| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Seitenaufbau sehr langsamWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
23.08.2013, 09:02
| #1 |
 |  Windows 7: Seitenaufbau sehr langsam Guten Tag Auf meinem hp Mini läuft Windows 7. Habe das Gerät seit ca 1 1/2 Jahren und war bisher sehr zufrieden. Seit dem Frühjahr d.J. stelle ich allerdings fest, daß sich 1. der Seitenaufbau sehr verlangsamt hat, 2. daß ich unerwünschte Toolbars auf dem Gerät habe und 3. daß sich immer wieder nervige Werbebanner (deals) von selbst öffnen. Ich bin etwas ratlos, was ich machen soll. Ich habe AdwCleaner und JunkRemovalTool benutzt und das Problem mit den Toolbars scheint im Moment ganz gut gelöst zu sein. Die beiden anderen Probleme bestehen weiter. Ich füge mal die logfiles bei. Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-08-2013
Ran by HERBY11 (administrator) on 18-08-2013 11:55:14
Running from C:\Users\HERBY11\Downloads
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\aestsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Secunia) C:\Program Files\Secunia\PSI\PSIA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Safer Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Secunia) C:\Program Files\Secunia\PSI\sua.exe
(Sony Corporation) C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.exe
(Google Inc.) C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [] - [x]
HKLM\...\Run: [Reader Application Helper] - C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2013-03-18] (Sony Corporation)
HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-02] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\RunOnce: [awde7zip53872] - "C:\Users\HERBY11\AppData\Local\Temp\BI_RunOnce.exe" /affid "awde7zip53872" /id "7zip" /name "7-Zip" [228432 2013-07-24] (Somoto Ltd.)
HKCU\...\Run: [Google Update] - C:\Users\HERBY11\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-08-03] (Google Inc.)
HKCU\...\Run: [SpybotSD TeaTimer] - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
MountPoints2: {3ed03713-7f7c-11e0-b262-68b599dd6cea} - E:\Setup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Whitelisted) ====================
ProxyServer: :0
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
URLSearchHook: (No Name) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - No File
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {50735CE3-2C90-41D3-9648-39D10F0F4CE2} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {FBBF888A-72C1-42CC-AF28-03A4FF838DD8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKCU - DefaultScope {FBBF888A-72C1-42CC-AF28-03A4FF838DD8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKCU - {50735CE3-2C90-41D3-9648-39D10F0F4CE2} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {FBBF888A-72C1-42CC-AF28-03A4FF838DD8} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll (Safer Networking Limited)
BHO: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKCU -No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU -No Name - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - No File
Handler: haufereader - No CLSID Value -
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog9 01 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 02 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 05 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 06 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 07 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 08 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 43 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [258104] (Avira Operations GmbH & Co. KG)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\HERBY11\AppData\Roaming\Mozilla\Firefox\Profiles\v6g9903a.default
FF Homepage: about:home
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=utf-8&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF Plugin: @garmin.com/GpsControl - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @sony.com/ReaderDesktop - C:\Program Files\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\HERBY11\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\HERBY11\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\HERBY11\AppData\Roaming\Mozilla\Firefox\Profiles\v6g9903a.default\searchplugins\visualbee.xml
FF Extension: No Name - C:\Users\HERBY11\AppData\Roaming\Mozilla\Extensions\ideskbrowser@haufe.de
FF Extension: No Name - C:\Users\HERBY11\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
FF Extension: No Name - C:\Users\HERBY11\AppData\Roaming\Mozilla\Firefox\Profiles\v6g9903a.default\Extensions\75c9b989-a6e6-4455-971f-45304161eb23@02648b91-49b2-4d7f-99ef-7e959a8e6505.com
FF Extension: Textarea Cache - C:\Users\HERBY11\AppData\Roaming\Mozilla\Firefox\Profiles\v6g9903a.default\Extensions\{578e7caa-210f-4967-a0d3-88fe5b59a39f}
FF Extension: DownloadHelper - C:\Users\HERBY11\AppData\Roaming\Mozilla\Firefox\Profiles\v6g9903a.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: add-to-searchbox - C:\Users\HERBY11\AppData\Roaming\Mozilla\Firefox\Profiles\v6g9903a.default\Extensions\add-to-searchbox@maltekraus.de.xpi
FF Extension: extension - C:\Users\HERBY11\AppData\Roaming\Mozilla\Firefox\Profiles\v6g9903a.default\Extensions\extension@ciuvo.com.xpi
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}
FF Extension: Default - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - hxxp://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t
CHR DefaultSuggestURL: (Google) - hxxp://suggestqueries.google.com/complete/search?q={searchTerms}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\28.0.1500.95\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Skype Toolbars) - C:\Users\HERBY11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Reader Application Detector) - C:\Program Files\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u00AE Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Extension: (HP Product Detection Plugin) - C:\Users\HERBY11\AppData\Local\Google\Chrome\User Data\Default\Extensions\aelbknmfcacjffmgnoaaonhgoghlmlkp\1.0.28.1_0
CHR Extension: (YouTube) - C:\Users\HERBY11\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\HERBY11\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (IBA Opt-out (by Google)) - C:\Users\HERBY11\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbiekjoijknlhijdjbaadobpkdhmoebb\1.5_0
CHR Extension: (Plus-HD-2.5) - C:\Users\HERBY11\AppData\Local\Google\Chrome\User Data\Default\Extensions\iefogiieekeeeeaiklglonbockmhmkgd\1.23.47_0
CHR Extension: (Google Reader) - C:\Users\HERBY11\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm\4.4_0
CHR Extension: (Gmail) - C:\Users\HERBY11\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [aaaaabfjnbeinlpljodiajipidiompfl] - C:\Users\HERBY11\AppData\Local\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.8.0.crx
CHR HKLM\...\Chrome\Extension: [cloikdolicapcipfoncopeialjfhabgf] - C:\Users\HERBY11\AppData\Roaming\BabSolution\CR\visualBee.crx
CHR StartMenuInternet: Google Chrome - C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\chrome.exe
========================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [84024 2013-07-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [589368 2013-07-02] (Avira Operations GmbH & Co. KG)
S4 GameConsoleService; C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe [246520 2010-04-04] (WildTangent, Inc.)
S4 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [185688 2013-03-27] (Garmin Ltd or its subsidiaries)
R2 HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [103992 2010-06-18] (Hewlett-Packard Company)
R2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 Secunia PSI Agent; C:\Program Files\Secunia\PSI\PSIA.exe [1223704 2013-02-07] (Secunia)
R2 Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe [660504 2013-02-07] (Secunia)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV.exe [237650 2010-06-09] (IDT, Inc.)
==================== Drivers (Whitelisted) ====================
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [84744 2013-02-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135136 2013-02-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-03-06] (Avira Operations GmbH & Co. KG)
R1 DVMIO; C:\Windows\System32\DRIVERS\dvmio.sys [18136 2009-11-11] (DeviceVM, Inc.)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [14920 2012-12-21] ()
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [9160 2012-12-21] ()
S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_x86.sys [16024 2013-02-07] (Secunia)
R3 RSPCIESTOR; C:\Windows\System32\DRIVERS\RtsPStor.sys [230944 2010-05-07] (Realtek Semiconductor Corp.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 tbhsd; C:\Windows\System32\drivers\tbhsd.sys [39016 2011-12-08] (RapidSolution Software AG)
U3 fwdirkog; \??\C:\Users\HERBY11\AppData\Local\Temp\fwdirkog.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-18 11:32 - 2013-08-18 11:32 - 00000476 _____ C:\Users\HERBY11\Downloads\defogger_disable.log
2013-08-18 11:32 - 2013-08-18 11:32 - 00000000 _____ C:\Users\HERBY11\defogger_reenable
2013-08-17 14:44 - 2013-08-17 14:45 - 01068993 _____ (Farbar) C:\Users\HERBY11\Downloads\FRST.exe
2013-08-17 14:37 - 2013-08-17 14:37 - 00000999 _____ C:\Users\HERBY11\Desktop\7z920 - Verknüpfung.lnk
2013-08-17 14:34 - 2013-08-17 14:34 - 00000000 ____D C:\Program Files\7-Zip
2013-08-17 14:33 - 2013-08-17 14:33 - 01110476 _____ C:\Users\HERBY11\Downloads\7z920.exe
2013-08-17 10:19 - 2013-08-17 10:19 - 00050477 _____ C:\Users\HERBY11\Downloads\Defogger.exe
2013-08-17 10:11 - 2013-08-17 10:11 - 00377856 _____ C:\Users\HERBY11\Downloads\gmer_2.1.19163.exe
2013-08-16 20:44 - 2013-08-16 20:44 - 00039026 _____ C:\Users\HERBY11\Documents\cc_20130816_204401.reg
2013-08-16 20:36 - 2013-08-16 20:37 - 04429440 _____ (Piriform Ltd) C:\Users\HERBY11\Downloads\ccsetup404.exe
2013-08-16 19:21 - 2013-08-16 19:22 - 00000000 ____D C:\Users\HERBY11\AppData\Roaming\HP
2013-08-16 19:21 - 2013-08-16 19:21 - 00000000 ____D C:\ProgramData\WEBREG
2013-08-16 18:13 - 2013-08-16 18:13 - 00000000 ____D C:\Program Files\Common Files\HP
2013-08-16 18:11 - 2013-08-16 18:11 - 00000000 ____D C:\ProgramData\HP Product Assistant
2013-08-16 18:08 - 2013-08-16 18:08 - 00000000 ____D C:\Program Files\Common Files\Hewlett-Packard
2013-08-16 18:01 - 2013-08-16 19:21 - 00174642 _____ C:\Windows\hphins33.dat
2013-08-15 13:27 - 2013-08-15 13:27 - 00000000 _____ C:\Windows\system32\shoAB10.tmp
2013-08-15 11:50 - 2013-08-15 11:51 - 39426288 _____ C:\Users\HERBY11\Downloads\DJ_SF_06_D1600_NonNet_Basic_Win_WW_140_175 (2).exe
2013-08-15 11:47 - 2012-08-23 16:48 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2013-08-15 11:47 - 2012-08-23 16:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2013-08-15 11:47 - 2012-08-23 16:40 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2013-08-15 11:47 - 2012-08-23 16:10 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-08-15 11:47 - 2012-08-23 16:10 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-08-15 11:47 - 2012-08-23 15:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2013-08-15 11:47 - 2012-08-23 15:47 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2013-08-15 11:47 - 2012-08-23 15:46 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2013-08-15 11:47 - 2012-08-23 15:32 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-08-15 11:47 - 2012-08-23 15:18 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-08-15 11:47 - 2012-08-23 13:40 - 00056320 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2013-08-15 11:47 - 2012-08-23 13:32 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2013-08-15 11:47 - 2012-08-23 13:15 - 00269312 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-08-15 11:47 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2013-08-15 11:47 - 2012-08-23 12:39 - 01048064 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2013-08-15 11:47 - 2012-08-23 12:08 - 02739712 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2013-08-15 11:47 - 2012-08-23 10:19 - 04916224 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-08-15 11:46 - 2012-08-24 19:05 - 00136560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2013-08-15 11:46 - 2012-08-24 19:02 - 00369856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2013-08-15 11:46 - 2012-08-24 18:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2013-08-15 11:46 - 2012-08-24 18:56 - 01039360 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2013-08-15 11:46 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2013-08-15 11:10 - 2013-08-15 11:22 - 39426288 _____ C:\Users\HERBY11\Downloads\DJ_SF_06_D1600_NonNet_Basic_Win_WW_140_175 (1).exe
2013-08-15 08:51 - 2013-08-15 08:58 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 08:40 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 08:40 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 08:40 - 2013-07-26 05:13 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-15 08:40 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 08:40 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 08:40 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 08:40 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 08:40 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 08:40 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 08:40 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-15 08:40 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-15 08:40 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 08:40 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 08:40 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-15 08:40 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 08:40 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-14 09:32 - 2013-07-09 06:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 09:31 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 09:31 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 09:31 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-14 09:31 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 09:31 - 2013-07-09 06:53 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 09:31 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 09:31 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 09:31 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 09:31 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 09:31 - 2013-07-06 07:05 - 01293760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 09:31 - 2013-06-15 05:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-12 23:26 - 2013-08-12 23:26 - 00002416 _____ C:\Users\HERBY11\Desktop\JRT.txt
2013-08-12 23:05 - 2013-08-12 23:10 - 00001640 _____ C:\AdwCleaner[S4].txt
2013-08-12 23:04 - 2013-08-12 23:05 - 00001707 _____ C:\AdwCleaner[R4].txt
2013-08-12 15:40 - 2013-08-12 15:40 - 00000338 _____ C:\AdwCleaner[S3].txt
2013-08-12 15:36 - 2013-08-12 15:39 - 00001588 _____ C:\AdwCleaner[R3].txt
2013-08-11 17:06 - 2013-08-11 17:06 - 00000000 ____D C:\Program Files\DIFX
2013-08-11 17:01 - 2013-08-11 17:04 - 11390192 _____ C:\Users\HERBY11\Downloads\WebUpdater_WindowsXPSP3andnewer__256.exe
2013-08-03 18:16 - 2013-08-03 18:18 - 00001241 _____ C:\AdwCleaner[S2].txt
2013-08-03 18:14 - 2013-08-03 18:15 - 00001308 _____ C:\AdwCleaner[R2].txt
2013-08-03 17:37 - 2013-08-03 17:39 - 01222289 _____ C:\Users\HERBY11\Downloads\HOSTS_Install_V2.exe
2013-08-02 17:21 - 2013-08-02 19:07 - 00000000 ____D C:\Program Files\Hosts_Anti_Adwares_PUPs
2013-08-02 17:20 - 2013-08-02 17:20 - 00001461 _____ C:\Users\HERBY11\Desktop\adwcleaner06 - Verknüpfung.lnk
2013-08-02 16:59 - 2013-08-02 17:04 - 00019670 _____ C:\AdwCleaner[S1].txt
2013-08-02 16:56 - 2013-08-02 16:57 - 00019731 _____ C:\AdwCleaner[R1].txt
2013-08-02 16:56 - 2013-08-02 16:56 - 00001434 _____ C:\Users\HERBY11\Desktop\JRT_5.2.9 - Verknüpfung.lnk
2013-08-02 16:44 - 2013-08-02 16:44 - 00000000 ____D C:\Windows\ERUNT
2013-08-02 16:42 - 2013-08-02 16:43 - 00666633 _____ C:\Users\HERBY11\Downloads\adwcleaner06.exe
2013-08-02 16:39 - 2013-08-02 16:39 - 00562430 _____ (Oleg N. Scherbakov) C:\Users\HERBY11\Downloads\JRT_5.2.9.exe
2013-08-01 19:18 - 2013-08-01 19:18 - 00001020 _____ C:\Users\HERBY11\Desktop\Autoruns11.62 - Verknüpfung.lnk
2013-08-01 19:13 - 2013-08-01 19:13 - 00001020 _____ C:\Users\HERBY11\Downloads\Autoruns11.62 - Verknüpfung.lnk
2013-08-01 18:24 - 2013-08-01 18:26 - 00000000 ____D C:\Users\HERBY11\Downloads\Autoruns11.62
2013-08-01 18:22 - 2013-08-01 18:22 - 00550151 _____ C:\Users\HERBY11\Downloads\Autoruns11.62.zip
2013-07-31 16:25 - 2013-07-31 16:25 - 00002170 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-07-27 09:06 - 2013-07-28 07:53 - 00000054 _____ C:\Users\HERBY11\AppData\Roaming\WB.CFG
==================== One Month Modified Files and Folders =======
2013-08-18 11:55 - 2013-08-18 11:55 - 00000000 ____D C:\FRST
2013-08-18 11:41 - 2011-03-17 14:17 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-18 11:32 - 2013-08-18 11:32 - 00000476 _____ C:\Users\HERBY11\Downloads\defogger_disable.log
2013-08-18 11:32 - 2013-08-18 11:32 - 00000000 _____ C:\Users\HERBY11\defogger_reenable
2013-08-18 11:32 - 2011-03-15 12:18 - 00000000 ____D C:\Users\HERBY11
2013-08-18 11:26 - 2011-03-15 14:01 - 00000000 ____D C:\Users\HERBY11\AppData\Roaming\Skype
2013-08-18 11:24 - 2011-05-26 16:57 - 00000000 ____D C:\QuickÜbertragung
2013-08-18 11:22 - 2009-09-07 01:02 - 01513930 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-18 11:13 - 2011-08-30 09:37 - 00001128 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549597879-199145057-3009319072-1000UA.job
2013-08-18 11:09 - 2012-09-22 12:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-18 10:29 - 2013-07-06 10:37 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-18 09:14 - 2013-07-07 13:13 - 00001186 _____ C:\Windows\Tasks\Plus-HD-2.5-updater.job
2013-08-18 09:14 - 2013-07-07 13:13 - 00001090 _____ C:\Windows\Tasks\Plus-HD-2.5-enabler.job
2013-08-18 09:14 - 2013-07-07 13:12 - 00001810 _____ C:\Windows\Tasks\Plus-HD-2.5-firefoxinstaller.job
2013-08-18 09:14 - 2013-07-07 13:12 - 00001190 _____ C:\Windows\Tasks\Plus-HD-2.5-codedownloader.job
2013-08-18 09:14 - 2013-07-07 13:11 - 00001884 _____ C:\Windows\Tasks\Plus-HD-2.5-chromeinstaller.job
2013-08-17 21:36 - 2011-08-30 09:37 - 00001076 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549597879-199145057-3009319072-1000Core.job
2013-08-17 14:45 - 2013-08-17 14:44 - 01068993 _____ (Farbar) C:\Users\HERBY11\Downloads\FRST.exe
2013-08-17 14:41 - 2011-03-17 14:17 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-17 14:37 - 2013-08-17 14:37 - 00000999 _____ C:\Users\HERBY11\Desktop\7z920 - Verknüpfung.lnk
2013-08-17 14:34 - 2013-08-17 14:34 - 00000000 ____D C:\Program Files\7-Zip
2013-08-17 14:33 - 2013-08-17 14:33 - 01110476 _____ C:\Users\HERBY11\Downloads\7z920.exe
2013-08-17 11:18 - 2012-02-25 11:19 - 02074791 _____ C:\Windows\WindowsUpdate.log
2013-08-17 10:19 - 2013-08-17 10:19 - 00050477 _____ C:\Users\HERBY11\Downloads\Defogger.exe
2013-08-17 10:11 - 2013-08-17 10:11 - 00377856 _____ C:\Users\HERBY11\Downloads\gmer_2.1.19163.exe
2013-08-16 20:44 - 2013-08-16 20:44 - 00039026 _____ C:\Users\HERBY11\Documents\cc_20130816_204401.reg
2013-08-16 20:42 - 2011-05-29 09:16 - 00000000 ____D C:\Users\HERBY11\AppData\Local\CrashDumps
2013-08-16 20:42 - 2011-03-17 15:20 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-08-16 20:42 - 2009-09-07 01:51 - 00000000 ____D C:\Windows\Panther
2013-08-16 20:39 - 2012-02-24 14:27 - 00000965 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-08-16 20:39 - 2012-02-24 14:26 - 00000000 ____D C:\Program Files\CCleaner
2013-08-16 20:37 - 2013-08-16 20:36 - 04429440 _____ (Piriform Ltd) C:\Users\HERBY11\Downloads\ccsetup404.exe
2013-08-16 19:29 - 2009-07-14 06:34 - 00016480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-16 19:29 - 2009-07-14 06:34 - 00016480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-16 19:22 - 2013-08-16 19:21 - 00000000 ____D C:\Users\HERBY11\AppData\Roaming\HP
2013-08-16 19:21 - 2013-08-16 19:21 - 00000000 ____D C:\ProgramData\WEBREG
2013-08-16 19:21 - 2013-08-16 18:01 - 00174642 _____ C:\Windows\hphins33.dat
2013-08-16 19:21 - 2011-05-04 13:32 - 00014795 _____ C:\ProgramData\hpzinstall.log
2013-08-16 19:19 - 2011-05-04 13:32 - 00000000 ____D C:\ProgramData\HP
2013-08-16 19:17 - 2011-03-15 12:27 - 00068832 _____ C:\Users\HERBY11\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-16 19:14 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-16 19:14 - 2009-07-14 06:33 - 00282808 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-16 19:13 - 2011-03-31 11:23 - 00000000 ____D C:\Users\HERBY11\AppData\Roaming\SoftGrid Client
2013-08-16 18:13 - 2013-08-16 18:13 - 00000000 ____D C:\Program Files\Common Files\HP
2013-08-16 18:13 - 2011-05-04 13:33 - 00000000 ____D C:\Program Files\HP
2013-08-16 18:11 - 2013-08-16 18:11 - 00000000 ____D C:\ProgramData\HP Product Assistant
2013-08-16 18:08 - 2013-08-16 18:08 - 00000000 ____D C:\Program Files\Common Files\Hewlett-Packard
2013-08-16 17:16 - 2012-01-05 20:34 - 00000000 ____D C:\Users\HERBY11\Documents\ADMINISTRATION
2013-08-15 21:13 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-08-15 13:27 - 2013-08-15 13:27 - 00000000 _____ C:\Windows\system32\shoAB10.tmp
2013-08-15 13:26 - 2010-07-29 01:50 - 00000000 ____D C:\Windows\system32\Drivers\de-DE
2013-08-15 13:26 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\de-DE
2013-08-15 12:01 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-15 11:51 - 2013-08-15 11:50 - 39426288 _____ C:\Users\HERBY11\Downloads\DJ_SF_06_D1600_NonNet_Basic_Win_WW_140_175 (2).exe
2013-08-15 11:22 - 2013-08-15 11:10 - 39426288 _____ C:\Users\HERBY11\Downloads\DJ_SF_06_D1600_NonNet_Basic_Win_WW_140_175 (1).exe
2013-08-15 08:58 - 2013-08-15 08:51 - 00000000 ____D C:\Windows\system32\MRT
2013-08-15 08:51 - 2011-03-18 08:49 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-12 23:26 - 2013-08-12 23:26 - 00002416 _____ C:\Users\HERBY11\Desktop\JRT.txt
2013-08-12 23:12 - 2009-07-14 06:53 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-12 23:10 - 2013-08-12 23:05 - 00001640 _____ C:\AdwCleaner[S4].txt
2013-08-12 23:05 - 2013-08-12 23:04 - 00001707 _____ C:\AdwCleaner[R4].txt
2013-08-12 15:40 - 2013-08-12 15:40 - 00000338 _____ C:\AdwCleaner[S3].txt
2013-08-12 15:39 - 2013-08-12 15:36 - 00001588 _____ C:\AdwCleaner[R3].txt
2013-08-11 17:06 - 2013-08-11 17:06 - 00000000 ____D C:\Program Files\DIFX
2013-08-11 17:06 - 2012-10-27 08:19 - 00000000 ____D C:\Program Files\Garmin
2013-08-11 17:04 - 2013-08-11 17:01 - 11390192 _____ C:\Users\HERBY11\Downloads\WebUpdater_WindowsXPSP3andnewer__256.exe
2013-08-11 17:04 - 2012-10-26 10:15 - 00000000 ____D C:\Users\HERBY11\AppData\Roaming\Garmin
2013-08-08 22:15 - 2012-07-12 20:49 - 00000000 ____D C:\Users\HERBY11\Documents\Calibre Bibliothek
2013-08-08 14:58 - 2012-03-07 11:54 - 00000000 ____D C:\Users\HERBY11\AppData\Roaming\vlc
2013-08-07 10:17 - 2009-07-14 06:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-08-04 19:10 - 2011-06-11 16:22 - 00000000 ____D C:\Users\HERBY11\TapinRadio
2013-08-03 18:18 - 2013-08-03 18:16 - 00001241 _____ C:\AdwCleaner[S2].txt
2013-08-03 18:15 - 2013-08-03 18:14 - 00001308 _____ C:\AdwCleaner[R2].txt
2013-08-03 17:39 - 2013-08-03 17:37 - 01222289 _____ C:\Users\HERBY11\Downloads\HOSTS_Install_V2.exe
2013-08-02 19:07 - 2013-08-02 17:21 - 00000000 ____D C:\Program Files\Hosts_Anti_Adwares_PUPs
2013-08-02 17:20 - 2013-08-02 17:20 - 00001461 _____ C:\Users\HERBY11\Desktop\adwcleaner06 - Verknüpfung.lnk
2013-08-02 17:04 - 2013-08-02 16:59 - 00019670 _____ C:\AdwCleaner[S1].txt
2013-08-02 16:57 - 2013-08-02 16:56 - 00019731 _____ C:\AdwCleaner[R1].txt
2013-08-02 16:56 - 2013-08-02 16:56 - 00001434 _____ C:\Users\HERBY11\Desktop\JRT_5.2.9 - Verknüpfung.lnk
2013-08-02 16:44 - 2013-08-02 16:44 - 00000000 ____D C:\Windows\ERUNT
2013-08-02 16:43 - 2013-08-02 16:42 - 00666633 _____ C:\Users\HERBY11\Downloads\adwcleaner06.exe
2013-08-02 16:39 - 2013-08-02 16:39 - 00562430 _____ (Oleg N. Scherbakov) C:\Users\HERBY11\Downloads\JRT_5.2.9.exe
2013-08-01 19:18 - 2013-08-01 19:18 - 00001020 _____ C:\Users\HERBY11\Desktop\Autoruns11.62 - Verknüpfung.lnk
2013-08-01 19:18 - 2011-03-15 12:30 - 00000133 _____ C:\Users\HERBY11\AppData\Local\mv_Photo.xml
2013-08-01 19:13 - 2013-08-01 19:13 - 00001020 _____ C:\Users\HERBY11\Downloads\Autoruns11.62 - Verknüpfung.lnk
2013-08-01 19:06 - 2011-03-15 12:30 - 00000138 _____ C:\Users\HERBY11\AppData\Local\mv_music.xml
2013-08-01 18:26 - 2013-08-01 18:24 - 00000000 ____D C:\Users\HERBY11\Downloads\Autoruns11.62
2013-08-01 18:22 - 2013-08-01 18:22 - 00550151 _____ C:\Users\HERBY11\Downloads\Autoruns11.62.zip
2013-08-01 13:13 - 2011-08-30 09:39 - 00002336 _____ C:\Users\HERBY11\Desktop\Google Chrome.lnk
2013-08-01 13:11 - 2013-06-16 08:34 - 00000005 _____ C:\Users\HERBY11\AppData\Roaming\WBPU-TTL.DAT
2013-07-31 16:25 - 2013-07-31 16:25 - 00002170 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-07-31 16:25 - 2011-03-17 14:17 - 00000000 ____D C:\Program Files\Google
2013-07-31 16:24 - 2011-11-09 18:54 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-07-31 16:24 - 2011-03-16 19:08 - 00000052 _____ C:\Windows\system32\DOErrors.log
2013-07-28 07:53 - 2013-07-27 09:06 - 00000054 _____ C:\Users\HERBY11\AppData\Roaming\WB.CFG
2013-07-27 14:31 - 2011-03-15 14:01 - 00000000 ____D C:\ProgramData\Skype
2013-07-27 14:30 - 2013-01-27 06:36 - 00000000 ___RD C:\Program Files\Skype
2013-07-27 12:41 - 2011-04-06 21:21 - 00000000 ____D C:\Users\HERBY11\AppData\Local\Adobe
2013-07-27 12:39 - 2011-06-17 08:29 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-07-27 12:39 - 2010-07-28 18:33 - 00000000 ____D C:\ProgramData\Adobe
2013-07-27 12:39 - 2010-07-28 18:32 - 00000000 ____D C:\Program Files\Adobe
2013-07-26 12:48 - 2010-07-28 18:34 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2013-07-26 05:13 - 2013-08-15 08:40 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-26 05:13 - 2013-08-15 08:40 - 01141248 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-26 05:13 - 2013-08-15 08:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-26 05:12 - 2013-08-15 08:40 - 14329344 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-26 05:12 - 2013-08-15 08:40 - 02877440 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-26 05:12 - 2013-08-15 08:40 - 02048512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-26 05:12 - 2013-08-15 08:40 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-26 05:12 - 2013-08-15 08:40 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-26 05:12 - 2013-08-15 08:40 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-26 05:12 - 2013-08-15 08:40 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-26 05:12 - 2013-08-15 08:40 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-26 05:12 - 2013-08-15 08:40 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-26 05:11 - 2013-08-15 08:40 - 13761024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-26 05:11 - 2013-08-15 08:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-26 04:49 - 2013-08-15 08:40 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-26 03:59 - 2013-08-15 08:40 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-25 10:57 - 2013-08-14 09:31 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-19 03:41 - 2013-08-14 09:31 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-12 17:46
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 16-08-2013
Ran by HERBY11 at 2013-08-18 11:57:37
Running from C:\Users\HERBY11\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
32 Bit HP CIO Components Installer (Version: 6.1.2)
7-Zip 9.20
Acrobat.com (Version: 1.6.65)
Adobe AIR (Version: 3.8.0.870)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (Version: 11.8.800.94)
Adobe Reader XI (11.0.03) - Deutsch (Version: 11.0.03)
Adobe Shockwave Player 12.0 (Version: 12.0.3.133)
Amazon Kindle
Avira Free Antivirus (Version: 13.0.0.3885)
Bejeweled 2 Deluxe (Version: 2.2.0.95)
Broadcom 802.11 Wireless LAN Adapter (Version: 5.60.350.6)
BufferChm (Version: 130.0.331.000)
calibre (Version: 0.9.38)
CCleaner (Version: 4.04)
Chuzzle Deluxe (Version: 2.2.0.95)
CyberLink DVD Suite (Version: 7.0.3003)
D1600 (Version: 130.0.373.000)
DDBAC (Version: 4.3.64)
DeviceDiscovery (Version: 130.0.372.000)
Diner Dash 2 Restaurant Rescue (Version: 2.2.0.95)
DJ_SF_06_D1600_SW_Min (Version: 130.0.373.000)
dradio-Recorder Version 3.02.0
Dream Chronicles (Version: 2.2.0.95)
EaseUS Partition Master 9.2.1 Home Edition
Elevated Installer (Version: 2.1.13)
ElsterFormular (Version: 14.1.20130301)
Energy Star Digital Logo (Version: 1.0.1)
ESU for Microsoft Windows 7 (Version: 1.0.0)
FATE (Version: 2.2.0.95)
Garmin Communicator Plugin (Version: 4.0.3)
Garmin Express (Version: 2.1.13)
Garmin Express Tray (Version: 2.1.13)
Garmin Update Service (Version: 2.1.13)
Garmin USB Drivers (Version: 2.3.1.0)
Garmin WebUpdater (Version: 2.5.6)
Google Chrome (HKCU Version: 28.0.1500.95)
Google Earth (Version: 7.1.1.1888)
Google Update Helper (Version: 1.3.21.153)
GPBaseService2 (Version: 130.0.371.000)
Haufe iDesk-Browser (Version: 10.10.14.0000)
Haufe iDesk-Service (Version: 10.10.25.7810)
Hewlett-Packard ACLM.NET v1.2.1.1 (Version: 1.00.0000)
HP CloudDrive
HP Customer Experience Enhancements (Version: 6.0.1.3)
HP Customer Participation Program 13.0 (Version: 13.0)
HP Deskjet 3050 J610 series - Grundlegende Software für das Gerät (Version: 22.50.231.0)
HP Deskjet 3050 J610 series Hilfe (Version: 140.0.63.63)
HP Deskjet D1600 Printer Driver Software 13.0 Rel .6 (Version: 13.0)
HP Documentation (Version: 1.1.1.0)
HP Game Console
HP Games (Version: 1.0.1.3)
HP HomeBase (Version: 3.2.2.90)
HP Imaging Device Functions 13.0 (Version: 13.0)
HP Power Manager (Version: 1.2.3)
HP Print Projects 1.0 (Version: 1.0)
HP Quick Launch (Version: 2.5.2)
HP QuickSync (Version: 6.2.684.10454)
HP QuickWeb Installer (Version: 1.3.12.0)
HP Setup (Version: 8.1.4186.3400)
HP Smart Web Printing 4.5 (Version: 4.5)
HP Software Framework (Version: 4.0.39.1)
HP Solution Center 13.0 (Version: 13.0)
HP Support Assistant (Version: 7.0.39.15)
HP Update (Version: 5.003.001.001)
HP Wireless Assistant (Version: 4.0.9.0)
HPPhotoGadget (Version: 130.0.282.000)
hpPrintProjects (Version: 130.0.303.000)
HPProductAssistant (Version: 130.0.371.000)
HPSSupply (Version: 130.0.371.000)
hpWLPGInstaller (Version: 130.0.303.000)
IDT Audio (Version: 1.0.6288.0)
Insaniquarium Deluxe (Version: 2.2.0.95)
Intel(R) Graphics Media Accelerator Driver (Version: 8.14.10.2117)
Intel(R) Rapid Storage Technology (Version: 10.1.0.1008)
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Jewel Quest - Heritage (Version: 2.2.0.95)
Jewel Quest II (Version: 2.2.0.95)
Jewel Quest Solitaire (Version: 2.2.0.95)
JoJo's Fashion Show (Version: 2.2.0.95)
Junk Mail filter update (Version: 14.0.8117.416)
K-Lite Codec Pack 7.0.0 (Standard) (Version: 7.0.0)
Konz 2012 (Version: 1.00.0000)
Konz 2013 (Version: 1.00.0000)
Lexware Info Service (Version: 2.70.00.0081)
Lexware online banking (Version: 8.00.00.0067)
Mahjongg Artifacts (Version: 2.2.0.95)
MarketResearch (Version: 130.0.374.000)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Office 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Sync Framework Runtime Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Sync Framework Services Native v1.0 (x86) (Version: 1.0.1215.0)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
Open It! (Version: 1.1.1)
Penguins! (Version: 2.2.0.95)
Plants vs. Zombies (Version: 2.2.0.95)
Plus-HD-2.5 (Version: 1.27.153.5)
Polar Bowler (Version: 2.2.0.95)
Quicken 2010 - Servicepack 5 (Version: 17.05.0000)
Quicken 2010 (Version: 17.00.00.0081)
Quicken Import Export Server 2010 (Version: 17.00.00.0048)
Reader for PC (Version: 2.0.02.15180)
Realtek Ethernet Controller Driver For Windows 7 (Version: 7.21.531.2010)
Realtek PCIE Card Reader (Version: 6.1.7600.00048)
Recovery Manager (Version: 5.5.3023)
Secunia PSI (3.0.0.6005) (Version: 3.0.0.6005)
Servicepack Datumsaktualisierung (Version: 1.00.00.0005)
Shop for HP Supplies (Version: 13.0)
Skip-Bo - Castaway Caper (Version: 2.2.0.95)
Skype™ 6.6 (Version: 6.6.106)
Slingo Deluxe (Version: 2.2.0.95)
SmartWebPrinting (Version: 130.0.373.000)
SolutionCenter (Version: 130.0.373.000)
Spamihilator 1.5.0 (32-Bit) (Version: 1.5.0)
Spybot - Search & Destroy (Version: 1.6.2)
Status (Version: 130.0.373.000)
Steuer 2010 (Version: 17.08.00.0005)
Steuer 2011 (Version: 19.00.7304)
Steuer 2012 (Version: 20.00.8137)
Steuer-Hilfesammlung 2010 (Version: 17.10.0.0)
swMSM (Version: 12.0.0.1)
Synaptics Pointing Device Driver (Version: 15.0.24.0)
TapinRadio 1.58.2
Toolbox (Version: 130.0.648.000)
Tradewinds Legends (Version: 2.2.0.95)
TrayApp (Version: 130.0.376.000)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Zip Opener
Virtual Villagers - The Secret City (Version: 2.2.0.95)
Visual C++ 2008 x86 Runtime - (v9.0.30729) (Version: 9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (Version: 9.0.30729.01)
Visual C++ 9.0 CRT (x86) WinSXS MSM (Version: 9.0)
VisualBee for Microsoft PowerPoint (HKCU Version: V3.9)
VLC media player 2.0.7 (Version: 2.0.7)
WebReg (Version: 130.0.132.017)
Wedding Dash (Version: 2.2.0.95)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (Version: 04/19/2012 2.3.1.0)
Windows Live Anmelde-Assistent (Version: 5.000.818.5)
Windows Live Call (Version: 14.0.8117.0416)
Windows Live Communications Platform (Version: 14.0.8117.416)
Windows Live Essentials (Version: 14.0.8117.0416)
Windows Live Essentials (Version: 14.0.8117.416)
Windows Live Fotogalerie (Version: 14.0.8117.416)
Windows Live Mail (Version: 14.0.8117.0416)
Windows Live Messenger (Version: 14.0.8117.0416)
Windows Live Sync (Version: 14.0.8117.416)
Windows Live Writer (Version: 14.0.8117.0416)
Windows Live-Uploadtool (Version: 14.0.8014.1029)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
WinRAR 4.01 (32-Bit) (Version: 4.01.0)
Zattoo4 4.0.5 (Version: 4.0.5)
Zuma Deluxe (Version: 2.2.0.95)
==================== Restore Points =========================
19-07-2013 07:32:09 Windows Update
23-07-2013 06:46:51 Windows Update
26-07-2013 10:42:53 Windows Update
30-07-2013 12:10:27 Windows Update
06-08-2013 06:30:32 Windows Update
09-08-2013 06:51:45 Windows Update
13-08-2013 12:06:00 Windows Update
15-08-2013 06:38:38 Windows Update
15-08-2013 09:46:30 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {017A8E9A-6BD4-4168-818F-D2D79A08BF48} - System32\Tasks\Plus-HD-2.5-updater => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-updater.exe [2013-07-07] (Plus HD)
Task: {0BC4FD0F-BBA8-4458-9C6D-FB7085F8D51C} - System32\Tasks\{681A7B24-1C0A-4057-8FC0-7A82ADC3C63D} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {0C09A55E-6772-4C35-81CB-5BD497941ED3} - System32\Tasks\Plus-HD-2.5-codedownloader => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-codedownloader.exe [2013-07-07] (Plus HD)
Task: {1055D049-047C-4608-B690-1EB8F7109189} - System32\Tasks\{165B8799-9DA7-4431-BABF-1196EC09B32C} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {17DF179A-8FBD-4599-B4B3-8B3D82DBB794} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-12] (Adobe Systems Incorporated)
Task: {225E702F-F56D-4813-8E8B-13516B0F07F6} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe No File
Task: {27A4A416-FD6F-4824-8629-DF1CAEBAE72C} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {33107FDA-502D-455A-8C4B-C7D453A2576D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-03-17] (Google Inc.)
Task: {332570A3-8CE5-46DE-A62B-D76567CAB6E9} - System32\Tasks\Plus-HD-2.5-chromeinstaller => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-chromeinstaller.exe [2013-07-07] (Plus HD)
Task: {3948F6A8-4A8F-4E82-B21E-16A750CA8E56} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2549597879-199145057-3009319072-1000UA => C:\Users\HERBY11\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-03] (Google Inc.)
Task: {3AA3FEF8-B13E-490A-84C0-DBDD453ACE7C} - System32\Tasks\{6790FD92-3BB2-454A-94B6-86990501171A} => C:\Users\HERBY11\Downloads\HOSTS_Install_V2.exe [2013-08-03] ()
Task: {49827961-BAA2-4E91-92F3-8F2E7FAAD3B7} - System32\Tasks\{35143521-E22E-4BF7-A842-B8DA15998A79} => C:\Users\HERBY11\Downloads\HOSTS_Install_V2.exe [2013-08-03] ()
Task: {4FA1EA69-3007-4E5E-9D97-308B07B30D1B} - System32\Tasks\{7BFB35E9-12E8-40D8-A135-9FA0E8540221} => C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\chrome.exe [2013-07-25] (Google Inc.)
Task: {521FE508-B220-4290-9E52-BACAF3576CA8} - System32\Tasks\{96F67A5A-CF7F-42AE-869B-DA2AAFE7824A} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {53427289-9A22-4EE9-834A-20370AC4DF81} - System32\Tasks\{B9F0D63B-1B2E-4356-A709-8780F35618E8} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {56B87471-FFB5-43BF-AFFB-62B5983FFB6B} - System32\Tasks\{74CE91B5-F0A8-469C-BD14-DF4A40383025} => c:\users\herby11\appdata\local\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5A4128CE-3A82-43A3-94CD-68F5D7EDA678} - System32\Tasks\{C85D9C4F-524E-4F6B-944E-CB348A67F532} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {5C492421-0170-4472-999C-1F37550F5A44} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {5E67DBF7-76F9-4D27-B41D-B23D876F91F3} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2549597879-199145057-3009319072-1000Core => C:\Users\HERBY11\AppData\Local\Google\Update\GoogleUpdate.exe [2011-08-03] (Google Inc.)
Task: {5FD88A06-E8AD-4C69-AA36-3914034FC5B3} - System32\Tasks\{79510AA4-8FE5-420B-A3C1-99F3E20CE30B} => C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6A4D4B93-DD0B-4C5E-B9EF-F7D36E2FE5EF} - System32\Tasks\{DACA100E-4C7A-4AEE-BFFE-850458232C94} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {6FBC6F20-F07A-453B-A4B0-4B6F589A6D0D} - System32\Tasks\{ABC77BE3-9265-4A49-9F96-382A7DB756C8} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {7309BAC1-4E4E-4F03-8170-F4880586C05F} - System32\Tasks\{548EC07B-5E38-48C4-BA82-1B929E7CCD54} => C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78E9C975-4471-42CA-8D99-CFEA56A5690C} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {8DE59E34-EA4F-4251-AD22-A9D01962499D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-07-22] (Piriform Ltd)
Task: {91EF38B2-BEC8-4FA9-90B9-B88CE28F3989} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe No File
Task: {9935139E-F747-4B54-A7EB-2003F32EBE4E} - System32\Tasks\Plus-HD-2.5-firefoxinstaller => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-firefoxinstaller.exe [2013-07-07] (Plus HD)
Task: {996D5258-7DAF-4474-8B46-54A9997BF167} - System32\Tasks\{BACF31A3-5809-4241-9BBA-CBD8D96B2743} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {9BEAF53C-080D-45F3-8591-12D4463154FD} - System32\Tasks\{53B17EF9-CDAD-4629-836D-FBBB2AAE82E3} => C:\Users\HERBY11\AppData\Local\Google\Chrome\Application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A6194CFD-799A-4A94-888F-049D9973C1A5} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation)
Task: {AAF58872-CCFF-467B-971E-0318224BBF73} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2011-03-17] (Google Inc.)
Task: {ADFF299E-5AA5-44FA-B163-FB5C38FF98EB} - System32\Tasks\EPUpdater => C:\Users\HERBY11\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe No File
Task: {B1DA363B-FEBF-4540-8AB6-FB8D220B7174} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {B1E51F30-3887-4462-BA6B-ED259B2C0DD6} - System32\Tasks\ServicePlan => C:\Program Files\Hewlett-Packard\HP Setup\RemEngine.exe [2010-05-25] ()
Task: {B5FF185D-27FB-4C97-AE9C-995C24714E23} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company)
Task: {C66958D0-7917-47FF-BCD4-974244BFB823} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-04-01] (Hewlett-Packard Company)
Task: {D9AD4D3F-695A-42EE-8C11-EE82F1003BAC} - System32\Tasks\{E7BEC747-963F-49F1-86D7-A737B8F3AEA2} => c:\users\herby11\appdata\local\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DBE87843-2DB9-46DF-9116-8D865EF1B6B4} - System32\Tasks\Plus-HD-2.5-enabler => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-enabler.exe [2013-07-07] (Plus HD)
Task: {FAA5D40B-B14C-413A-975C-DBFC8C5777A6} - System32\Tasks\{D1496C34-C0F4-454C-97FF-8BEE675A16D4} => C:\Program Files\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {FDBCED12-1248-41DA-983A-866F0A78C48B} - System32\Tasks\{3460A700-1138-4E25-A42B-B075BF2181D9} => C:\Program Files\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549597879-199145057-3009319072-1000Core.job => C:\Users\HERBY11\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2549597879-199145057-3009319072-1000UA.job => C:\Users\HERBY11\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-2.5-chromeinstaller.job => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-chromeinstaller.exe
Task: C:\Windows\Tasks\Plus-HD-2.5-codedownloader.job => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-codedownloader.exe
Task: C:\Windows\Tasks\Plus-HD-2.5-enabler.job => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-enabler.exe
Task: C:\Windows\Tasks\Plus-HD-2.5-firefoxinstaller.job => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-firefoxinstaller.exe
Task: C:\Windows\Tasks\Plus-HD-2.5-updater.job => C:\Program Files\Plus-HD-2.5\Plus-HD-2.5-updater.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (08/16/2013 07:12:36 PM) (Source: Application Error) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm hpzsetup.exe wurde wegen dieses Fehlers geschlossen.
Programm: hpzsetup.exe
Datei:
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: C0000098
Datenträgertyp: 0
Error: (08/16/2013 07:12:36 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: hpzsetup.exe, Version: 0.0.0.0, Zeitstempel: 0x4a1cd7e3
Name des fehlerhaften Moduls: hpzsetup.exe, Version: 0.0.0.0, Zeitstempel: 0x4a1cd7e3
Ausnahmecode: 0xc0000006
Fehleroffset: 0x00069ab2
ID des fehlerhaften Prozesses: 0x12fc
Startzeit der fehlerhaften Anwendung: 0xhpzsetup.exe0
Pfad der fehlerhaften Anwendung: hpzsetup.exe1
Pfad des fehlerhaften Moduls: hpzsetup.exe2
Berichtskennung: hpzsetup.exe3
Error: (08/16/2013 05:11:52 PM) (Source: Application Hang) (User: )
Description: Programm WINWORDC.EXE, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1350
Startzeit: 01ce9a91ca7cc7a8
Endzeit: 0
Anwendungspfad: Q:\140066.deu\Office14\WINWORDC.EXE
Berichts-ID: 28c37a61-0686-11e3-a8e6-68b599dd6cea
Error: (08/16/2013 10:46:38 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (08/16/2013 09:32:25 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PSIA.exe, Version: 3.0.0.6005, Zeitstempel: 0x51139458
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0004866a
ID des fehlerhaften Prozesses: 0x7f4
Startzeit der fehlerhaften Anwendung: 0xPSIA.exe0
Pfad der fehlerhaften Anwendung: PSIA.exe1
Pfad des fehlerhaften Moduls: PSIA.exe2
Berichtskennung: PSIA.exe3
Error: (08/15/2013 09:12:53 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (08/14/2013 10:53:05 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
System errors:
=============
Error: (08/17/2013 09:24:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Google Update Service (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet:
%%109
Error: (08/17/2013 09:24:44 PM) (Source: DCOM) (User: )
Description: 109gupdate/comsvc{4EB61BAC-A3B6-4760-9581-655041EF4D69}
Error: (08/17/2013 09:23:56 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.
Error: (08/17/2013 03:41:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Installer" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (08/17/2013 03:41:05 PM) (Source: DCOM) (User: )
Description: 1053MSIServer{000C101C-0000-0000-C000-000000000046}
Error: (08/17/2013 03:41:00 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Installer erreicht.
Error: (08/16/2013 07:17:29 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
Error: (08/16/2013 07:14:59 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (08/16/2013 04:58:56 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AntiVirSchedulerService erreicht.
Error: (08/16/2013 09:33:06 AM) (Source: Service Control Manager) (User: )
Description: Dienst "Secunia PSI Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Microsoft Office Sessions:
=========================
Error: (08/16/2013 07:12:36 PM) (Source: Application Error)(User: )
Description: hpzsetup.exeC00000980
Error: (08/16/2013 07:12:36 PM) (Source: Application Error)(User: )
Description: hpzsetup.exe0.0.0.04a1cd7e3hpzsetup.exe0.0.0.04a1cd7e3c000000600069ab212fc01ce9a99eefacb71E:\hpzsetup.exeE:\hpzsetup.exe0b46205d-0697-11e3-a8e6-68b599dd6cea
Error: (08/16/2013 05:11:52 PM) (Source: Application Hang)(User: )
Description: WINWORDC.EXE0.0.0.0135001ce9a91ca7cc7a80Q:\140066.deu\Office14\WINWORDC.EXE28c37a61-0686-11e3-a8e6-68b599dd6cea
Error: (08/16/2013 10:46:38 AM) (Source: SideBySide)(User: )
Description: assemblyIdentitylanguage*c:\program files\spybot - search & destroy\DelZip179.dllc:\program files\spybot - search & destroy\DelZip179.dll8
Error: (08/16/2013 09:32:25 AM) (Source: Application Error)(User: )
Description: PSIA.exe3.0.0.600551139458ole32.dll6.1.7601.175144ce7b96fc00000050004866a7f401ce99aa88bfd5a8C:\Program Files\Secunia\PSI\PSIA.exeC:\Windows\system32\ole32.dllfe9888e0-0645-11e3-a8e6-68b599dd6cea
Error: (08/15/2013 09:12:53 PM) (Source: SideBySide)(User: )
Description: assemblyIdentitylanguage*c:\program files\spybot - search & destroy\DelZip179.dllc:\program files\spybot - search & destroy\DelZip179.dll8
Error: (08/14/2013 10:53:05 AM) (Source: SideBySide)(User: )
Description: assemblyIdentitylanguage*c:\program files\spybot - search & destroy\DelZip179.dllc:\program files\spybot - search & destroy\DelZip179.dll8
==================== Memory info ===========================
Percentage of memory in use: 55%
Total physical RAM: 2035.9 MB
Available physical RAM: 912.02 MB
Total Pagefile: 4071.8 MB
Available Pagefile: 2382.17 MB
Total Virtual: 2047.88 MB
Available Virtual: 1906.99 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:215.64 GB) (Free:151.47 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (RECOVERY) (Fixed) (Total:16.95 GB) (Free:2.42 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 233 GB) (Disk ID: 3C821107)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=216 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=17 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-08-18 13:54:24
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0 ST925031 rev.0001 232,89GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\HERBY11\AppData\Local\Temp\fwdirkog.sys
---- System - GMER 2.1 ----
SSDT 8054AB3E ZwCreateSection
SSDT 8054AB48 ZwRequestWaitReplyPort
SSDT 8054AB43 ZwSetContextThread
SSDT 8054AB4D ZwSetSecurityObject
SSDT 8054AB52 ZwSystemDebugControl
SSDT 8054AADF ZwTerminateProcess
---- Kernel code sections - GMER 2.1 ----
.text ntkrnlpa.exe!ZwRollbackEnlistment + 142D 81E7CA15 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 81EB6212 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!KeRemoveQueueEx + 11F7 81EBD58C 4 Bytes [3E, AB, 54, 80]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1553 81EBD8E8 4 Bytes [48, AB, 54, 80]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1597 81EBD92C 4 Bytes [43, AB, 54, 80]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1613 81EBD9A8 4 Bytes [4D, AB, 54, 80]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1667 81EBD9FC 4 Bytes [52, AB, 54, 80]
.text ...
---- Devices - GMER 2.1 ----
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys
---- Registry - GMER 2.1 ----
Reg HKLM\SOFTWARE\Microsoft\Windows Search\UsnNotifier\Windows\Catalogs\SystemIndex@{AADB80EC-4EDA-11E0-B223-806E6F6E6963} 10033056320
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----
Code:
ATTFilter Exportierte Ereignisse:
16.08.2013 20:40 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\HERBY11\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/InstallCore.Gen7' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
16.08.2013 20:40 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\HERBY11\AppData\Local\Temp\ICReinstall_ZipOpenerSetup
(1).exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/InstallCore.Gen7' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern
|
| Themen zu Windows 7: Seitenaufbau sehr langsam |
| 7-zip, ad-aware, adware/installcore.gen7, antivir, antivirus, avira, bingbar, ccsetup, computer, defender, desktop, device driver, epupdater, farbar, farbar recovery scan tool, festplatte, flash player, google, homepage, icreinstall, langsam, launch, malware, mozilla, nicht möglich, plug-in, problem, realtek, registry, richtlinie, rundll, safer networking, scan, secunia psi, services.exe, software, somoto, svchost.exe, system, usb, windows |
Baum-Darstellung