (x86) (Version: 1.2.6) ViewNX 2 (Version: 2.3.2) VIx64 (Version: 1.0.0) VIx86 (Version: 1.0.0) VLC media player 2.0.7 (Version: 2.0.7) VSNx64 (Version: 1.0.0) VSNx86 (Version: 1.0.0) VU5x64 (Version: 1.1.0) VU5x86 (Version: 1.0.0) VU5x86 (Version: 1.1.0) VWSTx86 (Version: 1.0.0) Windows Live Communications Platform (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3502.0922) Windows Live Essentials (Version: 15.4.3508.1109) Windows Live Fotogaléria (Version: 15.4.3502.0922) Windows Live Fotogalerie (Version: 15.4.3502.0922) Windows Live Fotogalleri (Version: 15.4.3502.0922) Windows Live Fotograf Galerisi (Version: 15.4.3502.0922) Windows Live Fotótár (Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3508.1109) Windows Live Mail (Version: 15.4.3502.0922) Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (Version: 15.4.5722.2) Windows Live Mesh (Version: 15.4.3502.0922) Windows Live Mesh ActiveX Control for Remote Connections (Version: 15.4.5722.2) Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2) Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (Version: 15.4.5722.2) Windows Live Mesh ActiveX-objekt til fjernforbindelser (Version: 15.4.5722.2) Windows Live Mesh ActiveX-vezérlo távoli kapcsolatokhoz (Version: 15.4.5722.2) Windows Live Meshin etäyhteyksien ActiveX-komponentti (Version: 15.4.5722.2) Windows Live Messenger (Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (Version: 15.4.3502.0922) Windows Live Photo Common (Version: 15.4.3502.0922) Windows Live Photo Gallery (Version: 15.4.3502.0922) Windows Live PIMT Platform (Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (Version: 15.4.3502.0922) Windows Live SOXE Definitions (Version: 15.4.3502.0922) Windows Live Temel Parçalar (Version: 15.4.3502.0922) Windows Live UX Platform (Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (Version: 15.4.3508.1109) Windows Live Writer (Version: 15.4.3502.0922) Windows Live Writer Resources (Version: 15.4.3502.0922) Windows Liven asennustyökalu (Version: 15.4.3502.0922) Windows Liven sähköposti (Version: 15.4.3502.0922) Windows Liven valokuvavalikoima (Version: 15.4.3502.0922) Z-DBackup (Version: 5.9) ==================== Restore Points ========================= 16-06-2013 21:38:00 Windows Update 17-06-2013 16:23:21 avast! Free Antivirus Setup 17-06-2013 17:00:12 Windows Update 20-06-2013 17:20:26 Installed Java 7 Update 25 20-06-2013 17:26:19 Removed Java 7 Update 25 20-06-2013 17:27:21 Installed Java 7 Update 25 20-06-2013 17:32:03 Removed Java 7 Update 25 21-06-2013 06:19:19 Windows Update 22-06-2013 12:35:28 Removed Java 7 Update 25 22-06-2013 12:36:39 avast! Free Antivirus Setup ==================== Scheduled Tasks (whitelisted) ============= Task: {179191A5-72FB-4888-A710-F867B782F0FA} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation) Task: {29264509-F668-48DF-9A09-AB1DE1306D9D} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe No File Task: {45DB25BE-5559-423C-BCA2-2E6AE4485CCB} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation) Task: {56E1B993-AAD3-4177-AA1A-25028655FCA1} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation) Task: {60202E2E-E8C5-4ECB-AECC-3CAFF614230F} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation) Task: {699F8E5A-5CB5-4EF2-A1D4-3390AA4A8219} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation) Task: {6A5E040F-B331-4DF0-A388-5F2A5AF7DD9D} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music Antonia => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2011-02-08] (Sony Corporation) Task: {7BCFAF2D-FFF1-49EB-88F0-91ECC5D4A604} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib TaskTray => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [2011-02-23] (Sony Corporation) Task: {A4C2D76D-6868-42F3-98A2-0B19EF2F4512} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClient No File Task: {C60A80A0-4FE3-471D-B5BC-2145676CAC40} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2012-02-20] (Sony Corporation) Task: {CD29E9F1-02A7-4238-9AD0-ACE6E1E41846} - System32\Tasks\User_Feed_Synchronization-{53FE2196-6A8B-47F2-8708-47869A639D4B} => C:\Windows\system32\msfeedssync.exe [2013-04-08] (Microsoft Corporation) Task: {CDCAC787-CACF-497C-8DE0-A479F8CB9B34} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated) Task: {CFAAFBEE-F3E2-41C1-A0BB-F437738702DB} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {D1A90E0C-0821-448C-84B2-82F76177C6C4} - System32\Tasks\User_Feed_Synchronization-{5C497AA6-8DA4-4F51-9231-255D2BE41896} => C:\Windows\system32\msfeedssync.exe [2013-04-08] (Microsoft Corporation) Task: {D96EE2E7-8AE9-40BE-A846-391038E51219} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation) Task: {E5D8E073-4607-4733-9992-CCA42212DF61} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation) Task: {EF2B63AF-CC6E-4042-AA4E-C61EF60785AB} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {F1CBB605-1467-4244-AE84-8E1AA359E628} - System32\Tasks\SONY\VAIO Gate\VAIO Gate Restart => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2012-02-20] (Sony Corporation) ==================== Faulty Device Manager Devices ============= Name: Cisco Systems VPN Adapter for 64-bit Windows Description: Cisco Systems VPN Adapter for 64-bit Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (06/22/2013 11:22:00 AM) (Source: ESENT) (User: ) Description: taskhost (2720) WebCacheLocal: Versuch, aus Datei "C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" bei Offset 294912 (0x0000000000048000) für 32768 (0x00008000) Bytes zu lesen, ist nach taskhost0 Sekunden mit Systemfehler 1117 (0x0000045d): "Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. " fehlgeschlagen. Fehler -1022 (0xfffffc02) bei Leseoperation. Wenn dieser Zustand andauert, ist die Datei möglicherweise beschädigt und muss aus einer vorherigen Sicherung wiederhergestellt werden. Error: (06/22/2013 11:02:40 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/21/2013 10:53:30 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: DivXUpdate.exe, Version: 1.0.6.88, Zeitstempel: 0x511afc59 Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f Ausnahmecode: 0xc0000005 Fehleroffset: 0x00039342 ID des fehlerhaften Prozesses: 0x1338 Startzeit der fehlerhaften Anwendung: 0xDivXUpdate.exe0 Pfad der fehlerhaften Anwendung: DivXUpdate.exe1 Pfad des fehlerhaften Moduls: DivXUpdate.exe2 Berichtskennung: DivXUpdate.exe3 Error: (06/21/2013 08:00:27 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1". Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error: (06/21/2013 03:07:35 PM) (Source: ESENT) (User: ) Description: taskhost (3744) WebCacheLocal: Versuch, aus Datei "C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" bei Offset 294912 (0x0000000000048000) für 32768 (0x00008000) Bytes zu lesen, ist nach taskhost0 Sekunden mit Systemfehler 1117 (0x0000045d): "Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. " fehlgeschlagen. Fehler -1022 (0xfffffc02) bei Leseoperation. Wenn dieser Zustand andauert, ist die Datei möglicherweise beschädigt und muss aus einer vorherigen Sicherung wiederhergestellt werden. Error: (06/21/2013 02:58:35 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/21/2013 09:56:15 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (06/21/2013 08:16:36 AM) (Source: ESENT) (User: ) Description: taskhost (2824) WebCacheLocal: Versuch, aus Datei "C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" bei Offset 294912 (0x0000000000048000) für 32768 (0x00008000) Bytes zu lesen, ist nach taskhost0 Sekunden mit Systemfehler 1117 (0x0000045d): "Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. " fehlgeschlagen. Fehler -1022 (0xfffffc02) bei Leseoperation. Wenn dieser Zustand andauert, ist die Datei möglicherweise beschädigt und muss aus einer vorherigen Sicherung wiederhergestellt werden. Error: (06/21/2013 08:13:47 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/21/2013 08:03:40 AM) (Source: ESENT) (User: ) Description: taskhost (2824) WebCacheLocal: Versuch, aus Datei "C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" bei Offset 294912 (0x0000000000048000) für 32768 (0x00008000) Bytes zu lesen, ist nach taskhost0 Sekunden mit Systemfehler 1117 (0x0000045d): "Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. " fehlgeschlagen. Fehler -1022 (0xfffffc02) bei Leseoperation. Wenn dieser Zustand andauert, ist die Datei möglicherweise beschädigt und muss aus einer vorherigen Sicherung wiederhergestellt werden. System errors: ============= Error: (06/22/2013 11:16:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Intel(R) Management and Security Application User Notification Service" wurde nicht richtig gestartet. Error: (06/22/2013 11:14:32 AM) (Source: DCOM) (User: ) Description: {73E709EA-5D93-4B2E-BBB0-99B7938DA9E4} Error: (06/22/2013 11:14:04 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Search" wurde nicht richtig gestartet. Error: (06/22/2013 11:11:16 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst eventlog erreicht. Error: (06/22/2013 11:09:59 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Software Protection" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/22/2013 11:09:59 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Software Protection erreicht. Error: (06/22/2013 11:09:06 AM) (Source: DCOM) (User: ) Description: {E60687F7-01A1-40AA-86AC-DB1CBF673334} Error: (06/22/2013 11:08:32 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet. Error: (06/22/2013 11:04:45 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X64 erreicht. Error: (06/22/2013 11:01:01 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Microsoft Office Sessions: ========================= Error: (06/22/2013 11:22:00 AM) (Source: ESENT)(User: ) Description: taskhost2720WebCacheLocal: C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat294912 (0x0000000000048000)32768 (0x00008000)-1022 (0xfffffc02)1117 (0x0000045d)Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. 1134 Error: (06/22/2013 11:02:40 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/21/2013 10:53:30 PM) (Source: Application Error)(User: ) Description: DivXUpdate.exe1.0.6.88511afc59ole32.dll6.1.7601.175144ce7b96fc000000500039342133801ce6e7efd01ba70C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exeC:\Windows\syswow64\ole32.dlla0373096-dab4-11e2-a084-78843cf49e70 Error: (06/21/2013 08:00:27 PM) (Source: SideBySide)(User: ) Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Python26\Lib\distutils\command\wininst-8_d.exe Error: (06/21/2013 03:07:35 PM) (Source: ESENT)(User: ) Description: taskhost3744WebCacheLocal: C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat294912 (0x0000000000048000)32768 (0x00008000)-1022 (0xfffffc02)1117 (0x0000045d)Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. 552 Error: (06/21/2013 02:58:35 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/21/2013 09:56:15 AM) (Source: SideBySide)(User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\$Recycle.Bin\S-1-5-21-2436653716-1941050932-3337219284-1001\$RWQ8DQP.exe Error: (06/21/2013 08:16:36 AM) (Source: ESENT)(User: ) Description: taskhost2824WebCacheLocal: C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat294912 (0x0000000000048000)32768 (0x00008000)-1022 (0xfffffc02)1117 (0x0000045d)Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. 775 Error: (06/21/2013 08:13:47 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/21/2013 08:03:40 AM) (Source: ESENT)(User: ) Description: taskhost2824WebCacheLocal: C:\Users\Antonia\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat294912 (0x0000000000048000)32768 (0x00008000)-1022 (0xfffffc02)1117 (0x0000045d)Die Anforderung konnte wegen eines E/A-Gerätefehlers nicht ausgeführt werden. 923 CodeIntegrity Errors: =================================== Date: 2013-06-17 19:50:59.133 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-06-17 19:50:59.086 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 40% Total physical RAM: 4043.86 MB Available physical RAM: 2418.64 MB Total Pagefile: 8085.9 MB Available Pagefile: 6298.32 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:451.78 GB) (Free:384.35 GB) NTFS (Disk=0 Partition=3) Drive f: (Iomega_HDD) (Fixed) (Total:232.88 GB) (Free:83.04 GB) NTFS (Disk=1 Partition=1) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 1F222542) Partition 1: (Not Active) - (Size=14 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=452 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 233 GB) (Disk ID: 06C474E0) Partition 1: (Not Active) - (Size=233 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
22.06.2013, 18:48 | #24 |
/// the machine /// TB-Ausbilder | Windows 7 läuft plötzlich sehr langsam Ne Antwort wäre auch cool
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
23.06.2013, 12:18 | #25 |
| Windows 7 läuft plötzlich sehr langsam sorry, ändert sich nix.. sonst hätte ich schon hurra gerufen |
23.06.2013, 16:17 | #26 |
/// the machine /// TB-Ausbilder | Windows 7 läuft plötzlich sehr langsam Hm, ich seh nix mehr in den Logs. Ausführen eines sauberen Neustarts zur Behandlung eines Problems in Windows 8, Windows 7 oder Windows Vista Teste mal nen Clean Boot.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Windows 7 läuft plötzlich sehr langsam |
auslastung, avira, firefox, funktioniert, hardware, hochfahren, langsam, laptop, plötzlich, problem, programme, runterfahren, schnell, sehr langsam, taskmanager, tipps, updates, vaio, virenproblem, win, win7, windows, windows 7, windows updates, öffnen |