| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Maillaccount gehackt /verschiedene Funde mit MalewarebytesWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
19.06.2013, 10:16
| #1 |
 |  Maillaccount gehackt /verschiedene Funde mit Malewarebytes Hallo zusammen, ich bin vor kurzem umgezogen und habe den PC vom Vormieter übernehmen dürfen. Er hat alles drauf gelassen und nur meinen Namen eingefügt und ich habe schon einige persönliche Daten raufgeladen. Ich muss dazu sagen, dass ich mich wirklich nur ganz wenig mit Computern auskenne und mich daher gefreut habe, dass das so geklappt hat. Nun sagt mir mein Sohn, dass er Mail mit Maleware von meinem Mailaccount bekommt. Anscheinend haben das alle aus meinem Adressbuch erhalten. Ich habe Malewarebytes durchlaufen lassen und das hat Einiges gefunden: Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Datenbank Version: 8307 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 04.12.2011 13:24:54 mbam-log-2011-12-04 (13-24-54).txt Art des Suchlaufs: Quick-Scan Durchsuchte Objekte: 197627 Laufzeit: 9 Minute(n), 17 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 2 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: c:\Users\Antje\AppData\Local\Temp\15712375.uninstall\uninstall.exe (Adware.InstallCore) -> Quarantined and deleted successfully. Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.06.13.03 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 10.0.9200.16618 Antje :: ANTJE-PC [Administrator] Schutz: Aktiviert 13.06.2013 11:05:18 mbam-log-2013-06-13 (11-05-18).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 679890 Laufzeit: 2 Stunde(n), 15 Minute(n), 32 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 6 HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Software.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Software.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Software.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Software.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Updater.AmiUpd.1 (PUP.Software.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCR\Updater.AmiUpd (PUP.Software.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 8 C:\Users\Antje\Desktop\Musikstudio17\SoftonicDownloader_fuer_magix-music-maker.exe (PUP.OfferBundler.ST) -> Keine Aktion durchgeführt. C:\Users\Antje\AppData\Local\SwvUpdater\Updater.exe (PUP.Software.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Antje\Desktop\Gitarre\SoftonicDownloader_fuer_audacity.exe (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Antje\Desktop\Gitarre\SoftonicDownloader_fuer_free-youtube-download.exe (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows.old\Users\Antje\Desktop\Bilder Opa\Gitarre\SoftonicDownloader_fuer_free-youtube-download.exe (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows.old\Users\Antje\Desktop\Bilder Opa\Gitarre\SoftonicDownloader_fuer_audacity.exe (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows.old\Users\Antje\Desktop\Musikstudio17\SoftonicDownloader_fuer_magix-music-maker.exe (PUP.OfferBundler.ST) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) c:\Users\Antje\installer-69731-31de-messenpass-deutsch.exe (AdWare.FakeInstaller) -> Quarantined and deleted successfully. Ich habe erst selbst versucht das zu beheben, weil ich vorher noch nie von euch gehört hatte. Also habe ich die Sachen gelöscht und nochmal laufen lassen. Da wurde von Malewarebytes nix mehr gefunden. Mein Sohn hat mir aber gesagt, dass das nicht reicht und ich mich besser an euch wenden soll. Jetzt weiß ich nicht was ich tun soll...der ganzen Anleitung folgen? Oder lieber nicht? Danke schonmal im Voraus für eure Hilfe. Gruß Antje |
|
19.06.2013, 10:38
| #2 |
| /// the machine /// TB-Ausbilder    | Maillaccount gehackt /verschiedene Funde mit Malewarebytes Hi,
__________________Systemscan mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)
__________________ |
|
19.06.2013, 20:05
| #3 |
| | Maillaccount gehackt /verschiedene Funde mit Malewarebytes FRST Additions Logfile:
__________________Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 19-06-2013 Ran by Antje at 2013-06-19 15:35:51 Run: Running from C:\Users\Antje\Desktop\Neuer Ordner Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 32 Bit HP CIO Components Installer (Version: 7.1.8) 4500_G510nz_Help (Version: 000.0.439.000) 4500G510nz (Version: 000.0.439.000) 4500G510nz_Software_Min (Version: 000.0.423.000) ABBYY FineReader 11 (Version: 11.0.289) Acrobat.com (VeAdditional scan result of Farbar Recovery Scan Tool (x86) Version: 19-06-2013 Ran by Antje at 2013-06-19 15:35:51 Run: Running from C:\Users\Antje\Desktop\Neuer Ordner Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 32 Bit HP CIO Components Installer (Version: 7.1.8) 4500_G510nz_Help (Version: 000.0.439.000) 4500G510nz (Version: 000.0.439.000) 4500G510nz_Software_Min (Version: 000.0.423.000) ABBYY FineReader 11 (Version: 11.0.289) Acrobat.com (Version: 0.0.0) Acrobat.com (Version: 1.1.377) Adobe AIR (Version: 1.0.4990) Adobe AIR (Version: 1.0.8.4990) Adobe Flash Player 11 ActiveX (Version: 11.7.700.224) Adobe Flash Player 11 Plugin (Version: 11.7.700.224) Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7) AOL Deinstallation AP Tuner 3.08 Apple Application Support (Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (Version: 2.1.3.127) Ask Toolbar (Version: 1.17.2.0) ASRock App Charger v1.0.4 ASRock eXtreme Tuner v0.1.53 Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.0.35) Avira Free Antivirus (Version: 13.0.0.3640) Bandoo (Version: 8.0.0.123984) BestPractice (remove only) Bonjour (Version: 3.0.0.10) BrowserProtect BufferChm (Version: 130.0.331.000) CameraHelperMsi (Version: 13.31.1038.0) ChatZum Toolbar (Version: 1.0.14) Cisco EAP-FAST Module (Version: 2.2.14) Cisco LEAP Module (Version: 1.0.19) Cisco PEAP Module (Version: 1.1.6) CK Gruß- und Einladungskarten Designer (Version: 1.80.0000) CloneDVDmobile (Version: 1.9.0.1) DealPly (Version: ) Delta Chrome Toolbar Delta toolbar (Version: 1.8.16.16) Destinations (Version: 130.0.0.0) DeviceDiscovery (Version: 130.0.372.000) DocMgr (Version: 130.0.000.000) DocProc (Version: 13.0.0.0) Dropbox (Version: 1.4.17) ElsterFormular (Version: 14.0.0.10960) erLT (Version: 1.20.138.34) Fax (Version: 130.0.418.000) Firebird SQL Server - MAGIX Edition (Version: 2.1.27.0) Freeze.com NetAssistant (Version: 3.8.3) GMX MailCheck für Internet Explorer (Version: 1.9.2.0) GMX Softwareaktualisierung (Version: 3.0.0.53) Google Chrome (Version: 27.0.1453.110) Google Toolbar for Internet Explorer (Version: 1.0.0) Google Toolbar for Internet Explorer (Version: 7.4.3607.2246) Google Update Helper (Version: 1.3.21.145) GPBaseService2 (Version: 130.0.371.000) Heyer's Karten-Studio 2 (Version: 2.10.0000) HP Customer Participation Program 13.0 (Version: 13.0) HP Document Manager 2.0 (Version: 2.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Officejet 4500 G510n-z (Version: 13.0) HP Smart Web Printing 4.5 (Version: 4.5) HP Solution Center 13.0 (Version: 13.0) HP Update (Version: 5.003.001.001) HPProductAssistant (Version: 130.0.371.000) HPSSupply (Version: 130.0.371.000) Iminent (Version: 4.10.0.0) Inbox Toolbar (Version: 2.0.0.61) Intel(R) Management Engine Components (Version: 7.0.0.1144) Internet Explorer (Version: 9) iTuner (Version: 1.0.3) iTunes (Version: 11.0.4.4) Java 7 Update 9 (Version: 7.0.90) Java Auto Updater (Version: 2.1.9.0) JavaFX 2.1.1 (Version: 2.1.1) Logitech Webcam-Software (Version: 2.30) LWS Facebook (Version: 13.31.1038.0) LWS Gallery (Version: 13.31.1038.0) LWS Help_main (Version: 13.31.1044.0) LWS Launcher (Version: 13.31.1038.0) LWS Motion Detection (Version: 13.30.1395.0) LWS Pictures And Video (Version: 13.31.1038.0) LWS Twitter (Version: 13.30.1346.0) LWS Video Mask Maker (Version: 13.30.1379.0) LWS VideoEffects (Version: 13.30.1379.0) LWS Webcam Software (Version: 13.31.1038.0) LWS WLM Plugin (Version: 1.30.1201.0) LWS YouTube Plugin (Version: 13.31.1038.0) MAGIX Screenshare (Version: 4.3.6.1987) MAGIX Speed burnR (MSI) (Version: 7.0.2.6) MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) MarketResearch (Version: 130.0.374.000) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Office Access MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Enterprise 2007 (Version: 12.0.4518.1014) Microsoft Office Excel MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (Italian) 2007 (Version: 12.0.4518.1014) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Word MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft SkyDrive (Version: 16.4.6010.0727) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) MP3 Rocket MP3 Rocket Toolbar Updater (Version: 1.4.1.34141) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) NetAssistant (Version: 3.8.3) NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000) Network (Version: 130.0.374.000) Norton Internet Security (Version: 18.1.0.37) NVIDIA Grafiktreiber 267.42 (Version: 267.42) NVIDIA Install Application (Version: 2.265.39.0) NVIDIA PhysX (Version: 9.10.0514) NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514) NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6742) NVIDIA Systemsteuerung 267.42 (Version: 267.42) OCR Software by I.R.I.S. 13.0 (Version: 13.0) Platform (Version: 1.36) PriceGong 2.5.3 (Version: 2.5.3) QuickTime (Version: 7.74.80.86) REALTEK Wireless LAN Driver and Utility (Version: 1.00.0165) Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0) Samplitude Music Studio 17 Content Pack (Version: 1.0.0.0) Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0) Samplitude Music Studio 17 Vita Pack 1 (Version: 1.0.0.0) Samplitude Music Studio 17 Vita Pack 2 (Version: 1.0.0.0) Samplitude Music Studio 17 Vita Pack 3 (Version: 1.0.0.0) Samsung Kies (Version: 2.0.2.11071_128) SAMSUNG USB Driver for Mobile Phones (Version: 1.4.2.2) Scan (Version: 13.0.0.0) Shop for HP Supplies (Version: 13.0) Skype Click to Call (Version: 5.8.8855) Skype™ 5.5 (Version: 5.5.124) Smart OCR 3.2.1.417 (Version: 3.2.1.417) SmartWebPrinting (Version: 130.0.373.000) SolutionCenter (Version: 130.0.373.000) Sound Blaster X-Fi MB (Version: 1.0) Sound Effects (Version: 2.0) Splashtop Connect IE (Version: 1.1.12.1) Spotify (Version: 0.8.2.610.g090a06f8) Status (Version: 130.0.373.000) Text-To-Speech-Runtime (Version: 1.0.0.0) Toolbox (Version: 130.0.648.000) TrayApp (Version: 130.0.376.000) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1) VIA Plattform-Geräte-Manager (Version: 1.36) Video downloader 2.0.0.430 (Version: 2.0.0.430) Viewpoint Media Player VLC media player 1.1.5 (Version: 1.1.5) WebReg (Version: 130.0.132.017) Windows 7 Upgrade Advisor (Version: 2.0.5000.0) WinRAR 4.11 (32-Bit) (Version: 4.11.0) World Car Championship (Version: 1.00.0000) XFastUsb ==================== Restore Points ========================= 17-05-2013 12:52:59 Geplanter Prüfpunkt 17-05-2013 17:21:33 Windows Update 25-05-2013 07:06:28 Geplanter Prüfpunkt 05-06-2013 20:43:47 Geplanter Prüfpunkt 11-06-2013 16:39:06 Avira DE-Cleaner - 11.06.2013 18:39 12-06-2013 09:23:27 Windows Update 13-06-2013 20:01:38 Windows Update 18-06-2013 10:06:49 Norton_Power_Eraser_20130618120648115 ==================== Scheduled Tasks (whitelisted) ============= Task: {0CCB3586-CAE4-4F0C-B50A-22B07DF8C1D3} - System32\Tasks\Registration 1und1 Task => C:\Program Files\1und1Softwareaktualisierung\cdsupdclient.exe [2013-03-20] (1&1 Mail & Media GmbH) Task: {3EB4677F-09D2-4E51-BDB9-48608CD81F47} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-09] (Google Inc.) Task: {4886F6E5-8E77-42D8-9145-0EF2796303F3} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation) Task: {4B8D8E2C-2A30-4F30-8A70-64743CB54286} - System32\Tasks\BrowserProtect => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation) Task: {50AF33A5-87EA-4A21-8D3A-1C240D4BD07F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-09] (Google Inc.) Task: {5188B24B-753A-46FA-9717-892A9828A6E0} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-12-19] () Task: {51949839-6CEE-4C10-A3A1-D70F77A1EEB0} - System32\Tasks\EPUpdater => C:\Users\Antje\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-04-07] () Task: {52868A61-6D7B-4124-B8B9-513939B660F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated) Task: {77F9D20E-7D63-4CF3-B99C-80BB5D340E84} - System32\Tasks\DealPlyUpdate => C:\Program Files\DealPly\DealPlyUpdate.exe No File Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe No File Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe No File Task: {AA792B72-97DB-463B-BDBD-F305D3266A2A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation) Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {DEF56899-9AC9-4196-98BE-E72712C9513C} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1184766340-1357020511-1184547663-1000 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {E60B99ED-1081-45B5-AED7-A5CB4E98A4F5} - System32\Tasks\User_Feed_Synchronization-{820C0D33-D3A6-4F0F-AB5B-64E5DF4EF23F} => C:\Windows\system32\msfeedssync.exe [2013-04-30] (Microsoft Corporation) ==================== Faulty Device Manager Devices ============= Name: Officejet 4500 G510n-z Description: Officejet 4500 G510n-z Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Officejet 4500 G510n-z Description: Officejet 4500 G510n-z Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: HP Service: StillCam Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (06/18/2013 11:54:43 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/17/2013 09:01:35 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/16/2013 06:53:47 PM) (Source: Application Hang) (User: ) Description: Programm waol.exe, Version 9.5.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1a30 Startzeit: 01ce6a74d3671438 Endzeit: 80 Anwendungspfad: C:\Program Files\AOL 9.0 VRa\waol.exe Berichts-ID: 49b4db9a-d6a5-11e2-9274-00038a000015 Error: (06/16/2013 09:48:03 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Inbox.exe, Version: 2.0.0.61, Zeitstempel: 0x512baa2f Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f Ausnahmecode: 0xc0000005 Fehleroffset: 0x00039342 ID des fehlerhaften Prozesses: 0xb74 Startzeit der fehlerhaften Anwendung: 0xInbox.exe0 Pfad der fehlerhaften Anwendung: Inbox.exe1 Pfad des fehlerhaften Moduls: Inbox.exe2 Berichtskennung: Inbox.exe3 Error: (06/12/2013 06:09:13 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: taskeng.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce79261 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b60 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0003224d ID des fehlerhaften Prozesses: 0x28c Startzeit der fehlerhaften Anwendung: 0xtaskeng.exe0 Pfad der fehlerhaften Anwendung: taskeng.exe1 Pfad des fehlerhaften Moduls: taskeng.exe2 Berichtskennung: taskeng.exe3 Error: (06/09/2013 09:44:33 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/08/2013 08:27:14 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 10.0.9200.16576, Zeitstempel: 0x515e30fe Name des fehlerhaften Moduls: tbcore3.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4fb1d907 Ausnahmecode: 0xc0000005 Fehleroffset: 0x05e48b5d ID des fehlerhaften Prozesses: 0x558 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (06/05/2013 10:37:51 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (05/31/2013 09:16:38 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (05/25/2013 09:00:35 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. System errors: ============= Error: (06/19/2013 03:25:53 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Microsoft Office Sessions: ========================= Error: (02/03/2013 05:56:00 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 524 seconds with 480 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 39% Total physical RAM: 3054.7 MB Available physical RAM: 1837.48 MB Total Pagefile: 6105.64 MB Available Pagefile: 4707.16 MB Total Virtual: 2047.88 MB Available Virtual: 1902.39 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:931.41 GB) (Free:776.12 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A27B1D46) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS) ==================== End Of Log ============================rsion: 0.0.0) Acrobat.com (Version: 1.1.377) Adobe AIR (Version: 1.0.4990) Adobe AIR (Version: 1.0.8.4990) Adobe Flash Player 11 ActiveX (Version: 11.7.700.224) Adobe Flash Player 11 Plugin (Version: 11.7.700.224) Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7) AOL Deinstallation AP Tuner 3.08 Apple Application Support (Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (Version: 2.1.3.127) Ask Toolbar (Version: 1.17.2.0) ASRock App Charger v1.0.4 ASRock eXtreme Tuner v0.1.53 Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.0.35) Avira Free Antivirus (Version: 13.0.0.3640) Bandoo (Version: 8.0.0.123984) BestPractice (remove only) Bonjour (Version: 3.0.0.10) BrowserProtect BufferChm (Version: 130.0.331.000) CameraHelperMsi (Version: 13.31.1038.0) ChatZum Toolbar (Version: 1.0.14) Cisco EAP-FAST Module (Version: 2.2.14) Cisco LEAP Module (Version: 1.0.19) Cisco PEAP Module (Version: 1.1.6) CK Gruß- und Einladungskarten Designer (Version: 1.80.0000) CloneDVDmobile (Version: 1.9.0.1) DealPly (Version: ) Delta Chrome Toolbar Delta toolbar (Version: 1.8.16.16) Destinations (Version: 130.0.0.0) DeviceDiscovery (Version: 130.0.372.000) DocMgr (Version: 130.0.000.000) DocProc (Version: 13.0.0.0) Dropbox (Version: 1.4.17) ElsterFormular (Version: 14.0.0.10960) erLT (Version: 1.20.138.34) Fax (Version: 130.0.418.000) Firebird SQL Server - MAGIX Edition (Version: 2.1.27.0) Freeze.com NetAssistant (Version: 3.8.3) GMX MailCheck für Internet Explorer (Version: 1.9.2.0) GMX Softwareaktualisierung (Version: 3.0.0.53) Google Chrome (Version: 27.0.1453.110) Google Toolbar for Internet Explorer (Version: 1.0.0) Google Toolbar for Internet Explorer (Version: 7.4.3607.2246) Google Update Helper (Version: 1.3.21.145) GPBaseService2 (Version: 130.0.371.000) Heyer's Karten-Studio 2 (Version: 2.10.0000) HP Customer Participation Program 13.0 (Version: 13.0) HP Document Manager 2.0 (Version: 2.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Officejet 4500 G510n-z (Version: 13.0) HP Smart Web Printing 4.5 (Version: 4.5) HP Solution Center 13.0 (Version: 13.0) HP Update (Version: 5.003.001.001) HPProductAssistant (Version: 130.0.371.000) HPSSupply (Version: 130.0.371.000) Iminent (Version: 4.10.0.0) Inbox Toolbar (Version: 2.0.0.61) Intel(R) Management Engine Components (Version: 7.0.0.1144) Internet Explorer (Version: 9) iTuner (Version: 1.0.3) iTunes (Version: 11.0.4.4) Java 7 Update 9 (Version: 7.0.90) Java Auto Updater (Version: 2.1.9.0) JavaFX 2.1.1 (Version: 2.1.1) Logitech Webcam-Software (Version: 2.30) LWS Facebook (Version: 13.31.1038.0) LWS Gallery (Version: 13.31.1038.0) LWS Help_main (Version: 13.31.1044.0) LWS Launcher (Version: 13.31.1038.0) LWS Motion Detection (Version: 13.30.1395.0) LWS Pictures And Video (Version: 13.31.1038.0) LWS Twitter (Version: 13.30.1346.0) LWS Video Mask Maker (Version: 13.30.1379.0) LWS VideoEffects (Version: 13.30.1379.0) LWS Webcam Software (Version: 13.31.1038.0) LWS WLM Plugin (Version: 1.30.1201.0) LWS YouTube Plugin (Version: 13.31.1038.0) MAGIX Screenshare (Version: 4.3.6.1987) MAGIX Speed burnR (MSI) (Version: 7.0.2.6) MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) MarketResearch (Version: 130.0.374.000) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Office Access MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Enterprise 2007 (Version: 12.0.4518.1014) Microsoft Office Excel MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (Italian) 2007 (Version: 12.0.4518.1014) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Word MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft SkyDrive (Version: 16.4.6010.0727) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) MP3 Rocket MP3 Rocket Toolbar Updater (Version: 1.4.1.34141) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) NetAssistant (Version: 3.8.3) NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000) Network (Version: 130.0.374.000) Norton Internet Security (Version: 18.1.0.37) NVIDIA Grafiktreiber 267.42 (Version: 267.42) NVIDIA Install Application (Version: 2.265.39.0) NVIDIA PhysX (Version: 9.10.0514) NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514) NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6742) NVIDIA Systemsteuerung 267.42 (Version: 267.42) OCR Software by I.R.I.S. 13.0 (Version: 13.0) Platform (Version: 1.36) PriceGong 2.5.3 (Version: 2.5.3) QuickTime (Version: 7.74.80.86) REALTEK Wireless LAN Driver and Utility (Version: 1.00.0165) Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0) Samplitude Music Studio 17 Content Pack (Version: 1.0.0.0) Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0) Samplitude Music Studio 17 Vita Pack 1 (Version: 1.0.0.0) Samplitude Music Studio 17 Vita Pack 2 (Version: 1.0.0.0) Samplitude Music Studio 17 Vita Pack 3 (Version: 1.0.0.0) Samsung Kies (Version: 2.0.2.11071_128) SAMSUNG USB Driver for Mobile Phones (Version: 1.4.2.2) Scan (Version: 13.0.0.0) Shop for HP Supplies (Version: 13.0) Skype Click to Call (Version: 5.8.8855) Skype™ 5.5 (Version: 5.5.124) Smart OCR 3.2.1.417 (Version: 3.2.1.417) SmartWebPrinting (Version: 130.0.373.000) SolutionCenter (Version: 130.0.373.000) Sound Blaster X-Fi MB (Version: 1.0) Sound Effects (Version: 2.0) Splashtop Connect IE (Version: 1.1.12.1) Spotify (Version: 0.8.2.610.g090a06f8) Status (Version: 130.0.373.000) Text-To-Speech-Runtime (Version: 1.0.0.0) Toolbox (Version: 130.0.648.000) TrayApp (Version: 130.0.376.000) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1) VIA Plattform-Geräte-Manager (Version: 1.36) Video downloader 2.0.0.430 (Version: 2.0.0.430) Viewpoint Media Player VLC media player 1.1.5 (Version: 1.1.5) WebReg (Version: 130.0.132.017) Windows 7 Upgrade Advisor (Version: 2.0.5000.0) WinRAR 4.11 (32-Bit) (Version: 4.11.0) World Car Championship (Version: 1.00.0000) XFastUsb ==================== Restore Points ========================= 17-05-2013 12:52:59 Geplanter Prüfpunkt 17-05-2013 17:21:33 Windows Update 25-05-2013 07:06:28 Geplanter Prüfpunkt 05-06-2013 20:43:47 Geplanter Prüfpunkt 11-06-2013 16:39:06 Avira DE-Cleaner - 11.06.2013 18:39 12-06-2013 09:23:27 Windows Update 13-06-2013 20:01:38 Windows Update 18-06-2013 10:06:49 Norton_Power_Eraser_20130618120648115 ==================== Scheduled Tasks (whitelisted) ============= Task: {0CCB3586-CAE4-4F0C-B50A-22B07DF8C1D3} - System32\Tasks\Registration 1und1 Task => C:\Program Files\1und1Softwareaktualisierung\cdsupdclient.exe [2013-03-20] (1&1 Mail & Media GmbH) Task: {3EB4677F-09D2-4E51-BDB9-48608CD81F47} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-09] (Google Inc.) Task: {4886F6E5-8E77-42D8-9145-0EF2796303F3} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation) Task: {4B8D8E2C-2A30-4F30-8A70-64743CB54286} - System32\Tasks\BrowserProtect => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation) Task: {50AF33A5-87EA-4A21-8D3A-1C240D4BD07F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-09] (Google Inc.) Task: {5188B24B-753A-46FA-9717-892A9828A6E0} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-12-19] () Task: {51949839-6CEE-4C10-A3A1-D70F77A1EEB0} - System32\Tasks\EPUpdater => C:\Users\Antje\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-04-07] () Task: {52868A61-6D7B-4124-B8B9-513939B660F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated) Task: {77F9D20E-7D63-4CF3-B99C-80BB5D340E84} - System32\Tasks\DealPlyUpdate => C:\Program Files\DealPly\DealPlyUpdate.exe No File Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe No File Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe No File Task: {AA792B72-97DB-463B-BDBD-F305D3266A2A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation) Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {DEF56899-9AC9-4196-98BE-E72712C9513C} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1184766340-1357020511-1184547663-1000 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {E60B99ED-1081-45B5-AED7-A5CB4E98A4F5} - System32\Tasks\User_Feed_Synchronization-{820C0D33-D3A6-4F0F-AB5B-64E5DF4EF23F} => C:\Windows\system32\msfeedssync.exe [2013-04-30] (Microsoft Corporation) ==================== Faulty Device Manager Devices ============= Name: Officejet 4500 G510n-z Description: Officejet 4500 G510n-z Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Officejet 4500 G510n-z Description: Officejet 4500 G510n-z Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: HP Service: StillCam Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (06/18/2013 11:54:43 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/17/2013 09:01:35 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/16/2013 06:53:47 PM) (Source: Application Hang) (User: ) Description: Programm waol.exe, Version 9.5.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1a30 Startzeit: 01ce6a74d3671438 Endzeit: 80 Anwendungspfad: C:\Program Files\AOL 9.0 VRa\waol.exe Berichts-ID: 49b4db9a-d6a5-11e2-9274-00038a000015 Error: (06/16/2013 09:48:03 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Inbox.exe, Version: 2.0.0.61, Zeitstempel: 0x512baa2f Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f Ausnahmecode: 0xc0000005 Fehleroffset: 0x00039342 ID des fehlerhaften Prozesses: 0xb74 Startzeit der fehlerhaften Anwendung: 0xInbox.exe0 Pfad der fehlerhaften Anwendung: Inbox.exe1 Pfad des fehlerhaften Moduls: Inbox.exe2 Berichtskennung: Inbox.exe3 Error: (06/12/2013 06:09:13 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: taskeng.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce79261 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b60 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0003224d ID des fehlerhaften Prozesses: 0x28c Startzeit der fehlerhaften Anwendung: 0xtaskeng.exe0 Pfad der fehlerhaften Anwendung: taskeng.exe1 Pfad des fehlerhaften Moduls: taskeng.exe2 Berichtskennung: taskeng.exe3 Error: (06/09/2013 09:44:33 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/08/2013 08:27:14 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 10.0.9200.16576, Zeitstempel: 0x515e30fe Name des fehlerhaften Moduls: tbcore3.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4fb1d907 Ausnahmecode: 0xc0000005 Fehleroffset: 0x05e48b5d ID des fehlerhaften Prozesses: 0x558 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (06/05/2013 10:37:51 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (05/31/2013 09:16:38 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (05/25/2013 09:00:35 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. System errors: ============= Error: (06/19/2013 03:25:53 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Microsoft Office Sessions: ========================= Error: (02/03/2013 05:56:00 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 524 seconds with 480 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 39% Total physical RAM: 3054.7 MB Available physical RAM: 1837.48 MB Total Pagefile: 6105.64 MB Available Pagefile: 4707.16 MB Total Virtual: 2047.88 MB Available Virtual: 1902.39 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:931.41 GB) (Free:776.12 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A27B1D46) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS) ==================== End Of Log ============================ FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 19-06-2013 Ran by Antje at 2013-06-19 15:35:51 Run: Running from C:\Users\Antje\Desktop\Neuer Ordner Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 32 Bit HP CIO Components Installer (Version: 7.1.8) 4500_G510nz_Help (Version: 000.0.439.000) 4500G510nz (Version: 000.0.439.000) 4500G510nz_Software_Min (Version: 000.0.423.000) ABBYY FineReader 11 (Version: 11.0.289) Acrobat.com (Version: 0.0.0) Acrobat.com (Version: 1.1.377) Adobe AIR (Version: 1.0.4990) Adobe AIR (Version: 1.0.8.4990) Adobe Flash Player 11 ActiveX (Version: 11.7.700.224) Adobe Flash Player 11 Plugin (Version: 11.7.700.224) Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7) AOL Deinstallation AP Tuner 3.08 Apple Application Support (Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (Version: 2.1.3.127) Ask Toolbar (Version: 1.17.2.0) ASRock App Charger v1.0.4 ASRock eXtreme Tuner v0.1.53 Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.0.35) Avira Free Antivirus (Version: 13.0.0.3640) Bandoo (Version: 8.0.0.123984) BestPractice (remove only) Bonjour (Version: 3.0.0.10) BrowserProtect BufferChm (Version: 130.0.331.000) CameraHelperMsi (Version: 13.31.1038.0) ChatZum Toolbar (Version: 1.0.14) Cisco EAP-FAST Module (Version: 2.2.14) Cisco LEAP Module (Version: 1.0.19) Cisco PEAP Module (Version: 1.1.6) CK Gruß- und Einladungskarten Designer (Version: 1.80.0000) CloneDVDmobile (Version: 1.9.0.1) DealPly (Version: ) Delta Chrome Toolbar Delta toolbar (Version: 1.8.16.16) Destinations (Version: 130.0.0.0) DeviceDiscovery (Version: 130.0.372.000) DocMgr (Version: 130.0.000.000) DocProc (Version: 13.0.0.0) Dropbox (Version: 1.4.17) ElsterFormular (Version: 14.0.0.10960) erLT (Version: 1.20.138.34) Fax (Version: 130.0.418.000) Firebird SQL Server - MAGIX Edition (Version: 2.1.27.0) Freeze.com NetAssistant (Version: 3.8.3) GMX MailCheck für Internet Explorer (Version: 1.9.2.0) GMX Softwareaktualisierung (Version: 3.0.0.53) Google Chrome (Version: 27.0.1453.110) Google Toolbar for Internet Explorer (Version: 1.0.0) Google Toolbar for Internet Explorer (Version: 7.4.3607.2246) Google Update Helper (Version: 1.3.21.145) GPBaseService2 (Version: 130.0.371.000) Heyer's Karten-Studio 2 (Version: 2.10.0000) HP Customer Participation Program 13.0 (Version: 13.0) HP Document Manager 2.0 (Version: 2.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Officejet 4500 G510n-z (Version: 13.0) HP Smart Web Printing 4.5 (Version: 4.5) HP Solution Center 13.0 (Version: 13.0) HP Update (Version: 5.003.001.001) HPProductAssistant (Version: 130.0.371.000) HPSSupply (Version: 130.0.371.000) Iminent (Version: 4.10.0.0) Inbox Toolbar (Version: 2.0.0.61) Intel(R) Management Engine Components (Version: 7.0.0.1144) Internet Explorer (Version: 9) iTuner (Version: 1.0.3) iTunes (Version: 11.0.4.4) Java 7 Update 9 (Version: 7.0.90) Java Auto Updater (Version: 2.1.9.0) JavaFX 2.1.1 (Version: 2.1.1) Logitech Webcam-Software (Version: 2.30) LWS Facebook (Version: 13.31.1038.0) LWS Gallery (Version: 13.31.1038.0) LWS Help_main (Version: 13.31.1044.0) LWS Launcher (Version: 13.31.1038.0) LWS Motion Detection (Version: 13.30.1395.0) LWS Pictures And Video (Version: 13.31.1038.0) LWS Twitter (Version: 13.30.1346.0) LWS Video Mask Maker (Version: 13.30.1379.0) LWS VideoEffects (Version: 13.30.1379.0) LWS Webcam Software (Version: 13.31.1038.0) LWS WLM Plugin (Version: 1.30.1201.0) LWS YouTube Plugin (Version: 13.31.1038.0) MAGIX Screenshare (Version: 4.3.6.1987) MAGIX Speed burnR (MSI) (Version: 7.0.2.6) MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) MarketResearch (Version: 130.0.374.000) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Office Access MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Enterprise 2007 (Version: 12.0.4518.1014) Microsoft Office Excel MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (Italian) 2007 (Version: 12.0.4518.1014) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Word MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft SkyDrive (Version: 16.4.6010.0727) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) MP3 Rocket MP3 Rocket Toolbar Updater (Version: 1.4.1.34141) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) NetAssistant (Version: 3.8.3) NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000) Network (Version: 130.0.374.000) Norton Internet Security (Version: 18.1.0.37) NVIDIA Grafiktreiber 267.42 (Version: 267.42) NVIDIA Install Application (Version: 2.265.39.0) NVIDIA PhysX (Version: 9.10.0514) NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514) NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6742) NVIDIA Systemsteuerung 267.42 (Version: 267.42) OCR Software by I.R.I.S. 13.0 (Version: 13.0) Platform (Version: 1.36) PriceGong 2.5.3 (Version: 2.5.3) QuickTime (Version: 7.74.80.86) REALTEK Wireless LAN Driver and Utility (Version: 1.00.0165) Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0) Samplitude Music Studio 17 Content Pack (Version: 1.0.0.0) Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0) Samplitude Music Studio 17 Vita Pack 1 (Version: 1.0.0.0) Samplitude Music Studio 17 Vita Pack 2 (Version: 1.0.0.0) Samplitude Music Studio 17 Vita Pack 3 (Version: 1.0.0.0) Samsung Kies (Version: 2.0.2.11071_128) SAMSUNG USB Driver for Mobile Phones (Version: 1.4.2.2) Scan (Version: 13.0.0.0) Shop for HP Supplies (Version: 13.0) Skype Click to Call (Version: 5.8.8855) Skype™ 5.5 (Version: 5.5.124) Smart OCR 3.2.1.417 (Version: 3.2.1.417) SmartWebPrinting (Version: 130.0.373.000) SolutionCenter (Version: 130.0.373.000) Sound Blaster X-Fi MB (Version: 1.0) Sound Effects (Version: 2.0) Splashtop Connect IE (Version: 1.1.12.1) Spotify (Version: 0.8.2.610.g090a06f8) Status (Version: 130.0.373.000) Text-To-Speech-Runtime (Version: 1.0.0.0) Toolbox (Version: 130.0.648.000) TrayApp (Version: 130.0.376.000) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1) VIA Plattform-Geräte-Manager (Version: 1.36) Video downloader 2.0.0.430 (Version: 2.0.0.430) Viewpoint Media Player VLC media player 1.1.5 (Version: 1.1.5) WebReg (Version: 130.0.132.017) Windows 7 Upgrade Advisor (Version: 2.0.5000.0) WinRAR 4.11 (32-Bit) (Version: 4.11.0) World Car Championship (Version: 1.00.0000) XFastUsb ==================== Restore Points ========================= 17-05-2013 12:52:59 Geplanter Prüfpunkt 17-05-2013 17:21:33 Windows Update 25-05-2013 07:06:28 Geplanter Prüfpunkt 05-06-2013 20:43:47 Geplanter Prüfpunkt 11-06-2013 16:39:06 Avira DE-Cleaner - 11.06.2013 18:39 12-06-2013 09:23:27 Windows Update 13-06-2013 20:01:38 Windows Update 18-06-2013 10:06:49 Norton_Power_Eraser_20130618120648115 ==================== Scheduled Tasks (whitelisted) ============= Task: {0CCB3586-CAE4-4F0C-B50A-22B07DF8C1D3} - System32\Tasks\Registration 1und1 Task => C:\Program Files\1und1Softwareaktualisierung\cdsupdclient.exe [2013-03-20] (1&1 Mail & Media GmbH) Task: {3EB4677F-09D2-4E51-BDB9-48608CD81F47} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-09] (Google Inc.) Task: {4886F6E5-8E77-42D8-9145-0EF2796303F3} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation) Task: {4B8D8E2C-2A30-4F30-8A70-64743CB54286} - System32\Tasks\BrowserProtect => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation) Task: {50AF33A5-87EA-4A21-8D3A-1C240D4BD07F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-09] (Google Inc.) Task: {5188B24B-753A-46FA-9717-892A9828A6E0} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-12-19] () Task: {51949839-6CEE-4C10-A3A1-D70F77A1EEB0} - System32\Tasks\EPUpdater => C:\Users\Antje\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-04-07] () Task: {52868A61-6D7B-4124-B8B9-513939B660F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated) Task: {77F9D20E-7D63-4CF3-B99C-80BB5D340E84} - System32\Tasks\DealPlyUpdate => C:\Program Files\DealPly\DealPlyUpdate.exe No File Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe No File Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe No File Task: {AA792B72-97DB-463B-BDBD-F305D3266A2A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation) Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {DEF56899-9AC9-4196-98BE-E72712C9513C} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1184766340-1357020511-1184547663-1000 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {E60B99ED-1081-45B5-AED7-A5CB4E98A4F5} - System32\Tasks\User_Feed_Synchronization-{820C0D33-D3A6-4F0F-AB5B-64E5DF4EF23F} => C:\Windows\system32\msfeedssync.exe [2013-04-30] (Microsoft Corporation) ==================== Faulty Device Manager Devices ============= Name: Officejet 4500 G510n-z Description: Officejet 4500 G510n-z Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Officejet 4500 G510n-z Description: Officejet 4500 G510n-z Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: HP Service: StillCam Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (06/18/2013 11:54:43 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/17/2013 09:01:35 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/16/2013 06:53:47 PM) (Source: Application Hang) (User: ) Description: Programm waol.exe, Version 9.5.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1a30 Startzeit: 01ce6a74d3671438 Endzeit: 80 Anwendungspfad: C:\Program Files\AOL 9.0 VRa\waol.exe Berichts-ID: 49b4db9a-d6a5-11e2-9274-00038a000015 Error: (06/16/2013 09:48:03 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Inbox.exe, Version: 2.0.0.61, Zeitstempel: 0x512baa2f Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f Ausnahmecode: 0xc0000005 Fehleroffset: 0x00039342 ID des fehlerhaften Prozesses: 0xb74 Startzeit der fehlerhaften Anwendung: 0xInbox.exe0 Pfad der fehlerhaften Anwendung: Inbox.exe1 Pfad des fehlerhaften Moduls: Inbox.exe2 Berichtskennung: Inbox.exe3 Error: (06/12/2013 06:09:13 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: taskeng.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce79261 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b60 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0003224d ID des fehlerhaften Prozesses: 0x28c Startzeit der fehlerhaften Anwendung: 0xtaskeng.exe0 Pfad der fehlerhaften Anwendung: taskeng.exe1 Pfad des fehlerhaften Moduls: taskeng.exe2 Berichtskennung: taskeng.exe3 Error: (06/09/2013 09:44:33 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/08/2013 08:27:14 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 10.0.9200.16576, Zeitstempel: 0x515e30fe Name des fehlerhaften Moduls: tbcore3.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4fb1d907 Ausnahmecode: 0xc0000005 Fehleroffset: 0x05e48b5d ID des fehlerhaften Prozesses: 0x558 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (06/05/2013 10:37:51 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (05/31/2013 09:16:38 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (05/25/2013 09:00:35 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. System errors: ============= Error: (06/19/2013 03:25:53 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Microsoft Office Sessions: ========================= Error: (02/03/2013 05:56:00 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 524 seconds with 480 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 39% Total physical RAM: 3054.7 MB Available physical RAM: 1837.48 MB Total Pagefile: 6105.64 MB Available Pagefile: 4707.16 MB Total Virtual: 2047.88 MB Available Virtual: 1902.39 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:931.41 GB) (Free:776.12 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A27B1D46) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Hallo vielen Dank für deine Hilfe. Ich habe glaub ich was doppelt geschickt. Das ist irgendwie schwer zu verstehen. Entschuldigt bitte. Ich habe keine Ahnung von dem Zeug. Ah, aber das mit dem Code einfügen hat jetzt geklappt. Lotto Geändert von Lotto (19.06.2013 um 20:30 Uhr) |
|
20.06.2013, 08:03
| #4 |
| /// the machine /// TB-Ausbilder | Maillaccount gehackt /verschiedene Funde mit Malewarebytes Hi, Du hast die Additional.txt zweimal gepostet, dafür aber die FRST.txt vergessen 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
20.06.2013, 09:36
| #5 |
| | Maillaccount gehackt /verschiedene Funde mit MalewarebytesCode:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 19-06-2013 Ran by Antje at 2013-06-19 15:35:51 Run: Running from C:\Users\Antje\Desktop\Neuer Ordner Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 32 Bit HP CIO Components Installer (Version: 7.1.8) 4500_G510nz_Help (Version: 000.0.439.000) 4500G510nz (Version: 000.0.439.000) 4500G510nz_Software_Min (Version: 000.0.423.000) ABBYY FineReader 11 (Version: 11.0.289) Acrobat.com (Version: 0.0.0) Acrobat.com (Version: 1.1.377) Adobe AIR (Version: 1.0.4990) Adobe AIR (Version: 1.0.8.4990) Adobe Flash Player 11 ActiveX (Version: 11.7.700.224) Adobe Flash Player 11 Plugin (Version: 11.7.700.224) Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7) AOL Deinstallation AP Tuner 3.08 Apple Application Support (Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (Version: 2.1.3.127) Ask Toolbar (Version: 1.17.2.0) ASRock App Charger v1.0.4 ASRock eXtreme Tuner v0.1.53 Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.0.35) Avira Free Antivirus (Version: 13.0.0.3640) Bandoo (Version: 8.0.0.123984) BestPractice (remove only) Bonjour (Version: 3.0.0.10) BrowserProtect BufferChm (Version: 130.0.331.000) CameraHelperMsi (Version: 13.31.1038.0) ChatZum Toolbar (Version: 1.0.14) Cisco EAP-FAST Module (Version: 2.2.14) Cisco LEAP Module (Version: 1.0.19) Cisco PEAP Module (Version: 1.1.6) CK Gruß- und Einladungskarten Designer (Version: 1.80.0000) CloneDVDmobile (Version: 1.9.0.1) DealPly (Version: ) Delta Chrome Toolbar Delta toolbar (Version: 1.8.16.16) Destinations (Version: 130.0.0.0) DeviceDiscovery (Version: 130.0.372.000) DocMgr (Version: 130.0.000.000) DocProc (Version: 13.0.0.0) Dropbox (Version: 1.4.17) ElsterFormular (Version: 14.0.0.10960) erLT (Version: 1.20.138.34) Fax (Version: 130.0.418.000) Firebird SQL Server - MAGIX Edition (Version: 2.1.27.0) Freeze.com NetAssistant (Version: 3.8.3) GMX MailCheck für Internet Explorer (Version: 1.9.2.0) GMX Softwareaktualisierung (Version: 3.0.0.53) Google Chrome (Version: 27.0.1453.110) Google Toolbar for Internet Explorer (Version: 1.0.0) Google Toolbar for Internet Explorer (Version: 7.4.3607.2246) Google Update Helper (Version: 1.3.21.145) GPBaseService2 (Version: 130.0.371.000) Heyer's Karten-Studio 2 (Version: 2.10.0000) HP Customer Participation Program 13.0 (Version: 13.0) HP Document Manager 2.0 (Version: 2.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Officejet 4500 G510n-z (Version: 13.0) HP Smart Web Printing 4.5 (Version: 4.5) HP Solution Center 13.0 (Version: 13.0) HP Update (Version: 5.003.001.001) HPProductAssistant (Version: 130.0.371.000) HPSSupply (Version: 130.0.371.000) Iminent (Version: 4.10.0.0) Inbox Toolbar (Version: 2.0.0.61) Intel(R) Management Engine Components (Version: 7.0.0.1144) Internet Explorer (Version: 9) iTuner (Version: 1.0.3) iTunes (Version: 11.0.4.4) Java 7 Update 9 (Version: 7.0.90) Java Auto Updater (Version: 2.1.9.0) JavaFX 2.1.1 (Version: 2.1.1) Logitech Webcam-Software (Version: 2.30) LWS Facebook (Version: 13.31.1038.0) LWS Gallery (Version: 13.31.1038.0) LWS Help_main (Version: 13.31.1044.0) LWS Launcher (Version: 13.31.1038.0) LWS Motion Detection (Version: 13.30.1395.0) LWS Pictures And Video (Version: 13.31.1038.0) LWS Twitter (Version: 13.30.1346.0) LWS Video Mask Maker (Version: 13.30.1379.0) LWS VideoEffects (Version: 13.30.1379.0) LWS Webcam Software (Version: 13.31.1038.0) LWS WLM Plugin (Version: 1.30.1201.0) LWS YouTube Plugin (Version: 13.31.1038.0) MAGIX Screenshare (Version: 4.3.6.1987) MAGIX Speed burnR (MSI) (Version: 7.0.2.6) MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) MarketResearch (Version: 130.0.374.000) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Office Access MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Enterprise 2007 (Version: 12.0.4518.1014) Microsoft Office Excel MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (Italian) 2007 (Version: 12.0.4518.1014) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Word MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft SkyDrive (Version: 16.4.6010.0727) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) MP3 Rocket MP3 Rocket Toolbar Updater (Version: 1.4.1.34141) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) NetAssistant (Version: 3.8.3) NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000) Network (Version: 130.0.374.000) Norton Internet Security (Version: 18.1.0.37) NVIDIA Grafiktreiber 267.42 (Version: 267.42) NVIDIA Install Application (Version: 2.265.39.0) NVIDIA PhysX (Version: 9.10.0514) NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514) NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6742) NVIDIA Systemsteuerung 267.42 (Version: 267.42) OCR Software by I.R.I.S. 13.0 (Version: 13.0) Platform (Version: 1.36) PriceGong 2.5.3 (Version: 2.5.3) QuickTime (Version: 7.74.80.86) REALTEK Wireless LAN Driver and Utility (Version: 1.00.0165) Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0) Samplitude Music Studio 17 Content Pack (Version: 1.0.0.0) Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0) Samplitude Music Studio 17 Vita Pack 1 (Version: 1.0.0.0) Samplitude Music Studio 17 Vita Pack 2 (Version: 1.0.0.0) Samplitude Music Studio 17 Vita Pack 3 (Version: 1.0.0.0) Samsung Kies (Version: 2.0.2.11071_128) SAMSUNG USB Driver for Mobile Phones (Version: 1.4.2.2) Scan (Version: 13.0.0.0) Shop for HP Supplies (Version: 13.0) Skype Click to Call (Version: 5.8.8855) Skype™ 5.5 (Version: 5.5.124) Smart OCR 3.2.1.417 (Version: 3.2.1.417) SmartWebPrinting (Version: 130.0.373.000) SolutionCenter (Version: 130.0.373.000) Sound Blaster X-Fi MB (Version: 1.0) Sound Effects (Version: 2.0) Splashtop Connect IE (Version: 1.1.12.1) Spotify (Version: 0.8.2.610.g090a06f8) Status (Version: 130.0.373.000) Text-To-Speech-Runtime (Version: 1.0.0.0) Toolbox (Version: 130.0.648.000) TrayApp (Version: 130.0.376.000) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1) VIA Plattform-Geräte-Manager (Version: 1.36) Video downloader 2.0.0.430 (Version: 2.0.0.430) Viewpoint Media Player VLC media player 1.1.5 (Version: 1.1.5) WebReg (Version: 130.0.132.017) Windows 7 Upgrade Advisor (Version: 2.0.5000.0) WinRAR 4.11 (32-Bit) (Version: 4.11.0) World Car Championship (Version: 1.00.0000) XFastUsb ==================== Restore Points ========================= 17-05-2013 12:52:59 Geplanter Prüfpunkt 17-05-2013 17:21:33 Windows Update 25-05-2013 07:06:28 Geplanter Prüfpunkt 05-06-2013 20:43:47 Geplanter Prüfpunkt 11-06-2013 16:39:06 Avira DE-Cleaner - 11.06.2013 18:39 12-06-2013 09:23:27 Windows Update 13-06-2013 20:01:38 Windows Update 18-06-2013 10:06:49 Norton_Power_Eraser_20130618120648115 ==================== Scheduled Tasks (whitelisted) ============= Task: {0CCB3586-CAE4-4F0C-B50A-22B07DF8C1D3} - System32\Tasks\Registration 1und1 Task => C:\Program Files\1und1Softwareaktualisierung\cdsupdclient.exe [2013-03-20] (1&1 Mail & Media GmbH) Task: {3EB4677F-09D2-4E51-BDB9-48608CD81F47} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-09] (Google Inc.) Task: {4886F6E5-8E77-42D8-9145-0EF2796303F3} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation) Task: {4B8D8E2C-2A30-4F30-8A70-64743CB54286} - System32\Tasks\BrowserProtect => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation) Task: {50AF33A5-87EA-4A21-8D3A-1C240D4BD07F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-09] (Google Inc.) Task: {5188B24B-753A-46FA-9717-892A9828A6E0} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-12-19] () Task: {51949839-6CEE-4C10-A3A1-D70F77A1EEB0} - System32\Tasks\EPUpdater => C:\Users\Antje\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-04-07] () Task: {52868A61-6D7B-4124-B8B9-513939B660F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated) Task: {77F9D20E-7D63-4CF3-B99C-80BB5D340E84} - System32\Tasks\DealPlyUpdate => C:\Program Files\DealPly\DealPlyUpdate.exe No File Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe No File Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe No File Task: {AA792B72-97DB-463B-BDBD-F305D3266A2A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation) Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {DEF56899-9AC9-4196-98BE-E72712C9513C} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1184766340-1357020511-1184547663-1000 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {E60B99ED-1081-45B5-AED7-A5CB4E98A4F5} - System32\Tasks\User_Feed_Synchronization-{820C0D33-D3A6-4F0F-AB5B-64E5DF4EF23F} => C:\Windows\system32\msfeedssync.exe [2013-04-30] (Microsoft Corporation) ==================== Faulty Device Manager Devices ============= Name: Officejet 4500 G510n-z Description: Officejet 4500 G510n-z Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Officejet 4500 G510n-z Description: Officejet 4500 G510n-z Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: HP Service: StillCam Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (06/18/2013 11:54:43 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/17/2013 09:01:35 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/16/2013 06:53:47 PM) (Source: Application Hang) (User: ) Description: Programm waol.exe, Version 9.5.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1a30 Startzeit: 01ce6a74d3671438 Endzeit: 80 Anwendungspfad: C:\Program Files\AOL 9.0 VRa\waol.exe Berichts-ID: 49b4db9a-d6a5-11e2-9274-00038a000015 Error: (06/16/2013 09:48:03 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Inbox.exe, Version: 2.0.0.61, Zeitstempel: 0x512baa2f Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f Ausnahmecode: 0xc0000005 Fehleroffset: 0x00039342 ID des fehlerhaften Prozesses: 0xb74 Startzeit der fehlerhaften Anwendung: 0xInbox.exe0 Pfad der fehlerhaften Anwendung: Inbox.exe1 Pfad des fehlerhaften Moduls: Inbox.exe2 Berichtskennung: Inbox.exe3 Error: (06/12/2013 06:09:13 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: taskeng.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce79261 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b60 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0003224d ID des fehlerhaften Prozesses: 0x28c Startzeit der fehlerhaften Anwendung: 0xtaskeng.exe0 Pfad der fehlerhaften Anwendung: taskeng.exe1 Pfad des fehlerhaften Moduls: taskeng.exe2 Berichtskennung: taskeng.exe3 Error: (06/09/2013 09:44:33 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/08/2013 08:27:14 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 10.0.9200.16576, Zeitstempel: 0x515e30fe Name des fehlerhaften Moduls: tbcore3.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4fb1d907 Ausnahmecode: 0xc0000005 Fehleroffset: 0x05e48b5d ID des fehlerhaften Prozesses: 0x558 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (06/05/2013 10:37:51 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (05/31/2013 09:16:38 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (05/25/2013 09:00:35 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. System errors: ============= Error: (06/19/2013 03:25:53 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/19/2013 03:25:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Microsoft Office Sessions: ========================= Error: (02/03/2013 05:56:00 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 524 seconds with 480 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 39% Total physical RAM: 3054.7 MB Available physical RAM: 1837.48 MB Total Pagefile: 6105.64 MB Available Pagefile: 4707.16 MB Total Virtual: 2047.88 MB Available Virtual: 1902.39 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:931.41 GB) (Free:776.12 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A27B1D46) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS) ==================== End Of Log ============================  Wie schon gesagt wenig Ahnung. Danke euch für das verständnis. Bis später |
|
20.06.2013, 12:08
| #6 |
| /// the machine /// TB-Ausbilder | Maillaccount gehackt /verschiedene Funde mit Malewarebytes JEtzt hast Du die Additional schon wieder gepostet  Auf deinem Desktop liegt eine FRST.txt, diese öffnen und hier posten. Und wenn Du siehst dass aus irgendeinem unerfindlichen Grund der Additional-Text in der Datei FRST.txt drin ist, bitte FRST neu scannen lassen und FRST.txt posten.
__________________ --> Maillaccount gehackt /verschiedene Funde mit Malewarebytes |
|
21.06.2013, 08:16
| #7 |
| | Maillaccount gehackt /verschiedene Funde mit Malewarebytes Hallo Schrauber, tatsächlich sind die beiden Datein identisch. Habe die jetzt mal verglichen. Also noch mal Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 21-06-2013 Ran by Antje at 2013-06-21 09:12:59 Run: Running from C:\Users\Antje\Desktop\Neuer Ordner Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 32 Bit HP CIO Components Installer (Version: 7.1.8) 4500_G510nz_Help (Version: 000.0.439.000) 4500G510nz (Version: 000.0.439.000) 4500G510nz_Software_Min (Version: 000.0.423.000) ABBYY FineReader 11 (Version: 11.0.289) Acrobat.com (Version: 0.0.0) Acrobat.com (Version: 1.1.377) Adobe AIR (Version: 1.0.4990) Adobe AIR (Version: 1.0.8.4990) Adobe Flash Player 11 ActiveX (Version: 11.7.700.224) Adobe Flash Player 11 Plugin (Version: 11.7.700.224) Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7) AOL Deinstallation AP Tuner 3.08 Apple Application Support (Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (Version: 2.1.3.127) Ask Toolbar (Version: 1.17.2.0) ASRock App Charger v1.0.4 ASRock eXtreme Tuner v0.1.53 Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (Version: 1.0.0.35) Avira Free Antivirus (Version: 13.0.0.3640) Bandoo (Version: 8.0.0.123984) BestPractice (remove only) Bonjour (Version: 3.0.0.10) BrowserProtect BufferChm (Version: 130.0.331.000) CameraHelperMsi (Version: 13.31.1038.0) Cisco EAP-FAST Module (Version: 2.2.14) Cisco LEAP Module (Version: 1.0.19) Cisco PEAP Module (Version: 1.1.6) CK Gruß- und Einladungskarten Designer (Version: 1.80.0000) DealPly (Version: ) Delta Chrome Toolbar Delta toolbar (Version: 1.8.16.16) Destinations (Version: 130.0.0.0) DeviceDiscovery (Version: 130.0.372.000) DocMgr (Version: 130.0.000.000) DocProc (Version: 13.0.0.0) erLT (Version: 1.20.138.34) Fax (Version: 130.0.418.000) Firebird SQL Server - MAGIX Edition (Version: 2.1.27.0) Freeze.com NetAssistant (Version: 3.8.3) GMX MailCheck für Internet Explorer (Version: 1.9.2.0) GMX Softwareaktualisierung (Version: 3.0.0.53) Google Chrome (Version: 27.0.1453.116) Google Toolbar for Internet Explorer (Version: 1.0.0) Google Toolbar for Internet Explorer (Version: 7.4.3607.2246) Google Update Helper (Version: 1.3.21.145) GPBaseService2 (Version: 130.0.371.000) Heyer's Karten-Studio 2 (Version: 2.10.0000) HP Customer Participation Program 13.0 (Version: 13.0) HP Document Manager 2.0 (Version: 2.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Officejet 4500 G510n-z (Version: 13.0) HP Smart Web Printing 4.5 (Version: 4.5) HP Solution Center 13.0 (Version: 13.0) HP Update (Version: 5.003.001.001) HPProductAssistant (Version: 130.0.371.000) HPSSupply (Version: 130.0.371.000) Iminent (Version: 4.10.0.0) Inbox Toolbar (Version: 2.0.0.61) Intel(R) Management Engine Components (Version: 7.0.0.1144) Internet Explorer (Version: 9) iTuner (Version: 1.0.3) iTunes (Version: 11.0.4.4) Java 7 Update 9 (Version: 7.0.90) Java Auto Updater (Version: 2.1.9.0) JavaFX 2.1.1 (Version: 2.1.1) Logitech Webcam-Software (Version: 2.30) LWS Facebook (Version: 13.31.1038.0) LWS Gallery (Version: 13.31.1038.0) LWS Help_main (Version: 13.31.1044.0) LWS Launcher (Version: 13.31.1038.0) LWS Motion Detection (Version: 13.30.1395.0) LWS Pictures And Video (Version: 13.31.1038.0) LWS Twitter (Version: 13.30.1346.0) LWS Video Mask Maker (Version: 13.30.1379.0) LWS VideoEffects (Version: 13.30.1379.0) LWS Webcam Software (Version: 13.31.1038.0) LWS WLM Plugin (Version: 1.30.1201.0) LWS YouTube Plugin (Version: 13.31.1038.0) MAGIX Screenshare (Version: 4.3.6.1987) MAGIX Speed burnR (MSI) (Version: 7.0.2.6) MAGIX Video deluxe 17 Premium Download-Version (Version: 10.0.1.14) Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300) MarketResearch (Version: 130.0.374.000) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft Office Access MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Enterprise 2007 (Version: 12.0.4518.1014) Microsoft Office Excel MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Groove MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (English) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (French) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Proof (Italian) 2007 (Version: 12.0.4518.1014) Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Shared MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft Office Word MUI (German) 2007 (Version: 12.0.4518.1014) Microsoft SkyDrive (Version: 16.4.6010.0727) Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219) MP3 Rocket MP3 Rocket Toolbar Updater (Version: 1.4.1.34141) MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0) NetAssistant (Version: 3.8.3) NETGEAR WG111v3 wireless USB 2.0 adapter (Version: 1.00.0000) Network (Version: 130.0.374.000) Norton Internet Security (Version: 18.1.0.37) NVIDIA Grafiktreiber 267.42 (Version: 267.42) NVIDIA Install Application (Version: 2.265.39.0) NVIDIA PhysX (Version: 9.10.0514) NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514) NVIDIA Stereoscopic 3D Driver (Version: 7.17.12.6742) NVIDIA Systemsteuerung 267.42 (Version: 267.42) OCR Software by I.R.I.S. 13.0 (Version: 13.0) Platform (Version: 1.36) PriceGong 2.5.3 (Version: 2.5.3) QuickTime (Version: 7.74.80.86) REALTEK Wireless LAN Driver and Utility (Version: 1.00.0165) Renesas Electronics USB 3.0 Host Controller Driver (Version: 2.1.16.0) Samplitude Music Studio 17 Content Pack (Version: 1.0.0.0) Samplitude Music Studio 17 Download-Version (Version: 17.0.0.0) Samplitude Music Studio 17 Vita Pack 1 (Version: 1.0.0.0) Samplitude Music Studio 17 Vita Pack 2 (Version: 1.0.0.0) Samplitude Music Studio 17 Vita Pack 3 (Version: 1.0.0.0) Samsung Kies (Version: 2.0.2.11071_128) SAMSUNG USB Driver for Mobile Phones (Version: 1.4.2.2) Scan (Version: 13.0.0.0) Shop for HP Supplies (Version: 13.0) Skype Click to Call (Version: 5.8.8855) Skype™ 5.5 (Version: 5.5.124) Smart OCR 3.2.1.417 (Version: 3.2.1.417) SmartWebPrinting (Version: 130.0.373.000) SolutionCenter (Version: 130.0.373.000) Sound Blaster X-Fi MB (Version: 1.0) Sound Effects (Version: 2.0) Splashtop Connect IE (Version: 1.1.12.1) Spotify (Version: 0.8.2.610.g090a06f8) Status (Version: 130.0.373.000) Text-To-Speech-Runtime (Version: 1.0.0.0) Toolbox (Version: 130.0.648.000) TrayApp (Version: 130.0.376.000) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1) VIA Plattform-Geräte-Manager (Version: 1.36) Video downloader 2.0.0.430 (Version: 2.0.0.430) Viewpoint Media Player VLC media player 1.1.5 (Version: 1.1.5) WebReg (Version: 130.0.132.017) Windows 7 Upgrade Advisor (Version: 2.0.5000.0) WinRAR 4.11 (32-Bit) (Version: 4.11.0) World Car Championship (Version: 1.00.0000) XFastUsb ==================== Restore Points ========================= 17-05-2013 12:52:59 Geplanter Prüfpunkt 17-05-2013 17:21:33 Windows Update 25-05-2013 07:06:28 Geplanter Prüfpunkt 05-06-2013 20:43:47 Geplanter Prüfpunkt 11-06-2013 16:39:06 Avira DE-Cleaner - 11.06.2013 18:39 12-06-2013 09:23:27 Windows Update 13-06-2013 20:01:38 Windows Update 18-06-2013 10:06:49 Norton_Power_Eraser_20130618120648115 ==================== Scheduled Tasks (whitelisted) ============= Task: {0CCB3586-CAE4-4F0C-B50A-22B07DF8C1D3} - System32\Tasks\Registration 1und1 Task => C:\Program Files\1und1Softwareaktualisierung\cdsupdclient.exe [2013-03-20] (1&1 Mail & Media GmbH) Task: {3EB4677F-09D2-4E51-BDB9-48608CD81F47} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-09] (Google Inc.) Task: {4886F6E5-8E77-42D8-9145-0EF2796303F3} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation) Task: {4B8D8E2C-2A30-4F30-8A70-64743CB54286} - System32\Tasks\BrowserProtect => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation) Task: {50AF33A5-87EA-4A21-8D3A-1C240D4BD07F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-09-09] (Google Inc.) Task: {5188B24B-753A-46FA-9717-892A9828A6E0} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe [2012-12-19] () Task: {51949839-6CEE-4C10-A3A1-D70F77A1EEB0} - System32\Tasks\EPUpdater => C:\Users\Antje\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-04-07] () Task: {52868A61-6D7B-4124-B8B9-513939B660F8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated) Task: {77F9D20E-7D63-4CF3-B99C-80BB5D340E84} - System32\Tasks\DealPlyUpdate => C:\Program Files\DealPly\DealPlyUpdate.exe No File Task: {8C20516A-0854-4055-9DDA-07F5D365959F} - System32\Tasks\{A56D0839-9B1E-4606-AE99-6CAD37FD905C} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe No File Task: {94904DBE-DBE1-4386-9DE3-1C4E1D91C064} - System32\Tasks\{9DA0F427-D915-4923-B20B-1FA49027F5E0} => C:\Program Files\Lexmark X1100 Series\LXBKaiox.exe No File Task: {AA792B72-97DB-463B-BDBD-F305D3266A2A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation) Task: {C3FBC991-3D6D-44E0-A406-6BDDC4AC416C} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {E60B99ED-1081-45B5-AED7-A5CB4E98A4F5} - System32\Tasks\User_Feed_Synchronization-{820C0D33-D3A6-4F0F-AB5B-64E5DF4EF23F} => C:\Windows\system32\msfeedssync.exe [2013-04-30] (Microsoft Corporation) ==================== Faulty Device Manager Devices ============= Name: Officejet 4500 G510n-z Description: Officejet 4500 G510n-z Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Officejet 4500 G510n-z Description: Officejet 4500 G510n-z Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: HP Service: StillCam Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (06/19/2013 03:56:50 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/18/2013 11:54:43 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/17/2013 09:01:35 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/16/2013 06:53:47 PM) (Source: Application Hang) (User: ) Description: Programm waol.exe, Version 9.5.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1a30 Startzeit: 01ce6a74d3671438 Endzeit: 80 Anwendungspfad: C:\Program Files\AOL 9.0 VRa\waol.exe Berichts-ID: 49b4db9a-d6a5-11e2-9274-00038a000015 Error: (06/16/2013 09:48:03 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: Inbox.exe, Version: 2.0.0.61, Zeitstempel: 0x512baa2f Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f Ausnahmecode: 0xc0000005 Fehleroffset: 0x00039342 ID des fehlerhaften Prozesses: 0xb74 Startzeit der fehlerhaften Anwendung: 0xInbox.exe0 Pfad der fehlerhaften Anwendung: Inbox.exe1 Pfad des fehlerhaften Moduls: Inbox.exe2 Berichtskennung: Inbox.exe3 Error: (06/12/2013 06:09:13 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: taskeng.exe, Version: 6.1.7601.17514, Zeitstempel: 0x4ce79261 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b60 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0003224d ID des fehlerhaften Prozesses: 0x28c Startzeit der fehlerhaften Anwendung: 0xtaskeng.exe0 Pfad der fehlerhaften Anwendung: taskeng.exe1 Pfad des fehlerhaften Moduls: taskeng.exe2 Berichtskennung: taskeng.exe3 Error: (06/09/2013 09:44:33 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (06/08/2013 08:27:14 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 10.0.9200.16576, Zeitstempel: 0x515e30fe Name des fehlerhaften Moduls: tbcore3.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x4fb1d907 Ausnahmecode: 0xc0000005 Fehleroffset: 0x05e48b5d ID des fehlerhaften Prozesses: 0x558 Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0 Pfad der fehlerhaften Anwendung: iexplore.exe1 Pfad des fehlerhaften Moduls: iexplore.exe2 Berichtskennung: iexplore.exe3 Error: (06/05/2013 10:37:51 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. Error: (05/31/2013 09:16:38 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig. System errors: ============= Error: (06/21/2013 08:20:53 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/21/2013 08:20:51 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/21/2013 08:20:49 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/21/2013 08:20:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/21/2013 08:20:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/21/2013 08:20:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/21/2013 08:20:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/21/2013 08:20:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/21/2013 08:20:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Error: (06/21/2013 08:20:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "DNS-Client" wurde mit folgendem Fehler beendet: %%2 Microsoft Office Sessions: ========================= Error: (02/03/2013 05:56:00 PM) (Source: Microsoft Office 12 Sessions)(User: ) Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 524 seconds with 480 seconds of active time. This session ended with a crash. ==================== Memory info =========================== Percentage of memory in use: 37% Total physical RAM: 3054.7 MB Available physical RAM: 1907.08 MB Total Pagefile: 6105.64 MB Available Pagefile: 4711.88 MB Total Virtual: 2047.88 MB Available Virtual: 1923.52 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:931.41 GB) (Free:774.55 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A27B1D46) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS) ==================== End Of Log ============================ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-06-2013
Ran by Antje (administrator) on 21-06-2013 09:11:38
Running from C:\Users\Antje\Desktop\Neuer Ordner
Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(AOL LLC) C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe
(Splashtop Inc.) C:\Program Files\Splashtop\Splashtop Connect\BackService.exe
(Realtek Semiconductor Corp.) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWlan.exe
(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe
(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe
(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
(America Online, Inc.) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe
(Iminent) C:\Program Files\Iminent\IMBooster\IMBooster.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Splashtop Inc.) C:\Program Files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Ask) C:\Program Files\Ask.com\Updater\Updater.exe
(Inbox.com, Inc.) C:\Program Files\Inbox Toolbar\Inbox.exe
(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe
(1und1 Mail und Media GmbH) C:\Program Files\GMX MailCheck\IE\GMX_MailCheck_Broker.exe
() C:\Program Files\Video downloader\ExtensionUpdaterService.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Splashtop Inc.) C:\Program Files\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe
(Bandoo Media Inc.) C:\Program Files\Bandoo\Bandoo.exe
() C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\waol.exe
(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\shellmon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe
(AOL LLC) C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\IELowutil.exe
(Farbar) C:\Users\Antje\Desktop\Neuer Ordner\FRST1.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r [2145904 2011-02-22] (VIA)
HKLM\...\Run: [XFastUsb] C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)
HKLM\...\Run: [CTSyncService] C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe /StartRunKey [1233195 2009-07-08] (Creative Technology Ltd)
HKLM\...\Run: [VolPanel] "C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r [241789 2009-05-04] (Creative Technology Ltd)
HKLM\...\Run: [UpdReg] C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM\...\Run: [RunDLLEntry] C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry [14848 2009-02-26] (Creative Technology Ltd.)
HKLM\...\Run: [HostManager] C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe [50736 2006-09-26] (America Online, Inc.)
HKLM\...\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\imbooster.exe /warmup [1324008 2011-03-30] (Iminent)
HKLM\...\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [STCAgent] "C:\Program Files\Splashtop\Splashtop Connect IE\STCAgent.exe" [776064 2011-01-21] (Splashtop Inc.)
HKLM\...\Run: [ZyngaGamesAgent] "C:\Program Files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" [841544 2010-11-15] (Splashtop Inc.)
HKLM\...\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345312 2013-05-07] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [] [x]
HKLM\...\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe" [1645856 2012-12-19] (Ask)
HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [InboxToolbar] "C:\Program Files\Inbox Toolbar\Inbox.exe" /STARTUP [1713288 2013-03-22] (Inbox.com, Inc.)
HKLM\...\Run: [MailCheck IE Broker] "C:\Program Files\GMX MailCheck\IE\GMX_MailCheck_Broker.exe" [1430592 2013-03-15] (1und1 Mail und Media GmbH)
HKLM\...\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [152392 2013-05-31] (Apple Inc.)
HKCU\...\Run: [ASRockXTU] [x]
HKCU\...\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [20880 2011-07-26] ()
HKCU\...\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0 VRa\AOL.EXE" -b [50480 2007-06-21] (AOL, LLC.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = ?
????
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.t-online.de/cpm-redir/ie-9.html
URLSearchHook: (No Name) - {1CFFA392-0898-4b1c-89D1-6E98F9D8EF78} - No File
URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
URLSearchHook: Inbox Toolbar - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\PROGRA~1\INBOXT~1\Inbox.dll (Inbox.com, Inc.)
HKLM SearchScopes: DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2101} URL = hxxp://search.chatzum.com/?q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2101} URL = hxxp://search.chatzum.com/?q={searchTerms}
HKCU SearchScopes: DefaultScope {6804654E-DB4B-46FC-A842-8D8B48344DED} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {052D3D6A-F147-4C6F-94B4-A74EFD0B1EFD} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3008668
SearchScopes: HKCU - {0D7562AE-8EF6-416d-A838-AB665251703A} URL = hxxp://start.facemoods.com/?a=wbst&s={searchTerms}&f=4
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.delta-search.com/?q={searchTerms}&affID=120519&tt=110413_www&babsrc=SP_ss&mntrId=1872001E2AAC4C7C
SearchScopes: HKCU - {443789B7-F39C-4b5c-9287-DA72D38F4FE6} URL = hxxp://suche.aol.de/suche/web/search.jsp?q={searchTerms}
SearchScopes: HKCU - {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {6804654E-DB4B-46FC-A842-8D8B48344DED} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0} URL = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,136,0_0,Search,20120101,16987,0,8,0
SearchScopes: HKCU - {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {8A96AF9E-4074-43b7-BEA3-87217BDA74C8} URL = hxxp://search.chatzum.com/?q={searchTerms}
SearchScopes: HKCU - {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} URL = hxxp://search.chatzum.com/?q={SearchTerms}
SearchScopes: HKCU - {99DD0ACA-BAFF-44B3-BF3A-783C295A6F02} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=MP3R7&o=15863&src=kw&q={searchTerms}&locale=de_NL&apn_ptnrs=^RV&apn_dtid=^YYYYYY^YY^NL&apn_uid=f4ac95b4-6d49-4bc9-9bda-6514a66369e8&apn_sauid=1C136475-865F-4DDD-8DC0-4D9E638D5E76
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2101} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=289&systemid=101&sr=0&q={searchTerms}
SearchScopes: HKCU - {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742
SearchScopes: HKCU - {AC25F492-5CB4-4447-B298-7D675FD991A1} URL = hxxp://rover.ebay.com/rover/1/707-1403-276402/4?mpre=hxxp://search.ebay.de/search/search.dll?shortcut=4&query={sear chTerms}
SearchScopes: HKCU - {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi
SearchScopes: HKCU - {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = hxxp://www2.inbox.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=82383&iwk=250&lng=de
SearchScopes: HKCU - {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi
SearchScopes: HKCU - {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
BHO: No Name - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Splashtop Connect VisualBookmark - {0E5680D1-BF44-4929-94AF-FD30D784AD1D} - C:\Program Files\Splashtop\Splashtop Connect IE\STC.dll (Splashtop Inc.)
BHO: Shopping Assistant Plugin - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files\PriceGong\2.5.3\PriceGongIE.dll (PriceGong)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Video downloader - {77BEC163-D389-42c1-91A4-C758846296A5} - C:\Program Files\Video downloader\Extension32.dll ()
BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (AOL LLC)
BHO: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files\Iminent\IMBooster4Web\Iminent.WebBooster.dll (Iminent)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.16.16\bh\delta.dll (Delta-search.com)
BHO: Inbox Toolbar - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\PROGRA~1\INBOXT~1\Inbox.dll (Inbox.com, Inc.)
BHO: MP3 Rocket Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: NetAssistant - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files\Freeze.com\NetAssistant\NetAssistant.dll (W3i, LLC)
BHO: BandooIEPlugin Class - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll (Bandoo Media Inc.)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - MP3 Rocket Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (AOL LLC)
Toolbar: HKLM - &Inbox Toolbar - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\PROGRA~1\INBOXT~1\Inbox.dll (Inbox.com, Inc.)
Toolbar: HKLM - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.16.16\deltaTlbr.dll (Delta-search.com)
Toolbar: HKLM - GMX MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKCU -No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU -No Name - {77F8C945-4B74-4BD6-A073-E0D1997EDCE8} - No File
Toolbar: HKCU -No Name - {9427041A-A8DC-4D06-9A68-93873486E957} - No File
Toolbar: HKCU -&Inbox Toolbar - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\PROGRA~1\INBOXT~1\Inbox.dll (Inbox.com, Inc.)
Toolbar: HKCU -GMX MailCheck - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL (Microsoft Corporation)
Handler: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\PROGRA~1\INBOXT~1\Inbox.dll (Inbox.com, Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Chrome:
=======
CHR Extension: () - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojdbdbhbbkpenbmlejjngphokgnp\7.17.2.34525_0
CHR Extension: (PriceGong) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok\5.6.2_0
CHR Extension: (Bandoo) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\dloejdefkancmfajekobpfoacecnhpgp\1.0.0.0_0
CHR Extension: () - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpmlnedpdikbgdghljdepnljfpkhccn\1.0.2_0
CHR Extension: (DealPly) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.0.7.2_0
CHR Extension: () - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbpcjmidkkgldeplajgnbpjkfpmpeepb\1.0.9_0
CHR Extension: (Video downloader) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk\2.0.0.430_0
========================== Services (Whitelisted) =================
R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [86752 2013-03-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [110816 2013-03-31] (Avira Operations GmbH & Co. KG)
R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)
R2 Bandoo Coordinator; C:\Program Files\Bandoo\Bandoo.exe [1883536 2012-04-22] (Bandoo Media Inc.)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs)
S2 Dnscache; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG)
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Realtek11nSU; C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)
R2 SCBackService; C:\Program Files\Splashtop\Splashtop Connect\BackService.exe [477000 2010-11-15] (Splashtop Inc.)
R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
R2 Update-Service; C:\Windows\System32\UpdSvc.dll [114000 2011-12-24] (Joosoft.com GmbH)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)
R2 Video downloader Updater; C:\Program Files\Video downloader\ExtensionUpdaterService.exe [188760 2013-03-14] ()
R2 WCUService_STC_IE; C:\Program Files\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [497480 2011-03-22] (Splashtop Inc.)
S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [x]
==================== Drivers (Whitelisted) ====================
R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-03-31] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-03-31] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-31] (Avira Operations GmbH & Co. KG)
R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)
S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)
R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [376832 2009-11-18] (NETGEAR Inc. )
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)
R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-30] (America Online, Inc.)
S3 MSICDSetup; \??\D:\CDriver.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-21 08:46 - 2013-06-21 08:46 - 00000000 ____A C:\Users\Antje\Downloads\setup.exe.p0axl5s.partial
2013-06-19 15:33 - 2013-06-19 15:33 - 00000000 ____D C:\FRST
2013-06-18 10:57 - 2013-06-18 10:57 - 00000000 ____D C:\ProgramData\SMR322
2013-06-18 10:56 - 2013-06-20 10:42 - 00000000 ____D C:\Users\Antje\AppData\Local\NPE
2013-06-17 09:12 - 2013-06-17 09:12 - 00001753 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-17 09:11 - 2013-06-17 09:12 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-06-17 09:11 - 2013-06-17 09:12 - 00000000 ____D C:\Program Files\iTunes
2013-06-17 09:11 - 2013-06-17 09:11 - 00000000 ____D C:\Program Files\iPod
2013-06-17 09:06 - 2013-06-17 09:06 - 00001815 ____A C:\Users\Public\Desktop\QuickTime Player.lnk
2013-06-17 09:06 - 2013-06-17 09:06 - 00000000 ____D C:\Program Files\QuickTime
2013-06-13 09:51 - 2013-06-13 09:51 - 00001071 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Malwarebytes
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-06-13 09:51 - 2013-04-04 14:50 - 00022856 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-06-12 11:26 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 11:26 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 11:26 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 11:26 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 11:26 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 11:26 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 11:24 - 2013-05-17 03:26 - 00042496 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 11:24 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 11:24 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 08:43 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 08:43 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 08:43 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 08:43 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 08:43 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 08:43 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 08:43 - 2013-05-08 07:38 - 01293672 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 08:43 - 2013-05-06 07:06 - 03968872 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2013-06-12 08:43 - 2013-05-06 07:06 - 03913576 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-06-12 08:43 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 08:43 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-12 08:43 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\ProgramData\UUdb
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\ProgramData\1&1 Mail & Media GmbH
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\Program Files\GMX MailCheck
2013-06-06 10:30 - 2013-06-06 10:32 - 00002054 ____A C:\Users\Antje\Desktop\Amazon.lnk
2013-06-06 10:30 - 2013-06-06 10:32 - 00002048 ____A C:\Users\Antje\Desktop\GMX.lnk
2013-06-06 10:30 - 2013-06-06 10:32 - 00002046 ____A C:\Users\Antje\Desktop\eBay.lnk
2013-06-06 10:30 - 2013-06-06 10:32 - 00000000 ____D C:\Program Files\1und1Softwareaktualisierung
2013-05-31 09:49 - 2013-06-16 16:06 - 00000000 ____D C:\Users\Antje\Desktop\Garten1
==================== One Month Modified Files and Folders ========
2013-06-21 09:11 - 2012-09-19 08:47 - 00000000 ____D C:\Users\Antje\Desktop\Neuer Ordner
2013-06-21 08:46 - 2013-06-21 08:46 - 00000000 ____A C:\Users\Antje\Downloads\setup.exe.p0axl5s.partial
2013-06-21 08:26 - 2011-12-23 22:55 - 01498506 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-21 08:25 - 2009-07-14 06:34 - 00014016 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-21 08:25 - 2009-07-14 06:34 - 00014016 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-21 08:23 - 2011-12-23 22:41 - 01485054 ____A C:\Windows\WindowsUpdate.log
2013-06-21 08:20 - 2012-04-03 07:55 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-21 08:19 - 2012-09-16 16:53 - 00000000 ____D C:\Program Files\ChatZum Toolbar
2013-06-21 08:19 - 2012-09-09 21:48 - 00001092 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-21 08:19 - 2011-12-23 23:19 - 00582026 ____A C:\Windows\PFRO.log
2013-06-21 08:19 - 2009-07-14 06:53 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-21 08:19 - 2009-07-14 06:39 - 00129063 ____A C:\Windows\setupact.log
2013-06-20 10:42 - 2013-06-18 10:56 - 00000000 ____D C:\Users\Antje\AppData\Local\NPE
2013-06-20 10:13 - 2012-09-09 21:48 - 00001096 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-20 09:15 - 2012-09-09 21:49 - 00002129 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-20 08:31 - 2013-02-19 10:44 - 00000000 ____D C:\ProgramData\elsterformular
2013-06-20 08:31 - 2011-12-30 22:44 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Dropbox
2013-06-20 08:30 - 2012-11-11 18:13 - 00000000 ____D C:\Program Files\SlySoft
2013-06-19 20:57 - 2012-04-25 11:06 - 00000000 ____D C:\Users\Antje\Desktop\Neuer Ordner (3)
2013-06-19 15:33 - 2013-06-19 15:33 - 00000000 ____D C:\FRST
2013-06-18 13:39 - 2011-12-24 01:21 - 00000000 ____D C:\Program Files\MAGIX
2013-06-18 12:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-06-18 10:57 - 2013-06-18 10:57 - 00000000 ____D C:\ProgramData\SMR322
2013-06-18 10:56 - 2011-12-23 23:21 - 00000000 ____D C:\ProgramData\Norton
2013-06-18 10:47 - 2012-12-16 17:51 - 00000000 ____D C:\Users\Public\Documents\tmp
2013-06-17 21:02 - 2011-12-24 01:04 - 00000000 ____D C:\Users\Antje\Desktop\Musikstudio17
2013-06-17 21:00 - 2011-12-25 19:37 - 00000000 ____D C:\Users\Antje\Desktop\Gitarre
2013-06-17 09:12 - 2013-06-17 09:12 - 00001753 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-17 09:12 - 2013-06-17 09:11 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-06-17 09:12 - 2013-06-17 09:11 - 00000000 ____D C:\Program Files\iTunes
2013-06-17 09:11 - 2013-06-17 09:11 - 00000000 ____D C:\Program Files\iPod
2013-06-17 09:11 - 2012-09-14 17:42 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-17 09:06 - 2013-06-17 09:06 - 00001815 ____A C:\Users\Public\Desktop\QuickTime Player.lnk
2013-06-17 09:06 - 2013-06-17 09:06 - 00000000 ____D C:\Program Files\QuickTime
2013-06-16 16:06 - 2013-05-31 09:49 - 00000000 ____D C:\Users\Antje\Desktop\Garten1
2013-06-16 09:48 - 2011-12-29 16:18 - 00000000 ____D C:\Users\Antje\AppData\Local\CrashDumps
2013-06-14 09:27 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-06-13 21:35 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\SchCache
2013-06-13 21:35 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Help
2013-06-13 21:22 - 2013-04-11 16:27 - 00000000 ____D C:\Users\Antje\AppData\Local\SwvUpdater
2013-06-13 09:51 - 2013-06-13 09:51 - 00001071 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Malwarebytes
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-06-12 18:07 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\System32\de-DE
2013-06-12 11:24 - 2009-10-14 04:21 - 73381792 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 10:20 - 2012-04-03 07:55 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-06-12 10:20 - 2011-12-24 00:54 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-06-08 13:42 - 2013-06-12 11:26 - 01141248 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 13:40 - 2013-06-12 11:26 - 14327808 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 13:40 - 2013-06-12 11:26 - 13760512 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 13:40 - 2013-06-12 11:26 - 02046976 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 13:40 - 2013-06-12 11:26 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 13:13 - 2013-06-12 11:26 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\ProgramData\UUdb
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\ProgramData\1&1 Mail & Media GmbH
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\Program Files\GMX MailCheck
2013-06-06 10:32 - 2013-06-06 10:30 - 00002054 ____A C:\Users\Antje\Desktop\Amazon.lnk
2013-06-06 10:32 - 2013-06-06 10:30 - 00002048 ____A C:\Users\Antje\Desktop\GMX.lnk
2013-06-06 10:32 - 2013-06-06 10:30 - 00002046 ____A C:\Users\Antje\Desktop\eBay.lnk
2013-06-06 10:32 - 2013-06-06 10:30 - 00000000 ____D C:\Program Files\1und1Softwareaktualisierung
2013-05-31 09:44 - 2012-09-04 10:46 - 00000000 ____D C:\Users\Antje\Desktop\Bilder von Christian
2013-05-26 09:35 - 2009-07-14 06:53 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
Files to move or delete:
====================
C:\ProgramData\NTUser.dat
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-17 08:59
==================== End Of Log ============================
Ich hoffe nun ging das.  Vielen Dank LG Lotto |
|
21.06.2013, 09:21
| #8 | |
| /// the machine /// TB-Ausbilder | Maillaccount gehackt /verschiedene Funde mit Malewarebytes Supi Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!Downloade dir bitte Combofix vom folgenden Downloadspiegel Link 1 WICHTIG - Speichere Combofix auf deinem Desktop
Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort. Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
21.06.2013, 10:20
| #9 |
| | Maillaccount gehackt /verschiedene Funde mit Malewarebytes Hallo Schrauber, das ist aber viel was hier steht. Code:
ATTFilter ComboFix 13-06-21.02 - Antje 21.06.2013 10:50:31.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.3055.2148 [GMT 2:00]
ausgeführt von:: c:\users\Antje\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\FunWebProducts
c:\program files\FunWebProducts\Installr\1.bin\F3EZSETP.DLL
c:\program files\FunWebProducts\Installr\1.bin\F3PLUGIN.DLL
c:\program files\FunWebProducts\Installr\1.bin\NPFUNWEB.DLL
c:\program files\Windows Live\Messenger\msacm32.dll
c:\programdata\ntuser.dat
c:\users\Antje\AppData\Local\Temp\3dcf2df1-2a83-477c-a7dd-858967792357\CliSecureRT.dll
c:\users\Antje\AppData\Roaming\BabMaint.exe
c:\windows\system32\muzapp.exe
c:\windows\system32\roboot.exe
c:\windows\system32\tmp40A7.tmp
c:\windows\system32\tmp40A8.tmp
c:\windows\unin0407.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-05-21 bis 2013-06-21 ))))))))))))))))))))))))))))))
.
.
2013-06-21 08:59 . 2013-06-21 09:02 -------- d-----w- c:\users\Antje\AppData\Local\temp
2013-06-21 08:59 . 2013-06-21 08:59 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-21 08:59 . 2013-06-21 08:59 -------- d-----w- c:\users\Antje.Antje-PC\AppData\Local\temp
2013-06-19 13:33 . 2013-06-19 13:33 -------- d-----w- C:\FRST
2013-06-18 08:57 . 2013-06-18 08:57 -------- d-----w- c:\programdata\SMR322
2013-06-18 08:56 . 2013-06-20 08:42 -------- d-----w- c:\users\Antje\AppData\Local\NPE
2013-06-17 07:11 . 2013-06-17 07:11 -------- d-----w- c:\program files\iPod
2013-06-17 07:11 . 2013-06-17 07:12 -------- d-----w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-06-17 07:11 . 2013-06-17 07:12 -------- d-----w- c:\program files\iTunes
2013-06-17 07:06 . 2013-06-17 07:06 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2013-06-17 07:06 . 2013-06-17 07:06 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2013-06-17 07:06 . 2013-06-17 07:06 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2013-06-17 07:06 . 2013-06-17 07:06 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2013-06-17 07:06 . 2013-06-17 07:06 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2013-06-17 07:06 . 2013-06-17 07:06 -------- d-----w- c:\program files\QuickTime
2013-06-13 07:51 . 2013-06-13 07:51 -------- d-----w- c:\users\Antje\AppData\Roaming\Malwarebytes
2013-06-13 07:51 . 2013-06-13 07:51 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-06-13 07:51 . 2013-06-13 07:51 -------- d-----w- c:\programdata\Malwarebytes
2013-06-13 07:51 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-06-12 09:26 . 2013-06-08 11:13 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-12 09:26 . 2013-06-08 11:41 218112 ----a-w- c:\program files\Internet Explorer\sqmapi.dll
2013-06-12 06:43 . 2013-04-26 04:55 492544 ----a-w- c:\windows\system32\win32spl.dll
2013-06-12 06:43 . 2013-05-10 03:20 24576 ----a-w- c:\windows\system32\cryptdlg.dll
2013-06-12 06:43 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\system32\d3d11.dll
2013-06-12 06:43 . 2013-05-13 04:45 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2013-06-12 06:43 . 2013-05-13 04:45 1160192 ----a-w- c:\windows\system32\crypt32.dll
2013-06-12 06:43 . 2013-05-13 04:45 103936 ----a-w- c:\windows\system32\cryptnet.dll
2013-06-12 06:43 . 2013-05-13 03:08 903168 ----a-w- c:\windows\system32\certutil.exe
2013-06-12 06:43 . 2013-05-13 03:08 43008 ----a-w- c:\windows\system32\certenc.dll
2013-06-12 06:43 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-06-12 06:43 . 2013-05-06 05:06 3968872 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-06-12 06:43 . 2013-05-06 05:06 3913576 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-06-12 06:43 . 2013-05-08 05:38 1293672 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-06-06 08:32 . 2013-06-06 08:32 -------- d-----w- c:\programdata\UUdb
2013-06-06 08:32 . 2013-06-06 08:32 -------- d-----w- c:\programdata\1&1 Mail & Media GmbH
2013-06-06 08:32 . 2013-06-06 08:32 -------- d-----w- c:\program files\GMX MailCheck
2013-06-06 08:30 . 2013-06-06 08:32 -------- d-----w- c:\program files\1und1Softwareaktualisierung
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 08:20 . 2012-04-03 05:55 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-06-12 08:20 . 2011-12-23 22:54 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-05-07 14:00 . 2013-05-07 14:00 66656 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2013-05-01 01:59 . 2013-05-01 01:59 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2013-05-01 01:59 . 2013-05-01 01:59 69632 ----a-w- c:\windows\system32\QuickTime.qts
2013-04-30 09:34 . 2013-04-30 09:34 745472 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-04-30 09:34 . 2013-04-30 09:34 73728 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-04-30 09:34 . 2013-04-30 09:34 719360 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-04-30 09:34 . 2013-04-30 09:34 61952 ----a-w- c:\windows\system32\tdc.ocx
2013-04-30 09:34 . 2013-04-30 09:34 523264 ----a-w- c:\windows\system32\vbscript.dll
2013-04-30 09:34 . 2013-04-30 09:34 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-04-30 09:34 . 2013-04-30 09:34 38400 ----a-w- c:\windows\system32\imgutil.dll
2013-04-30 09:34 . 2013-04-30 09:34 361984 ----a-w- c:\windows\system32\html.iec
2013-04-30 09:34 . 2013-04-30 09:34 23040 ----a-w- c:\windows\system32\licmgr10.dll
2013-04-30 09:34 . 2013-04-30 09:34 185344 ----a-w- c:\windows\system32\elshyph.dll
2013-04-30 09:34 . 2013-04-30 09:34 158720 ----a-w- c:\windows\system32\msls31.dll
2013-04-30 09:34 . 2013-04-30 09:34 150528 ----a-w- c:\windows\system32\iexpress.exe
2013-04-30 09:34 . 2013-04-30 09:34 1441280 ----a-w- c:\windows\system32\inetcpl.cpl
2013-04-30 09:34 . 2013-04-30 09:34 138752 ----a-w- c:\windows\system32\wextract.exe
2013-04-30 09:34 . 2013-04-30 09:34 137216 ----a-w- c:\windows\system32\ieUnatt.exe
2013-04-30 09:34 . 2013-04-30 09:34 12800 ----a-w- c:\windows\system32\mshta.exe
2013-04-30 09:34 . 2013-04-30 09:34 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-04-13 04:45 . 2013-05-17 12:23 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-17 12:23 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 13:45 . 2013-04-24 06:41 1211752 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-10 05:18 . 2013-05-17 12:23 728424 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-04-10 05:18 . 2013-05-17 12:23 218984 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-04-10 03:14 . 2013-05-17 12:23 2347520 ----a-w- c:\windows\system32\win32k.sys
2013-03-31 15:45 . 2012-10-17 07:48 84744 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2013-03-31 15:45 . 2012-10-17 07:48 37352 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2013-03-31 15:45 . 2012-10-17 07:48 135136 ----a-w- c:\windows\system32\drivers\avipbb.sys
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2012-12-19 1528096]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{77BEC163-D389-42c1-91A4-C758846296A5}]
2013-03-14 15:43 164184 ----a-w- c:\program files\Video downloader\Extension32.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2012-08-17 07:27 220608 ----a-w- c:\users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2012-08-17 07:27 220608 ----a-w- c:\users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2012-08-17 07:27 220608 ----a-w- c:\users\Antje\AppData\Local\Microsoft\SkyDrive\16.4.6010.0727\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KiesPDLR"="c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-07-26 20880]
"AOL Fast Start"="c:\program files\AOL 9.0 VRa\AOL.EXE" [2007-06-21 50480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2011-02-22 2145904]
"XFastUsb"="c:\program files\XFastUsb\XFastUsb.exe" [2011-12-23 4942336]
"CTSyncService"="c:\program files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe" [2009-07-08 1233195]
"VolPanel"="c:\program files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" [2009-05-04 241789]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"RunDLLEntry"="c:\windows\system32\AmbRunE.dll" [2009-02-26 14848]
"HostManager"="c:\program files\Common Files\AOL\1324678810\ee\AOLSoftware.exe" [2006-09-26 50736]
"IMBooster"="c:\program files\Iminent\IMBooster\imbooster.exe" [2011-03-30 1324008]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"STCAgent"="c:\program files\Splashtop\Splashtop Connect IE\STCAgent.exe" [2011-01-21 776064]
"ZyngaGamesAgent"="c:\program files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" [2010-11-15 841544]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2013-05-07 345312]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"ApnUpdater"="c:\program files\Ask.com\Updater\Updater.exe" [2012-12-19 1645856]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"InboxToolbar"="c:\program files\Inbox Toolbar\Inbox.exe" [2013-03-22 1713288]
"MailCheck IE Broker"="c:\program files\GMX MailCheck\IE\GMX_MailCheck_Broker.exe" [2013-03-15 1430592]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2013-05-01 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2013-05-31 152392]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
NETGEAR WG111v3 Smart Wizard.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2007-9-14 1695744]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Bandoo\BndHook.dll
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
path=c:\users\Antje\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
backup=c:\windows\pss\Dropbox.lnk.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^Antje^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk]
path=c:\users\Antje\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
backup=c:\windows\pss\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2013-04-04 21:06 958576 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2013-04-21 19:43 59720 ----a-w- c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR11]
2011-08-19 00:04 925960 ----a-w- c:\program files\ABBYY FineReader 11\Bonus.ScreenshotReader.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2011-05-10 01:41 49208 ----a-w- c:\program files\HP\HP Software Update\hpwuschd2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2013-05-31 09:56 152392 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper]
2011-07-26 19:23 958352 ----a-w- c:\program files\Samsung\Kies\KiesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
2011-07-26 19:23 20880 ----a-w- c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
2011-07-26 19:23 3507088 ----a-w- c:\program files\Samsung\Kies\KiesTrayAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWS]
2011-11-11 13:08 205336 ----a-w- c:\program files\Logitech\LWS\Webcam Software\LWS.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NUSB3MON]
2011-04-14 17:17 113288 ----a-w- c:\program files\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2013-05-01 01:59 421888 ----a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyDrive]
2012-08-17 07:27 238528 ----a-w- c:\users\Antje\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\STCAgent]
2011-01-21 08:40 776064 ----a-w- c:\program files\Splashtop\Splashtop Connect IE\STCAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-07-03 07:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrayServer]
2008-08-07 16:18 90112 ----a-w- c:\progra~1\MAGIX\VIDEO_~2\Trayserver.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ZyngaGamesAgent]
2010-11-15 11:21 841544 ----a-w- c:\program files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
.
R2 SmartViewService;SmartView service;c:\program files\DeviceVM\SmartView\SmartViewService.exe [x]
R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [2011-07-20 30312]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2011-12-23 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-12-23 79360]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
R3 FNETTBOH_305;FNETTBOH_305;c:\windows\system32\drivers\FNETTBOH_305.SYS [2012-04-19 29248]
R3 MSICDSetup;MSICDSetup;D:\CDriver.sys [x]
R3 netr73;RT73 USB-Drahtlos-LAN-Kartentreiber für Vista;c:\windows\system32\DRIVERS\netr73.sys [2009-07-13 545792]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys [2010-08-18 600608]
R3 Sound Blaster X-Fi MB Licensing Service;Sound Blaster X-Fi MB Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [2011-12-23 79360]
R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [2011-07-20 121064]
R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [2011-07-20 12776]
R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [2011-07-20 136808]
R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [2011-07-20 114280]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S1 AsrAppCharger;AsrAppCharger;c:\windows\system32\DRIVERS\AsrAppCharger.sys [2010-06-11 13832]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-03-31 37352]
S1 FNETURPX;FNETURPX;c:\windows\system32\drivers\FNETURPX.SYS [2011-12-23 14656]
S2 ABBYY.Licensing.FineReader.Professional.11.0;ABBYY FineReader 11 PE Licensing Service;c:\program files\ABBYY FineReader 11\NetworkLicenseServer.exe [2011-08-18 819976]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]
S2 AntiVirSchedulerService;Avira Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2013-03-31 86752]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]
S2 Realtek11nSU;Realtek11nSU;c:\program files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [2010-04-16 36864]
S2 SCBackService;Splashtop Connect Service;c:\program files\Splashtop\Splashtop Connect\BackService.exe [2010-11-15 477000]
S2 UMVPFSrv;UMVPFSrv;c:\program files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-01-18 450848]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
S2 Update-Service;Update-Service;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe [2011-02-17 27760]
S2 Video downloader Updater;Video downloader Updater;c:\program files\Video downloader\ExtensionUpdaterService.exe [2013-03-14 188760]
S2 WCUService_STC_IE;Splashtop Connect IE Software Updater Service;c:\program files\Splashtop\Splashtop Connect IE Software Updater\WCUService.exe [2011-03-22 497480]
S3 CompFilter;UVCCompositeFilter;c:\windows\system32\DRIVERS\lvbusflt.sys [2012-01-18 22176]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x86.sys [2010-08-24 68208]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856]
S3 MEI;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECI.sys [2010-10-19 41088]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2011-04-13 67456]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2011-04-13 161024]
S3 RTL8187B;NETGEAR WG111v3 Wireless-G USB Adapter Win7 Driver;c:\windows\system32\DRIVERS\wg111v3.sys [2009-11-18 376832]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2011-02-17 1801328]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Update-Service-Installer-Service REG_MULTI_SZ Update-Service-Installer-Service
Update-Service REG_MULTI_SZ Update-Service
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-20 07:14 1165776 ----a-w- c:\program files\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-06-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 08:20]
.
2013-06-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-09-09 19:48]
.
2013-06-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-09-09 19:48]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
uInternet Settings,ProxyOverride = <local>;*.local
IE: &AOL Toolbar-Suche - c:\program files\aol\aol toolbar 4.0\resources\de-DE\local\search.html
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - c:\program files\GMX MailCheck\IE\GMX_MailCheck.dll
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{1CFFA392-0898-4b1c-89D1-6E98F9D8EF78} - (no file)
Toolbar-10 - (no file)
WebBrowser-{77F8C945-4B74-4BD6-A073-E0D1997EDCE8} - (no file)
WebBrowser-{9427041A-A8DC-4D06-9A68-93873486E957} - (no file)
HKCU-Run-ASRockXTU - (no file)
MSConfigStartUp-facemoods - c:\program files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe
MSConfigStartUp-SmartViewAgent - c:\program files\DeviceVM\SmartView\SmartViewAgent.exe
AddRemove-Bandoo - c:\program files\Bandoo\uninstaller.exe
AddRemove-DealPly - c:\program files\DealPly\uninst.exe
AddRemove-MAGIX_MSI_ms17dlx - c:\program files\MAGIX\Samplitude_Music_Studio_17_DLV\SMS17_DLV_de-DE_setup.exe
AddRemove-{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} - c:\programdata\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe
AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - c:\program files\Samsung\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - c:\program files\Samsung\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - c:\program files\Samsung\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - c:\program files\Samsung\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - c:\program files\Samsung\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - c:\program files\Samsung\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-21_Searsburg - c:\program files\Samsung\USB Drivers\21_Searsburg\Uninstall.exe
AddRemove-22_WiBro_WiMAX - c:\program files\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe
AddRemove-26_VIA_driver2 - c:\program files\Samsung\USB Drivers\26_VIA_driver2\Uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(4404)
c:\windows\System32\ieframe.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\Creative\Shared Files\CTAudSvc.exe
c:\windows\system32\atieclxx.exe
c:\program files\NVIDIA Corporation\Display\NvXDSync.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Common Files\AOL\ACS\AOLAcsd.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files\REALTEK\11n USB Wireless LAN Utility\RtWlan.exe
c:\program files\Bandoo\Bandoo.exe
c:\program files\Avira\AntiVir Desktop\avshadow.exe
c:\windows\system32\conhost.exe
c:\program files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-06-21 11:08:34 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2013-06-21 09:08
.
Vor Suchlauf: 19 Verzeichnis(se), 833.143.980.032 Bytes frei
Nach Suchlauf: 26 Verzeichnis(se), 836.005.965.824 Bytes frei
.
- - End Of File - - AD33FB55C64D91C5D7F2CF8A5727E964
A36C5E4F47E84449FF07ED3517B43A31
 Vielen Dank Lotto |
|
21.06.2013, 12:47
| #10 |
| /// the machine /// TB-Ausbilder | Maillaccount gehackt /verschiedene Funde mit Malewarebytes Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST Logfile bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.06.2013, 10:11
| #11 |
| | Maillaccount gehackt /verschiedene Funde mit Malewarebytes Hallo Schrauber, Probleme habe ich schon noch.....  Ich habe den Adv.Cleaner 4 mal laufen lassen. Willst du nur den 4. Text oder alle??? Ich nehm erst mal nur den 4. Text. Code:
ATTFilter # AdwCleaner v2.303 - Datei am 22/06/2013 um 10:58:59 erstellt
# Aktualisiert am 08/06/2013 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (32 bits)
# Benutzer : Antje - ANTJE-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Antje\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Gelöscht mit Neustart : C:\Users\Antje\AppData\Local\Zynga
***** [Registrierungsdatenbank] *****
***** [Internet Browser] *****
-\\ Internet Explorer v10.0.9200.16611
[OK] Die Registrierungsdatenbank ist sauber.
-\\ Google Chrome v27.0.1453.116
Datei : C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] Die Datei ist sauber.
*************************
AdwCleaner[R1].txt - [49781 octets] - [22/06/2013 10:47:17]
AdwCleaner[R2].txt - [49842 octets] - [22/06/2013 10:48:03]
AdwCleaner[R3].txt - [2024 octets] - [22/06/2013 10:51:17]
AdwCleaner[R4].txt - [1524 octets] - [22/06/2013 10:55:08]
AdwCleaner[R5].txt - [1644 octets] - [22/06/2013 10:58:31]
AdwCleaner[S1].txt - [48430 octets] - [22/06/2013 10:48:17]
AdwCleaner[S2].txt - [1765 octets] - [22/06/2013 10:51:55]
AdwCleaner[S3].txt - [1265 octets] - [22/06/2013 10:55:51]
AdwCleaner[S4].txt - [1256 octets] - [22/06/2013 10:58:59]
########## EOF - C:\AdwCleaner[S4].txt - [1316 octets] ##########
Vielen Dank erst mal. Lotto Hier ist das 2 die...Junkware-Datei Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Ultimate x86
Ran by Antje on 22.06.2013 at 11:15:41,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
Successfully stopped: [Service] wcuservice_stc_ie
Successfully deleted: [Service] wcuservice_stc_ie
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{052D3D6A-F147-4C6F-94B4-A74EFD0B1EFD}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{99DD0ACA-BAFF-44B3-BF3A-783C295A6F02}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{AC25F492-5CB4-4447-B298-7D675FD991A1}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\splashtop"
Successfully deleted: [Folder] "C:\ProgramData\w3i"
Successfully deleted: [Folder] "C:\Users\Antje\AppData\Roaming\splashtop"
Successfully deleted: [Folder] "C:\Users\Antje\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Antje\appdata\locallow\datamngr"
Failed to delete: [Folder] "C:\Users\Antje\appdata\locallow\wiseconvert"
Failed to delete: [Folder] "C:\Program Files\splashtop"
Successfully deleted: [Folder] "C:\Program Files\wiseconvert"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.06.2013 at 11:16:46,44
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 Danke Lotto |
|
22.06.2013, 13:17
| #12 |
| /// the machine /// TB-Ausbilder | Maillaccount gehackt /verschiedene Funde mit Malewarebytes Dann noch den Rest bitte. Was denn für Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.06.2013, 20:26
| #13 |
| | Maillaccount gehackt /verschiedene Funde mit Malewarebytes Hallo Schrauber, Ich schicke nun den Log vom Onlinescanner.....das dauert aber lange. Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=1c5331f0964c6f46bbf6aaccf6278421
# engine=14129
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-06-22 02:35:35
# local_time=2013-06-22 04:35:35 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 97 22402 237335025 15189 0
# compatibility_mode=5893 16776574 100 94 46581752 123542926 0 0
# scanned=450528
# found=5
# cleaned=0
# scan_time=18445
sh=AA02C9CB9B955492EC53F0462949310ECD6D4957 ft=1 fh=3b3ba84198807a64 vn="a variant of Win32/Adware.Bandoo.AC application" ac=I fn="C:\Windows.old\Program Files\Bandoo\Bandoo.exe"
sh=D489B0EBFFE0A750AE37BAB0C7DE5BCFA3DC4E90 ft=1 fh=83b498517afc446b vn="a variant of Win32/Adware.Bandoo.AA application" ac=I fn="C:\Windows.old\Program Files\Bandoo\BandooGo.exe"
sh=6F61B50E51E1BD72DE8C59D1684B3363F23E871D ft=1 fh=eba50e31eeb35cdb vn="a variant of Win32/Adware.Bandoo.AB application" ac=I fn="C:\Windows.old\Program Files\Bandoo\BandooUI.exe"
sh=47171F02F1C39CF39C07839993052B6716933508 ft=1 fh=df32bedb4050e8c2 vn="a variant of Win32/Adware.Bandoo.AA application" ac=I fn="C:\Windows.old\Program Files\Bandoo\BndCore.exe"
sh=2F98B8F72EDF8BDDE0F10B50FCB3D310C166FBAA ft=1 fh=c0fd895b27528866 vn="a variant of Win32/Adware.Bandoo.AA application" ac=I fn="C:\Windows.old\Program Files\Bandoo\ExtensionsManager.exe"
 da mach ich immer mal bischen Mist.Danke Bis später. Der Rest folgt noch. |
|
23.06.2013, 08:52
| #14 |
| /// the machine /// TB-Ausbilder | Maillaccount gehackt /verschiedene Funde mit Malewarebytes Ich würd den kompletten Windows.old Ordner, von der alten WIndows Installation löschen. Frisches FRST Log bitte, dann sind wir fertig
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
23.06.2013, 09:03
| #15 |
| | Maillaccount gehackt /verschiedene Funde mit Malewarebytes Hallo Schrauber hier erst mal den security Check. Ich muß das einzeln machen. Den ordner lösche ich. Code:
ATTFilter Results of screen317's Security Check version 0.99.64 Windows 7 Service Pack 1 x86 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! (On Access scanning disabled!) `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 JavaFX 2.1.1 Java 7 Update 9 Java version out of Date! Adobe Flash Player 11.7.700.224 Adobe Reader 10.1.7 Adobe Reader out of Date! Google Chrome 27.0.1453.110 Google Chrome 27.0.1453.116 ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` Danke LG Lotto  Hier das FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-06-2013
Ran by Antje (administrator) on 23-06-2013 10:04:47
Running from C:\Users\Antje\Desktop
Microsoft Windows 7 Ultimate Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(ABBYY) C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(AOL LLC) C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
(FNet Co., Ltd.) C:\Program Files\XFastUsb\XFastUsb.exe
(Creative Technology Ltd) C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe
(Creative Technology Ltd) C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Macrovision Europe Ltd.) C:\Users\Antje\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001
(America Online, Inc.) C:\Program Files\Common Files\aol\1324678810\ee\aolsoftware.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(MAGIX AG) C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
(Splashtop Inc.) C:\Program Files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(1und1 Mail und Media GmbH) C:\Program Files\GMX MailCheck\IE\GMX_MailCheck_Broker.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe
(Splashtop Inc.) C:\Program Files\Splashtop\Splashtop Connect\BackService.exe
(Realtek Semiconductor Corp.) C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWlan.exe
(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
() C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\waol.exe
() C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(AOL, LLC.) C:\Program Files\AOL 9.0 VRa\shellmon.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Creative Labs) C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AOL LLC) C:\Program Files\Common Files\AOL\Topspeed\3.0\aoltpsd3.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r [2145904 2011-02-22] (VIA)
HKLM\...\Run: [XFastUsb] C:\Program Files\XFastUsb\XFastUsb.exe [4942336 2011-12-23] (FNet Co., Ltd.)
HKLM\...\Run: [CTSyncService] C:\Program Files\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe /StartRunKey [1233195 2009-07-08] (Creative Technology Ltd)
HKLM\...\Run: [VolPanel] "C:\Program Files\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r [241789 2009-05-04] (Creative Technology Ltd)
HKLM\...\Run: [UpdReg] C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM\...\Run: [RunDLLEntry] C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry [14848 2009-02-26] (Creative Technology Ltd.)
HKLM\...\Run: [HostManager] C:\Program Files\Common Files\AOL\1324678810\ee\AOLSoftware.exe [50736 2006-09-26] (America Online, Inc.)
HKLM\...\Run: [IMBooster] C:\Program Files\Iminent\IMBooster\imbooster.exe /warmup [x]
HKLM\...\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [STCAgent] "C:\Program Files\Splashtop\Splashtop Connect IE\STCAgent.exe" [x]
HKLM\...\Run: [ZyngaGamesAgent] "C:\Program Files\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe" [841544 2010-11-15] (Splashtop Inc.)
HKLM\...\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [345312 2013-05-07] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [MailCheck IE Broker] "C:\Program Files\GMX MailCheck\IE\GMX_MailCheck_Broker.exe" [1430592 2013-03-15] (1und1 Mail und Media GmbH)
HKLM\...\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2013-05-01] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" [152392 2013-05-31] (Apple Inc.)
HKCU\...\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [20880 2011-07-26] ()
HKCU\...\Run: [AOL Fast Start] "C:\Program Files\AOL 9.0 VRa\AOL.EXE" -b [50480 2007-06-21] (AOL, LLC.)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU SearchScopes: DefaultScope {6804654E-DB4B-46FC-A842-8D8B48344DED} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {5D422421-30DD-42B3-826E-9224F52BFC47} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {6804654E-DB4B-46FC-A842-8D8B48344DED} URL = hxxp://go.gmx.net/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {6D0FF7A0-C6C5-4a24-8F09-C074ED2B20A0} URL = hxxp://de.search.yahoo.com/search?p={searchterms}&ei=UTF-8&fr=w3i&type=W3i_DS,136,0_0,Search,20120101,16987,0,8,0
SearchScopes: HKCU - {7D09D9D4-CEDB-47B3-8779-584CFD2BABB0} URL = hxxp://go.web.de/tb/ie_searchplugin/?su={searchTerms}
SearchScopes: HKCU - {9DDD17F4-2BF7-4662-B5A0-92270A4C54F7} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag= interactivemesuche21&index=blended&linkCode=ur2&camp=1638&creative=6742
SearchScopes: HKCU - {B442213A-49FA-404C-8A15-326E8709045B} URL = hxxp://suche.t-online.de/fastcgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&d ia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wikitab_internet_std&q={searchTerms}&br=ie7-toi
SearchScopes: HKCU - {CA25764C-9109-4C88-9615-DCF100F14585} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie7-toi
SearchScopes: HKCU - {E8B82BA8-923F-4120-B179-4144137AB04D} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Video downloader - {77BEC163-D389-42c1-91A4-C758846296A5} - C:\Program Files\Video downloader\Extension32.dll No File
BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (AOL LLC)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: GMX MailCheck BHO - {BF42D4A8-016E-4fcd-B1EB-837659FD77C6} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 4.0\aoltb.dll (AOL LLC)
Toolbar: HKLM - GMX MailCheck - {C424171E-592A-415a-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU -No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU -GMX MailCheck - {C424171E-592A-415A-9EB1-DFD6D95D3530} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
DPF: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: gmx - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - C:\Program Files\GMX MailCheck\IE\GMX_MailCheck.dll (1und1 Mail und Media GmbH)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL [2210608 2006-10-27] (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Chrome:
=======
CHR Extension: () - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojdbdbhbbkpenbmlejjngphokgnp\7.17.2.34525_0
CHR Extension: (Video downloader) - C:\Users\Antje\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk\2.0.0.430_0
========================== Services (Whitelisted) =================
R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [86752 2013-03-31] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [110816 2013-03-31] (Avira Operations GmbH & Co. KG)
R2 AOL ACS; C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe [46640 2006-10-23] (AOL LLC)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-12-23] (Creative Labs)
S2 Dnscache; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 Fabs; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG)
S3 FirebirdServerMAGIXInstance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2008-08-07] (MAGIX®)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Realtek11nSU; C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)
R2 SCBackService; C:\Program Files\Splashtop\Splashtop Connect\BackService.exe [477000 2010-11-15] (Splashtop Inc.)
R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2011-12-23] (Creative Labs)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
R2 Update-Service; C:\Windows\System32\UpdSvc.dll [114000 2011-12-24] (Joosoft.com GmbH)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-02-17] (VIA Technologies, Inc.)
S2 SmartViewService; C:\Program Files\DeviceVM\SmartView\SmartViewService.exe [x]
==================== Drivers (Whitelisted) ====================
R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-03-31] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-03-31] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-31] (Avira Operations GmbH & Co. KG)
R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [22176 2012-01-18] (Logitech Inc.)
S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [29248 2012-04-19] (FNet Co., Ltd.)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [14656 2011-12-23] (FNet Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [67456 2011-04-13] (Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [161024 2011-04-13] (Renesas Electronics Corporation)
R3 RTL8187B; C:\Windows\System32\DRIVERS\wg111v3.sys [376832 2009-11-18] (NETGEAR Inc. )
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1801328 2011-02-17] (VIA Technologies, Inc.)
R3 wanatw; C:\Windows\System32\DRIVERS\wanatw4.sys [33588 2006-11-30] (America Online, Inc.)
S3 catchme; \??\C:\Users\Antje\AppData\Local\Temp\catchme.sys [x]
S3 MSICDSetup; \??\D:\CDriver.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-06-23 10:04 - 2013-06-23 10:04 - 01369655 ____A (Farbar) C:\Users\Antje\Desktop\FRST.exe
2013-06-22 21:29 - 2013-06-22 21:29 - 00890839 ____A C:\Users\Antje\Desktop\SecurityCheck.exe
2013-06-22 11:26 - 2013-06-22 11:26 - 00000000 ____D C:\Program Files\ESET
2013-06-22 11:25 - 2013-06-22 11:25 - 02347384 ____A (ESET) C:\Users\Antje\Desktop\esetsmartinstaller_enu.exe
2013-06-22 11:16 - 2013-06-22 11:16 - 00001924 ____A C:\Users\Antje\Desktop\JRT.txt
2013-06-22 11:13 - 2013-06-22 11:13 - 00000000 ____D C:\Windows\ERUNT
2013-06-22 11:13 - 2013-06-22 11:13 - 00000000 ____D C:\JRT
2013-06-22 11:03 - 2013-06-22 11:03 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Antje\Desktop\JRT.exe
2013-06-22 10:58 - 2013-06-22 10:59 - 00001385 ____A C:\AdwCleaner[S4].txt
2013-06-22 10:58 - 2013-06-22 10:58 - 00001644 ____A C:\AdwCleaner[R5].txt
2013-06-22 10:55 - 2013-06-22 10:56 - 00001265 ____A C:\AdwCleaner[S3].txt
2013-06-22 10:55 - 2013-06-22 10:55 - 00001524 ____A C:\AdwCleaner[R4].txt
2013-06-22 10:52 - 2013-06-22 10:59 - 00000300 ____A C:\Windows\DeleteOnReboot.bat
2013-06-22 10:51 - 2013-06-22 10:52 - 00001765 ____A C:\AdwCleaner[S2].txt
2013-06-22 10:51 - 2013-06-22 10:51 - 00002024 ____A C:\AdwCleaner[R3].txt
2013-06-22 10:48 - 2013-06-22 10:48 - 00049842 ____A C:\AdwCleaner[R2].txt
2013-06-22 10:48 - 2013-06-22 10:48 - 00048430 ____A C:\AdwCleaner[S1].txt
2013-06-22 10:47 - 2013-06-22 10:47 - 00049781 ____A C:\AdwCleaner[R1].txt
2013-06-22 10:45 - 2013-06-22 10:45 - 00648201 ____A C:\Users\Antje\Desktop\adwcleaner.exe
2013-06-21 11:08 - 2013-06-21 11:08 - 00026963 ____A C:\ComboFix.txt
2013-06-21 10:46 - 2013-06-21 11:08 - 00000000 ____D C:\Qoobox
2013-06-21 10:46 - 2013-06-21 11:06 - 00000000 ____D C:\Windows\erdnt
2013-06-21 10:46 - 2011-06-26 08:45 - 00256000 ____A C:\Windows\PEV.exe
2013-06-21 10:46 - 2010-11-07 19:20 - 00208896 ____A C:\Windows\MBR.exe
2013-06-21 10:46 - 2009-04-20 06:56 - 00060416 ____A (NirSoft) C:\Windows\NIRCMD.exe
2013-06-21 10:46 - 2000-08-31 02:00 - 00518144 ____A (SteelWerX) C:\Windows\SWREG.exe
2013-06-21 10:46 - 2000-08-31 02:00 - 00406528 ____A (SteelWerX) C:\Windows\SWSC.exe
2013-06-21 10:46 - 2000-08-31 02:00 - 00098816 ____A C:\Windows\sed.exe
2013-06-21 10:46 - 2000-08-31 02:00 - 00080412 ____A C:\Windows\grep.exe
2013-06-21 10:46 - 2000-08-31 02:00 - 00068096 ____A C:\Windows\zip.exe
2013-06-21 10:42 - 2013-06-21 10:42 - 05081922 ____R (Swearware) C:\Users\Antje\Desktop\ComboFix.exe
2013-06-21 08:46 - 2013-06-21 08:46 - 00000000 ____A C:\Users\Antje\Downloads\setup.exe.p0axl5s.partial
2013-06-19 15:33 - 2013-06-19 15:33 - 00000000 ____D C:\FRST
2013-06-18 10:57 - 2013-06-18 10:57 - 00000000 ____D C:\ProgramData\SMR322
2013-06-18 10:56 - 2013-06-20 10:42 - 00000000 ____D C:\Users\Antje\AppData\Local\NPE
2013-06-17 09:12 - 2013-06-17 09:12 - 00001753 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-17 09:11 - 2013-06-17 09:12 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-06-17 09:11 - 2013-06-17 09:12 - 00000000 ____D C:\Program Files\iTunes
2013-06-17 09:11 - 2013-06-17 09:11 - 00000000 ____D C:\Program Files\iPod
2013-06-17 09:06 - 2013-06-17 09:06 - 00001815 ____A C:\Users\Public\Desktop\QuickTime Player.lnk
2013-06-17 09:06 - 2013-06-17 09:06 - 00000000 ____D C:\Program Files\QuickTime
2013-06-13 09:51 - 2013-06-13 09:51 - 00001071 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Malwarebytes
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-06-13 09:51 - 2013-04-04 14:50 - 00022856 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys
2013-06-12 11:26 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 11:26 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 11:26 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 11:26 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 11:26 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 11:26 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 11:24 - 2013-05-17 03:26 - 00042496 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 11:24 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 11:24 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 11:24 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 08:43 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 08:43 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 08:43 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 08:43 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 08:43 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 08:43 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 08:43 - 2013-05-08 07:38 - 01293672 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 08:43 - 2013-05-06 07:06 - 03968872 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2013-06-12 08:43 - 2013-05-06 07:06 - 03913576 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-06-12 08:43 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 08:43 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-12 08:43 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\ProgramData\UUdb
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\ProgramData\1&1 Mail & Media GmbH
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\Program Files\GMX MailCheck
2013-06-06 10:30 - 2013-06-06 10:32 - 00002054 ____A C:\Users\Antje\Desktop\Amazon.lnk
2013-06-06 10:30 - 2013-06-06 10:32 - 00002048 ____A C:\Users\Antje\Desktop\GMX.lnk
2013-06-06 10:30 - 2013-06-06 10:32 - 00000000 ____D C:\Program Files\1und1Softwareaktualisierung
2013-05-31 09:49 - 2013-06-16 16:06 - 00000000 ____D C:\Users\Antje\Desktop\Garten1
==================== One Month Modified Files and Folders ========
2013-06-23 10:04 - 2013-06-23 10:04 - 01369655 ____A (Farbar) C:\Users\Antje\Desktop\FRST.exe
2013-06-23 09:58 - 2012-04-03 07:55 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-06-23 09:58 - 2012-04-03 07:55 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-23 09:58 - 2011-12-24 00:54 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-06-23 09:13 - 2012-09-09 21:48 - 00001096 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-23 07:54 - 2011-12-23 22:55 - 01498506 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-23 07:53 - 2009-07-14 06:34 - 00014016 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-23 07:53 - 2009-07-14 06:34 - 00014016 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-23 07:51 - 2011-12-23 22:41 - 01540864 ____A C:\Windows\WindowsUpdate.log
2013-06-23 07:47 - 2012-09-09 21:48 - 00001092 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-23 07:47 - 2009-07-14 06:53 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-23 07:47 - 2009-07-14 06:39 - 00129567 ____A C:\Windows\setupact.log
2013-06-22 21:29 - 2013-06-22 21:29 - 00890839 ____A C:\Users\Antje\Desktop\SecurityCheck.exe
2013-06-22 11:26 - 2013-06-22 11:26 - 00000000 ____D C:\Program Files\ESET
2013-06-22 11:25 - 2013-06-22 11:25 - 02347384 ____A (ESET) C:\Users\Antje\Desktop\esetsmartinstaller_enu.exe
2013-06-22 11:16 - 2013-06-22 11:16 - 00001924 ____A C:\Users\Antje\Desktop\JRT.txt
2013-06-22 11:16 - 2011-12-23 23:37 - 00000000 ____D C:\Program Files\Splashtop
2013-06-22 11:13 - 2013-06-22 11:13 - 00000000 ____D C:\Windows\ERUNT
2013-06-22 11:13 - 2013-06-22 11:13 - 00000000 ____D C:\JRT
2013-06-22 11:03 - 2013-06-22 11:03 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Antje\Desktop\JRT.exe
2013-06-22 10:59 - 2013-06-22 10:58 - 00001385 ____A C:\AdwCleaner[S4].txt
2013-06-22 10:59 - 2013-06-22 10:52 - 00000300 ____A C:\Windows\DeleteOnReboot.bat
2013-06-22 10:58 - 2013-06-22 10:58 - 00001644 ____A C:\AdwCleaner[R5].txt
2013-06-22 10:56 - 2013-06-22 10:55 - 00001265 ____A C:\AdwCleaner[S3].txt
2013-06-22 10:55 - 2013-06-22 10:55 - 00001524 ____A C:\AdwCleaner[R4].txt
2013-06-22 10:52 - 2013-06-22 10:51 - 00001765 ____A C:\AdwCleaner[S2].txt
2013-06-22 10:51 - 2013-06-22 10:51 - 00002024 ____A C:\AdwCleaner[R3].txt
2013-06-22 10:48 - 2013-06-22 10:48 - 00049842 ____A C:\AdwCleaner[R2].txt
2013-06-22 10:48 - 2013-06-22 10:48 - 00048430 ____A C:\AdwCleaner[S1].txt
2013-06-22 10:47 - 2013-06-22 10:47 - 00049781 ____A C:\AdwCleaner[R1].txt
2013-06-22 10:45 - 2013-06-22 10:45 - 00648201 ____A C:\Users\Antje\Desktop\adwcleaner.exe
2013-06-21 11:08 - 2013-06-21 11:08 - 00026963 ____A C:\ComboFix.txt
2013-06-21 11:08 - 2013-06-21 10:46 - 00000000 ____D C:\Qoobox
2013-06-21 11:08 - 2009-07-14 04:37 - 00000000 ___RD C:\users\Public
2013-06-21 11:06 - 2013-06-21 10:46 - 00000000 ____D C:\Windows\erdnt
2013-06-21 11:01 - 2009-07-14 04:04 - 00000215 ____A C:\Windows\system.ini
2013-06-21 11:00 - 2011-12-23 23:19 - 00582572 ____A C:\Windows\PFRO.log
2013-06-21 10:42 - 2013-06-21 10:42 - 05081922 ____R (Swearware) C:\Users\Antje\Desktop\ComboFix.exe
2013-06-21 09:13 - 2012-09-19 08:47 - 00000000 ____D C:\Users\Antje\Desktop\Neuer Ordner
2013-06-21 08:46 - 2013-06-21 08:46 - 00000000 ____A C:\Users\Antje\Downloads\setup.exe.p0axl5s.partial
2013-06-20 10:42 - 2013-06-18 10:56 - 00000000 ____D C:\Users\Antje\AppData\Local\NPE
2013-06-20 09:15 - 2012-09-09 21:49 - 00002129 ____A C:\Users\Public\Desktop\Google Chrome.lnk
2013-06-20 08:31 - 2013-02-19 10:45 - 00000000 ____D C:\Users\Antje\AppData\Roaming\elsterformular
2013-06-20 08:31 - 2013-02-19 10:44 - 00000000 ____D C:\ProgramData\elsterformular
2013-06-20 08:31 - 2011-12-30 22:44 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Dropbox
2013-06-20 08:30 - 2012-11-11 18:13 - 00000000 ____D C:\Program Files\SlySoft
2013-06-19 20:57 - 2012-04-25 11:06 - 00000000 ____D C:\Users\Antje\Desktop\Neuer Ordner (3)
2013-06-19 15:33 - 2013-06-19 15:33 - 00000000 ____D C:\FRST
2013-06-18 13:39 - 2011-12-24 01:21 - 00000000 ____D C:\Program Files\MAGIX
2013-06-18 12:00 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-06-18 10:57 - 2013-06-18 10:57 - 00000000 ____D C:\ProgramData\SMR322
2013-06-18 10:56 - 2011-12-23 23:21 - 00000000 ____D C:\ProgramData\Norton
2013-06-18 10:47 - 2012-12-16 17:51 - 00000000 ____D C:\Users\Public\Documents\tmp
2013-06-17 21:02 - 2011-12-24 01:04 - 00000000 ____D C:\Users\Antje\Desktop\Musikstudio17
2013-06-17 21:00 - 2011-12-25 19:37 - 00000000 ____D C:\Users\Antje\Desktop\Gitarre
2013-06-17 09:12 - 2013-06-17 09:12 - 00001753 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-17 09:12 - 2013-06-17 09:11 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-06-17 09:12 - 2013-06-17 09:11 - 00000000 ____D C:\Program Files\iTunes
2013-06-17 09:11 - 2013-06-17 09:11 - 00000000 ____D C:\Program Files\iPod
2013-06-17 09:11 - 2012-09-14 17:42 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-17 09:06 - 2013-06-17 09:06 - 00001815 ____A C:\Users\Public\Desktop\QuickTime Player.lnk
2013-06-17 09:06 - 2013-06-17 09:06 - 00000000 ____D C:\Program Files\QuickTime
2013-06-16 16:06 - 2013-05-31 09:49 - 00000000 ____D C:\Users\Antje\Desktop\Garten1
2013-06-16 09:48 - 2011-12-29 16:18 - 00000000 ____D C:\Users\Antje\AppData\Local\CrashDumps
2013-06-14 09:27 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-06-13 21:35 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\SchCache
2013-06-13 21:35 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Help
2013-06-13 09:51 - 2013-06-13 09:51 - 00001071 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\Users\Antje\AppData\Roaming\Malwarebytes
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-13 09:51 - 2013-06-13 09:51 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-06-12 18:07 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\System32\de-DE
2013-06-12 11:24 - 2009-10-14 04:21 - 73381792 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-08 13:42 - 2013-06-12 11:26 - 01141248 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 13:40 - 2013-06-12 11:26 - 14327808 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 13:40 - 2013-06-12 11:26 - 13760512 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 13:40 - 2013-06-12 11:26 - 02046976 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 13:40 - 2013-06-12 11:26 - 00391168 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 13:13 - 2013-06-12 11:26 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\ProgramData\UUdb
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\ProgramData\1&1 Mail & Media GmbH
2013-06-06 10:32 - 2013-06-06 10:32 - 00000000 ____D C:\Program Files\GMX MailCheck
2013-06-06 10:32 - 2013-06-06 10:30 - 00002054 ____A C:\Users\Antje\Desktop\Amazon.lnk
2013-06-06 10:32 - 2013-06-06 10:30 - 00002048 ____A C:\Users\Antje\Desktop\GMX.lnk
2013-06-06 10:32 - 2013-06-06 10:30 - 00000000 ____D C:\Program Files\1und1Softwareaktualisierung
2013-05-31 09:44 - 2012-09-04 10:46 - 00000000 ____D C:\Users\Antje\Desktop\Bilder von Christian
2013-05-26 09:35 - 2009-07-14 06:53 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-06-23 08:18
==================== End Of Log ============================
--- --- --- Das war jetzt alles. Vielen Dank für deine Supergute Hilfe. Und weiterhin alles Gute. Noch eine kleine Frage? Die programme zum suchen der Viruse auf dem Desktop....muß man die alle löschen?? Lg Lotto |
|
| Themen zu Maillaccount gehackt /verschiedene Funde mit Malewarebytes |
| administrator, adware.fakeinstaller, adware.installcore, anti-malware, besser, dateien, folge, hallo zusammen, install.exe, maleware, pup.offerbundler.st, pup.software.updater, quarantäne, swvupdater, test, uninstall.exe, updater.exe, version, windows.old |
Linear-Darstellung
