|
Plagegeister aller Art und deren Bekämpfung: Sehr viel Werbung und langsames Internet?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
02.08.2013, 15:48 | #1 |
| Sehr viel Werbung und langsames Internet? Hallo, ich habe seit Tagen sehr viel Werbung auf allen Seiten, auch auf Facebook, Youtube etc. Mein Internet ist außerdem viel viel langsamer als sonst. Habe schon den Viren Scanner von Kapersky und mein Viren Programm von Norten durchlaufen lassen- Hat aber nichts gebracht.. Außerdem öffnet sich immer ein externes Werbe Fenster Vielen Dank im vorraus |
02.08.2013, 15:51 | #2 |
/// Malware-holic | Sehr viel Werbung und langsames Internet? Hi,
__________________ich werde dir gleich eine Anleitung posten, dort wird eine Additions.txt erstellt, bearbeite diese, wie beschrieben. 1. Frage: sind Kaspersky und Norton gleichzeitig instaliert? dann deinstaliere eines davon. 2. Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Empfehlungen fürs Deinstallieren Bitte kopiere die Liste der installierten Programme aus der additions.txt hier in deinen Thread. Notiere mir bitte hinter jede Zeile, ob folgendes Kategorie zutrifft: Unbekannt, Nötig, Unnötig
__________________ |
02.08.2013, 16:03 | #3 |
| Sehr viel Werbung und langsames Internet? danke für die schnelle Antwort
__________________FRST.txt Code:
ATTFilter (AMD) C:\Windows\system32\atiesrxx.exe (AMD) C:\Windows\system32\atieclxx.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe (Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe () C:\Windows\SysWOW64\PnkBstrA.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Spotify Ltd) C:\Users\Niklas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe (Microsoft Corporation) C:\Windows\system32\msiexec.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-13] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-29] (Synaptics Incorporated) HKCU\...\Run: [Spotify] - C:\Users\Niklas\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-03] (Spotify Ltd) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Niklas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-03] (Spotify Ltd) HKCU\...\Run: [Google Update] - C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-07-14] (Google Inc.) HKCU\...\Run: [GoogleChromeAutoLaunch_17B538142C689CA6298E80C28D1C2356] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [846288 2013-07-25] (Google Inc.) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [BtTray] - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [363520 2012-08-02] (IVT Corporation) HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491320 2012-07-26] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [580512 2012-07-09] (Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.) HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1558480 2013-07-25] (APN) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM13/10 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM13/10 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM13/10 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM13/10 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM13/10 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM13/10 SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF SearchScopes: HKLM - {3D997360-C236-438F-95A0-27066D3656BF} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF SearchScopes: HKLM-x32 - {3D997360-C236-438F-95A0-27066D3656BF} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=CMNTDFJS SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF SearchScopes: HKCU - {3D997360-C236-438F-95A0-27066D3656BF} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} BHO-x32: Ask Toolbar - {41545534-2D56-3700-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll (APN LLC.) BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation) BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation) BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation) Toolbar: HKLM-x32 - Ask Toolbar - {41545534-2D56-3700-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ATU4-V7\Passport.dll (APN LLC.) Toolbar: HKCU - No Name - {41545534-2D56-3700-76A7-7A786E7484D7} - No File DPF: HKLM-x32 {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.96.0.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\..\Interfaces\{F11F0661-D0F5-4A57-867B-A38D0FA3FE3A}: [NameServer]8.8.8.8 Chrome: ======= CHR Extension: (Ask Toolbar) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaajfocmnnhjaajccaelhippajhaeod\20.52309_0 CHR Extension: (Google Docs) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (MagniPIc) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhakbbaancdpnohkiihbobfabdnedkfg\1 CHR Extension: (Norton Identity Protection) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.0.10_0 CHR Extension: (Hangouts) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd\2013.717.433.1_0 CHR Extension: (Battlefield Play4Free) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0 CHR Extension: (Gmail) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [aaaajfocmnnhjaajccaelhippajhaeod] - C:\ProgramData\AskPartnerNetwork\Toolbar\ATU4-V7\CRX\ToolbarCR.crx CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-08-06] (Advanced Micro Devices, Inc.) R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [168400 2013-07-25] (APN LLC.) R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1544192 2012-08-02] (IVT Corporation) R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-07-10] (IVT Corporation) R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation) R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-06-26] () S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [199008 2012-06-23] (AppEx Networks Corporation) R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [98472 2012-07-17] (Advanced Micro Devices) R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-06-20] (Symantec Corporation) R3 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [1393240 2013-06-20] (Symantec Corporation) R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation) U4 BthAvrcpTg; U4 BthHFEnum; U4 bthhfhid; R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation) R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-08] (Ralink Corporation) R3 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation) R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink) R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-06-24] (Symantec Corporation) R3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-06-24] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2013-06-24] (Symantec Corporation) R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20130801.001\IDSvia64.sys [513184 2013-06-22] (Symantec Corporation) R3 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20130801.001\IDSvia64.sys [513184 2013-06-22] (Symantec Corporation) R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130801.034\ENG64.SYS [126040 2013-06-24] (Symantec Corporation) R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130801.034\ENG64.SYS [126040 2013-06-24] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130801.034\EX64.SYS [2098776 2013-06-24] (Symantec Corporation) R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\VirusDefs\20130801.034\EX64.SYS [2098776 2013-06-24] (Symantec Corporation) R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [269968 2012-07-04] (Realtek Semiconductor Corp.) R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [695392 2012-08-09] (Ralink Technology, Corp.) S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-29] (Synaptics Incorporated) S3 SmbDrvI; C:\Windows\System32\drivers\Smb_driver_Intel.sys [43832 2012-08-29] (Synaptics Incorporated) R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation) R3 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation) R3 SymDS; C:\Windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation) R3 SymEFA; C:\Windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation) S0 SymELAM; C:\Windows\System32\drivers\NISx64\1404000.028\SymELAM.sys [23448 2012-06-21] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-26] (Symantec Corporation) R3 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation) R3 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation) R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20288 2012-08-03] (Hewlett-Packard Development Company, L.P.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-02 16:56 - 2013-08-02 16:56 - 00000000 ____D C:\FRST 2013-08-02 16:55 - 2013-08-02 16:55 - 01781485 _____ (Farbar) C:\Users\Niklas\Downloads\FRST64.exe 2013-08-02 00:23 - 2013-08-02 16:28 - 00001142 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA.job 2013-08-02 00:23 - 2013-08-02 00:28 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core.job 2013-08-02 00:23 - 2013-08-02 00:23 - 00004090 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA 2013-08-02 00:23 - 2013-08-02 00:23 - 00003710 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core 2013-08-02 00:23 - 2013-08-02 00:23 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Mozilla 2013-08-01 10:33 - 2013-08-01 10:33 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Niklas\Downloads\tdsskiller2.8.18.0.exe 2013-08-01 10:33 - 2013-08-01 10:33 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Niklas\Downloads\tdsskiller2.8.18.0 (1).exe 2013-08-01 01:17 - 2013-08-02 01:11 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Skype 2013-08-01 01:16 - 2013-08-01 01:17 - 00000000 ____D C:\ProgramData\Skype 2013-08-01 01:16 - 2013-08-01 01:16 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk 2013-08-01 01:16 - 2013-08-01 01:16 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-08-01 01:15 - 2013-08-01 01:15 - 32782192 _____ (Skype Technologies S.A.) C:\Users\Niklas\Downloads\SkypeSetupFull_6.7.102.exe 2013-07-27 20:43 - 2013-07-27 20:44 - 00000000 ____D C:\Users\Niklas\Desktop\Bilder Türkei 2013-07-27 02:12 - 2013-07-27 02:12 - 00000000 ____D C:\ProgramData\StarApp 2013-07-27 02:11 - 2013-08-01 01:54 - 00000000 ____D C:\ProgramData\MagniPIc 2013-07-27 02:11 - 2013-08-01 01:54 - 00000000 ____D C:\ProgramData\InstallMate 2013-07-27 02:10 - 2013-07-27 02:10 - 00893000 _____ (PrivitizeVPN) C:\Users\Niklas\Downloads\Lego_Racers_secure (1).exe 2013-07-27 02:09 - 2013-07-27 02:09 - 00893000 _____ (PrivitizeVPN) C:\Users\Niklas\Downloads\GTA_SAN_ANDREAS_secure.exe 2013-07-27 02:03 - 2013-07-27 02:03 - 01329488 _____ (Conduit) C:\Users\Niklas\Downloads\Lego_Racers.exe 2013-07-22 20:55 - 2013-07-22 20:55 - 551076950 _____ C:\Windows\MEMORY.DMP 2013-07-22 20:55 - 2013-07-22 20:55 - 00279888 _____ C:\Windows\Minidump\072213-32401-01.dmp 2013-07-22 20:55 - 2013-07-22 20:55 - 00000000 ____D C:\Windows\Minidump 2013-07-19 21:40 - 2013-07-31 03:21 - 00000000 ___RD C:\Users\Niklas\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App 2013-07-17 16:40 - 2013-07-17 16:40 - 00000000 ____D C:\Users\Niklas\AppData\Local\AskPartnerNetwork 2013-07-17 02:44 - 2013-05-16 01:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll 2013-07-17 01:31 - 2013-07-17 01:31 - 00002114 _____ C:\Users\Public\Desktop\Video Search.lnk 2013-07-17 01:31 - 2013-07-17 01:31 - 00001186 _____ C:\Users\Public\Desktop\aTube Catcher.lnk 2013-07-17 01:30 - 2013-06-06 23:41 - 00489392 _____ (Ask Partner Network) C:\Users\Niklas\Documents\APNSetup.exe 2013-07-17 01:16 - 2013-07-17 01:16 - 00000000 ____D C:\Users\Niklas\aTubeCatcher 2013-07-16 13:48 - 2013-07-16 13:48 - 00281248 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-15 02:20 - 2013-07-17 01:30 - 00000000 ____D C:\Program Files (x86)\DsNET Corp 2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\ProgramData\APN 2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-07-15 02:18 - 2013-07-15 02:19 - 11797360 _____ (DsNET Corp) C:\Users\Niklas\Downloads\aTubeCatcher1482.exe 2013-07-12 00:54 - 2013-06-12 02:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-07-12 00:54 - 2013-06-12 02:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-07-12 00:54 - 2013-06-12 02:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-07-12 00:54 - 2013-06-12 02:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-07-12 00:54 - 2013-06-12 02:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-07-12 00:54 - 2013-06-12 02:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-07-12 00:54 - 2013-06-12 02:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-07-12 00:54 - 2013-06-12 02:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-07-12 00:54 - 2013-06-12 02:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-07-12 00:54 - 2013-06-12 02:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-07-12 00:54 - 2013-06-12 02:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-07-12 00:54 - 2013-06-12 02:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-07-12 00:54 - 2013-06-12 02:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-07-12 00:54 - 2013-06-12 02:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-07-12 00:54 - 2013-06-12 02:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-07-12 00:54 - 2013-06-12 02:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-07-12 00:54 - 2013-06-12 02:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-07-12 00:54 - 2013-06-01 12:25 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2013-07-12 00:54 - 2013-06-01 12:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2013-07-12 00:54 - 2013-05-31 02:14 - 04036096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-07-12 00:54 - 2013-04-12 01:30 - 01421312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2013-07-12 00:54 - 2013-04-12 01:22 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2013-07-12 00:53 - 2013-05-04 09:59 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-07-12 00:53 - 2013-05-04 07:57 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-07-11 17:00 - 2013-07-22 18:03 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Apple Computer 2013-07-11 17:00 - 2013-07-11 17:00 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-07-11 17:00 - 2013-07-11 17:00 - 00000000 ____D C:\Users\Niklas\AppData\Local\Apple Computer 2013-07-11 17:00 - 2012-08-21 14:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2013-07-11 16:58 - 2013-07-11 16:59 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-07-11 16:58 - 2013-07-11 16:59 - 00000000 ____D C:\Program Files\iTunes 2013-07-11 16:58 - 2013-07-11 16:59 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-07-11 16:58 - 2013-07-11 16:58 - 00000000 ____D C:\ProgramData\Apple Computer 2013-07-11 16:58 - 2013-07-11 16:58 - 00000000 ____D C:\Program Files\iPod 2013-07-11 16:57 - 2013-07-11 16:57 - 02378368 _____ () C:\Users\Niklas\Downloads\angling_setup.exe 2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Windows\System32\Tasks\Apple 2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Users\Niklas\AppData\Local\Apple 2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2013-07-11 16:49 - 2013-07-11 16:49 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-07-11 16:44 - 2013-07-11 16:46 - 90917712 _____ (Apple Inc.) C:\Users\Niklas\Downloads\iTunes64Setup.exe 2013-07-06 02:10 - 2013-07-06 02:10 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Utherverse 2013-07-04 01:21 - 2010-06-02 05:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2013-07-04 01:21 - 2010-06-02 05:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll 2013-07-04 01:21 - 2010-06-02 05:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll 2013-07-04 01:21 - 2010-06-02 05:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll 2013-07-04 01:21 - 2010-06-02 05:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll 2013-07-04 01:21 - 2010-06-02 05:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2013-07-04 01:21 - 2010-05-26 12:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll 2013-07-04 01:21 - 2010-05-26 12:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2013-07-04 01:21 - 2010-05-26 12:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2013-07-04 01:21 - 2010-05-26 12:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2013-07-04 01:21 - 2010-05-26 12:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll 2013-07-04 01:21 - 2010-05-26 12:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll 2013-07-04 01:21 - 2010-05-26 12:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2013-07-04 01:21 - 2010-05-26 12:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2013-07-04 01:21 - 2010-05-26 12:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2013-07-04 01:21 - 2010-05-26 12:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2013-07-04 01:21 - 2010-02-04 11:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll 2013-07-04 01:21 - 2010-02-04 11:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll 2013-07-04 01:21 - 2010-02-04 11:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll 2013-07-04 01:21 - 2010-02-04 11:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll 2013-07-04 01:21 - 2010-02-04 11:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll 2013-07-04 01:21 - 2010-02-04 11:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll 2013-07-04 01:21 - 2010-02-04 11:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll 2013-07-04 01:21 - 2010-02-04 11:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll 2013-07-04 01:21 - 2009-09-04 18:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll 2013-07-04 01:21 - 2009-09-04 18:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll 2013-07-04 01:21 - 2009-09-04 18:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll 2013-07-04 01:21 - 2009-09-04 18:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll 2013-07-04 01:21 - 2009-09-04 18:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll 2013-07-04 01:21 - 2009-09-04 18:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll 2013-07-04 01:21 - 2009-09-04 18:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll 2013-07-04 01:21 - 2009-09-04 18:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll 2013-07-04 01:21 - 2009-09-04 18:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll 2013-07-04 01:21 - 2009-09-04 18:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll 2013-07-04 01:21 - 2009-09-04 18:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll 2013-07-04 01:21 - 2009-09-04 18:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll 2013-07-04 01:21 - 2009-03-16 15:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll 2013-07-04 01:21 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll 2013-07-04 01:21 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll 2013-07-04 01:21 - 2009-03-16 15:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll 2013-07-04 01:21 - 2009-03-16 15:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll 2013-07-04 01:21 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll 2013-07-04 01:21 - 2009-03-09 16:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll 2013-07-04 01:21 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll 2013-07-04 01:21 - 2009-03-09 16:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll 2013-07-04 01:21 - 2009-03-09 16:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll 2013-07-04 01:21 - 2008-10-27 11:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll 2013-07-04 01:21 - 2008-10-27 11:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll 2013-07-04 01:21 - 2008-10-27 11:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll 2013-07-04 01:21 - 2008-10-27 11:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll 2013-07-04 01:21 - 2008-10-27 11:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll 2013-07-04 01:21 - 2008-10-27 11:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll 2013-07-04 01:21 - 2008-10-27 11:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll 2013-07-04 01:21 - 2008-10-27 11:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll 2013-07-04 01:21 - 2008-10-10 05:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll 2013-07-04 01:21 - 2008-10-10 05:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll 2013-07-04 01:21 - 2008-10-10 05:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll 2013-07-04 01:21 - 2008-10-10 05:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll 2013-07-04 01:21 - 2008-10-10 05:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll 2013-07-04 01:21 - 2008-10-10 05:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll 2013-07-04 01:21 - 2008-07-31 11:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll 2013-07-04 01:21 - 2008-07-31 11:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll 2013-07-04 01:21 - 2008-07-31 11:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll 2013-07-04 01:21 - 2008-07-31 11:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2013-07-04 01:21 - 2008-07-31 11:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll 2013-07-04 01:21 - 2008-07-31 11:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2013-07-04 01:21 - 2008-07-10 12:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2013-07-04 01:21 - 2008-07-10 12:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2013-07-04 01:21 - 2008-07-10 12:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2013-07-04 01:21 - 2008-07-10 12:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2013-07-04 01:21 - 2008-07-10 12:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2013-07-04 01:21 - 2008-07-10 12:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2013-07-04 01:21 - 2008-05-30 15:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll 2013-07-04 01:21 - 2008-05-30 15:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll 2013-07-04 01:21 - 2008-05-30 15:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll 2013-07-04 01:21 - 2008-05-30 15:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll 2013-07-04 01:21 - 2008-05-30 15:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll 2013-07-04 01:21 - 2008-05-30 15:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll 2013-07-04 01:21 - 2008-05-30 15:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll 2013-07-04 01:21 - 2008-05-30 15:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll 2013-07-04 01:21 - 2008-05-30 15:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll 2013-07-04 01:21 - 2008-05-30 15:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll 2013-07-04 01:21 - 2008-05-30 15:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll 2013-07-04 01:21 - 2008-05-30 15:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll 2013-07-04 01:21 - 2008-05-30 15:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll 2013-07-04 01:21 - 2008-05-30 15:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll 2013-07-04 01:21 - 2008-03-05 17:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll 2013-07-04 01:21 - 2008-03-05 17:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll 2013-07-04 01:21 - 2008-03-05 17:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll 2013-07-04 01:21 - 2008-03-05 17:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll 2013-07-04 01:20 - 2008-03-05 17:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll 2013-07-04 01:20 - 2008-03-05 17:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll 2013-07-04 01:20 - 2008-03-05 16:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll 2013-07-04 01:20 - 2008-03-05 16:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll 2013-07-04 01:20 - 2008-03-05 16:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll 2013-07-04 01:20 - 2008-03-05 16:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll 2013-07-04 01:20 - 2008-02-06 00:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll 2013-07-04 01:20 - 2008-02-06 00:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll 2013-07-04 01:20 - 2007-10-22 04:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll 2013-07-04 01:20 - 2007-10-22 04:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll 2013-07-04 01:20 - 2007-10-22 04:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll 2013-07-04 01:20 - 2007-10-22 04:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll 2013-07-04 01:20 - 2007-10-12 16:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll 2013-07-04 01:20 - 2007-10-12 16:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll 2013-07-04 01:20 - 2007-10-12 16:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll 2013-07-04 01:20 - 2007-10-12 16:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll 2013-07-04 01:20 - 2007-10-02 10:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll 2013-07-04 01:20 - 2007-10-02 10:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll 2013-07-04 01:20 - 2007-07-20 01:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll 2013-07-04 01:20 - 2007-07-20 01:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll 2013-07-04 01:20 - 2007-07-19 19:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll 2013-07-04 01:20 - 2007-07-19 19:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll 2013-07-04 01:20 - 2007-07-19 19:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll 2013-07-04 01:20 - 2007-07-19 19:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll 2013-07-04 01:20 - 2007-07-19 19:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll 2013-07-04 01:20 - 2007-07-19 19:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll 2013-07-04 01:20 - 2007-06-20 21:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll 2013-07-04 01:20 - 2007-06-20 21:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll 2013-07-04 01:20 - 2007-05-16 17:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll 2013-07-04 01:20 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll 2013-07-04 01:20 - 2007-05-16 17:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll 2013-07-04 01:20 - 2007-05-16 17:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll 2013-07-04 01:20 - 2007-05-16 17:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll 2013-07-04 01:20 - 2007-05-16 17:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll 2013-07-04 01:20 - 2007-04-04 19:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll 2013-07-04 01:20 - 2007-04-04 19:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll 2013-07-04 01:20 - 2007-04-04 19:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll 2013-07-04 01:20 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll 2013-07-04 01:20 - 2007-03-15 17:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll 2013-07-04 01:20 - 2007-03-15 17:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll 2013-07-04 01:20 - 2007-03-12 17:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll 2013-07-04 01:20 - 2007-03-12 17:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll 2013-07-04 01:20 - 2007-03-12 17:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll 2013-07-04 01:20 - 2007-03-12 17:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll 2013-07-04 01:20 - 2007-03-05 13:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll 2013-07-04 01:20 - 2007-03-05 13:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll 2013-07-04 01:20 - 2007-01-24 16:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll 2013-07-04 01:20 - 2007-01-24 16:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll 2013-07-04 01:20 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll 2013-07-04 01:20 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll 2013-07-04 01:20 - 2006-11-29 14:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll 2013-07-04 01:20 - 2006-11-29 14:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll 2013-07-04 01:20 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll 2013-07-04 01:20 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll 2013-07-04 01:20 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll 2013-07-04 01:20 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll 2013-07-04 01:20 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll 2013-07-04 01:20 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll 2013-07-04 01:20 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll 2013-07-04 01:20 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll 2013-07-04 01:20 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll 2013-07-04 01:20 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll 2013-07-04 01:20 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll 2013-07-04 01:20 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll 2013-07-04 01:20 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll 2013-07-04 01:20 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll 2013-07-04 01:20 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll 2013-07-04 01:20 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll 2013-07-04 01:20 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll 2013-07-04 01:20 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll 2013-07-04 01:20 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll 2013-07-04 01:20 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll 2013-07-04 01:20 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll 2013-07-04 01:20 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll 2013-07-04 01:20 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll 2013-07-04 01:20 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll 2013-07-04 01:20 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll 2013-07-04 01:20 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll 2013-07-04 01:20 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll 2013-07-04 01:20 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll 2013-07-04 01:20 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll 2013-07-04 01:20 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll 2013-07-04 01:20 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll 2013-07-04 01:20 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll 2013-07-04 01:16 - 2013-07-04 01:21 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-07-04 01:16 - 2013-07-04 01:19 - 00000000 ___HD C:\Windows\msdownld.tmp 2013-07-04 01:04 - 2013-07-11 16:43 - 00000000 ____D C:\Program Files (x86)\Utherverse Digital Inc 2013-07-03 22:22 - 2013-07-03 22:56 - 00000000 ____D C:\Users\Niklas\Documents\Harry Potter II 2013-07-03 22:19 - 2013-07-03 22:19 - 00002243 _____ C:\Users\Public\Desktop\Harry Potter und die Kammer des Schreckens.lnk 2013-07-03 22:13 - 2013-07-03 22:13 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Electronic Arts 2013-07-03 22:13 - 2013-07-03 22:13 - 00000000 ____D C:\Program Files (x86)\Electronic Arts 2013-07-03 21:26 - 2013-07-03 21:26 - 00000060 _____ C:\Windows\wininit.ini 2013-07-03 15:16 - 2013-07-03 22:40 - 00000354 _____ C:\Windows\Tasks\HPCeeScheduleForNiklas.job 2013-07-03 15:16 - 2013-07-03 15:16 - 00003170 _____ C:\Windows\System32\Tasks\HPCeeScheduleForNiklas ==================== One Month Modified Files and Folders ======= 2013-08-02 16:56 - 2013-08-02 16:56 - 00000000 ____D C:\FRST 2013-08-02 16:55 - 2013-08-02 16:55 - 01781485 _____ (Farbar) C:\Users\Niklas\Downloads\FRST64.exe 2013-08-02 16:28 - 2013-08-02 00:23 - 00001142 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA.job 2013-08-02 16:21 - 2013-06-24 20:09 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-374219310-3835530781-1746485344-1002 2013-08-02 16:20 - 2012-08-17 22:13 - 00830120 _____ C:\Windows\system32\perfh007.dat 2013-08-02 16:20 - 2012-08-17 22:13 - 00188224 _____ C:\Windows\system32\perfc007.dat 2013-08-02 16:20 - 2012-07-26 10:28 - 01949368 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-02 16:18 - 2013-06-26 11:52 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Spotify 2013-08-02 16:18 - 2012-08-10 19:45 - 00000838 _____ C:\Windows\SysWOW64\bscs.ini 2013-08-02 16:16 - 2013-06-27 14:52 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-02 16:16 - 2013-03-21 09:44 - 00004524 _____ C:\Windows\SysWOW64\LOCALSERVICE.INI 2013-08-02 16:15 - 2013-03-21 09:44 - 00000061 _____ C:\Windows\SysWOW64\LOCALDEVICE.INI 2013-08-02 16:15 - 2012-07-26 10:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-02 16:14 - 2012-08-04 01:23 - 00016574 _____ C:\Windows\PFRO.log 2013-08-02 01:11 - 2013-08-01 01:17 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Skype 2013-08-02 01:03 - 2013-06-27 14:52 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-02 01:00 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\system32\sru 2013-08-02 00:28 - 2013-08-02 00:23 - 00001090 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core.job 2013-08-02 00:25 - 2013-06-24 19:53 - 01126418 _____ C:\Windows\WindowsUpdate.log 2013-08-02 00:23 - 2013-08-02 00:23 - 00004090 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA 2013-08-02 00:23 - 2013-08-02 00:23 - 00003710 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core 2013-08-02 00:23 - 2013-08-02 00:23 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Mozilla 2013-08-02 00:23 - 2013-06-27 14:52 - 00000000 ____D C:\Users\Niklas\AppData\Local\Google 2013-08-01 15:54 - 2013-06-26 11:37 - 00000094 _____ C:\Windows\SysWOW64\REMOTEDEVICE.INI 2013-08-01 10:33 - 2013-08-01 10:33 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Niklas\Downloads\tdsskiller2.8.18.0.exe 2013-08-01 10:33 - 2013-08-01 10:33 - 02237968 _____ (Kaspersky Lab ZAO) C:\Users\Niklas\Downloads\tdsskiller2.8.18.0 (1).exe 2013-08-01 02:28 - 2013-06-27 14:53 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-08-01 02:23 - 2012-07-26 10:21 - 00038932 _____ C:\Windows\setupact.log 2013-08-01 01:54 - 2013-07-27 02:11 - 00000000 ____D C:\ProgramData\MagniPIc 2013-08-01 01:54 - 2013-07-27 02:11 - 00000000 ____D C:\ProgramData\InstallMate 2013-08-01 01:17 - 2013-08-01 01:16 - 00000000 ____D C:\ProgramData\Skype 2013-08-01 01:16 - 2013-08-01 01:16 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk 2013-08-01 01:16 - 2013-08-01 01:16 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-08-01 01:15 - 2013-08-01 01:15 - 32782192 _____ (Skype Technologies S.A.) C:\Users\Niklas\Downloads\SkypeSetupFull_6.7.102.exe 2013-08-01 01:10 - 2013-06-24 20:30 - 00000000 ____D C:\Users\Niklas\Documents\Youcam 2013-07-31 03:21 - 2013-07-19 21:40 - 00000000 ___RD C:\Users\Niklas\Downloads\Microsoft.SkypeApp_kzf8qxf38zg5c!App 2013-07-31 00:49 - 2012-07-26 08:26 - 00262144 ___SH C:\Windows\system32\config\ELAM 2013-07-28 01:23 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\AUInstallAgent 2013-07-27 20:44 - 2013-07-27 20:43 - 00000000 ____D C:\Users\Niklas\Desktop\Bilder Türkei 2013-07-27 02:12 - 2013-07-27 02:12 - 00000000 ____D C:\ProgramData\StarApp 2013-07-27 02:10 - 2013-07-27 02:10 - 00893000 _____ (PrivitizeVPN) C:\Users\Niklas\Downloads\Lego_Racers_secure (1).exe 2013-07-27 02:09 - 2013-07-27 02:09 - 00893000 _____ (PrivitizeVPN) C:\Users\Niklas\Downloads\GTA_SAN_ANDREAS_secure.exe 2013-07-27 02:03 - 2013-07-27 02:03 - 01329488 _____ (Conduit) C:\Users\Niklas\Downloads\Lego_Racers.exe 2013-07-27 00:58 - 2013-06-24 19:53 - 00000000 ____D C:\Users\Niklas\AppData\Local\Packages 2013-07-23 17:59 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\system32\NDF 2013-07-22 20:55 - 2013-07-22 20:55 - 551076950 _____ C:\Windows\MEMORY.DMP 2013-07-22 20:55 - 2013-07-22 20:55 - 00279888 _____ C:\Windows\Minidump\072213-32401-01.dmp 2013-07-22 20:55 - 2013-07-22 20:55 - 00000000 ____D C:\Windows\Minidump 2013-07-22 18:03 - 2013-07-11 17:00 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Apple Computer 2013-07-20 21:28 - 2013-06-26 11:37 - 00001182 _____ C:\Windows\SysWOW64\SHORTCUT.INI 2013-07-20 17:38 - 2012-07-26 08:26 - 00262144 ___SH C:\Windows\system32\config\BBI 2013-07-19 21:55 - 2012-07-26 08:37 - 00000000 ____D C:\Windows\servicing 2013-07-19 18:25 - 2013-06-26 13:11 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-07-17 18:54 - 2013-06-26 11:24 - 00000000 ____D C:\Users\Niklas\Desktop\Bilder 2013-07-17 17:44 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\system32\FxsTmp 2013-07-17 16:40 - 2013-07-17 16:40 - 00000000 ____D C:\Users\Niklas\AppData\Local\AskPartnerNetwork 2013-07-17 16:12 - 2013-06-26 13:56 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log 2013-07-17 16:12 - 2013-06-26 13:56 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 2013-07-17 01:31 - 2013-07-17 01:31 - 00002114 _____ C:\Users\Public\Desktop\Video Search.lnk 2013-07-17 01:31 - 2013-07-17 01:31 - 00001186 _____ C:\Users\Public\Desktop\aTube Catcher.lnk 2013-07-17 01:30 - 2013-07-15 02:20 - 00000000 ____D C:\Program Files (x86)\DsNET Corp 2013-07-17 01:22 - 2013-06-24 19:53 - 00000000 ____D C:\Users\Niklas\AppData\Local\VirtualStore 2013-07-17 01:16 - 2013-07-17 01:16 - 00000000 ____D C:\Users\Niklas\aTubeCatcher 2013-07-17 01:16 - 2013-06-24 19:53 - 00000000 ____D C:\Users\Niklas 2013-07-16 13:48 - 2013-07-16 13:48 - 00281248 _____ C:\Windows\system32\FNTCACHE.DAT 2013-07-15 19:07 - 2012-07-26 10:52 - 00000000 ____D C:\Program Files\Windows Journal 2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\ProgramData\AskPartnerNetwork 2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\ProgramData\APN 2013-07-15 02:20 - 2013-07-15 02:20 - 00000000 ____D C:\Program Files (x86)\AskPartnerNetwork 2013-07-15 02:19 - 2013-07-15 02:18 - 11797360 _____ (DsNET Corp) C:\Users\Niklas\Downloads\aTubeCatcher1482.exe 2013-07-14 04:58 - 2013-06-27 14:52 - 00004100 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-07-14 04:58 - 2013-06-27 14:52 - 00003864 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-07-11 17:00 - 2013-07-11 17:00 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-07-11 17:00 - 2013-07-11 17:00 - 00000000 ____D C:\Users\Niklas\AppData\Local\Apple Computer 2013-07-11 16:59 - 2013-07-11 16:58 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-07-11 16:59 - 2013-07-11 16:58 - 00000000 ____D C:\Program Files\iTunes 2013-07-11 16:59 - 2013-07-11 16:58 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-07-11 16:58 - 2013-07-11 16:58 - 00000000 ____D C:\ProgramData\Apple Computer 2013-07-11 16:58 - 2013-07-11 16:58 - 00000000 ____D C:\Program Files\iPod 2013-07-11 16:57 - 2013-07-11 16:57 - 02378368 _____ () C:\Users\Niklas\Downloads\angling_setup.exe 2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Windows\System32\Tasks\Apple 2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Users\Niklas\AppData\Local\Apple 2013-07-11 16:50 - 2013-07-11 16:50 - 00000000 ____D C:\Program Files (x86)\Apple Software Update 2013-07-11 16:50 - 2013-03-21 09:19 - 00000000 ____D C:\ProgramData\Apple 2013-07-11 16:49 - 2013-07-11 16:49 - 00000000 ____D C:\Program Files\Common Files\Apple 2013-07-11 16:46 - 2013-07-11 16:44 - 90917712 _____ (Apple Inc.) C:\Users\Niklas\Downloads\iTunes64Setup.exe 2013-07-11 16:43 - 2013-07-04 01:04 - 00000000 ____D C:\Program Files (x86)\Utherverse Digital Inc 2013-07-08 18:58 - 2013-06-26 11:53 - 00000000 ____D C:\Users\Niklas\AppData\Local\Spotify 2013-07-07 00:46 - 2013-06-26 15:13 - 00282104 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2013-07-07 00:46 - 2013-06-26 15:04 - 00282104 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2013-07-07 00:46 - 2013-06-26 15:04 - 00234768 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2013-07-06 02:10 - 2013-07-06 02:10 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Utherverse 2013-07-04 01:21 - 2013-07-04 01:16 - 00000000 ____D C:\Windows\SysWOW64\directx 2013-07-04 01:21 - 2012-08-17 13:12 - 00010049 _____ C:\Windows\DirectX.log 2013-07-04 01:19 - 2013-07-04 01:16 - 00000000 ___HD C:\Windows\msdownld.tmp 2013-07-03 23:42 - 2013-06-26 15:05 - 00000000 ____D C:\Users\Niklas\Documents\Battlefield Play4Free 2013-07-03 22:56 - 2013-07-03 22:22 - 00000000 ____D C:\Users\Niklas\Documents\Harry Potter II 2013-07-03 22:44 - 2012-07-26 11:12 - 00000000 ___RD C:\Windows\ToastData 2013-07-03 22:44 - 2012-07-26 11:12 - 00000000 ___RD C:\Windows\ImmersiveControlPanel 2013-07-03 22:44 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\SysWOW64\en-GB 2013-07-03 22:44 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\system32\en-GB 2013-07-03 22:43 - 2012-07-26 08:38 - 00000000 ____D C:\Windows\system32\oobe 2013-07-03 22:40 - 2013-07-03 15:16 - 00000354 _____ C:\Windows\Tasks\HPCeeScheduleForNiklas.job 2013-07-03 22:19 - 2013-07-03 22:19 - 00002243 _____ C:\Users\Public\Desktop\Harry Potter und die Kammer des Schreckens.lnk 2013-07-03 22:15 - 2013-06-26 14:39 - 00000000 ____D C:\Program Files (x86)\EA Games 2013-07-03 22:15 - 2012-08-17 13:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-07-03 22:13 - 2013-07-03 22:13 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Electronic Arts 2013-07-03 22:13 - 2013-07-03 22:13 - 00000000 ____D C:\Program Files (x86)\Electronic Arts 2013-07-03 21:26 - 2013-07-03 21:26 - 00000060 _____ C:\Windows\wininit.ini 2013-07-03 21:26 - 2012-07-26 11:12 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2013-07-03 15:16 - 2013-07-03 15:16 - 00003170 _____ C:\Windows\System32\Tasks\HPCeeScheduleForNiklas 2013-07-03 15:16 - 2013-06-26 00:18 - 00000000 ____D C:\Users\Niklas\AppData\Local\Hewlett-Packard ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-23 10:41 ==================== End Of Log ============================ Code:
ATTFilter ==================== Installed Programs ======================= Adobe Flash Player ActiveX (x32 Version: 9.0.47.0) Adobe Shockwave Player (x32 Version: 10.2.0.22) AMD APP SDK Runtime (Version: 10.0.938.2) AMD Catalyst Install Manager (Version: 8.0.881.0) AMD Fuel (Version: 2012.0806.1156.19437) AMD Quick Stream (Version: 3.3.26.0) AMD VISION Engine Control Center (x32 Version: 2012.0806.1156.19437) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) aptics Pointing Device Driver (Version: 16.2.10.12) Ask Toolbar (x32 Version: 12.2.2.588) aTube Catcher (x32 Version: 2.9.1482) Battlefield Play4Free (Niklas) (HKCU) Bonjour (Version: 3.0.0.10) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1156.19437) Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437) Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437) CCC Help Chinese Standard (x32 Version: 2012.0806.1155.19437) CCC Help Chinese Traditional (x32 Version: 2012.0806.1155.19437) CCC Help Czech (x32 Version: 2012.0806.1155.19437) CCC Help Danish (x32 Version: 2012.0806.1155.19437) CCC Help Dutch (x32 Version: 2012.0806.1155.19437) CCC Help English (x32 Version: 2012.0806.1155.19437) CCC Help Finnish (x32 Version: 2012.0806.1155.19437) CCC Help French (x32 Version: 2012.0806.1155.19437) CCC Help German (x32 Version: 2012.0806.1155.19437) CCC Help Greek (x32 Version: 2012.0806.1155.19437) CCC Help Hungarian (x32 Version: 2012.0806.1155.19437) CCC Help Italian (x32 Version: 2012.0806.1155.19437) CCC Help Japanese (x32 Version: 2012.0806.1155.19437) CCC Help Korean (x32 Version: 2012.0806.1155.19437) CCC Help Norwegian (x32 Version: 2012.0806.1155.19437) CCC Help Polish (x32 Version: 2012.0806.1155.19437) CCC Help Portuguese (x32 Version: 2012.0806.1155.19437) CCC Help Russian (x32 Version: 2012.0806.1155.19437) CCC Help Spanish (x32 Version: 2012.0806.1155.19437) CCC Help Swedish (x32 Version: 2012.0806.1155.19437) CCC Help Thai (x32 Version: 2012.0806.1155.19437) CCC Help Turkish (x32 Version: 2012.0806.1155.19437) ccc-utility64 (Version: 2012.0806.1156.19437) CyberLink LabelPrint (x32 Version: 2.5.1.5407) CyberLink Media Suite 10 (x32 Version: 10.0.1.1916) CyberLink Power2Go 8 (x32 Version: 8.0.1.1926) CyberLink PowerDVD (x32 Version: 10.0.6.4319) CyberLink YouCam (x32 Version: 3.5.4.5527) D3DX10 (x32 Version: 15.4.2368.0902) Electronic Arts Product Registration (x32 Version: 1.01.0000) Energy Star (Version: 1.0.8) Google Chrome (x32 Version: 28.0.1500.95) Google Talk Plugin (x32 Version: 4.2.1.14031) Google Update Helper (x32 Version: 1.3.21.153) Harry Potter II (x32) Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000) HP Customer Experience Enhancements (x32 Version: 6.0.1.7) HP Documentation (x32 Version: 1.1.0.0) HP Postscript Converter (Version: 3.1.3554) HP Quick Launch (x32 Version: 3.0.3) HP Recovery Manager (x32 Version: 7.00) HP Registration Service (Version: 1.0.5976.4186) HP Software Framework (x32 Version: 4.6.8.1) HP Support Assistant (x32 Version: 7.0.32.44) HP Utility Center (x32 Version: 1.0.7) HP Wireless Button Driver (x32 Version: 1.0.5.1) iTunes (Version: 11.0.4.4) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office (x32 Version: 14.0.6120.5004) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319) MSVCRT (x32 Version: 15.4.2862.0708) Norton Internet Security (x32 Version: 20.4.0.40) PunkBuster Services (x32 Version: 0.990) Ralink Bluetooth Stack64 (Version: 9.0.715.0) Ralink RT3290 802.11bgn Wi-Fi Adapter (x32 Version: 5.0.2.0) Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662) Realtek PCIE Card Reader (x32 Version: 6.2.8400.29029) Skype™ 6.7 (x32 Version: 6.7.102) Spotify (HKCU Version: 0.9.1.57.ge7405149) swMSM (x32 Version: 12.0.0.1) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) ==================== Restore Points ========================= 01-07-2013 21:50:30 Windows Modules Installer 03-07-2013 18:25:50 Installed ProductName 11-07-2013 13:50:46 Installed iTunes 14-07-2013 14:07:57 Windows Update 17-07-2013 22:28:55 Windows Update ==================== Hosts content: ========================== 2012-07-26 08:26 - 2012-07-26 08:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {08693854-8A78-4248-9D28-BB1A23271FF7} - System32\Tasks\HPCeeScheduleForNiklas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard) Task: {0B327ECB-7F47-4D59-9AD9-0F7FD28389A6} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup Task: {0E686442-7E8D-462C-B79D-2DD576644E45} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.) Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation) Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler Task: {1A756FB0-23BA-4094-AB41-3801F6BD9EEC} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents Task: {1FA52BBA-FD5F-483D-A1CB-5478715212A9} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2012-07-27] (CyberLink) Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {26896A6E-9F2F-4FB6-ACE1-58C1459688B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company) Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update Task: {318151E4-2F8F-45C9-850D-48A3A1E9DD8E} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask Task: {3BF13592-9B41-4BF6-B158-E0BC734B12B8} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-374219310-3835530781-1746485344-1002 Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem Task: {3DAB9783-B465-4F8D-9DFA-189C420A633A} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation) Task: {3DACA30C-4C90-4747-99E6-D7DDF6683695} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage Task: {4810B636-6906-469C-8224-FF4235C4B241} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company) Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2012-07-26] (Microsoft Corporation) Task: {4A8F3598-321B-4E79-A069-A43A2324EE83} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\Windows\system32\sc.exe [2012-07-26] (Microsoft Corporation) Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon Task: {540D53EE-138C-4E7E-8CEE-EBBAD0A32E6F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation) Task: {69DC7F2A-5E72-4474-90C1-DA806FA464F5} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation) Task: {69E2FD35-6227-413D-A18B-3A75C23375DE} - System32\Tasks\WPD\SqmUpload_S-1-5-21-374219310-3835530781-1746485344-1002 => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation) Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update Task: {7CEC5F28-8686-4848-827F-E628508601F8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-08-07] (Hewlett-Packard Company) Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance Task: {8247C2D0-E232-49C5-AC70-320C774488DE} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation) Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode) Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses Task: {9372E794-6243-4507-B98E-E0D1C306CBF8} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-374219310-3835530781-1746485344-500 Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic Task: {A1679E89-CECF-452C-B63D-EB2D3DD39843} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan Task: {B6F5F4C6-F3A7-4C9D-AFAB-AD062CDA55B7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27] (Google Inc.) Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific Task: {BCDE5AF1-2571-4A7C-868C-0ACB74D0E963} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27] (Google Inc.) Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork Task: {D4F8E3A5-6775-4B23-A62D-4EB8CEDFE7B0} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink) Task: {D6372BED-E934-421D-8B82-F65A5293D11C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.) Task: {D8FC6763-FA6A-41EA-BD1D-D2386C97E0AC} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation) Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation) Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM Task: {F230337C-3241-4548-9127-8E4C5F8DA67C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core.job => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA.job => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HPCeeScheduleForNiklas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (08/02/2013 04:36:00 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 28.0.1500.95, Zeitstempel: 0x51f05c5f Name des fehlerhaften Moduls: SYMHTML.DLL_unloaded, Version: 0.0.0.0, Zeitstempel: 0x51a45fb3 Ausnahmecode: 0xc000041d Fehleroffset: 0x6205b9a2 ID des fehlerhaften Prozesses: 0xcdc Startzeit der fehlerhaften Anwendung: 0xchrome.exe0 Pfad der fehlerhaften Anwendung: chrome.exe1 Pfad des fehlerhaften Moduls: chrome.exe2 Berichtskennung: chrome.exe3 Vollständiger Name des fehlerhaften Pakets: chrome.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: chrome.exe5 Error: (08/02/2013 04:36:00 PM) (Source: Chrome) (User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=28.0.1500.95;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\68497dda-3ecf-42cb-a39c-653e4f0933e4.dmp Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 2013 Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 2013 Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (08/02/2013 00:01:51 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80070005 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1794 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1794 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (08/01/2013 11:26:48 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 23654088 System errors: ============= Error: (08/02/2013 04:15:14 PM) (Source: Tcpip) (User: ) Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.102 mit dem Computer mit der Netzwerkhardwareadresse D0-C1-B1-D2-86-D7 ermittelt. Netzwerkvorgänge könnten daher auf diesem System unterbrochen werden. Error: (08/02/2013 04:15:01 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 02.08.2013 um 01:14:37 unerwartet heruntergefahren. Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (08/02/2013 00:25:35 AM) (Source: Schannel) (User: NiklasPC) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (08/02/2013 00:25:35 AM) (Source: Schannel) (User: NiklasPC) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (08/02/2013 00:25:34 AM) (Source: Schannel) (User: NiklasPC) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (08/02/2013 00:25:34 AM) (Source: Schannel) (User: NiklasPC) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Microsoft Office Sessions: ========================= Error: (08/02/2013 04:36:00 PM) (Source: Application Error)(User: ) Description: chrome.exe28.0.1500.9551f05c5fSYMHTML.DLL_unloaded0.0.0.051a45fb3c000041d6205b9a2cdc01ce8f827f660b6eC:\Program Files (x86)\Google\Chrome\Application\chrome.exeSYMHTML.DLL77b336cc-fb78-11e2-be90-b8763f62a696 Error: (08/02/2013 04:36:00 PM) (Source: Chrome)(User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=28.0.1500.95;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\68497dda-3ecf-42cb-a39c-653e4f0933e4.dmp Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 2013 Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 2013 Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (08/02/2013 00:01:51 AM) (Source: Customer Experience Improvement Program)(User: ) Description: 80070005 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1794 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1794 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (08/01/2013 11:26:48 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 23654088 ==================== Memory info =========================== Percentage of memory in use: 42% Total physical RAM: 3682.26 MB Available physical RAM: 2116.34 MB Total Pagefile: 7394.26 MB Available Pagefile: 5527.34 MB Total Virtual: 8192 MB Available Virtual: 8191.78 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:450.81 GB) (Free:394.16 GB) NTFS (Disk=0 Partition=4) ==>[System with boot components (obtained from reading drive)] Drive d: (RECOVERY) (Fixed) (Total:14.18 GB) (Free:1.87 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: 37DACB8A) Partition: GPT Partition Type ==================== End Of Log ============================ |
02.08.2013, 16:04 | #4 |
/// Malware-holic | Sehr viel Werbung und langsames Internet? Hi, hatte ich nicht darum gebeten, etwas in der additions.txt zu überarbeiten, bitte mach das. es Reicht, wenn du nur noch mal den passenen Abschnitt postest
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
02.08.2013, 16:11 | #5 |
| Sehr viel Werbung und langsames Internet?Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-08-2013 Ran by Niklas at 2013-08-02 16:58:43 Running from C:\Users\Niklas\Downloads Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Adobe Flash Player ActiveX (x32 Version: 9.0.47.0) Adobe Shockwave Player (x32 Version: 10.2.0.22) AMD APP SDK Runtime (Version: 10.0.938.2) AMD Catalyst Install Manager (Version: 8.0.881.0) AMD Fuel (Version: 2012.0806.1156.19437) AMD Quick Stream (Version: 3.3.26.0) AMD VISION Engine Control Center (x32 Version: 2012.0806.1156.19437) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) aptics Pointing Device Driver (Version: 16.2.10.12) Ask Toolbar (x32 Version: 12.2.2.588) aTube Catcher (x32 Version: 2.9.1482) Battlefield Play4Free (Niklas) (HKCU) Bonjour (Version: 3.0.0.10) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1156.19437) Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437) Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437) CCC Help Chinese Standard (x32 Version: 2012.0806.1155.19437) CCC Help Chinese Traditional (x32 Version: 2012.0806.1155.19437) CCC Help Czech (x32 Version: 2012.0806.1155.19437) CCC Help Danish (x32 Version: 2012.0806.1155.19437) CCC Help Dutch (x32 Version: 2012.0806.1155.19437) CCC Help English (x32 Version: 2012.0806.1155.19437) CCC Help Finnish (x32 Version: 2012.0806.1155.19437) CCC Help French (x32 Version: 2012.0806.1155.19437) CCC Help German (x32 Version: 2012.0806.1155.19437) CCC Help Greek (x32 Version: 2012.0806.1155.19437) CCC Help Hungarian (x32 Version: 2012.0806.1155.19437) CCC Help Italian (x32 Version: 2012.0806.1155.19437) CCC Help Japanese (x32 Version: 2012.0806.1155.19437) CCC Help Korean (x32 Version: 2012.0806.1155.19437) CCC Help Norwegian (x32 Version: 2012.0806.1155.19437) CCC Help Polish (x32 Version: 2012.0806.1155.19437) CCC Help Portuguese (x32 Version: 2012.0806.1155.19437) CCC Help Russian (x32 Version: 2012.0806.1155.19437) CCC Help Spanish (x32 Version: 2012.0806.1155.19437) CCC Help Swedish (x32 Version: 2012.0806.1155.19437) CCC Help Thai (x32 Version: 2012.0806.1155.19437) CCC Help Turkish (x32 Version: 2012.0806.1155.19437) ccc-utility64 (Version: 2012.0806.1156.19437) CyberLink LabelPrint (x32 Version: 2.5.1.5407) CyberLink Media Suite 10 (x32 Version: 10.0.1.1916) CyberLink Power2Go 8 (x32 Version: 8.0.1.1926) CyberLink PowerDVD (x32 Version: 10.0.6.4319) CyberLink YouCam (x32 Version: 3.5.4.5527) D3DX10 (x32 Version: 15.4.2368.0902) Electronic Arts Product Registration (x32 Version: 1.01.0000) Energy Star (Version: 1.0.8) Google Chrome (x32 Version: 28.0.1500.95) Google Talk Plugin (x32 Version: 4.2.1.14031) Google Update Helper (x32 Version: 1.3.21.153) Harry Potter II (x32) Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000) HP Customer Experience Enhancements (x32 Version: 6.0.1.7) HP Documentation (x32 Version: 1.1.0.0) HP Postscript Converter (Version: 3.1.3554) HP Quick Launch (x32 Version: 3.0.3) HP Recovery Manager (x32 Version: 7.00) HP Registration Service (Version: 1.0.5976.4186) HP Software Framework (x32 Version: 4.6.8.1) HP Support Assistant (x32 Version: 7.0.32.44) HP Utility Center (x32 Version: 1.0.7) HP Wireless Button Driver (x32 Version: 1.0.5.1) iTunes (Version: 11.0.4.4) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office (x32 Version: 14.0.6120.5004) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319) MSVCRT (x32 Version: 15.4.2862.0708) Norton Internet Security (x32 Version: 20.4.0.40) PunkBuster Services (x32 Version: 0.990) Ralink Bluetooth Stack64 (Version: 9.0.715.0) Ralink RT3290 802.11bgn Wi-Fi Adapter (x32 Version: 5.0.2.0) Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662) Realtek PCIE Card Reader (x32 Version: 6.2.8400.29029) Skype™ 6.7 (x32 Version: 6.7.102) Spotify (HKCU Version: 0.9.1.57.ge7405149) swMSM (x32 Version: 12.0.0.1) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) ==================== Restore Points ========================= 01-07-2013 21:50:30 Windows Modules Installer 03-07-2013 18:25:50 Installed ProductName 11-07-2013 13:50:46 Installed iTunes 14-07-2013 14:07:57 Windows Update 17-07-2013 22:28:55 Windows Update ==================== Hosts content: ========================== 2012-07-26 08:26 - 2012-07-26 08:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {08693854-8A78-4248-9D28-BB1A23271FF7} - System32\Tasks\HPCeeScheduleForNiklas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard) Task: {0B327ECB-7F47-4D59-9AD9-0F7FD28389A6} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup Task: {0E686442-7E8D-462C-B79D-2DD576644E45} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.) Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation) Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler Task: {1A756FB0-23BA-4094-AB41-3801F6BD9EEC} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents Task: {1FA52BBA-FD5F-483D-A1CB-5478715212A9} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2012-07-27] (CyberLink) Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {26896A6E-9F2F-4FB6-ACE1-58C1459688B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company) Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update Task: {318151E4-2F8F-45C9-850D-48A3A1E9DD8E} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask Task: {3BF13592-9B41-4BF6-B158-E0BC734B12B8} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-374219310-3835530781-1746485344-1002 Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem Task: {3DAB9783-B465-4F8D-9DFA-189C420A633A} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation) Task: {3DACA30C-4C90-4747-99E6-D7DDF6683695} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage Task: {4810B636-6906-469C-8224-FF4235C4B241} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company) Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2012-07-26] (Microsoft Corporation) Task: {4A8F3598-321B-4E79-A069-A43A2324EE83} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\Windows\system32\sc.exe [2012-07-26] (Microsoft Corporation) Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon Task: {540D53EE-138C-4E7E-8CEE-EBBAD0A32E6F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation) Task: {69DC7F2A-5E72-4474-90C1-DA806FA464F5} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation) Task: {69E2FD35-6227-413D-A18B-3A75C23375DE} - System32\Tasks\WPD\SqmUpload_S-1-5-21-374219310-3835530781-1746485344-1002 => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation) Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update Task: {7CEC5F28-8686-4848-827F-E628508601F8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-08-07] (Hewlett-Packard Company) Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance Task: {8247C2D0-E232-49C5-AC70-320C774488DE} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation) Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode) Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses Task: {9372E794-6243-4507-B98E-E0D1C306CBF8} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-374219310-3835530781-1746485344-500 Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic Task: {A1679E89-CECF-452C-B63D-EB2D3DD39843} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan Task: {B6F5F4C6-F3A7-4C9D-AFAB-AD062CDA55B7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27] (Google Inc.) Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific Task: {BCDE5AF1-2571-4A7C-868C-0ACB74D0E963} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27] (Google Inc.) Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork Task: {D4F8E3A5-6775-4B23-A62D-4EB8CEDFE7B0} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2012-06-08] (CyberLink) Task: {D6372BED-E934-421D-8B82-F65A5293D11C} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-07-14] (Google Inc.) Task: {D8FC6763-FA6A-41EA-BD1D-D2386C97E0AC} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation) Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation) Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation) Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM Task: {F230337C-3241-4548-9127-8E4C5F8DA67C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-10] (Hewlett-Packard Company) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core.job => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA.job => C:\Users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HPCeeScheduleForNiklas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (08/02/2013 04:36:00 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: chrome.exe, Version: 28.0.1500.95, Zeitstempel: 0x51f05c5f Name des fehlerhaften Moduls: SYMHTML.DLL_unloaded, Version: 0.0.0.0, Zeitstempel: 0x51a45fb3 Ausnahmecode: 0xc000041d Fehleroffset: 0x6205b9a2 ID des fehlerhaften Prozesses: 0xcdc Startzeit der fehlerhaften Anwendung: 0xchrome.exe0 Pfad der fehlerhaften Anwendung: chrome.exe1 Pfad des fehlerhaften Moduls: chrome.exe2 Berichtskennung: chrome.exe3 Vollständiger Name des fehlerhaften Pakets: chrome.exe4 Anwendungs-ID, die relativ zum fehlerhaften Paket ist: chrome.exe5 Error: (08/02/2013 04:36:00 PM) (Source: Chrome) (User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=28.0.1500.95;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\68497dda-3ecf-42cb-a39c-653e4f0933e4.dmp Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 2013 Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 2013 Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (08/02/2013 00:01:51 AM) (Source: Customer Experience Improvement Program) (User: ) Description: 80070005 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1794 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1794 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (08/01/2013 11:26:48 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 23654088 System errors: ============= Error: (08/02/2013 04:15:14 PM) (Source: Tcpip) (User: ) Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.102 mit dem Computer mit der Netzwerkhardwareadresse D0-C1-B1-D2-86-D7 ermittelt. Netzwerkvorgänge könnten daher auf diesem System unterbrochen werden. Error: (08/02/2013 04:15:01 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 02.08.2013 um 01:14:37 unerwartet heruntergefahren. Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (08/02/2013 00:28:02 AM) (Source: Schannel) (User: NiklasPC) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (08/02/2013 00:25:35 AM) (Source: Schannel) (User: NiklasPC) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (08/02/2013 00:25:35 AM) (Source: Schannel) (User: NiklasPC) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Error: (08/02/2013 00:25:34 AM) (Source: Schannel) (User: NiklasPC) Description: Das vom Remoteserver erhaltene Zertifikat enthält nicht den erwarteten Namen. Es ist daher nicht möglich festzustellen, ob eine Verbindung mit dem richtigen Server hergestellt wird. Der erwartete Servername lautet relay.l.google.com. Fehler bei der SSL-Verbindungsanforderung. Die angehängten Daten enthalten das Serverzertifikat. Error: (08/02/2013 00:25:34 AM) (Source: Schannel) (User: NiklasPC) Description: Es wurde eine schwerwiegende Warnung generiert und an den Remoteendpunkt gesendet. Dies kann dazu führen, dass die Verbindung beendet wird. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 43. Der Windows-SChannel-Fehlerstatus lautet: 552. Microsoft Office Sessions: ========================= Error: (08/02/2013 04:36:00 PM) (Source: Application Error)(User: ) Description: chrome.exe28.0.1500.9551f05c5fSYMHTML.DLL_unloaded0.0.0.051a45fb3c000041d6205b9a2cdc01ce8f827f660b6eC:\Program Files (x86)\Google\Chrome\Application\chrome.exeSYMHTML.DLL77b336cc-fb78-11e2-be90-b8763f62a696 Error: (08/02/2013 04:36:00 PM) (Source: Chrome)(User: NT-AUTORITÄT) Description: Chrome has encountered a fatal error. ver=28.0.1500.95;lang=;id=;is_machine=1;upload=1;minidump=C:\Program Files (x86)\Google\CrashReports\68497dda-3ecf-42cb-a39c-653e4f0933e4.dmp Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 2013 Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 2013 Error: (08/02/2013 01:06:29 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (08/02/2013 00:01:51 AM) (Source: Customer Experience Improvement Program)(User: ) Description: 80070005 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1794 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1794 Error: (08/01/2013 11:39:16 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (08/01/2013 11:26:48 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 23654088 ==================== Memory info =========================== Percentage of memory in use: 42% Total physical RAM: 3682.26 MB Available physical RAM: 2116.34 MB Total Pagefile: 7394.26 MB Available Pagefile: 5527.34 MB Total Virtual: 8192 MB Available Virtual: 8191.78 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:450.81 GB) (Free:394.16 GB) NTFS (Disk=0 Partition=4) ==>[System with boot components (obtained from reading drive)] Drive d: (RECOVERY) (Fixed) (Total:14.18 GB) (Free:1.87 GB) NTFS ==>[System with boot components (obtained from reading drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: 37DACB8A) Partition: GPT Partition Type ==================== End Of Log ============================ |
02.08.2013, 16:13 | #6 |
/// Malware-holic | Sehr viel Werbung und langsames Internet? ich habe dich gebeten, die liste der Programme durchzugehen und sie zu beschriften
__________________ --> Sehr viel Werbung und langsames Internet? |
02.08.2013, 16:19 | #7 |
| Sehr viel Werbung und langsames Internet? jetzt nochmal das richtige: ==================== Installed Programs ======================= Adobe Flash Player ActiveX (x32 Version: 9.0.47.0) nötig Adobe Shockwave Player (x32 Version: 10.2.0.22) nötig AMD APP SDK Runtime (Version: 10.0.938.2) treiber AMD Catalyst Install Manager (Version: 8.0.881.0) treiber AMD Fuel (Version: 2012.0806.1156.19437) treiber AMD Quick Stream (Version: 3.3.26.0) treiber AMD VISION Engine Control Center (x32 Version: 2012.0806.1156.19437) treiber Apple Application Support (x32 Version: 2.3.4) nötig Apple Mobile Device Support (Version: 6.1.0.13) nötig Apple Software Update (x32 Version: 2.1.3.127) nötig aptics Pointing Device Driver (Version: 16.2.10.12) nötig Ask Toolbar (x32 Version: 12.2.2.588) unötig aTube Catcher (x32 Version: 2.9.1482) nötig Battlefield Play4Free (Niklas) (HKCU) nötig Bonjour (Version: 3.0.0.10) unötig Catalyst Control Center - Branding (x32 Version: 1.00.0000) nötig Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1156.19437) nötihg Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437) nötig Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437) nötig CCC Help Chinese Standard (x32 Version: 2012.0806.1155.19437) ? CCC Help Chinese Traditional (x32 Version: 2012.0806.1155.19437) ? CCC Help Czech (x32 Version: 2012.0806.1155.19437)? CCC Help Danish (x32 Version: 2012.0806.1155.19437) CCC Help Dutch (x32 Version: 2012.0806.1155.19437) CCC Help English (x32 Version: 2012.0806.1155.19437) CCC Help Finnish (x32 Version: 2012.0806.1155.19437) CCC Help French (x32 Version: 2012.0806.1155.19437) CCC Help German (x32 Version: 2012.0806.1155.19437) CCC Help Greek (x32 Version: 2012.0806.1155.19437) CCC Help Hungarian (x32 Version: 2012.0806.1155.19437) CCC Help Italian (x32 Version: 2012.0806.1155.19437) CCC Help Japanese (x32 Version: 2012.0806.1155.19437) CCC Help Korean (x32 Version: 2012.0806.1155.19437) CCC Help Norwegian (x32 Version: 2012.0806.1155.19437) CCC Help Polish (x32 Version: 2012.0806.1155.19437) CCC Help Portuguese (x32 Version: 2012.0806.1155.19437) CCC Help Russian (x32 Version: 2012.0806.1155.19437) CCC Help Spanish (x32 Version: 2012.0806.1155.19437) CCC Help Swedish (x32 Version: 2012.0806.1155.19437) CCC Help Thai (x32 Version: 2012.0806.1155.19437) CCC Help Turkish (x32 Version: 2012.0806.1155.19437) ccc-utility64 (Version: 2012.0806.1156.19437) ???????????????????? CyberLink LabelPrint (x32 Version: 2.5.1.5407) CyberLink Media Suite 10 (x32 Version: 10.0.1.1916) nötig CyberLink Power2Go 8 (x32 Version: 8.0.1.1926) nötig CyberLink PowerDVD (x32 Version: 10.0.6.4319) nötig CyberLink YouCam (x32 Version: 3.5.4.5527) nötig D3DX10 (x32 Version: 15.4.2368.0902) ? Electronic Arts Product Registration (x32 Version: 1.01.0000) nötig Energy Star (Version: 1.0.8) nötig Google Chrome (x32 Version: 28.0.1500.95) nötig Google Talk Plugin (x32 Version: 4.2.1.14031) nötig Google Update Helper (x32 Version: 1.3.21.153) nötig Harry Potter II (x32) nötig Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000) n HP Customer Experience Enhancements (x32 Version: 6.0.1.7)n HP Documentation (x32 Version: 1.1.0.0)n HP Postscript Converter (Version: 3.1.3554)nn HP Quick Launch (x32 Version: 3.0.3)n HP Recovery Manager (x32 Version: 7.00)n HP Registration Service (Version: 1.0.5976.4186)n HP Software Framework (x32 Version: 4.6.8.1)n HP Support Assistant (x32 Version: 7.0.32.44) HP Utility Center (x32 Version: 1.0.7)n HP Wireless Button Driver (x32 Version: 1.0.5.1)n iTunes (Version: 11.0.4.4)n Microsoft Application Error Reporting (Version: 12.0.6015.5000)n Microsoft Office (x32 Version: 14.0.6120.5004)n Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319) MSVCRT (x32 Version: 15.4.2862.0708)?? Norton Internet Security (x32 Version: 20.4.0.40)n PunkBuster Services (x32 Version: 0.990)? Ralink Bluetooth Stack64 (Version: 9.0.715.0) Ralink RT3290 802.11bgn Wi-Fi Adapter (x32 Version: 5.0.2.0)nn Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012)n Realtek High Definition Audio Driver (x32 Version: 6.0.1.6662)nn Realtek PCIE Card Reader (x32 Version: 6.2.8400.29029)n Skype™ 6.7 (x32 Version: 6.7.102)n Spotify (HKCU Version: 0.9.1.57.ge7405149) n swMSM (x32 Version: 12.0.0.1) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3555.0308) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3555.0308) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) windows live alle nötig =================[/CODE] |
02.08.2013, 16:24 | #8 |
/// Malware-holic | Sehr viel Werbung und langsames Internet? Hi, es sind 2 Logs zu erstellen, poste diese möglichst gleichzeitig. 1. Deinstaliere: Ask Norton Internet Security : prüfe mal, ob du die Version 2013 nutzt, falls nicht, Upgraden: Norton Antivirus und Internet Security Software | Norton.de 2. Scan mit Combofix
3. Downloade Dir bitte Malwarebytes Anti-Malware
poste: - Combofix.txt Malwarebytes Log.
__________________ -Verdächtige mails bitte an uns zur Analyse weiterleiten: markusg.trojaner-board@web.de Weiterleiten Anleitung: http://markusg.trojaner-board.de Mails bitte vorerst nach obiger Anleitung an markusg.trojaner-board@web.de Weiterleiten Wenn Ihr uns unterstützen möchtet |
01.09.2013, 21:26 | #9 |
| Sehr viel Werbung und langsames Internet? Combofix Logfile: Code:
ATTFilter ComboFix 13-08-02.01 - Niklas 01.09.2013 23:00:39.2.2 - x64 Microsoft Windows 8 6.2.9200.0.1252.49.1031.18.3682.2595 [GMT 3:00] ausgeführt von:: c:\users\Niklas\Desktop\ComboFix.exe AV: Norton Internet Security *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF} AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} SP: Norton Internet Security *Disabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\wininit.ini . ---- Vorheriger Suchlauf ------- . c:\programdata\MagniPIc c:\programdata\MagniPIc\51f3022f9ca61.dll c:\programdata\MagniPIc\51f3022f9ca61.tlb c:\programdata\MagniPIc\settings.ini . . ((((((((((((((((((((((( Dateien erstellt von 2013-08-01 bis 2013-09-01 )))))))))))))))))))))))))))))) . . 2013-09-01 20:14 . 2013-09-01 20:14 -------- d-----w- c:\users\Niklas\AppData\Local\temp 2013-09-01 20:14 . 2013-09-01 20:14 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-08-23 21:39 . 2013-08-23 21:39 -------- d-----w- c:\users\Niklas\AppData\Local\Luka und der verborgene Schatz 2013-08-22 20:17 . 2013-08-22 20:17 -------- d-----w- c:\program files (x86)\CASIO 2013-08-22 20:16 . 2013-08-22 20:16 -------- d-----w- c:\users\Niklas\AppData\Roaming\CASIO 2013-08-20 19:27 . 2013-08-20 19:27 240304 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10214.bin 2013-08-18 18:13 . 2013-08-18 18:13 -------- d-----w- c:\program files (x86)\Common Files\Adobe 2013-08-18 18:10 . 2013-08-18 18:29 -------- d-----w- c:\users\Niklas\AppData\Local\Adobe 2013-08-18 10:29 . 2013-08-18 10:32 -------- d-----w- c:\windows\system32\MRT 2013-08-18 10:20 . 2013-08-18 10:20 -------- d-----w- c:\users\Niklas\AppData\Roaming\WebApp 2013-08-17 11:43 . 2013-07-26 05:13 53760 ----a-w- c:\windows\system32\UXInit.dll 2013-08-17 11:42 . 2013-07-26 05:12 2647040 ----a-w- c:\windows\system32\iertutil.dll 2013-08-17 11:42 . 2013-07-26 05:12 3958784 ----a-w- c:\windows\system32\jscript9.dll 2013-08-17 11:41 . 2013-07-26 03:12 2877440 ----a-w- c:\windows\SysWow64\jscript9.dll 2013-08-17 11:41 . 2013-07-26 03:12 108032 ----a-w- c:\program files (x86)\Internet Explorer\jsdebuggeride.dll 2013-08-17 00:35 . 2013-05-23 23:02 1314816 ----a-w- c:\windows\system32\rpcrt4.dll 2013-08-17 00:35 . 2013-05-23 22:25 694272 ----a-w- c:\windows\SysWow64\rpcrt4.dll 2013-08-17 00:03 . 2013-07-09 06:07 2233168 ----a-w- c:\windows\system32\drivers\tcpip.sys 2013-08-16 23:57 . 2013-07-13 06:16 1889280 ----a-w- c:\windows\system32\crypt32.dll 2013-08-16 23:57 . 2013-07-13 04:23 1568256 ----a-w- c:\windows\SysWow64\crypt32.dll 2013-08-16 23:57 . 2013-07-13 06:18 337408 ----a-w- c:\windows\system32\wintrust.dll 2013-08-16 23:57 . 2013-07-13 06:15 124416 ----a-w- c:\windows\system32\apprepapi.dll 2013-08-16 23:57 . 2013-07-13 04:24 261120 ----a-w- c:\windows\SysWow64\wintrust.dll 2013-08-16 23:57 . 2013-07-13 04:23 87040 ----a-w- c:\windows\SysWow64\apprepapi.dll 2013-08-16 23:57 . 2013-07-13 06:16 68096 ----a-w- c:\windows\system32\cryptsvc.dll 2013-08-16 23:57 . 2013-07-13 06:15 98304 ----a-w- c:\windows\system32\apprepsync.dll 2013-08-16 23:57 . 2013-07-13 04:23 74240 ----a-w- c:\windows\SysWow64\apprepsync.dll 2013-08-05 10:28 . 2013-08-05 10:28 -------- d-----w- C:\sources . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-08-18 10:29 . 2013-06-26 10:11 78161360 ----a-w- c:\windows\system32\MRT.exe 2013-07-06 21:46 . 2013-06-26 12:13 282104 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2013-07-06 21:46 . 2013-06-26 12:04 282104 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2013-07-06 21:46 . 2013-06-26 12:04 234768 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2013-06-27 22:04 . 2012-07-26 08:14 78200 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-06-27 22:04 . 2012-07-26 08:14 693112 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-06-26 15:20 . 2013-03-21 07:14 177312 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS 2013-06-26 12:17 . 2013-06-26 12:04 76888 ----a-w- c:\windows\SysWow64\PnkBstrA.exe 2013-06-25 21:16 . 2013-06-25 21:16 50784 ----a-w- c:\programdata\Microsoft\windowsfiltering\Sqm\Manifest\Sqm3.bin 2013-06-25 21:16 . 2013-06-25 21:16 17536 ----a-w- c:\programdata\Microsoft\windowssampling\Sqm\Manifest\Sqm3.bin 2013-06-24 17:25 . 2012-07-26 08:13 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2013-06-16 22:41 . 2013-07-24 20:21 997632 ----a-w- c:\windows\system32\drivers\ndis.sys 2013-06-04 06:15 . 2013-06-04 06:15 708168 ----a-w- c:\windows\system32\WinUSBCoInstaller.dll 2013-06-04 06:15 . 2013-06-04 06:15 103448 ----a-w- c:\windows\system32\drivers\ssudbus.sys 2013-06-04 06:15 . 2013-06-04 06:15 203672 ----a-w- c:\windows\system32\drivers\ssudmdm.sys 2013-06-04 06:15 . 2013-06-04 06:15 1490656 ----a-w- c:\windows\system32\WdfCoInstaller01007.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="c:\users\Niklas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-07-03 1104384] "Spotify"="c:\users\Niklas\AppData\Roaming\Spotify\spotify.exe" [2013-07-03 4640768] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-08-06 642216] "BtTray"="c:\program files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe" [2012-08-02 363520] "CLVirtualDrive"="c:\program files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" [2012-07-26 491320] "RemoteControl10"="c:\program files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" [2012-03-28 91432] "HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-07-09 580512] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-05-11 958576] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "EnableUIADesktopToggle"= 0 (0x0) "EnableCursorSuppression"= 1 (0x1) "ConsentPromptBehaviorUser"= 3 (0x3) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . R2 gupdate;Google Update-Dienst (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x] R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x] R3 iaStorA;iaStorA;c:\windows\System32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x] R3 SmbDrv;SmbDrv;c:\windows\System32\drivers\Smb_driver_AMDASF.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_AMDASF.sys [x] R3 SmbDrvI;SmbDrvI;c:\windows\System32\drivers\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\drivers\Smb_driver_Intel.sys [x] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\System32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] R4 SymELAM;Symantec ELAM Driver;c:\windows\system32\drivers\NISx64\1404000.028\SymELAM.sys;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SymELAM.sys [x] S0 amd_sata;amd_sata;c:\windows\System32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x] S0 amd_xata;amd_xata;c:\windows\System32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x] S1 CLVirtualDrive;CLVirtualDrive;c:\windows\system32\DRIVERS\CLVirtualDrive.sys;c:\windows\SYSNATIVE\DRIVERS\CLVirtualDrive.sys [x] S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x] S2 APXACC;AppEx Networks Accelerator LWF;c:\windows\system32\DRIVERS\appexDrv.sys;c:\windows\SYSNATIVE\DRIVERS\appexDrv.sys [x] S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x] S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x] S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [x] S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe;c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe [x] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW86.sys;c:\windows\SYSNATIVE\drivers\AtihdW86.sys [x] S3 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20130715.001\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [x] S3 BtAudioBusSrv;IVT Bluetooth Audio Bus Service;c:\windows\System32\Drivers\BtAudioBus.sys;c:\windows\SYSNATIVE\Drivers\BtAudioBus.sys [x] S3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service;c:\windows\System32\Drivers\BtL2caScoIf.sys;c:\windows\SYSNATIVE\Drivers\BtL2caScoIf.sys [x] S3 BthLEEnum;Treiber für energiearme Bluetooth-Geräte;c:\windows\system32\DRIVERS\BthLEEnum.sys;c:\windows\SYSNATIVE\DRIVERS\BthLEEnum.sys [x] S3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service;c:\windows\System32\Drivers\IvtUrbBtFlt.sys;c:\windows\SYSNATIVE\Drivers\IvtUrbBtFlt.sys [x] S3 ccSet_NIS;Norton Internet Security Settings Manager;c:\windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\ccSetx64.sys [x] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x] S3 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20130822.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.0.0.136\Definitions\IPSDefs\20130822.001\IDSvia64.sys [x] S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x] S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x] S3 rtbth;RTBTH Bluetooth Device Driver;c:\windows\System32\drivers\rtbth.sys;c:\windows\SYSNATIVE\drivers\rtbth.sys [x] S3 RTL8168;Realtek 8168 NT Driver;c:\windows\system32\DRIVERS\Rt630x64.sys;c:\windows\SYSNATIVE\DRIVERS\Rt630x64.sys [x] S3 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMDS64.SYS [x] S3 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMEFA64.SYS [x] S3 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\Ironx64.SYS [x] S3 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1404000.028\SYMNETS.SYS [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x] S3 WirelessButtonDriver;HP Wireless Button Driver Service;c:\windows\System32\drivers\WirelessButtonDriver64.sys;c:\windows\SYSNATIVE\drivers\WirelessButtonDriver64.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] apphost REG_MULTI_SZ apphostsvc iissvcs REG_MULTI_SZ w3svc was . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-08-29 19:04 1177552 ----a-w- c:\program files (x86)\Google\Chrome\Application\29.0.1547.62\Installer\chrmstp.exe . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A6EADE66-0000-0000-484E-7E8A45000000}] 2013-05-11 10:37 215264 ----a-w- c:\program files (x86)\Adobe\Reader 11.0\Esl\AiodLite.dll . Inhalt des "geplante Tasks" Ordners . 2013-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27 11:52] . 2013-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-27 11:52] . 2013-08-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002Core.job - c:\users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-01 01:58] . 2013-09-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-374219310-3835530781-1746485344-1002UA.job - c:\users\Niklas\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-01 01:58] . 2013-08-30 c:\windows\Tasks\HPCeeScheduleForNiklas.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 20:15] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2012-06-12 6548112] . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm TCP: DhcpNameServer = 192.168.2.1 192.168.2.1 TCP: Interfaces\{F11F0661-D0F5-4A57-867B-A38D0FA3FE3A}: NameServer = 8.8.8.8 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . WebBrowser-{41545534-2D56-3700-76A7-7A786E7484D7} - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe AddRemove-Adobe Shockwave Player - c:\windows\System32\Macromed\SHOCKW~1\UNWISE.EXE AddRemove-{B8019B54-F9BE-490A-9619-6D06F18F129F} - c:\program files (x86)\InstallShield Installation Information\{B8019B54-F9BE-490A-9619-6D06F18F129F}\setup.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NIS] "ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\20.4.0.40\diMaster.dll\" /prefetch:1" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) @SACL=(02 0000) . Zeit der Fertigstellung: 2013-09-01 23:19:19 ComboFix-quarantined-files.txt 2013-09-01 20:19 . Vor Suchlauf: 16 Verzeichnis(se), 424.485.117.952 Bytes frei Nach Suchlauf: 17 Verzeichnis(se), 424.404.541.440 Bytes frei . - - End Of File - - E0C860CE772C8DCDE74D26233EF66009 5FB38429D5D77768867C76DCBDB35194 |
Themen zu Sehr viel Werbung und langsames Internet? |
externes, facebook, inter, interne, internet, internet browser langsam, kapersky, langsamer, langsames, langsames internet, nichts, norten, programm, runter, scan, scanner, seite, seiten, tagen, trojaner ?, viel werbung, viren, viren scanner, virus, werbe, werbung, würmer, youtube, öffnet |