| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Lauter Lüfter + Langsamer PCWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
03.07.2013, 13:17
| #1 |
| |  Lauter Lüfter + Langsamer PC Seit gut 4 Tagen ist mein Lüfter sehr laut. Heute ist das Laptop dann abgestürzt, seitdem hängt sich das Laptop immer auf, wenn ich eine Anwendung öffnen will. Ich muss das Laptop, dann radikal ausschalten ( Ein/Aus Knopf solange drücken, bis er aus ist). Im abgesicherten Modus läuft alles 1a, nur der Lüfter ist immer noch sehr laut, doch ich kann Anwendungen, etc. öffnen, ohne, dass sich das Laptop aufhängt. Deshalb habe ich mal im abgesicherten Modus Malwarebytes drüber laufen lassen, der hat 19 Viren gefunden, die ich dann auch mit dem Programm entfernt habe. Trotzdem besteht das Problem immer noch. Vor rund 5 Monaten hatte ich schon mal mit Viren zu tun, mein Onkel hat diese aber angeblich entfernt. Ich glaube eher, dass er sie nur oberflächlich entfernt hat und diese jetzt wieder "auferstanden" sind. Der PC erreicht im Schnitt 60°C. Über ne Lösung für das Problem würde ich mich sehr freuen. Technische Daten meines Laptops: Satellite C670-19E Windows 7 i5 Prozessor @2,5GHz |
|
03.07.2013, 13:36
| #2 |
| /// the machine /// TB-Ausbilder    |  Lauter Lüfter + Langsamer PC Hi,
__________________Systemscan mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)
__________________ |
|
03.07.2013, 13:47
| #3 |
| | Lauter Lüfter + Langsamer PC FRST Logfile:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-07-2013 01 Ran by patrice (administrator) on 03-07-2013 14:44:57 Running from C:\Users\patrice\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Safe Mode (with Networking) ==================== Processes (Whitelisted) ================= (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [TosNC] %ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe [597928 2011-03-03] (TOSHIBA Corporation) HKLM\...\Run: [TosReelTimeMonitor] %ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2010-12-14] (TOSHIBA Corporation) HKLM\...\Run: [Toshiba TEMPRO] C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH) HKLM\...\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE [566696 2011-03-02] (TOSHIBA Corporation) HKLM\...\Run: [TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe [973176 2010-12-15] (TOSHIBA Corporation) HKLM\...\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s [11775592 2011-01-12] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 [2186856 2011-01-10] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-03] (Synaptics Incorporated) HKLM\...\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710040 2010-12-08] (TOSHIBA Corporation) HKLM\...\Run: [TosVolRegulator] C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation) HKLM\...\Run: [Toshiba Registration] C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-08-31] (Toshiba Europe GmbH) HKLM\...\Run: [XboxStat] "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun [825184 2009-10-01] (Microsoft Corporation) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKLM-x32\...\Runonce: [ Malwarebytes Anti-Malware (cleanup)] rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [x] HKCU\...\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STAR [846936 2011-05-16] (TOSHIBA) HKCU\...\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent [x] HKCU\...\Run: [FTProcessPriorityManager] C:\Program Files (x86)\FT Software\FT Process Priority Manager\FT Process Priority Manager.exe -autorun [x] HKCU\...\Run: [ABBYY Screenshot Reader Bonus] "C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint\Bonus.ScreenshotReader.exe" -autorun [x] HKCU\...\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [3672640 2013-03-14] (Disc Soft Ltd) HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [NBAgent] "c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart [1409424 2011-06-29] (Nero AG) HKLM-x32\...\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START [83336 2009-07-22] (TOSHIBA CORPORATION) HKLM-x32\...\Run: [ToshibaServiceStation] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60 [1294712 2010-11-29] (TOSHIBA Corporation) HKLM-x32\...\Run: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe" [x] HKLM-x32\...\Run: [PrivitizeVPN] C:\Program Files (x86)\PrivitizeVPN\PrivitizeVPN.exe /autorun [x] HKLM-x32\...\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-26] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe" [1058400 2011-10-31] (SEIKO EPSON CORPORATION) HKU\Default\...\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STAR [846936 2011-05-16] (TOSHIBA) HKU\Default User\...\Run: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STAR [846936 2011-05-16] (TOSHIBA) Startup: C:\ProgramData\Start Menu\Programs\Startup\Toshiba Places Icon Utility.lnk ShortcutTarget: Toshiba Places Icon Utility.lnk -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (Toshiba) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\patrice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ URLSearchHook: (No Name) - {40c3cc16-7269-4b32-9531-17f2950fb06f} - No File HKCU SearchScopes: DefaultScope {A09000CC-8064-4BB0-BF80-9E4AEF78CD36} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&AF=109958&babsrc=SP_ss&mntrId=b8f7b877000000000000beb70d4fcb1e SearchScopes: HKCU - {A09000CC-8064-4BB0-BF80-9E4AEF78CD36} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: WOT - {9E571C81-21E7-496B-9E6B-127E60263022} - C:\Users\patrice\AppData\LocalLow\WOT\IE\WOT.dll (WOT Services Oy) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>) BHO-x32: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll No File Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION) Toolbar: HKLM-x32 - No Name - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - No File Toolbar: HKLM-x32 - No Name - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No File Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKCU - No Name - {40C3CC16-7269-4B32-9531-17F2950FB06F} - No File Toolbar: HKCU - No Name - {DFEFCDEE-CF1A-4FC8-88AD-129872198372} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Winsock: Catalog5 01 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Winsock: Catalog5 05 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll" Winsock: Catalog5-x64 01 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll" Winsock: Catalog5-x64 05 mswsock.dll File Not found (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll" Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\patrice\AppData\Roaming\Mozilla\Firefox\Profiles\uxjy5jdd.default FF user.js: detected! => C:\Users\patrice\AppData\Roaming\Mozilla\Firefox\Profiles\uxjy5jdd.default\user.js FF SearchEngine: Google FF Homepage: hxxp://www.google.de/webhp?rls=ig FF Keyword.URL: hxxp://search.sweetim.com/search.asp?src=2&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\patrice\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Extension: info - C:\Users\patrice\AppData\Roaming\Mozilla\Firefox\Profiles\uxjy5jdd.default\Extensions\info@convert2mp3.net.xpi FF Extension: No Name - C:\Users\patrice\AppData\Roaming\Mozilla\Firefox\Profiles\uxjy5jdd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: QuickStores-Toolbar - C:\Program Files (x86)\Mozilla Firefox\extensions\quickstores@quickstores.de FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} Chrome: ======= CHR HomePage: hxxp://www.google.de/ CHR RestoreOnStartup: "hxxp://www.google.de/" CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Unity Player) - C:\Users\patrice\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) CHR Extension: (ProxTube) - C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.2.3_0 CHR Extension: (Google Docs) - C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (convert2mp3.net Online Video Converter) - C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhklmhadmpdfcgimodhdapodbllnjjll\1.7_0 CHR Extension: (YouTube) - C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Adblock Plus) - C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.4.1_0 CHR Extension: (Google Search) - C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (DvdVideoSoft Free Youtube Download) - C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.0.0_0 CHR Extension: (WOT) - C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\nphjeokkkbngjpiofnfpnafjeofjomfb\2.11.7_0 CHR Extension: (Gmail) - C:\Users\patrice\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 ==================== Services (Whitelisted) ================= S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-10] (Adobe Systems) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [371768 2013-06-26] (Avira Operations GmbH & Co. KG) S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-26] (Avira Operations GmbH & Co. KG) S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-26] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-06-26] (Avira Operations GmbH & Co. KG) S2 Capture Device Service; C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe [200704 2006-08-11] (InterVideo Inc.) S2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation) S2 GFNEXSrv; C:\Windows\System32\GFNEXSrv.exe [162824 2010-09-09] () S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2012-06-24] () S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH) S2 WOTUpdater; C:\Users\patrice\AppData\LocalLow\WOT\IE\WOTUpdater.exe [18432 2012-01-12] () ==================== Drivers (Whitelisted) ==================== S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-05-25] (Avira Operations GmbH & Co. KG) S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-05-25] (Avira Operations GmbH & Co. KG) S1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-05-25] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-25] (DT Soft Ltd) S3 libusb0; C:\Windows\SysWow64\drivers\libusb0.sys [33792 2005-03-09] () S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 ssudobex; C:\Windows\System32\DRIVERS\ssudobex.sys [203320 2012-02-24] (DEVGURU Co., LTD.(www.devguru.co.kr)) S3 libusb0; system32\drivers\libusb0.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-03 14:44 - 2013-07-03 14:44 - 01933608 ____A (Farbar) C:\Users\patrice\Desktop\FRST64.exe 2013-07-03 14:44 - 2013-07-03 14:44 - 00000000 ____D C:\FRST 2013-07-03 14:37 - 2013-07-03 14:37 - 00151192 ____A C:\Users\patrice\Desktop\gf 2013-07-03 14:36 - 2013-07-03 14:36 - 00151192 ____A C:\Users\patrice\Desktop\f 2013-07-03 14:36 - 2013-07-03 14:36 - 00151192 ____A C:\Users\patrice\Desktop\bookmarks-2013-07-03.json 2013-07-03 14:25 - 2013-07-03 14:25 - 1654148711 ____A C:\Users\patrice\Desktop\X15-65741.iso.crdownload 2013-07-03 12:48 - 2013-07-03 12:48 - 20896392 ____A (Microsoft Corporation) C:\Users\patrice\Desktop\Windows-KB890830-x64-V5.1.exe 2013-07-03 12:46 - 2013-07-03 12:46 - 00002243 ____A C:\Windows\epplauncher.mif 2013-07-03 12:42 - 2013-07-03 12:42 - 00388608 ____A (Trend Micro Inc.) C:\Users\patrice\Desktop\HiJackThis204.exe 2013-07-03 12:15 - 2013-07-03 12:15 - 00001076 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-07-03 12:15 - 2013-04-04 14:50 - 00025928 ____A (Malwarebytes Corporation) C:\Windows\System32\Drivers\mbam.sys 2013-07-03 09:31 - 2013-07-03 09:31 - 00000000 ____D C:\Users\patrice\AppData\Local\{CC757823-267F-4ED9-AB30-B481466AB354} 2013-07-02 11:54 - 2013-07-02 11:54 - 00000000 ____D C:\Users\patrice\AppData\Local\{CA3DFB7A-7FBF-40F1-847D-2F76E8F1F90A} 2013-07-02 11:02 - 2013-07-02 11:02 - 00000937 ____A C:\Users\Public\Desktop\CPUID HWMonitor.lnk 2013-07-02 11:02 - 2013-07-02 11:02 - 00000876 ____A C:\Users\Public\Desktop\CPUID CPU-Z.lnk 2013-07-02 11:02 - 2013-07-02 11:02 - 00000000 ____D C:\Program Files\CPUID 2013-06-28 08:36 - 2013-07-03 12:15 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-06-26 15:10 - 2013-06-26 15:10 - 00000000 ____D C:\Users\patrice\Documents\Criterion Games 2013-06-26 13:26 - 2013-06-26 13:26 - 00000000 ____D C:\ProgramData\SystemRequirementsLab 2013-06-25 14:59 - 2013-06-25 15:02 - 00283200 ____A (DT Soft Ltd) C:\Windows\System32\Drivers\dtsoftbus01.sys 2013-06-25 14:59 - 2013-06-25 14:59 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite 2013-06-23 18:18 - 2013-06-23 18:18 - 00000000 ____D C:\m-r-software 2013-06-21 14:43 - 2013-06-21 14:44 - 00000000 ____D C:\Program Files (x86)\Alarm für Cobra 11 - Das Syndikat - DEMO 2013-06-18 14:00 - 2013-06-18 14:00 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2013-06-18 13:58 - 2013-06-18 13:58 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2013-06-12 15:25 - 2013-05-17 06:05 - 17824768 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-12 15:25 - 2013-05-17 05:27 - 10926080 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-12 15:25 - 2013-05-17 05:09 - 02312704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-12 15:25 - 2013-05-17 05:02 - 01392128 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-12 15:25 - 2013-05-17 05:02 - 01346560 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-12 15:25 - 2013-05-17 05:01 - 01494528 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl 2013-06-12 15:25 - 2013-05-17 05:00 - 00237056 ____A (Microsoft Corporation) C:\Windows\System32\url.dll 2013-06-12 15:25 - 2013-05-17 04:58 - 00085504 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-06-12 15:25 - 2013-05-17 04:56 - 00599040 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll 2013-06-12 15:25 - 2013-05-17 04:56 - 00173056 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe 2013-06-12 15:25 - 2013-05-17 04:55 - 00816640 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-12 15:25 - 2013-05-17 04:54 - 00729088 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-12 15:25 - 2013-05-17 04:53 - 02147840 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-12 15:25 - 2013-05-17 04:51 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-12 15:25 - 2013-05-17 04:51 - 00096768 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll 2013-06-12 15:25 - 2013-05-17 04:46 - 00248320 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-12 15:25 - 2013-05-17 01:08 - 12329984 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-12 15:25 - 2013-05-17 00:49 - 09738752 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-12 15:25 - 2013-05-17 00:39 - 01800704 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-12 15:25 - 2013-05-17 00:28 - 01129472 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-12 15:25 - 2013-05-17 00:28 - 01104384 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-12 15:25 - 2013-05-17 00:27 - 01427968 ____A (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-06-12 15:25 - 2013-05-17 00:26 - 00231936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-06-12 15:25 - 2013-05-17 00:23 - 00065024 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-06-12 15:25 - 2013-05-17 00:21 - 00717824 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-12 15:25 - 2013-05-17 00:21 - 00142848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-06-12 15:25 - 2013-05-17 00:20 - 00420864 ____A (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-06-12 15:25 - 2013-05-17 00:19 - 00607744 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-12 15:25 - 2013-05-17 00:17 - 01796096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-12 15:25 - 2013-05-17 00:17 - 00073216 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-06-12 15:25 - 2013-05-17 00:16 - 02382848 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-12 15:25 - 2013-05-17 00:12 - 00176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-12 13:12 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2013-06-12 13:12 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2013-06-12 13:12 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2013-06-12 13:12 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll 2013-06-12 13:12 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-06-12 13:12 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-06-12 13:12 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-06-12 13:12 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe 2013-06-12 13:12 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-06-12 13:12 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2013-06-12 13:12 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll 2013-06-12 13:12 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-06-12 13:12 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-06-12 13:12 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll 2013-06-12 13:12 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-06-12 13:12 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-12 13:12 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-12 13:12 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-12 13:12 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-10 17:42 - 2013-06-10 17:42 - 00000000 ____D C:\Users\patrice\AppData\LocalGoogle 2013-06-10 13:26 - 2013-06-10 13:26 - 00000000 ____D C:\Users\patrice\AppData\Local\{F559E742-4293-4767-AECC-CF15B6E21BAD} 2013-06-03 20:32 - 2013-06-03 20:32 - 00000000 ____D C:\Users\patrice\AppData\Local\{02E59A73-0C97-4B50-A62E-4ED6A7EA78BD} ==================== One Month Modified Files and Folders ======= 2013-07-03 14:44 - 2013-07-03 14:44 - 01933608 ____A (Farbar) C:\Users\patrice\Desktop\FRST64.exe 2013-07-03 14:44 - 2013-07-03 14:44 - 00000000 ____D C:\FRST 2013-07-03 14:40 - 2011-02-11 10:21 - 00699536 ____A C:\Windows\System32\perfh007.dat 2013-07-03 14:40 - 2011-02-11 10:21 - 00149418 ____A C:\Windows\System32\perfc007.dat 2013-07-03 14:40 - 2009-07-14 07:13 - 01620796 ____A C:\Windows\System32\PerfStringBackup.INI 2013-07-03 14:37 - 2013-07-03 14:37 - 00151192 ____A C:\Users\patrice\Desktop\gf 2013-07-03 14:37 - 2013-05-25 22:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-07-03 14:36 - 2013-07-03 14:36 - 00151192 ____A C:\Users\patrice\Desktop\f 2013-07-03 14:36 - 2013-07-03 14:36 - 00151192 ____A C:\Users\patrice\Desktop\bookmarks-2013-07-03.json 2013-07-03 14:25 - 2013-07-03 14:25 - 1654148711 ____A C:\Users\patrice\Desktop\X15-65741.iso.crdownload 2013-07-03 13:38 - 2011-08-31 11:13 - 00001120 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-07-03 13:37 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-07-03 13:37 - 2009-07-14 06:51 - 00160490 ____A C:\Windows\setupact.log 2013-07-03 12:48 - 2013-07-03 12:48 - 20896392 ____A (Microsoft Corporation) C:\Users\patrice\Desktop\Windows-KB890830-x64-V5.1.exe 2013-07-03 12:46 - 2013-07-03 12:46 - 00002243 ____A C:\Windows\epplauncher.mif 2013-07-03 12:45 - 2012-02-06 19:41 - 01687086 ____A C:\Windows\WindowsUpdate.log 2013-07-03 12:42 - 2013-07-03 12:42 - 00388608 ____A (Trend Micro Inc.) C:\Users\patrice\Desktop\HiJackThis204.exe 2013-07-03 12:24 - 2010-11-21 05:47 - 00402354 ____A C:\Windows\PFRO.log 2013-07-03 12:15 - 2013-07-03 12:15 - 00001076 ____A C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-07-03 12:15 - 2013-06-28 08:36 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-07-03 12:01 - 2012-07-13 15:28 - 00000000 ____D C:\Program Files (x86)\Origin 2013-07-03 11:47 - 2009-07-14 06:45 - 00024912 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-03 11:47 - 2009-07-14 06:45 - 00024912 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-03 11:34 - 2011-08-31 11:13 - 00001124 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-07-03 10:55 - 2012-06-25 21:20 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-03 09:31 - 2013-07-03 09:31 - 00000000 ____D C:\Users\patrice\AppData\Local\{CC757823-267F-4ED9-AB30-B481466AB354} 2013-07-02 16:16 - 2013-05-25 19:54 - 00000000 ____D C:\Users\patrice\Desktop\hh 2013-07-02 15:00 - 2012-04-14 12:22 - 00000000 ____D C:\Users\patrice\AppData\Roaming\SoftGrid Client 2013-07-02 13:58 - 2012-09-11 13:05 - 00000000 ____D C:\Users\patrice\Documents\FIFA 13 2013-07-02 11:54 - 2013-07-02 11:54 - 00000000 ____D C:\Users\patrice\AppData\Local\{CA3DFB7A-7FBF-40F1-847D-2F76E8F1F90A} 2013-07-02 11:02 - 2013-07-02 11:02 - 00000937 ____A C:\Users\Public\Desktop\CPUID HWMonitor.lnk 2013-07-02 11:02 - 2013-07-02 11:02 - 00000876 ____A C:\Users\Public\Desktop\CPUID CPU-Z.lnk 2013-07-02 11:02 - 2013-07-02 11:02 - 00000000 ____D C:\Program Files\CPUID 2013-07-01 15:22 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2013-07-01 15:05 - 2012-12-19 21:11 - 00007606 ____A C:\Users\patrice\AppData\Local\Resmon.ResmonCfg 2013-06-30 19:04 - 2012-05-06 20:50 - 00000000 ____D C:\ProgramData\Origin 2013-06-28 11:12 - 2012-04-14 12:11 - 00000000 ____D C:\users\patrice 2013-06-28 11:11 - 2012-02-06 20:11 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2013-06-28 11:10 - 2013-05-14 18:23 - 00000000 ____D C:\Users\patrice\Desktop\ds 2013-06-28 11:10 - 2013-02-06 19:34 - 00000000 ____D C:\Users\patrice\AppData\Roaming\uTorrent 2013-06-28 11:10 - 2012-05-29 15:05 - 00000000 ____D C:\Windows\SysWOW64\Adobe 2013-06-28 11:10 - 2010-11-21 09:16 - 00000000 ___RD C:\Users\Public\Recorded TV 2013-06-28 11:10 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-06-26 15:10 - 2013-06-26 15:10 - 00000000 ____D C:\Users\patrice\Documents\Criterion Games 2013-06-26 14:16 - 2012-08-03 16:49 - 00000000 ____D C:\Program Files (x86)\Origin Games 2013-06-26 14:14 - 2012-05-06 20:50 - 00000000 ____D C:\Users\patrice\AppData\Roaming\Origin 2013-06-26 13:26 - 2013-06-26 13:26 - 00000000 ____D C:\ProgramData\SystemRequirementsLab 2013-06-26 13:26 - 2012-08-13 15:28 - 00000000 ____D C:\Program Files (x86)\SystemRequirementsLab 2013-06-26 13:18 - 2013-05-25 16:55 - 00083672 ____A (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys 2013-06-26 12:35 - 2012-05-12 11:27 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-06-26 12:34 - 2012-05-12 11:27 - 00000000 ___HD C:\Windows\msdownld.tmp 2013-06-25 15:02 - 2013-06-25 14:59 - 00283200 ____A (DT Soft Ltd) C:\Windows\System32\Drivers\dtsoftbus01.sys 2013-06-25 14:59 - 2013-06-25 14:59 - 00000000 ____D C:\Program Files (x86)\DAEMON Tools Lite 2013-06-24 15:54 - 2012-07-13 19:30 - 00000000 ___RD C:\Users\patrice\Desktop\Games 2013-06-24 13:33 - 2012-11-01 21:21 - 00000000 ____D C:\Users\patrice\AppData\Roaming\Skype 2013-06-23 18:18 - 2013-06-23 18:18 - 00000000 ____D C:\m-r-software 2013-06-23 18:17 - 2011-08-31 10:31 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-06-23 16:15 - 2012-11-01 21:21 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-06-23 16:15 - 2011-08-31 10:45 - 00000000 ____D C:\ProgramData\Skype 2013-06-23 15:05 - 2013-05-21 14:07 - 00014948 ____A C:\Users\patrice\Documents\PlayClaw.txt 2013-06-21 14:44 - 2013-06-21 14:43 - 00000000 ____D C:\Program Files (x86)\Alarm für Cobra 11 - Das Syndikat - DEMO 2013-06-19 20:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-06-18 14:00 - 2013-06-18 14:00 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_xusb21_01009.Wdf 2013-06-18 13:58 - 2013-06-18 13:58 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories 2013-06-18 13:58 - 2011-08-31 10:57 - 00268256 ____A C:\Windows\DirectX.log 2013-06-12 14:55 - 2012-06-25 21:20 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-06-12 14:55 - 2012-06-25 21:20 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-06-10 17:44 - 2012-04-14 12:24 - 00000000 ____D C:\Users\patrice\AppData\Local\Google 2013-06-10 17:44 - 2011-08-31 11:13 - 00000000 ____D C:\Program Files (x86)\Google 2013-06-10 17:42 - 2013-06-10 17:42 - 00000000 ____D C:\Users\patrice\AppData\LocalGoogle 2013-06-10 13:26 - 2013-06-10 13:26 - 00000000 ____D C:\Users\patrice\AppData\Local\{F559E742-4293-4767-AECC-CF15B6E21BAD} 2013-06-06 15:24 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF 2013-06-04 13:07 - 2012-07-14 18:43 - 00000000 ____D C:\Users\patrice\AppData\Local\Origin 2013-06-03 20:32 - 2013-06-03 20:32 - 00000000 ____D C:\Users\patrice\AppData\Local\{02E59A73-0C97-4B50-A62E-4ED6A7EA78BD} 2013-06-03 18:16 - 2012-07-07 17:26 - 75898224 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-06-03 18:10 - 2012-05-27 22:17 - 00000000 ____D C:\Users\patrice\AppData\Local\Paint.NET ZeroAccess: C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b} C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\@ C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\L C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\U C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\L\00000004.@ C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\L\1afb2d56 C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\L\201d3dde C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\L\55490ac4 ZeroAccess: C:\Windows\assembly\GAC_32\Desktop.ini ZeroAccess: C:\Windows\assembly\GAC_64\Desktop.ini ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe [2009-07-14 01:19] - [2012-07-11 11:25] - 0329216 ____A (Microsoft Corporation) B299212567AC0EA6D97A21A441709378 C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-06-19 20:07 ==================== End Of Log ============================ --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-07-2013 01 Ran by patrice at 2013-07-03 14:45:48 Running from C:\Users\patrice\Desktop Boot Mode: Safe Mode (with Networking) ========================================================== ==================== Installed Programs ======================= µTorrent (x32 Version: 3.3.0.29677) 7-Zip 9.20 (x32) Adobe Acrobat 4.0 (x32) Adobe Bridge 1.0 (x32 Version: 001.000.001) Adobe Common File Installer (x32 Version: 1.00.001) Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224) Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224) Adobe Help Center 1.0 (x32 Version: 1.0.1) Adobe Photoshop CS2 (x32 Version: 9.0) Adobe Reader X (10.1.0) MUI (x32 Version: 10.1.0) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) Adobe Shockwave Player 12.0 (x32 Version: 12.0.2.122) Adobe Stock Photos 1.0 (x32 Version: 1.0.1) Aerosoft's - Aerosoft Launcher (x32 Version: 1.1.0.1) aerosoft's - German Airports 2 - 2012 (FSX) (x32 Version: 1.01) aerosoft's - German Airports 3 - 2012 (FSX) (x32 Version: 1.04) aerosoft's - Mega Airport Munich X (x32 Version: 1.02) Alarm für Cobra 11 - Das Syndikat - DEMO (x32) Atheros Bluetooth Filter Driver Package (Version: 1.00.0004) Atheros Driver Installation Program (x32 Version: 9.2) Avira Antivirus Premium (x32 Version: 13.0.0.3737) Benutzerhandbuch - Grundlagen EPSON XP-302 303 305 306 Series (x32) Benutzerhandbuch EPSON XP-302 303 305 306 Series (x32) Bluetooth Stack for Windows by Toshiba (Version: v8.00.06(T)) Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000) Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.7) Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: 1.6) Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: 1.7) Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32) Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2) CPUID CPU-Z 1.65.0 CPUID HWMonitor 1.23 D3DX10 (x32 Version: 15.4.2368.0902) DAEMON Tools Lite (x32 Version: 4.47.1.0333) Download Navigator (x32 Version: 1.1.0) Druckerdeinstallation für EPSON XP-302 303 305 306 Series Epson Easy Photo Print 2 (x32 Version: 2.3.2.0) Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (x32 Version: 1.00.0000) Epson Event Manager (x32 Version: 3.01.0000) EPSON Scan (x32) EpsonNet Print (x32 Version: 2.5.00) Euro Truck Simulator 2 (x32 Version: 1.1.1) FIFA 12 DEMO (x32 Version: 1.0.0.0) FIFA 13 (x32 Version: 1.0.0.0) Free Audio Dub version 1.7.9.908 (x32 Version: 1.7.9.908) Galerie de photos Windows Live (x32 Version: 15.4.3502.0922) GIMP 2.8.0 (Version: 2.8.0) Google Chrome (x32 Version: 27.0.1453.116) Google Update Helper (x32 Version: 1.3.21.145) High-Definition Video Playback (x32 Version: 7.3.10900.8.0) Intel(R) Management Engine Components (x32 Version: 7.0.0.1144) Intel(R) Processor Graphics (x32 Version: 8.15.10.2353) Intel(R) Rapid Storage Technology (x32 Version: 10.1.2.1004) Internet-TV für Windows Media Center (x32 Version: 4.2.2.0) InterVideo DeviceService (x32 Version: 1.0.0) Java 7 Update 21 (x32 Version: 7.0.210) Java Auto Updater (x32 Version: 2.0.2.1) Java(TM) 6 Update 20 (x32 Version: 6.0.200) JavaFX 2.1.1 (x32 Version: 2.1.1) Junk Mail filter update (x32 Version: 15.4.3502.0922) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 4.5 (Version: 4.5.50709) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Flight Simulator X Demo (x32 Version: 1.00.0000) Microsoft Games for Windows - LIVE (x32 Version: 3.3.24.0) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.2.3.0) Microsoft Office 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000) Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.5128.5002) Microsoft Primary Interoperability Assemblies 2005 (x32 Version: 9.0.21022) Microsoft Silverlight (Version: 5.1.20125.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (x32 Version: 9.0.30411) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0) Microsoft XML Parser (x32 Version: 8.20.8730.4) Mozilla Firefox 21.0 (x86 de) (x32 Version: 21.0) Mozilla Maintenance Service (x32 Version: 21.0) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0) Need for Speed™ Most Wanted (x32 Version: 1.5.0.0) Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0) Nero BackItUp 10 (x32 Version: 5.8.10900.8.100) Nero BackItUp 10 Help (CHM) (x32 Version: 10.6.10700) Nero BurnRights 10 (x32 Version: 4.4.10400.2.100) Nero BurnRights 10 Help (CHM) (x32 Version: 10.6.10700) Nero Control Center 10 (x32 Version: 10.6.12700.0.7) Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10800) Nero Core Components 10 (x32 Version: 2.0.20000.9.12) Nero Express 10 (x32 Version: 10.6.10700.5.100) Nero Express 10 Help (CHM) (x32 Version: 10.6.10700) Nero InfoTool 10 (x32 Version: 7.4.10300.1.100) Nero InfoTool 10 Help (CHM) (x32 Version: 10.6.10700) Nero Kwik Media (x32 Version: 1.6.15100.59.100) Nero Multimedia Suite 10 Essentials (x32 Version: 10.6.10300) Nero RescueAgent 10 (x32 Version: 3.6.10500.3.100) Nero RescueAgent 10 Help (CHM) (x32 Version: 10.6.10800) Nero StartSmart 10 (x32 Version: 10.6.10500.3.100) Nero StartSmart 10 Help (CHM) (x32 Version: 10.6.10700) Nero Update (x32 Version: 1.0.10900.31.0) NeroKwikMedia Help (CHM) (x32 Version: 10.6.10900) Netzwerkhandbuch EPSON XP-302 303 305 306 Series (x32) NVIDIA PhysX (x32 Version: 9.10.0513) OMSI - The Bus Simulator (x32 Version: 1.04) OMSI Addon Manager Version 1.2.4 (x32 Version: 1.2.4) Origin (x32 Version: 9.1.3.2637) Paint.NET v3.5.10 (Version: 3.60.0) PlayClaw 3 (x32 Version: 3) PlayReady PC Runtime amd64 (Version: 1.3.0) PunkBuster Services (x32 Version: 0.991) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922) RadioTime for Media Center (x32 Version: 1.0) Realtek Ethernet Controller Driver (x32 Version: 7.38.113.2011) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6289) Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30126) Skype™ 6.5 (x32 Version: 6.5.158) Solaris Urbino 12 III by CNB-Projekts for OMSI (HKCU) Steam (x32 Version: 1.0.0.0) swMSM (x32 Version: 12.0.0.1) Synaptics Pointing Device Driver (Version: 15.2.11.1) System Requirements Lab CYRI (x32 Version: 6.0.3.0) The Compressonator 1.50 (x32 Version: 1.50) TOSHIBA Assist (x32 Version: 4.02.02) TOSHIBA Bulletin Board (Version: 2.1.10.64) TOSHIBA Bulletin Board (x32 Version: 2.1.10.64) TOSHIBA ConfigFree (x32 Version: 8.0.37) TOSHIBA Disc Creator (Version: 2.1.0.6 for x64) TOSHIBA Face Recognition (Version: 3.1.8.64) TOSHIBA Face Recognition (x32 Version: 3.1.8.64) TOSHIBA Hardware Setup (x32 Version: 2.00.0013) TOSHIBA HDD/SSD Alert (Version: 3.1.64.7) TOSHIBA HDD/SSD Alert (x32 Version: 3.1.64.7) Toshiba Manuals (x32 Version: 10.03) TOSHIBA Media Controller (x32 Version: 1.0.86.2) TOSHIBA Media Controller Plug-in (x32 Version: 1.0.6.1) TOSHIBA Online Product Information (x32 Version: 4.01.0000) TOSHIBA Places Icon Utility (x32 Version: 1.1.0.12) TOSHIBA Recovery Media Creator (x32 Version: 2.1.3.10010) TOSHIBA Recovery Media Creator Reminder (x32 Version: 1.1.0.0) TOSHIBA ReelTime (Version: 1.7.17.64) TOSHIBA ReelTime (x32 Version: 1.7.17.64) TOSHIBA Resolution+ Plug-in for Windows Media Player (x32 Version: 1.1.0) TOSHIBA Service Station (x32 Version: 2.1.52) TOSHIBA Supervisor Password (x32 Version: 2.00.0008) TOSHIBA TEMPRO (x32 Version: 3.35) TOSHIBA Value Added Package (Version: 1.5.4.64) TOSHIBA Value Added Package (x32 Version: 1.5.4.64) TOSHIBA Web Camera Application (x32 Version: 2.0.0.13) TOSHIBA Wireless LAN Indicator (x32 Version: 1.0.4) TRORMCLauncher (Version: 1.0.0.10) TRORMCLauncher (x32 Version: ) Unity Web Player (HKCU Version: ) Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1) Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1) Windows Live (x32 Version: 15.4.3502.0922) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3538.0513) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3538.0513) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3538.0513) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Media Center Add-in for Silverlight (x32 Version: 4.7.3.0) XSplit (x32 Version: 1.2.1303.0101) ==================== Restore Points ========================= ==================== Scheduled Tasks (whitelisted) ============= Task: {06D5B291-243F-48B8-A669-9B7714FF49DC} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-12-03] (TOSHIBA CORPORATION) Task: {1376160F-698C-434F-83B4-2832CF23FE94} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-21] (Microsoft Corporation) Task: {1B4115AD-9563-4125-8567-FF3449C9AC5E} - System32\Tasks\Your File Updater => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe No File Task: {36D81E06-F36E-4C4B-BDD8-046821773C74} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation) Task: {512218B7-177C-4C99-9A1D-BE55141DF7EA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-31] (Google Inc.) Task: {6D7BA663-452C-41C7-98C5-980E2ACC5896} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-08-31] (Google Inc.) Task: {8519F2E0-0FCB-4256-96F7-506142828F25} - System32\Tasks\Express FilesUpdate => C:\Program Files (x86)\ExpressFiles\EFUpdater.exe No File Task: {859A4E3B-A01E-456B-BB91-A16ADD0D3CF9} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {C536D656-FB01-46FB-AC11-F62B60F53229} - System32\Tasks\YourFile DownloaderUpdate => C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe No File Task: {DE629C92-AEA6-4A5E-9AF6-AD1CE6DEB6A8} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files (x86)\IObit\Game Booster 3\AutoUpdate.exe No File Task: {FADBFDEA-C47C-4851-982D-099FD9FAD792} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Faulty Device Manager Devices ============= Name: Security Processor Loader Driver Description: Security Processor Loader Driver Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: spldr Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (07/03/2013 02:03:55 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007043c Error: (07/03/2013 01:52:25 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2013 01:38:53 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2013 01:35:31 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2013 00:46:39 PM) (Source: Microsoft Security Client Setup) (User: pj) Description: HRESULT:0x8004FF11 Description:Can’t install Microsoft Security Essentials on a computer running in safe mode. Your computer is currently running in safe mode. To install Security Essentials, your computer must be running in normal mode. Please restart your computer in normal mode, and then try to run the Security Essentials Setup Wizard again. Error code:0x8004FF11. Error: (07/03/2013 00:32:57 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2013 00:24:33 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2013 00:15:58 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007043c Error: (07/03/2013 00:15:50 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007043c Error: (07/03/2013 00:15:40 PM) (Source: SignInAssistant) (User: ) Description: StartService failed with hr = 0x8007043c System errors: ============= Error: (07/03/2013 01:51:47 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (07/03/2013 01:51:46 PM) (Source: DCOM) (User: ) Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030} Error: (07/03/2013 01:51:46 PM) (Source: DCOM) (User: ) Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Error: (07/03/2013 01:51:37 PM) (Source: DCOM) (User: ) Description: 1084EventSystem{1BE1F766-5536-11D1-B726-00C04FB926AF} Error: (07/03/2013 01:51:27 PM) (Source: DCOM) (User: ) Description: 1084ShellHWDetection{DD522ACC-F821-461A-A407-50B198B896DC} Error: (07/03/2013 01:51:26 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden. Modulpfad: C:\Windows\system32\athihvs.dll Fehlercode: 21 Error: (07/03/2013 01:51:12 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: avipbb avkmgr discache spldr Tosrfcom Wanarpv6 Error: (07/03/2013 01:51:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Epson Scanner Service" ist vom Dienst "Windows-Bilderfassung (WIA)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (07/03/2013 01:51:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Client Virtualization Handler" ist vom Dienst "Application Virtualization Client" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (07/03/2013 01:51:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "IPsec-Richtlinien-Agent" ist von folgendem Dienst abhängig: BFE. Dieser Dienst ist eventuell nicht installiert. Microsoft Office Sessions: ========================= Error: (07/03/2013 02:03:55 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007043c Error: (07/03/2013 01:52:25 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2013 01:38:53 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2013 01:35:31 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2013 00:46:39 PM) (Source: Microsoft Security Client Setup)(User: pj) Description: HRESULT:0x8004FF11 Description:Can’t install Microsoft Security Essentials on a computer running in safe mode. Your computer is currently running in safe mode. To install Security Essentials, your computer must be running in normal mode. Please restart your computer in normal mode, and then try to run the Security Essentials Setup Wizard again. Error code:0x8004FF11. Error: (07/03/2013 00:32:57 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2013 00:24:33 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (07/03/2013 00:15:58 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007043c Error: (07/03/2013 00:15:50 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007043c Error: (07/03/2013 00:15:40 PM) (Source: SignInAssistant)(User: ) Description: StartService failed with hr = 0x8007043c CodeIntegrity Errors: =================================== Date: 2012-06-25 19:24:05.867 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-06-25 19:24:05.852 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-06-25 19:24:05.820 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-06-25 19:24:05.789 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-06-25 19:23:46.443 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-06-25 19:23:46.412 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-06-25 19:23:46.380 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-06-25 19:23:46.365 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Unlocker\UnlockerDriver5.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 27% Total physical RAM: 4007.98 MB Available physical RAM: 2887.64 MB Total Pagefile: 8014.14 MB Available Pagefile: 6932.78 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (WINDOWS) (Fixed) (Total:233.57 GB) (Free:105.91 GB) NTFS (Disk=0 Partition=2) Drive f: (PATRICE) (Removable) (Total:14.43 GB) (Free:2.1 GB) FAT32 (Disk=1 Partition=1) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 6710D270) Partition 1: (Active) - (Size=400 MB) - (Type=27) Partition 2: (Not Active) - (Size=234 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 14 GB) (Disk ID: C3072E18) Partition 1: (Not Active) - (Size=14 GB) - (Type=0C) ==================== End Of Log ============================ |
|
03.07.2013, 14:08
| #4 |
| /// the machine /// TB-Ausbilder | Lauter Lüfter + Langsamer PC Fix mit FRST Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ZeroAccess:
C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}
C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\@
C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\L
C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\U
C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\L\00000004.@
C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\L\1afb2d56
C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\L\201d3dde
C:\Windows\Installer\{34a84498-f6b5-7c1f-7da9-05e2124b174b}\L\55490ac4
ZeroAccess:
C:\Windows\assembly\GAC_32\Desktop.ini
ZeroAccess:
C:\Windows\assembly\GAC_64\Desktop.ini
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Lauter Lüfter + Langsamer PC |
| abgesicherten, angeblich, anwendung, anwendungen, ausschalten, daten, entfernt, heute, hängt, langsamer, langsamer pc, laptop, laufen, lauter, lüfter, lösung, malwarebytes, modus, monate, problem, programm, prozessor, viren, windows, würde, öffnen |
Linear-Darstellung
