| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Bizcoaching, was jetzt ?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
21.07.2013, 18:19
| #1 |
| |  Bizcoaching, was jetzt ? Hallo, ich habe mir irgendwie BizCoaching, Internet und PC sind sehr langsam geworden und ich werde durch PopUp-Fenster belästigt. Habe mal grob durch verschiedene Foren gelesen und festgestellt, dass es scheinbar sehr unterschiediche Wege spricht Programme gibt um für jeden PC speziell die Adware?? zu entfernen. Könnt ihr mir bitte helfen, was ich jetzt weiter tun kann bzw. muss. Danke Beste Grüße Flo |
|
21.07.2013, 18:49
| #2 |
| /// TB-Ausbilder   | Bizcoaching, was jetzt ? Hallo Flo,
__________________schauen wir da mal rein: Downloade dir bitte die für dein System passende Version (32-bit/64-bit) von Farbar Recovery Scan Tool (FRST) und speichere es auf den Desktop. (Wenn du nicht sicher bist, welche du benötigst: Start -> Computer (Rechtsklick) -> Eigenschaften)
__________________ |
|
21.07.2013, 18:57
| #3 |
| | Bizcoaching, was jetzt ? Hi.
__________________Danke. |
|
21.07.2013, 21:19
| #4 |
| | Bizcoaching, was jetzt ? FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 19-07-2013
Ran by Florian (administrator) on 21-07-2013 19:54:43
Running from C:\Users\Florian\Desktop
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(Stardock Corporation) C:\Program Files\Stardock\MyColors\VistaSrv.exe
() C:\Program Files\Stardock\MyColors\WBVista.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Nuance Communications, Inc.) C:\Program Files\Common Files\Nuance\dgnsvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
(Symantec Corporation) C:\Program Files\Norton 360 Premier Edition\Engine\20.4.0.40\ccSvcHst.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(XIMETA, Inc.) C:\Program Files\NDAS\System\ndassvc.exe
() C:\Program Files\Polar\Daemon\polard.exe
(IDT, Inc.) C:\Windows\system32\STacSV.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Conexant Systems, Inc.) C:\Windows\system32\DRIVERS\xaudio.exe
(Symantec Corporation) C:\Program Files\Norton 360 Premier Edition\Engine\20.4.0.40\ccSvcHst.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\tv_w32.exe
(Creative Technology Ltd.) C:\Windows\OEM02Mon.exe
(Dell Inc.) C:\Windows\System32\WLTRAY.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(IDT, Inc.) C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Greenshot\Greenshot.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
() C:\Program Files\ScanWizard 5\ScannerFinder.exe
(Dropbox, Inc.) C:\Users\Florian\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidFind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apntex.exe
(Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe
(Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
==================== Registry (Whitelisted) ==================
Winlogon\Notify\GoToAssist: C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll [X]
MountPoints2: {2e20b394-b994-11dd-96ab-00219bd75a8e} - G:\battlefield2.exe
HKU\Default\...\RunOnce: [BurnImage] - regsvr32 /s c:\windows\IMAPIShellExt.dll [x]
HKU\Default User\...\RunOnce: [BurnImage] - regsvr32 /s c:\windows\IMAPIShellExt.dll [x]
CEnableEntry] - regedit.exe /s C:\Users\Florian\AppData\Local\Temp\\UAC_Enable.reg [x] <===== ATTENTION
HKLM\...\Run: [SigmatelSysTrayApp] - C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe [405504 2007-11-12] (IDT, Inc.)
HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [167936 2008-05-04] (Alps Electric Co., Ltd.)
HKLM\...\Run: [UVS12 Preload] - C:\Program Files\Corel\Corel VideoStudio 12\uvPL.exe [397456 2008-06-09] (Corel TW Corp.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [HP Software Update] - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2006-12-10] (Hewlett-Packard Co.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1387288 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [CloneCDTray] - C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-30] (SlySoft, Inc.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-05-30] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [421776 2012-06-07] (Apple Inc.)
HKLM\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2068856 2011-10-13] (Flexera Software LLC.)
HKLM\...\Run: [DNS7reminder] - C:\ProgramData\Nuance\NaturallySpeaking12\Ereg.ini [324 2013-02-03] ()
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKCU\...\Run: [Greenshot] - C:\Program Files\Greenshot\Greenshot.exe [540672 2010-07-01] ()
HKCU\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [x]
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
HKCU\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2068856 2011-10-13] (Flexera Software LLC.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\QuickSet.lnk
ShortcutTarget: QuickSet.lnk -> C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Scanner Finder.lnk
ShortcutTarget: Scanner Finder.lnk -> C:\Program Files\ScanWizard 5\ScannerFinder.exe ()
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IconPackager.lnk
ShortcutTarget: IconPackager.lnk -> C:\Program Files\Stardock\MyColors\IconPackager.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IconPackager.lnk
ShortcutTarget: IconPackager.lnk -> C:\Program Files\Stardock\MyColors\IconPackager.exe (Stardock Corporation)
Startup: C:\Users\FH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\FH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IconPackager.lnk
ShortcutTarget: IconPackager.lnk -> C:\Program Files\Stardock\MyColors\IconPackager.exe (Stardock Corporation)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Florian\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office Outlook.lnk
ShortcutTarget: Microsoft Office Outlook.lnk -> C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE (Microsoft Corporation)
Startup: C:\Users\Florian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Persbackup.lnk
ShortcutTarget: Persbackup.lnk -> C:\Program Files\Personal Backup 5\Persbackup.exe (J. Rathlev, IEAP, Uni-Kiel)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de/ig/dell?hl=de&client=dell-row&channel=de&ibd=5080918
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=94699e85-4ae2-4fb1-b15c-654479868441&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=94699e85-4ae2-4fb1-b15c-654479868441&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKLM - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=94699e85-4ae2-4fb1-b15c-654479868441&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=94699e85-4ae2-4fb1-b15c-654479868441&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=94699e85-4ae2-4fb1-b15c-654479868441&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms}
SearchScopes: HKCU - {210073B5-670D-4ABE-A7CB-83EDBC77BF35} URL = hxxp://search.orbitdownloader.com/ie.php?q={searchTerms}&enc={inputEncoding}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.de/search?q={searchTerms}
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360 Premier Edition\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360 Premier Edition\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Dragon NaturallySpeaking Rich Internet Application Support - Extension - {73A89C60-CF59-4EC7-9215-9B7EF05ECEA4} - C:\PROGRA~1\Nuance\NATURA~1\Program\ieShim.dll (Nuance Communications, Inc.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Lyrics-Pal - {AB9778AB-BAEF-49B9-96EE-D6E4BD0BCE68} - C:\Program Files\LyricsPal\122.dll (LyricsPal Soft. LTD)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
Toolbar: HKLM - Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (Veoh Networks Inc)
Toolbar: HKLM - toolplugin - {DFEFCDEE-CF1A-4FC8-89AF-189327213627} - C:\Users\Florian\AppData\Roaming\toolplugin\toolbar.dll ()
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360 Premier Edition\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU -Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU -DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
Toolbar: HKCU -No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No File
Toolbar: HKCU -No Name - {00000000-0000-0000-0000-000000000000} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\c2swn6dv.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll No File
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @real.com/nppl3260;version=6.0.12.69 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=1.0.3.69 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.69 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @t-immersion.com/DFusionHomeWebPlugIn - C:\Program Files\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll (Total Immersion)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @veoh.com/VeohTVPlugin - C:\Program Files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll (Veoh Networks )
FF Plugin: @veoh.com/VeohWebPlayer - C:\Program Files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll (Veoh)
FF Plugin: @videolan.org/vlc,version=1.1.11 - C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: nuance.com/DragonRIAPlugin - C:\PROGRA~1\Nuance\NATURA~1\Program\npDgnRia.dll (Nuance Communications Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\Search the web.src
FF Extension: No Name - C:\Users\Florian\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
FF Extension: No Name - C:\Users\Florian\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF Extension: DTToolbar - C:\Program Files\Mozilla Firefox\extensions\DTToolbar@toolbarnet.com
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM\...\Firefox\Extensions: [jid0-lmZNVK7a82O8cufhdfB9dUDfA2w@jetpack] C:\Program Files\Nuance\NaturallySpeaking12\Program\ffShim.xpi
FF Extension: No Name - C:\Program Files\Nuance\NaturallySpeaking12\Program\ffShim.xpi
FF HKLM\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\IPSFFPlgn\
FF HKLM\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\coFFPlgn\
FF HKCU\...\Firefox\Extensions: [web@veoh.com] C:\Program Files\Veoh Networks\VeohWebPlayer\FFVideoFinder
FF Extension: Veoh Web Player Video Finder - C:\Program Files\Veoh Networks\VeohWebPlayer\FFVideoFinder
FF HKCU\...\Firefox\Extensions: [{9309FA47-1B48-4768-AFA4-9E0556F5DC81}] C:\Program Files\LyricsPal\122.xpi
FF Extension: No Name - C:\Program Files\LyricsPal\122.xpi
========================== Services (Whitelisted) =================
S4 Adobe Version Cue CS3; C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [153792 2007-03-20] (Adobe Systems Incorporated)
R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2009-06-09] (Stardock Corporation)
R2 DragonSvc; C:\Program Files\Common Files\Nuance\dgnsvc.exe [311184 2013-02-11] (Nuance Communications, Inc.)
R2 N360; C:\Program Files\Norton 360 Premier Edition\Engine\20.4.0.40\diMaster.dll [556336 2013-05-29] (Symantec Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 ndassvc; C:\Program Files\NDAS\System\ndassvc.exe [236784 2007-02-22] (XIMETA, Inc.)
R2 Polar Daemon; C:\Program Files\Polar\Daemon\polard.exe [419536 2012-12-12] ()
R2 WindowBlinds; C:\Program Files\Stardock\MyColors\VistaSrv.exe [230704 2008-12-15] (Stardock Corporation)
==================== Drivers (Whitelisted) ====================
R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [108104 2010-12-01] (SlySoft, Inc.)
S3 AX88772; C:\Windows\System32\DRIVERS\ax88772.sys [64512 2010-05-31] (ASIX Electronics Corp.)
R1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\BASHDefs\20130715.001\BHDrvx86.sys [1002072 2013-05-20] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360\1404000.028\ccSetx86.sys [134744 2013-04-15] (Symantec Corporation)
S3 CM1063264; C:\Windows\System32\drivers\CM106.sys [1297920 2007-01-29] (C-Media Inc)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376480 2013-07-09] (Symantec Corporation)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-17] (Elaborate Bytes AG)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [106656 2013-07-09] (Symantec Corporation)
R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\IPSDefs\20130719.002\IDSvix86.sys [386720 2013-07-06] (Symantec Corporation)
S3 KOBCCEX; C:\Windows\System32\drivers\KOBCCEX.sys [25984 2005-11-08] (KOBIL Systems GmbH)
S3 KOBCCID; C:\Windows\System32\drivers\KOBCCID.sys [118912 2005-11-08] (KOBIL Systems GmbH)
R3 LEqdUsb; C:\Windows\System32\Drivers\LEqdUsb.Sys [42648 2011-09-02] (Logitech, Inc.)
R0 lfsfilt; C:\Windows\System32\DRIVERS\lfsfilt.sys [254320 2007-02-22] (XIMETA, Inc.)
R3 LHidEqd; C:\Windows\System32\Drivers\LHidEqd.Sys [12184 2011-09-02] (Logitech, Inc.)
R3 LMouFilt; C:\Windows\System32\DRIVERS\LMouFilt.Sys [39192 2011-09-02] (Logitech, Inc.)
R0 lpx; C:\Windows\System32\DRIVERS\lpx.sys [61424 2007-02-22] (XIMETA, Inc.)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\VirusDefs\20130720.007\NAVENG.SYS [93272 2013-07-09] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.4.0.40\Definitions\VirusDefs\20130720.007\NAVEX15.SYS [1611992 2013-07-09] (Symantec Corporation)
R3 ndasbus; C:\Windows\System32\DRIVERS\ndasbus.sys [76144 2007-02-22] (XIMETA, Inc.)
R1 ndasfat; C:\Windows\system32\DRIVERS\ndasfat.sys [372720 2007-02-22] (XIMETA, Inc.)
S3 ndasscsi; C:\Windows\System32\DRIVERS\ndasscsi.sys [187632 2007-02-22] (XIMETA, Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [473656 2012-03-14] (Duplex Secure Ltd.)
R3 SRTSP; C:\Windows\system32\drivers\N360\1404000.028\SRTSP.SYS [603224 2013-05-15] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360\1404000.028\SRTSPX.SYS [32344 2013-03-04] (Symantec Corporation)
R1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2006-07-24] ()
R0 SymDS; C:\Windows\System32\drivers\N360\1404000.028\SYMDS.SYS [367704 2013-05-20] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360\1404000.028\SYMEFA.SYS [934488 2013-05-22] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142496 2013-07-09] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360\1404000.028\Ironx86.SYS [175264 2013-03-04] (Symantec Corporation)
R1 SYMTDIv; C:\Windows\system32\drivers\N360\1404000.028\SYMTDIV.SYS [352344 2013-04-24] (Symantec Corporation)
U3 a4gl8gqe; C:\Windows\System32\Drivers\a4gl8gqe.sys [0 ] (Intel Corporation)
U3 a8p7oau8; C:\Windows\System32\Drivers\a8p7oau8.sys [0 ] (Intel Corporation)
S3 BCM42RLY; system32\drivers\BCM42RLY.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S3 KOBDFU; System32\Drivers\kobdfu.sys [x]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-07-21 19:54 - 2013-07-21 19:54 - 00000000 ____D C:\FRST
2013-07-21 19:53 - 2013-07-21 19:53 - 01219758 _____ (Farbar) C:\Users\Florian\Desktop\FRST.exe
2013-07-21 16:54 - 2013-07-21 16:54 - 00138216 _____ C:\Windows\Minidump\Mini072113-01.dmp
2013-07-17 17:41 - 2013-07-21 17:31 - 00000354 _____ C:\Windows\Tasks\Lyrics-Pal Update.job
2013-07-17 17:41 - 2013-07-17 17:41 - 00000000 ____D C:\Program Files\LyricsPal
2013-07-17 17:40 - 2013-07-17 17:40 - 00001824 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-07-10 17:24 - 2013-07-10 17:24 - 00022420 _____ C:\Users\Florian\Desktop\Autogenes_Training__Die_6_Grund-Uebungen__ohne_Zuruecknehmen.5684551.TPB.torrent
2013-07-10 17:24 - 2013-07-10 17:24 - 00022212 _____ C:\Users\Florian\Desktop\Autogenes_Training__Die_6_Grund-Uebungen__Audio__nach_dem_Buch_v.5682573.TPB.torrent
2013-07-09 17:49 - 2013-07-09 17:49 - 00142496 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS
2013-07-09 17:49 - 2013-07-09 17:49 - 00007611 _____ C:\Windows\system32\Drivers\SYMEVENT.CAT
2013-07-09 17:49 - 2013-07-09 17:49 - 00002205 _____ C:\Users\Public\Desktop\Norton 360.lnk
2013-07-09 17:48 - 2013-07-09 17:48 - 00000000 ____D C:\Windows\system32\Drivers\N360
2013-07-09 17:48 - 2013-07-09 17:48 - 00000000 ____D C:\Program Files\Norton 360 Premier Edition
2013-07-04 16:41 - 2013-07-04 16:42 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-07-02 17:57 - 2013-07-02 17:54 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-02 17:55 - 2013-07-02 17:54 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-02 17:55 - 2013-07-02 17:54 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-02 17:55 - 2013-07-02 17:54 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-06-29 14:48 - 2013-06-29 14:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ssadadb_01005.Wdf
2013-06-27 09:00 - 2013-06-29 10:13 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-06-25 17:54 - 2013-06-25 17:54 - 00000000 ____D C:\Program Files\Common Files\HP
2013-06-25 17:54 - 2013-06-25 17:54 - 00000000 ____D C:\Program Files\Common Files\Hewlett-Packard
2013-06-25 17:52 - 2010-05-14 14:56 - 00125440 _____ (Hewlett-Packard Company) C:\Windows\system32\hpf3l02t.dll
2013-06-25 17:49 - 2013-06-25 18:03 - 00219256 _____ C:\Windows\hpwins23.dat
2013-06-25 17:49 - 2010-07-28 22:45 - 00001501 ____N C:\Windows\hpwmdl23.dat
2013-06-25 17:45 - 2010-05-13 12:29 - 00372736 _____ (Hewlett Packard) C:\Windows\system32\hppldcoi.dll
2013-06-25 17:45 - 2010-05-13 12:25 - 00970752 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpwtiop4.dll
2013-06-25 17:45 - 2010-05-13 12:25 - 00718336 _____ (Hewlett-Packard) C:\Windows\system32\hpwwiax5.dll
2013-06-25 17:45 - 2010-04-26 10:52 - 00454504 _____ (Hewlett-Packard) C:\Windows\system32\hpzids01.dll
2013-06-25 17:45 - 2010-02-01 08:54 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\difxapi.dll
2013-06-25 17:45 - 2010-02-01 08:54 - 00294912 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpovst11.dll
2013-06-22 12:01 - 2013-06-22 12:02 - 00000000 ____D C:\Users\Florian\Lustiges
==================== One Month Modified Files and Folders =======
2013-07-21 19:54 - 2013-07-21 19:54 - 00000000 ____D C:\FRST
2013-07-21 19:53 - 2013-07-21 19:53 - 01219758 _____ (Farbar) C:\Users\Florian\Desktop\FRST.exe
2013-07-21 19:53 - 2008-09-22 15:26 - 00000000 ___RD C:\Users\Florian\Desktop
2013-07-21 19:38 - 2009-08-17 09:41 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Skype
2013-07-21 18:54 - 2006-11-02 14:47 - 00003744 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-21 18:54 - 2006-11-02 14:47 - 00003744 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-21 18:45 - 2012-04-04 19:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-21 17:49 - 2009-10-26 16:49 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-21 17:31 - 2013-07-17 17:41 - 00000354 _____ C:\Windows\Tasks\Lyrics-Pal Update.job
2013-07-21 17:13 - 2011-05-25 17:28 - 00000506 _____ C:\Windows\Tasks\SystemToolsDailyTest.job
2013-07-21 17:05 - 2008-09-18 11:39 - 01120388 _____ C:\Windows\WindowsUpdate.log
2013-07-21 17:01 - 2012-01-30 17:01 - 00000000 ____D C:\Users\Florian\AppData\Roaming\Dropbox
2013-07-21 17:00 - 2012-01-30 17:24 - 00000000 ___RD C:\Users\Florian\Dropbox
2013-07-21 16:57 - 2009-10-26 16:49 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-21 16:54 - 2013-07-21 16:54 - 00138216 _____ C:\Windows\Minidump\Mini072113-01.dmp
2013-07-21 16:54 - 2012-10-10 21:12 - 229641192 _____ C:\Windows\MEMORY.DMP
2013-07-21 16:54 - 2011-06-19 13:24 - 00000292 _____ C:\Windows\Tasks\AutoKMS.job
2013-07-21 16:54 - 2009-10-22 07:41 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2013-07-21 16:54 - 2009-02-05 10:08 - 00000000 ____D C:\Windows\Minidump
2013-07-21 16:54 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-19 18:04 - 2008-09-18 11:40 - 00000012 _____ C:\Windows\bthservsdp.dat
2013-07-19 18:04 - 2006-11-02 15:01 - 00032510 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-19 00:00 - 2010-02-02 21:29 - 00000374 _____ C:\Windows\Tasks\NeroLiveEpgUpdate-FHLT_Florian.job
2013-07-18 22:12 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\tracing
2013-07-17 17:41 - 2013-07-17 17:41 - 00000000 ____D C:\Program Files\LyricsPal
2013-07-17 17:41 - 2012-10-24 18:42 - 00000000 ____D C:\Users\Florian\Desktop\Android Programme
2013-07-17 17:41 - 2008-09-22 15:26 - 00000000 ____D C:\Users\Florian
2013-07-17 17:40 - 2013-07-17 17:40 - 00001824 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2013-07-17 17:40 - 2012-11-08 16:48 - 00000000 ____D C:\Program Files\MyPhoneExplorer
2013-07-17 17:40 - 2006-11-02 13:18 - 00000000 __RHD C:\Users\Public\Desktop
2013-07-17 17:12 - 2012-04-15 08:58 - 00174872 _____ C:\Windows\PFRO.log
2013-07-10 22:17 - 2011-09-23 22:18 - 00000000 ____D C:\Users\Florian\bitthief
2013-07-10 18:51 - 2008-09-23 15:39 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-07-10 17:26 - 2008-10-27 17:19 - 00000000 ____D C:\Users\Florian\AppData\Roaming\BOM
2013-07-10 17:24 - 2013-07-10 17:24 - 00022420 _____ C:\Users\Florian\Desktop\Autogenes_Training__Die_6_Grund-Uebungen__ohne_Zuruecknehmen.5684551.TPB.torrent
2013-07-10 17:24 - 2013-07-10 17:24 - 00022212 _____ C:\Users\Florian\Desktop\Autogenes_Training__Die_6_Grund-Uebungen__Audio__nach_dem_Buch_v.5682573.TPB.torrent
2013-07-09 17:51 - 2009-07-31 16:53 - 00000000 ____D C:\Users\Florian\Documents\Symantec
2013-07-09 17:49 - 2013-07-09 17:49 - 00142496 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS
2013-07-09 17:49 - 2013-07-09 17:49 - 00007611 _____ C:\Windows\system32\Drivers\SYMEVENT.CAT
2013-07-09 17:49 - 2013-07-09 17:49 - 00002205 _____ C:\Users\Public\Desktop\Norton 360.lnk
2013-07-09 17:48 - 2013-07-09 17:48 - 00000000 ____D C:\Windows\system32\Drivers\N360
2013-07-09 17:48 - 2013-07-09 17:48 - 00000000 ____D C:\Program Files\Norton 360 Premier Edition
2013-07-09 17:48 - 2009-07-31 16:38 - 00000000 ____D C:\ProgramData\Norton
2013-07-09 17:22 - 2008-09-23 15:39 - 00000000 ____D C:\ProgramData\Symantec
2013-07-09 16:51 - 2008-01-21 09:16 - 01577396 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-07 10:43 - 2009-08-17 09:40 - 00000000 ___RD C:\Program Files\Skype
2013-07-07 10:43 - 2009-08-17 09:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-07 10:33 - 2012-04-25 07:35 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-07-06 07:52 - 2012-04-04 19:45 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-07-06 07:52 - 2011-06-14 07:43 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-07-06 07:52 - 2008-09-22 18:05 - 00000000 ____D C:\Users\Florian\AppData\Local\Adobe
2013-07-04 16:42 - 2013-07-04 16:41 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-07-02 17:54 - 2013-07-02 17:57 - 00263592 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2013-07-02 17:54 - 2013-07-02 17:55 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2013-07-02 17:54 - 2013-07-02 17:55 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2013-07-02 17:54 - 2013-07-02 17:55 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2013-07-02 17:54 - 2012-07-29 22:09 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npdeployJava1.dll
2013-07-02 17:54 - 2010-07-18 09:35 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2013-07-02 17:54 - 2008-09-18 09:51 - 00000000 ____D C:\Program Files\Java
2013-06-29 14:49 - 2012-04-03 10:53 - 00009072 _____ C:\Windows\setupact.log
2013-06-29 14:48 - 2013-06-29 14:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ssadadb_01005.Wdf
2013-06-29 14:35 - 2010-09-26 16:56 - 00000000 ____D C:\Users\Florian\AppData\Local\CrashDumps
2013-06-29 14:30 - 2012-11-08 16:48 - 00000000 ____D C:\Users\Florian\AppData\Roaming\MyPhoneExplorer
2013-06-29 13:04 - 2012-09-17 11:15 - 00000000 ____D C:\Users\Florian\Documents\Wiederherstellung
2013-06-29 11:49 - 2010-09-21 10:07 - 00000000 ____D C:\Users\Florian\Documents\PersBackup
2013-06-29 10:13 - 2013-06-27 09:00 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-06-27 21:14 - 2008-09-22 19:03 - 00149504 _____ C:\Users\Florian\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-06-25 18:04 - 2008-10-05 19:28 - 00159462 _____ C:\Windows\hpwins06.dat
2013-06-25 18:04 - 2008-10-05 18:49 - 00004795 _____ C:\ProgramData\hpzinstall.log
2013-06-25 18:03 - 2013-06-25 17:49 - 00219256 _____ C:\Windows\hpwins23.dat
2013-06-25 18:03 - 2008-10-05 19:37 - 00000000 ____D C:\Users\Florian\AppData\Roaming\HP
2013-06-25 17:57 - 2006-11-02 14:37 - 00000000 ____D C:\Windows\twain_32
2013-06-25 17:54 - 2013-06-25 17:54 - 00000000 ____D C:\Program Files\Common Files\HP
2013-06-25 17:54 - 2013-06-25 17:54 - 00000000 ____D C:\Program Files\Common Files\Hewlett-Packard
2013-06-25 17:50 - 2008-10-05 18:52 - 00000000 ____D C:\Program Files\HP
2013-06-25 09:25 - 2008-11-04 20:19 - 00000000 ___RD C:\Users\Florian\..Tiermedizin JLU
2013-06-22 12:02 - 2013-06-22 12:01 - 00000000 ____D C:\Users\Florian\Lustiges
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-07-21 17:06
==================== End Of Log ============================
--- --- --- --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 19-07-2013
Ran by Florian at 2013-07-21 19:55:31
Running from C:\Users\Florian\Desktop
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
32 Bit HP CIO Components Installer (Version: 6.1.2)
6500_E709_BasicWeb (Version: 140.0.000.000)
6500_E709_Help_BasicWeb (Version: 1.00.0000)
ABBYY FineReader OCR Engine
Adobe Acrobat 8 Professional - English, Français, Deutsch (Version: 8.3.1)
Adobe Acrobat 8.3.1 - CPSID_83708
Adobe Acrobat 8.3.1 Professional (Version: 8.3.1)
Adobe AIR (Version: 3.4.0.2710)
Adobe Flash Player 11 ActiveX (Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader X (10.1.7) - Deutsch (Version: 10.1.7)
Adobe Shockwave Player 12.0 (Version: 12.0.2.122)
Advanced Archive Password Recovery (HKCU Version: 4.53)
Age of Empires II - the Conquerors WideScreen Patcher (Version: 1.0.40)
AIDA64 Extreme Edition v1.50 (Version: 1.50)
Apple Application Support (Version: 2.1.9)
Apple Mobile Device Support (Version: 5.2.0.6)
Apple Software Update (Version: 2.1.3.127)
aWARemote Server version 2.3.0 (Version: 2.3.0)
Battlefield 2(TM)
Battlefield 2: Special Forces
Bonjour (Version: 3.0.0.10)
bpd_scan (Version: 3.00.0000)
BPDSoftware_Ini (Version: 1.00.0000)
BufferChm (Version: 140.0.213.000)
Bundled software uninstaller
calibre (Version: 0.9.5)
CCleaner (Version: 3.12)
CloneCD
Compatibility Pack für 2007 Office System (Version: 12.0.6612.1000)
D3DX10 (Version: 15.4.2368.0902)
DAEMON Tools Lite (Version: 4.45.3.0297)
DAVA2003 for POCKETPC 2003
Dell Support Center (Version: 3.1.5830.12)
Dell System Detect (HKCU Version: 3.3.2.0)
DivX-Setup (Version: 2.6.1.3)
Dragon NaturallySpeaking 12 (Version: 12.50.000)
Dropbox (HKCU Version: 2.0.22)
Drucken in PDF Annotator (novaPDF OEM 7.1 printer)
Dungeons And Dragons Anthology - The Master Collection (Version: 1.0.0)
DVDFab 8.1.5.9 (20/01/2012) Qt
eReg (Version: 1.20.138.34)
Exact Audio Copy 1.0beta3 (Version: 1.0beta3)
Falk Navi-Manager (Version: 2.7.0)
Feedback Tool (Version: 1.2.0)
Free Audio CD to MP3 Converter version 1.3.12.1228 (Version: 1.3.12.1228)
Free YouTube Download version 3.1.29.608 (Version: 3.1.29.608)
Free YouTube to MP3 Converter version 3.11.32.918 (Version: 3.11.32.918)
GMX SMS-Manager (Version: 2.7.2)
GMX SMS-Manager (Version: 2.7.2.6)
Google Earth (Version: 7.0.3.8542)
Google Update Helper (Version: 1.3.21.153)
Greenshot
HP Officejet 6500 E709 Series (Version: 14.0)
HP Update (Version: 5.002.007.004)
ImgBurn (Version: 2.5.7.0)
Intel(R) Graphics Media Accelerator Driver
iTunes (Version: 10.6.3.25)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Java(TM) 6 Update 35 (Version: 6.0.350)
JDownloader 0.9 (Version: 0.9)
LAME v3.98.3 for Audacity
Langenscheidt Vokabeltrainer 3.0 Französisch (Version: 3.0.1)
Langenscheidt Vokabeltrainer 5.0 Englisch (Version: 5.0.0)
LogiEdit (remove only)
Logitech SetPoint 6.32 (Version: 6.32.20)
Logitech Unifying-Software 2.00 (Version: 2.00.43)
Lyrics-Pal
MediaMonkey 4.0 (Version: 4.0)
Mesh Runtime (Version: 15.4.5722.2)
Microsoft .NET Compact Framework 3.5 (Version: 3.5.7283)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
Mozilla Thunderbird 17.0.7 (x86 de) (Version: 17.0.7)
Mp3tag v2.49 (Version: v2.49)
MSVCRT (Version: 15.4.2862.0708)
MyPhoneExplorer (Version: 1.8.4)
navigating.de POI-Warner MN7 Edition (Version: 2.5)
Nero Burning ROM (Version: 12.0.20000)
Nero Burning ROM Help (CHM) (Version: 12.0.3000)
Nero BurningROM 12 (Version: 12.0.00300)
Nero ControlCenter Help (CHM) (Version: 12.0.5000)
Nero Core Components (Version: 11.0.18100)
Nero Mega Plugin Pack (Version: 2.0)
Nero SharedVideoCodecs (Version: 1.0.12100.2.0)
Nero Update (Version: 11.0.11800.31.0)
Network (Version: 140.0.215.000)
Norton 360 Premier Edition (Version: 20.4.0.40)
PDF Annotator 3.0.0.324 (Version: 3.0.0.324)
Polar Daemon (Version: 2.2.20000)
Polar WebSync (Version: 2.8.10006)
Prerequisite installer (Version: 12.0.0002)
ProductContext
Revo Uninstaller 1.93 (Version: 1.93)
SAMSUNG Mobile Composite Device Software
Samsung Mobile phone USB driver Software
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.16.0)
Scan (Version: 140.0.167.000)
ScanWizard 5
Secure Download Manager (Version: 3.1.0)
Segoe UI (Version: 15.4.2271.0615)
Skype Click to Call (Version: 5.10.9560)
Skype™ 6.5 (Version: 6.5.158)
Smart card bundle 0.10
SopCast 3.5.0 (Version: 3.5.0)
Spb Wireless Monitor
Sweet Home 3D version 3.6
swMSM (Version: 12.0.0.1)
TeamViewer 8 (Version: 8.0.19617)
The Glass Horse
ToolBook 10 Neuron (Version: 10.0.0.215)
Toolbox (Version: 140.0.428.000)
toolplugin
Torino 2006
Total Immersion D'Fusion @Home Web Plug-In
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
VLC media player 1.1.11 (Version: 1.1.11)
Vokabeltrainer-Update 5.0.27 (Version: 5.0.27)
WebReg (Version: 140.0.213.017)
Winamp (Version: 5.621 )
Winamp Detector Plug-in (HKCU Version: 1.0.0.1)
Windows 7 USB/DVD Download Tool (Version: 1.0.30)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3508.1109)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Mobile-Gerätecenter (Version: 6.1.6965.0)
Windows Mobile-Gerätecenter: Treiberupdate (Version: 6.1.6965.0)
XMind (Version: 3.2.1)
==================== Restore Points =========================
04-07-2013 17:28:17 Geplanter Prüfpunkt
06-07-2013 07:14:59 Geplanter Prüfpunkt
07-07-2013 12:52:48 Geplanter Prüfpunkt
08-07-2013 19:07:17 Geplanter Prüfpunkt
10-07-2013 18:33:23 Geplanter Prüfpunkt
16-07-2013 18:40:12 Geplanter Prüfpunkt
18-07-2013 21:02:53 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2006-11-02 12:23 - 2006-09-18 23:41 - 00000761 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {01913127-43DF-49EE-A3A2-5E4597BA8C1F} - System32\Tasks\Lyrics-Pal Update => C:\Program Files\LyricsPal\Lyrics.exe [2013-07-17] (LyricsPal Soft. LTD)
Task: {066F6E62-D165-4727-9EF9-C4427D47B746} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files\Norton 360 Premier Edition\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2D44FB1C-FAF9-4486-BEB6-7FB99053F3A1} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files\Norton Internet Security\Engine\20.4.0.40\SymErr.exe No File
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {3953543E-937B-4C1E-9614-83B0339777F8} - System32\Tasks\Microsoft\Windows\RestartManager\{0633B004-99F8-4717-B454-16126C2CF045} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {4471B973-9CAB-4153-B75D-EF2B33B72835} - System32\Tasks\YourFile Update => C:\Program Files\YourFileDownloader\YourFileUpdater.exe No File
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {4DC02516-FE6F-4C01-9937-E3C86B2B5016} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\schtasks.exe [2008-01-21] (Microsoft Corporation)
Task: {5F32F7A3-C44A-4B8F-862A-240C67D9D0CE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-26] (Google Inc.)
Task: {679A7AC1-6B84-49CE-9BAB-D82A22EEB23B} - System32\Tasks\PCDEventLauncher => C:\Program Files\Dell Support Center\sessionchecker.exe [2011-06-21] (PC-Doctor, Inc.)
Task: {7489572A-15E3-4DC8-A190-B949C0995744} - System32\Tasks\User_Feed_Synchronization-{CD97679B-D1EC-44DD-AEFF-AC5AB9899CC3} => C:\Windows\system32\msfeedssync.exe [2011-06-14] (Microsoft Corporation)
Task: {7E6EF2BB-D5CD-4EE2-AB26-0AD4D2565C94} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files\Norton Internet Security\Engine\20.4.0.40\SymErr.exe No File
Task: {842828D9-7352-45E7-95A7-D2978F7296AA} - System32\Tasks\Microsoft\Windows\Defrag\ManualDefrag => C:\Windows\system32\defrag.exe [2008-01-21] (Microsoft Corp.)
Task: {85AFE249-2E76-44A8-B4BB-6AE16FEF893B} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton 360 Premier Edition\Engine\20.4.0.40\WSCStub.exe [2013-06-03] (Symantec Corporation)
Task: {8945E714-88AF-43B3-87E5-528D9CA0E36D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-10-26] (Google Inc.)
Task: {A61555D3-7840-45C1-A5A9-0D49851DE37A} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification => C:\Windows\System32\wsqmcons.exe [2008-01-21] (Microsoft Corporation)
Task: {B0BE90F5-8B45-4F9E-BD5F-681104A8E392} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\Dell Support Center\uaclauncher.exe [2011-06-21] (PC-Doctor, Inc.)
Task: {B809764B-BF1A-498D-9B81-DFD4E813966E} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files\Norton 360 Premier Edition\Engine\20.4.0.40\SymErr.exe [2013-06-03] (Symantec Corporation)
Task: {BC2E6C0E-2061-40BB-A377-C5EEC60C40C8} - System32\Tasks\NeroLiveEpgUpdate-FHLT_Florian => C:\Program Files\Nero\Nero 9\Nero Live\NeroLive.exe No File
Task: {CB3EE165-1690-4655-8935-73A08CB83FB1} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {CBD65FC2-9F71-4278-B735-A0E602E434C6} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\Dell Support Center\uaclauncher.exe [2011-06-21] (PC-Doctor, Inc.)
Task: {D040C961-9977-4B5B-B5D4-43684868A58E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-06] (Adobe Systems Incorporated)
Task: {E0C5156C-171D-470B-9160-DD2A5325AD10} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe No File
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {EDE194D5-C72C-496B-BE69-CFC0C5DE9F2A} - System32\Tasks\YourFile DownloaderUpdate => C:\Program Files\YourFileDownloader\YourFileUpdater.exe No File
Task: {FE09BD0D-25D5-4EA2-A187-FF4B461B44CC} - System32\Tasks\{50C219AA-1D77-4C9A-ACF9-F6537E83B6E0} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-03] (Skype Technologies S.A.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Lyrics-Pal Update.job => C:\Program Files\LyricsPal\Lyrics.exe
Task: C:\Windows\Tasks\NeroLiveEpgUpdate-FHLT_Florian.job => C:\Program Files\Nero\Nero 9\Nero Live\NeroLive.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\Dell Support Center\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\Dell Support Center\uaclauncher.exe
==================== Faulty Device Manager Devices =============
Name: Officejet 6500 E709n
Description: Officejet 6500 E709n
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Officejet 6500 E709n
Description: Officejet 6500 E709n
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Officejet 6600
Description: Officejet 6600
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (07/21/2013 05:00:48 PM) (Source: Perflib) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4
Error: (07/21/2013 05:00:44 PM) (Source: Perflib) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4
Error: (07/19/2013 05:59:05 PM) (Source: Perflib) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4
Error: (07/19/2013 05:59:03 PM) (Source: Perflib) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4
Error: (07/18/2013 03:36:08 PM) (Source: Perflib) (User: )
Description: BITSC:\Windows\system32\bitsperf.dll4
Error: (07/17/2013 05:47:52 PM) (Source: Application Hang) (User: )
Description: Programm MyPhoneExplorer.exe, Version 1.8.0.4 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 1068
Anfangszeit: 01ce83042267a399
Zeitpunkt der Beendigung: 27
Error: (07/17/2013 05:34:12 PM) (Source: Application Hang) (User: )
Description: Programm MyPhoneExplorer.exe, Version 1.8.0.4 arbeitet nicht mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem zu suchen.
Prozess-ID: 1dc4
Anfangszeit: 01ce83021bdfa6a9
Zeitpunkt der Beendigung: 20
Error: (07/17/2013 05:20:19 PM) (Source: Perflib) (User: )
Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4
Error: (07/17/2013 05:20:09 PM) (Source: Perflib) (User: )
Description: EmdCacheC:\Windows\system32\emdmgmt.dll4
Error: (07/15/2013 11:26:32 PM) (Source: Application Error) (User: )
Description: Fehlerhafte Anwendung IEXPLORE.EXE, Version 9.0.8112.16476, Zeitstempel 0x5126e7ac, fehlerhaftes Modul msvcrt.dll, Version 7.0.6002.18551, Zeitstempel 0x4ee8cc5a, Ausnahmecode 0xc0000005, Fehleroffset 0x000136c9,
Prozess-ID 0x1a64, Anwendungsstartzeit IEXPLORE.EXE0.
System errors:
=============
Error: (07/21/2013 04:56:34 PM) (Source: Service Control Manager) (User: )
Description: HP CUE DeviceDiscovery Service
Error: (07/21/2013 04:55:58 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (07/19/2013 05:49:02 PM) (Source: Service Control Manager) (User: )
Description: HP CUE DeviceDiscovery Service
Error: (07/19/2013 05:48:08 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (07/19/2013 01:06:58 AM) (Source: DCOM) (User: )
Description: {C2BFE331-6739-4270-86C9-493D9A04CD38}
Error: (07/18/2013 03:36:25 PM) (Source: Service Control Manager) (User: )
Description: HP CUE DeviceDiscovery Service
Error: (07/18/2013 03:35:54 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Error: (07/17/2013 11:53:35 PM) (Source: DCOM) (User: )
Description: {C2BFE331-6739-4270-86C9-493D9A04CD38}
Error: (07/17/2013 05:15:35 PM) (Source: Service Control Manager) (User: )
Description: HP CUE DeviceDiscovery Service
Error: (07/17/2013 05:14:16 PM) (Source: Service Control Manager) (User: )
Description: Parallel port driver%%1058
Microsoft Office Sessions:
=========================
Error: (11/14/2011 11:06:35 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 5215 seconds with 0 seconds of active time. This session ended with a crash.
Error: (07/16/2011 08:41:01 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6557.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 47 seconds with 0 seconds of active time. This session ended with a crash.
Error: (06/27/2011 08:35:51 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 60 seconds with 0 seconds of active time. This session ended with a crash.
Error: (01/25/2011 08:59:50 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 266 seconds with 120 seconds of active time. This session ended with a crash.
Error: (06/12/2010 00:48:26 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 1146 seconds with 60 seconds of active time. This session ended with a crash.
Error: (12/31/2009 09:45:10 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 50 seconds with 0 seconds of active time. This session ended with a crash.
Error: (12/29/2009 00:20:49 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 30 seconds with 0 seconds of active time. This session ended with a crash.
Error: (10/11/2008 07:57:56 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 746 seconds with 660 seconds of active time. This session ended with a crash.
CodeIntegrity Errors:
===================================
Date: 2013-07-21 19:55:25.389
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-21 19:55:24.995
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-21 19:55:24.701
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-21 19:55:24.395
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-21 19:55:24.078
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-21 19:55:23.783
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-21 19:55:23.484
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-21 19:55:23.196
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-21 19:55:03.795
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-07-21 19:55:03.468
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 70%
Total physical RAM: 3573.12 MB
Available physical RAM: 1068.94 MB
Total Pagefile: 7331.97 MB
Available Pagefile: 4867.17 MB
Total Virtual: 2047.88 MB
Available Virtual: 1883.77 MB
==================== Drives ================================
Drive c: (Festplatte) (Fixed) (Total:220.29 GB) (Free:34.94 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVERY) (Fixed) (Total:10 GB) (Free:5.08 GB) NTFS
Drive f: (FIT_OHNE_GERAETE) (CDROM) (Total:4.36 GB) (Free:0 GB) UDF
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 233 GB) (Disk ID: C0000000)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Not Active) - (Size=10 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=220 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=3 GB) - (Type=OF Extended)
==================== End Of Log ============================
|
|
21.07.2013, 22:28
| #5 |
| /// TB-Ausbilder | Bizcoaching, was jetzt ? Hi, ich hab bei der ersten schnelle Durchsicht der Logs gesehen, dass du unsaubere Software nutzt. Das unterstützen wir nicht: http://www.trojaner-board.de/95394-c...-software.html Wenn ich dir helfen soll, dann deinstalliere und entferne jetzt zuerst restlos alle illegale Software (Cracks, Keygens, etc.). Sobald alles weg ist, können wir loslegen. Sollte ich im weiteren Verlauf aber trotz dieser Warnung nochmals sowas sehen, ist Schluss. Gib mir Bescheid, sobald es hier weiter geht.
__________________ cheers, Leo |
|
21.07.2013, 23:03
| #6 |
| | Bizcoaching, was jetzt ? Oh Gott Ja,  da sind bestimmt noch irgendwelche Jugendsünden mit drauf die ich einfach im Ordner Copy&Past Verfahren auf den Laptop (als er noch neu war) rübergezogen habe.Kannst du mir bitte eine PN schicken mit dem was ich löschen soll... mache ich natürlich dann sofort ... Sry |
|
22.07.2013, 00:07
| #7 |
| /// TB-Ausbilder | Bizcoaching, was jetzt ? Ok, danach: Schritt 1
Schritt 2 Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 3 Starte noch einmal FRST.
Bitte poste in deiner nächsten Antwort:
__________________ cheers, Leo |
|
25.07.2013, 19:48
| #8 |
| | Bizcoaching, was jetzt ? AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v2.306 - Datei am 25/07/2013 um 19:30:08 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzer : Florian - FHLT
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Florian\Desktop\adwcleaner.exe
# Option [Löschen]
**** [Dienste] ****
***** [Dateien / Ordner] *****
Datei Gelöscht : C:\Program Files\mozilla firefox\searchplugins\Search the web.src
Ordner Gelöscht : C:\Program Files\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Program Files\DAEMON Tools Toolbar
Ordner Gelöscht : C:\Users\Florian\AppData\Local\Ilivid Player
Ordner Gelöscht : C:\Users\Florian\AppData\Local\OpenCandy
Ordner Gelöscht : C:\Users\Florian\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Florian\AppData\Local\TempDir
Ordner Gelöscht : C:\Users\Florian\AppData\LocalLow\boost_interprocess
Ordner Gelöscht : C:\Users\Florian\AppData\LocalLow\FunWebProducts
Ordner Gelöscht : C:\Users\Florian\AppData\LocalLow\MyWebSearch
Ordner Gelöscht : C:\Users\Florian\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Florian\AppData\Roaming\OfferBox
Ordner Gelöscht : C:\Users\Florian\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Florian\AppData\Roaming\Toolplugin
Ordner Gelöscht : C:\Users\Florian\AppData\Roaming\widestream
Ordner Gelöscht : C:\Users\Florian\AppData\Roaming\yourfiledownloader
Ordner Gelöscht : C:\Users\Florian\Documents\widestream
Ordner Gelöscht : C:\Windows\Installer\{2C8574B5-6935-4FCE-860E-F4E8602378FF}
Ordner Gelöscht : C:\Windows\Installer\{835525BE-63BD-4EC4-9425-00CEAD4849C2}
***** [Registrierungsdatenbank] *****
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\BI
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\bi_uninstaller
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\toolplugin
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DFEFCDEE-CF1A-4FC8-89AF-189327213627}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DFEFCDEE-CF1A-4FC8-89AF-189327213627}
Schlüssel Gelöscht : HKCU\Software\Offerbox
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\WideStream
Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar
Schlüssel Gelöscht : HKCU\Software\YourFileDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DFEFCDEE-CF1A-4FC8-89AF-189327213627}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj.1
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
Schlüssel Gelöscht : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\toolplugin
Schlüssel Gelöscht : HKLM\Software\YourFileDownloader
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DFEFCDEE-CF1A-4FC8-89AF-189327213627}]
***** [Internet Browser] *****
-\\ Internet Explorer v9.0.8112.16496
Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=94699e85-4ae2-4fb1-b15c-654479868441&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com
Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=94699e85-4ae2-4fb1-b15c-654479868441&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com
Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=94699e85-4ae2-4fb1-b15c-654479868441&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com
Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=94699e85-4ae2-4fb1-b15c-654479868441&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com
Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=94699e85-4ae2-4fb1-b15c-654479868441&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com
Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=DE&userid=94699e85-4ae2-4fb1-b15c-654479868441&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com
-\\ Mozilla Firefox v22.0 (de)
Datei : C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\c2swn6dv.default-1357981620706\prefs.js
C:\Users\Florian\AppData\Roaming\Mozilla\Firefox\Profiles\c2swn6dv.default-1357981620706\user.js ... Gelöscht !
Gelöscht : user_pref("extensions.web@veoh.com.install-event-fired", true);
Datei : C:\Users\FH\AppData\Roaming\Mozilla\Firefox\Profiles\lo2ovuyb.default\prefs.js
[OK] Die Datei ist sauber.
*************************
AdwCleaner[S1].txt - [7805 octets] - [25/07/2013 19:30:08]
########## EOF - C:\AdwCleaner[S1].txt - [7865 octets] ##########
Scheint wieder sauber zu sein.... Vielen vielen Dank. Beste Grüße |
|
29.07.2013, 00:19
| #9 |
| /// TB-Ausbilder | Bizcoaching, was jetzt ? Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Ich bekomme somit keine Benachrichtigung mehr über neue Antworten. Solltest du das Thema erneut brauchen, schicke mir bitte eine PM und wir machen hier weiter. Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.
__________________ cheers, Leo |
|
| Themen zu Bizcoaching, was jetzt ? |
| adware, adware?, bizcoaching, entferne, festgestellt, foren, gestellt, inter, interne, internet, langsam, popup-fenster, programme, schei, sehr langsam, speziell, verschiedene |
Linear-Darstellung
