![]() |
|
Plagegeister aller Art und deren Bekämpfung: Pop-Up: Spyware gefunden; langsamer RechnerWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
![]() | ![]() Pop-Up: Spyware gefunden; langsamer Rechner Hallo, ich habe seit heute nachmittag (nach dem Versuch Skype zu installieren) ständig Pop-Ups und auch Werbe-Blöcke bei google-Suchen, die sagen, dass eine Spyware gefunden wurde und ich diese durch klicken entfernen sollte. Da ich hier im Forum schon ähnliche Probleme gefunden habe, habe ich FRST64 einen Scan machen lassen und folgende Ergebnisse bekommen: frst.txt Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013 Ran by HP (administrator) on 28-08-2013 17:38:36 Running from C:\Users\HP\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\system32\atiesrxx.exe (Wsys Co., Ltd.) C:\ProgramData\eSafe\eGdpSvc.exe (AMD) C:\Windows\system32\atieclxx.exe (Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe (Dropbox, Inc.) C:\Users\HP\AppData\Roaming\Dropbox\bin\Dropbox.exe (Hewlett-Packard) C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Easybits) C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Advanced Micro Devices Inc.) c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe () C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe () C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe (EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe () C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (WebConnect) C:\Program Files (x86)\WebConnect\updateWebConnect.exe () C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard) HKCU\...\Run: [NTRedirect] - C:\Users\HP\AppData\Roaming\BabSolution\Shared\enhancedNT.dll [188400 2013-08-28] () HKCU\...\Run: [PC Speed Maximizer] - C:\Program Files (x86)\PC Speed Maximizer\SPMLauncher.exe [134456 2013-03-09] (Smart PC Solutions) HKCU\...\Policies\system: [DisableLockWorkstation] 0 HKCU\...\Policies\system: [DisableChangePassword] 0 MountPoints2: {a8d2807b-d829-11e1-93a1-806e6f6e6963} - E:\_AUTORUN\AUTORUN.EXE HKLM-x32\...\Run: [StartCCC] - c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-25] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [HP Software Update] - c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54576 2008-12-08] (Hewlett-Packard) HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation) HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-05-17] (EasyBits Software AS) HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [658424 2011-05-06] (PDF Complete Inc) HKLM-x32\...\Run: [Nikon Message Center 2] - C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [619008 2010-05-25] (Nikon Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SweetIM] - C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe [115032 2012-05-29] (SweetIM Technologies Ltd.) HKLM-x32\...\Run: [Sweetpacks Communicator] - C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe [231768 2012-08-15] (SweetIM Technologies Ltd.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-07-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1644680 2013-02-08] (Ask) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation) HKLM-x32\...\Run: [Magic Desktop for HP notification] - C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1238016 2013-07-28] (Easybits) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.) AppInit_DLLs-x32: c:\progra~3\browse~1\261562~1.220\{c16c1~1\browse~1.dll [2699216 2013-08-13] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe () Startup: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Biet-O-Matic - Verknüpfung.lnk ShortcutTarget: Biet-O-Matic - Verknüpfung.lnk -> C:\Program Files (x86)\Biet-O-Matic\Biet-O-Matic.exe (www.bid-o-matic.org) Startup: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\HP\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=hp&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=hp&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=B80590F6520899E6&affID=119357&tt=280813_ctrl2&tsp=4988 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=hp&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=hp&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=hp&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=hp&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=sc&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=ds&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 SearchScopes: HKLM - {23F4C8FC-61B8-4FC0-9AA8-6CF90F056A4A} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=ds&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-2/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=ds&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 SearchScopes: HKLM-x32 - {23F4C8FC-61B8-4FC0-9AA8-6CF90F056A4A} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=ds&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-2/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms} SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&crg=3.27010003&st=12&q={searchTerms}&barid={E6DD2494-F39A-4B84-B397-22B6B68E4579} SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=ds&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=B80590F6520899E6&affID=119357&tt=280813_ctrl2&tsp=4988 SearchScopes: HKCU - {23F4C8FC-61B8-4FC0-9AA8-6CF90F056A4A} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPDTDF SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=ds&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 SearchScopes: HKCU - {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://www.amazon.de/gp/bit/amazonserp/ref=bit_bds-p07_serp_ie_de_display?ie=UTF8&tagbase=bds-p07&tag=bds-p07-serp-de-ie-21&tbrId=v1_abb-channel-7_e327388df0ad4d9bb02a596cc9521982_30_46_20130828_DE_ie_ds_&query={searchTerms} SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms} SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-2/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms} SearchScopes: HKCU - {DE3C640F-D521-4A6A-8DA9-0B66D8B557E7} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=FB102BFB-1B1C-4DE4-B33A-54CF57956127&apn_sauid=E5C79E1D-21F1-434F-85B2-F8168878FF10 SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&crg=3.27010003&st=12&q={searchTerms}&barid={E6DD2494-F39A-4B84-B397-22B6B68E4579} BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: WebConnect - {2316c625-b487-4410-a1a5-ff040b65245f} - C:\Program Files (x86)\WebConnect\WebConnectbho.dll (Web Connect) BHO-x32: LyricXeeker - {4d01b61e-1149-4fce-aebc-9a33ca2e5a9b} - C:\Program Files (x86)\LyriXeeker\130.dll (LyricXeeker) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.24.6\bh\delta.dll (Delta-search.com) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard) BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) BHO-x32: AlxHelper Class - {F443A627-5009-4323-9C1D-7FD598D0D712} - C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.6\deltaTlbr.dll (Delta-search.com) Toolbar: HKLM-x32 - Amazon Browser Bar - {EA582743-9076-4178-9AA6-7393FDF4D5CE} - C:\Program Files (x86)\Amazon Browser Bar\AmazonBrowserBar.3.0.dll (Amazon.com) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWow64\EZUPBH~1.DLL [52920 2012-07-27] (EasyBits Software Corp.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\svovbrig.default FF user.js: detected! => C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\svovbrig.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\svovbrig.default\searchplugins\amazon.xml FF SearchPlugin: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\svovbrig.default\searchplugins\askcom.xml FF SearchPlugin: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\svovbrig.default\searchplugins\conduit.xml FF SearchPlugin: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\svovbrig.default\searchplugins\google-maps.xml FF SearchPlugin: C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\svovbrig.default\searchplugins\sweetim.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\qvo6.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: firefox - C:\Users\HP\AppData\Roaming\Mozilla\Firefox\Profiles\svovbrig.default\Extensions\firefox@webconnect.co.xpi FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF HKCU\...\Firefox\Extensions: [{3dc44ced-412e-4dcb-9608-2960c94be9ab}] C:\Program Files (x86)\LyriXeeker\130.xpi FF Extension: No Name - C:\Program Files (x86)\LyriXeeker\130.xpi FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=sc&from=cor&uid=HitachiXHDS721010CLA632_JP2940N0103WBV103WBVX&ts=1377702850 ==================== Services (Whitelisted) ================= R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] () R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-07-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-07-02] (Avira Operations GmbH & Co. KG) R2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2838480 2013-08-13] () S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-05-06] (PDF Complete Inc) R2 Update WebConnect; C:\Program Files (x86)\WebConnect\updateWebConnect.exe [206632 2013-08-27] (WebConnect) R2 Updater Service for AMZN; C:\Program Files (x86)\Amazon Browser Bar\ToolbarUpdaterService.exe [222368 2013-03-21] () R2 WsysSvc; C:\ProgramData\eSafe\eGdpSvc.exe [303680 2013-08-28] (Wsys Co., Ltd.) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-28] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-28] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-28] (Avira Operations GmbH & Co. KG) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-08-28 17:36 - 2013-08-28 17:37 - 01579080 _____ (Farbar) C:\Users\HP\Desktop\FRST64.exe 2013-08-28 17:17 - 2013-08-28 17:17 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert 2013-08-28 17:15 - 2013-08-28 17:15 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-28 17:15 - 2013-08-28 17:15 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-28 17:14 - 2013-08-28 17:22 - 00000000 ____D C:\ProgramData\eSafe 2013-08-28 17:14 - 2013-08-28 17:14 - 00000000 ____D C:\User Data 2013-08-28 17:10 - 2013-08-28 17:10 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.284.dll 2013-08-28 17:10 - 2013-08-28 17:10 - 00000000 ____D C:\Users\HP\AppData\Local\Amazon Browser Bar 2013-08-28 17:10 - 2013-08-28 17:10 - 00000000 ____D C:\Program Files (x86)\WebConnect 2013-08-28 17:10 - 2013-08-28 17:10 - 00000000 ____D C:\Program Files (x86)\Amazon Browser Bar 2013-08-28 17:08 - 2013-08-28 17:17 - 00000382 _____ C:\Windows\Tasks\LyricXeeker Update.job 2013-08-28 17:08 - 2013-08-28 17:08 - 20586496 _____ C:\Users\HP\Downloads\SkypeSetup.exe 2013-08-28 17:08 - 2013-08-28 17:08 - 00003374 _____ C:\Windows\System32\Tasks\EPUpdater 2013-08-28 17:08 - 2013-08-28 17:08 - 00003024 _____ C:\Windows\System32\Tasks\LyricXeeker Update 2013-08-28 17:08 - 2013-08-28 17:08 - 00001123 _____ C:\Users\HP\Desktop\PC Speed Maximizer.lnk 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Users\HP\AppData\Roaming\Babylon 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Users\HP\AppData\Roaming\BabSolution 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\ProgramData\BrowserDefender 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\ProgramData\Babylon 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Program Files (x86)\PC Speed Maximizer 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Program Files (x86)\LyriXeeker 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Program Files (x86)\Delta 2013-08-28 17:07 - 2013-08-28 17:07 - 00607368 _____ C:\Users\HP\Downloads\SkypeSetup(1).exe 2013-08-25 07:07 - 2013-08-28 17:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-20 22:07 - 2013-08-20 22:07 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-08-20 22:07 - 2013-08-20 22:07 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-08-20 22:07 - 2013-08-20 22:07 - 00000000 ____D C:\Program Files\iTunes 2013-08-20 22:07 - 2013-08-20 22:07 - 00000000 ____D C:\Program Files\iPod 2013-08-20 21:53 - 2013-08-20 21:53 - 00003351 _____ C:\Users\HP\AppData\Local\recently-used.xbel 2013-08-15 22:51 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-15 22:51 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-15 22:51 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-15 22:51 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-15 22:51 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-15 22:51 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-15 22:51 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-15 22:51 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-15 22:51 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-15 22:51 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-15 22:51 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-15 22:51 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-15 22:51 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-15 22:51 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-15 22:51 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-15 22:51 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-15 22:51 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-15 22:51 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-15 22:51 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-15 22:51 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-15 22:51 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-15 22:51 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-15 22:51 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-15 22:51 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-15 22:51 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-15 22:51 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-15 22:51 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-15 22:51 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-15 22:51 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-15 22:51 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-15 22:51 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-15 13:03 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-15 13:03 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-15 13:03 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-15 13:03 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-15 13:03 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-15 13:03 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-15 13:03 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-15 13:03 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-15 13:03 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-15 13:03 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-15 13:02 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-15 13:02 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-15 13:02 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-15 13:02 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-15 13:02 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-15 13:02 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-15 13:02 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-15 13:02 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-15 13:02 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-15 13:02 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-15 13:02 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-15 13:02 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-15 13:02 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-15 13:02 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-15 13:02 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-15 13:02 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-15 13:02 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-07 20:14 - 2013-08-07 20:15 - 00000000 ____D C:\Users\HP\Desktop\von SD-Karte ==================== One Month Modified Files and Folders ======= 2013-08-28 17:38 - 2013-08-28 17:38 - 00000000 ____D C:\FRST 2013-08-28 17:38 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-08-28 17:38 - 2009-07-14 06:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-08-28 17:37 - 2013-08-28 17:36 - 01579080 _____ (Farbar) C:\Users\HP\Desktop\FRST64.exe 2013-08-28 17:22 - 2013-08-28 17:14 - 00000000 ____D C:\ProgramData\eSafe 2013-08-28 17:22 - 2012-07-27 21:12 - 00696620 _____ C:\Windows\system32\perfh007.dat 2013-08-28 17:22 - 2012-07-27 21:12 - 00147916 _____ C:\Windows\system32\perfc007.dat 2013-08-28 17:22 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-28 17:21 - 2012-07-27 13:39 - 02069865 _____ C:\Windows\WindowsUpdate.log 2013-08-28 17:17 - 2013-08-28 17:17 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert 2013-08-28 17:17 - 2013-08-28 17:08 - 00000382 _____ C:\Windows\Tasks\LyricXeeker Update.job 2013-08-28 17:17 - 2013-04-22 22:12 - 00000000 ____D C:\Users\HP\AppData\Roaming\BOM 2013-08-28 17:17 - 2012-07-27 21:43 - 00000000 ____D C:\ProgramData\PDFC 2013-08-28 17:16 - 2013-01-29 14:46 - 00000000 ___RD C:\Users\HP\Dropbox 2013-08-28 17:16 - 2013-01-29 14:41 - 00000000 ____D C:\Users\HP\AppData\Roaming\Dropbox 2013-08-28 17:16 - 2012-08-15 13:51 - 00000320 _____ C:\Windows\Tasks\HPCeeScheduleForHP.job 2013-08-28 17:16 - 2012-08-14 19:52 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-08-28 17:16 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-08-28 17:16 - 2009-07-14 06:51 - 00076018 _____ C:\Windows\setupact.log 2013-08-28 17:15 - 2013-08-28 17:15 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-28 17:15 - 2013-08-28 17:15 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-28 17:14 - 2013-08-28 17:14 - 00000000 ____D C:\User Data 2013-08-28 17:14 - 2013-04-02 21:21 - 00001455 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-08-28 17:14 - 2012-07-27 13:42 - 00001741 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-08-28 17:11 - 2012-08-21 16:56 - 00000000 ____D C:\Users\HP\AppData\Local\CrashDumps 2013-08-28 17:11 - 2012-08-15 13:51 - 00003168 _____ C:\Windows\System32\Tasks\HPCeeScheduleForHP 2013-08-28 17:11 - 2012-08-08 07:18 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log 2013-08-28 17:10 - 2013-08-28 17:10 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.284.dll 2013-08-28 17:10 - 2013-08-28 17:10 - 00000000 ____D C:\Users\HP\AppData\Local\Amazon Browser Bar 2013-08-28 17:10 - 2013-08-28 17:10 - 00000000 ____D C:\Program Files (x86)\WebConnect 2013-08-28 17:10 - 2013-08-28 17:10 - 00000000 ____D C:\Program Files (x86)\Amazon Browser Bar 2013-08-28 17:10 - 2013-05-15 17:35 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt 2013-08-28 17:09 - 2012-08-08 07:16 - 00000000 ____D C:\Users\HP\AppData\Roaming\HP Support Assistant 2013-08-28 17:09 - 2012-07-31 19:17 - 00000000 ____D C:\Users\HP\AppData\Roaming\HpUpdate 2013-08-28 17:08 - 2013-08-28 17:08 - 20586496 _____ C:\Users\HP\Downloads\SkypeSetup.exe 2013-08-28 17:08 - 2013-08-28 17:08 - 00003374 _____ C:\Windows\System32\Tasks\EPUpdater 2013-08-28 17:08 - 2013-08-28 17:08 - 00003024 _____ C:\Windows\System32\Tasks\LyricXeeker Update 2013-08-28 17:08 - 2013-08-28 17:08 - 00001123 _____ C:\Users\HP\Desktop\PC Speed Maximizer.lnk 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Users\HP\AppData\Roaming\Babylon 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Users\HP\AppData\Roaming\BabSolution 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\ProgramData\BrowserDefender 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\ProgramData\Babylon 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Program Files (x86)\PC Speed Maximizer 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Program Files (x86)\LyriXeeker 2013-08-28 17:08 - 2013-08-28 17:08 - 00000000 ____D C:\Program Files (x86)\Delta 2013-08-28 17:08 - 2013-08-25 07:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-28 17:07 - 2013-08-28 17:07 - 00607368 _____ C:\Users\HP\Downloads\SkypeSetup(1).exe 2013-08-28 17:04 - 2012-08-14 19:52 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-08-28 16:53 - 2013-05-02 16:05 - 00026433 _____ C:\Users\HP\Desktop\Monatskosten.xlsx 2013-08-28 06:47 - 2012-09-06 14:49 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-08-26 07:40 - 2012-08-01 19:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-08-20 22:07 - 2013-08-20 22:07 - 00001785 _____ C:\Users\Public\Desktop\iTunes.lnk 2013-08-20 22:07 - 2013-08-20 22:07 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-08-20 22:07 - 2013-08-20 22:07 - 00000000 ____D C:\Program Files\iTunes 2013-08-20 22:07 - 2013-08-20 22:07 - 00000000 ____D C:\Program Files\iPod 2013-08-20 22:07 - 2012-09-30 22:42 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-08-20 21:53 - 2013-08-20 21:53 - 00003351 _____ C:\Users\HP\AppData\Local\recently-used.xbel 2013-08-20 21:53 - 2013-07-16 20:30 - 00000000 ____D C:\Users\HP\AppData\Local\gtk-2.0 2013-08-20 21:53 - 2013-07-16 20:27 - 00000000 ____D C:\Users\HP\.gimp-2.8 2013-08-20 21:43 - 2012-08-08 19:44 - 00000020 ____H C:\ProgramData\PKP_DLes.DAT 2013-08-20 20:59 - 2012-08-08 19:44 - 00000020 ____H C:\ProgramData\PKP_DLet.DAT 2013-08-20 20:47 - 2012-09-06 14:49 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-08-20 20:47 - 2012-09-06 14:49 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-20 20:47 - 2012-07-27 21:39 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-20 20:39 - 2012-10-16 13:32 - 00000000 ____D C:\Users\HP\Documents\Briefe 2013-08-18 18:23 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-15 22:47 - 2013-07-16 22:21 - 00000000 ____D C:\Windows\system32\MRT 2013-08-15 22:45 - 2012-10-03 10:58 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-12 21:40 - 2013-06-27 18:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-08-07 20:15 - 2013-08-07 20:14 - 00000000 ____D C:\Users\HP\Desktop\von SD-Karte 2013-08-06 18:06 - 2012-08-01 22:31 - 00000000 ____D C:\ProgramData\tmp 2013-08-05 21:51 - 2013-07-15 12:00 - 00000000 ____D C:\Users\HP\Desktop\Entwickeln 2013-08-01 21:56 - 2012-08-14 19:52 - 00000000 ____D C:\Program Files (x86)\Google 2013-07-29 07:29 - 2013-07-28 09:44 - 00000000 ____D C:\ProgramData\Easybits Magic Desktop for HP 2013-07-29 07:24 - 2010-11-21 05:47 - 00839024 _____ C:\Windows\PFRO.log Files to move or delete: ==================== C:\Users\HP\AppData\Local\Temp\ose00000.exe C:\Users\HP\AppData\Local\Temp\nss980B.tmp\Time.dll C:\Users\HP\AppData\Local\Temp\nsn92BE.tmp\Time.dll C:\Users\HP\AppData\Local\Temp\nsi977F.tmp\Time.dll C:\Users\HP\AppData\Local\Temp\is1275519350\1236444_Setup.EXE C:\Users\HP\AppData\Local\Temp\is1275519350\1236461_Setup.EXE C:\Users\HP\AppData\Local\Temp\is1275519350\cor_ar_201381417179_qvo6.exe C:\Users\HP\AppData\Local\Temp\is1275519350\DeltaTB.exe C:\Users\HP\AppData\Local\Temp\is1275519350\distro-amzn-ironsource-rs-2.exe C:\Users\HP\AppData\Local\Temp\is1275519350\wajam_validate.exe C:\Users\HP\AppData\Local\Temp\is1275519350\WebConnect.exe C:\Users\HP\AppData\Local\Temp\HP Support Framework\HPSF_Config1.dll C:\Users\HP\AppData\Local\Temp\eIntaller\B10640E4BE1B4711AC5866D5644F4005\eGdpSvc.exe C:\Users\HP\AppData\Local\Temp\eIntaller\B10640E4BE1B4711AC5866D5644F4005\eXQ.exe C:\Users\HP\AppData\Local\Temp\eIntaller\959356199E394ca3ACAA3E932A95DC50\eGdpSvc.exe C:\Users\HP\AppData\Local\Temp\eIntaller\959356199E394ca3ACAA3E932A95DC50\eXQ.exe C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\BabMaint.exe C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\BExternal.dll C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\BUSolForMontiera.dll C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\BUSolution.dll C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\ccp.exe C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\ChromeToolbarSetup.dll C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\CrxInstaller.dll C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\enhancedNT.dll C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\GUninstaller.exe C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\IEHelper.dll C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\MntrDLLInstall.dll C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\MyDeltaTB.exe C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\Setup.exe C:\Users\HP\AppData\Local\Temp\3DFBE048-BAB0-7891-A7A6-46C8F42F98CF\Latest\sqlite3.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-08-22 15:09 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-08-2013 Ran by HP at 2013-08-28 17:39:35 Running from C:\Users\HP\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= AAVUpdateManager (x32 Version: 18.00.0000) Adobe AIR (x32 Version: 2.6.0.19120) Adobe Download Assistant (x32 Version: 1.2.5) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Reader X (10.1.7) - Deutsch (x32 Version: 10.1.7) Agatha Christie - Peril at End House (x32 Version: 2.2.0.95) Amazon Browser Bar (x32 Version: 3.0) AMD APP SDK Runtime (Version: 2.4.650.9) AMD Media Foundation Decoders (Version: 1.0.60524.2309) AMD VISION Engine Control Center (x32 Version: 2011.0524.2352.41027) ANNO 1503 (x32 Version: 1.04.00) Apple Application Support (x32 Version: 2.3.4) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Ask Toolbar (x32 Version: 1.15.15.0) ATI Catalyst Install Manager (Version: 3.0.829.0) Avira Free Antivirus (x32 Version: 13.0.0.3885) Avira SearchFree Toolbar plus Web Protection Updater (HKCU Version: 1.2.3.30498) Bejeweled 3 (x32 Version: 2.2.0.97) Biet-O-Matic v2.14.12 (x32 Version: 2.14.12) Bing Bar (x32 Version: 7.0.610.0) Blasterball 3 (x32 Version: 2.2.0.97) Bonjour (Version: 3.0.0.10) Bounce Symphony (x32 Version: 2.2.0.97) BrowserDefender (x32) Cake Mania (x32 Version: 2.2.0.95) capella reader (x32 Version: 7.1.15) Catalyst Control Center - Branding (x32 Version: 1.00.0000) Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0524.2352.41027) Catalyst Control Center InstallProxy (x32 Version: 2011.0524.2352.41027) Catalyst Control Center Localization All (x32 Version: 2011.0524.2352.41027) CCC Help Chinese Standard (x32 Version: 2011.0524.2351.41027) CCC Help Chinese Traditional (x32 Version: 2011.0524.2351.41027) CCC Help Czech (x32 Version: 2011.0524.2351.41027) CCC Help Danish (x32 Version: 2011.0524.2351.41027) CCC Help Dutch (x32 Version: 2011.0524.2351.41027) CCC Help English (x32 Version: 2011.0524.2351.41027) CCC Help Finnish (x32 Version: 2011.0524.2351.41027) CCC Help French (x32 Version: 2011.0524.2351.41027) CCC Help German (x32 Version: 2011.0524.2351.41027) CCC Help Greek (x32 Version: 2011.0524.2351.41027) CCC Help Hungarian (x32 Version: 2011.0524.2351.41027) CCC Help Italian (x32 Version: 2011.0524.2351.41027) CCC Help Japanese (x32 Version: 2011.0524.2351.41027) CCC Help Korean (x32 Version: 2011.0524.2351.41027) CCC Help Norwegian (x32 Version: 2011.0524.2351.41027) CCC Help Polish (x32 Version: 2011.0524.2351.41027) CCC Help Portuguese (x32 Version: 2011.0524.2351.41027) CCC Help Russian (x32 Version: 2011.0524.2351.41027) CCC Help Spanish (x32 Version: 2011.0524.2351.41027) CCC Help Swedish (x32 Version: 2011.0524.2351.41027) CCC Help Thai (x32 Version: 2011.0524.2351.41027) CCC Help Turkish (x32 Version: 2011.0524.2351.41027) ccc-utility64 (Version: 2011.0524.2352.41027) Chronicles of Albian (x32 Version: 2.2.0.95) Chuzzle Deluxe (x32 Version: 2.2.0.95) Cradle of Rome 2 (x32 Version: 2.2.0.95) D3DX10 (x32 Version: 15.4.2368.0902) Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32) Delta Chrome Toolbar (x32) Delta toolbar (x32 Version: 1.8.24.6) dm-Fotowelt (x32 Version: 5.0.4) Dropbox (HKCU Version: 2.0.22) Farm Frenzy (x32 Version: 2.2.0.95) FATE (x32 Version: 2.2.0.97) Google Earth Plug-in (x32 Version: 7.1.1.1888) Google Update Helper (x32 Version: 1.3.21.153) Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.95) Heroes of Might and Magic® III Complete (x32) Heroes of Might and Magic® IV (x32) Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000) HP Auto (Version: 1.0.12935.3667) HP Client Services (Version: 1.1.12938.3539) HP Customer Experience Enhancements (x32 Version: 6.0.1.7) HP Games (x32 Version: 1.0.2.5) HP LinkUp (x32 Version: 2.01.028) HP Odometer (x32 Version: 2.10.0000) HP Setup (x32 Version: 8.7.4747.3786) HP Setup Manager (x32 Version: 1.1.13880.3792) HP Support Assistant (x32 Version: 7.0.39.15) HP Support Information (x32 Version: 10.1.1000) HP Update (x32 Version: 5.002.003.003) HP Vision Hardware Diagnostics (Version: 2.9.0.0) Internet Explorer Toolbar 4.6 by SweetPacks (x32 Version: 4.6.0004) iTunes (Version: 11.0.5.5) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Jewel Quest Solitaire (x32 Version: 2.2.0.95) Jewel Quest: The Sleepless Star - Collector's Edition (x32 Version: 2.2.0.95) Junk Mail filter update (x32 Version: 15.4.3502.0922) LabelPrint (x32 Version: 2.5.3925) LyricXeeker (x32) Magic Desktop (x32 Version: 3.0) Mah Jong Medley (x32 Version: 2.2.0.95) McAfee Security Scan Plus (x32 Version: 3.0.318.3) Meine CEWE FOTOWELT (x32) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Mathematics (x32 Version: 4.0) Microsoft Office 2010 (x32 Version: 14.0.4763.1000) Microsoft Office 2010 Service Pack 1 (SP1) (x32) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Home and Business 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000) Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000) Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000) Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (x32 Version: 9.0.30411) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1) Mozilla Maintenance Service (x32 Version: 23.0.1) Mozilla Thunderbird 17.0.8 (x86 de) (x32 Version: 17.0.8) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) Müller Foto (x32 Version: 4.8.4) Mystery of Mortlake Mansion (x32 Version: 2.2.0.97) Namco All-Stars: PAC-MAN (x32 Version: 2.2.0.95) Nikon Message Center 2 (x32 Version: 2.0.1) Norton Online Backup (x32 Version: 2.1.17869) OpenOffice.org 3.4 (x32 Version: 3.4.9590) P 2.8.6 (Version: 2.8.6) PC Speed Maximizer v3.1 (x32 Version: 3.1) PDF Complete Special Edition (x32 Version: 4.0.54) Penguins! (x32 Version: 2.2.0.95) Picture Control Utility (x32 Version: 1.2.2) Pixum Fotobuch (x32) Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95) PlayReady PC Runtime amd64 (Version: 1.3.0) Polar Bowler (x32 Version: 2.2.0.97) Power2Go (x32 Version: 6.1.5331) QuickTime (x32 Version: 7.74.80.86) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6378) Recovery Manager (x32 Version: 5.5.0.4222) Remote Graphics Receiver (x32 Version: 5.4.5) Sid Meier's Civilization 4 (x32 Version: 1.61) Slingo Deluxe (x32 Version: 2.2.0.95) Steuer-Spar-Erklärung 2013 (x32 Version: 18.09) SweetIM for Messenger 3.7 (x32 Version: 3.7.0005) TL-WN822N Driver (x32 Version: 1.00.0000) TP-LINK Wireless Configuration Utility (x32 Version: 2.01.0012) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Update for Microsoft Office 2010 (KB2553065) (x32) Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2566458) (x32) Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32) Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32) Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32) Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32) Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32) Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32) Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32) Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32) Update Installer for WildTangent Games App (x32) Update Manager for SweetPacks 1.1 (x32 Version: 1.1.0008) Vacation Quest - The Hawaiian Islands (x32 Version: 2.2.0.97) ViewNX 2 (x32 Version: 2.1.2) Virtual Villagers - The Secret City (x32 Version: 2.2.0.95) VLC media player 2.0.7 (x32 Version: 2.0.7) VoiceOver Kit (x32 Version: 1.42.128.0) WebConnect 3.0.0 (Version: 3.0.0) WildTangent Games App (HP Games) (x32 Version: 4.0.5.2) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3508.1109) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4225.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3508.1109) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) WinRAR 4.20 (32-bit) (x32 Version: 4.20.0) Wsys Control 10.2.1.2612 (x32 Version: 10.2.1.2612) Zinio Reader 4 (x32 Version: 4.2.4164) Zuma Deluxe (x32 Version: 2.2.0.95) ==================== Restore Points ========================= 15-08-2013 10:58:03 Windows Update 15-08-2013 20:45:18 Windows Update 20-08-2013 11:28:58 Windows Update 23-08-2013 13:46:59 Windows Update 28-08-2013 04:22:37 Windows Update 28-08-2013 15:07:50 Windows Defender Checkpoint ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation) Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation) Task: {13350A19-1B67-41F6-8642-C64187BECEE0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-20] (Adobe Systems Incorporated) Task: {21100792-0322-4263-9FC4-9BD52C5C10B8} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {25CC8260-78DF-4A44-8316-77E582F9FEB8} - System32\Tasks\RMCreator => C:\Program Files (x86)\Hewlett-Packard\Recovery\Reminder.exe [2011-06-23] (CyberLink) Task: {298CDADD-D48E-4112-BE9E-E9ED547E2AEE} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => C:\Windows\System32\dfdts.dll [2009-07-14] (Microsoft Corporation) Task: {3157FED1-EF4E-40A6-887E-8B27C735F33B} - System32\Tasks\EPUpdater => C:\Users\HP\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-08-04] () Task: {31E394AD-B01C-4CFA-9DA7-F40CB1C6FAB4} - System32\Tasks\User_Feed_Synchronization-{438785F1-F8AD-46B4-9064-0E0A18270836} => C:\Windows\system32\msfeedssync.exe [2013-04-01] (Microsoft Corporation) Task: {3782DE96-E780-4F25-A18F-CA21CD9DA64E} - System32\Tasks\HPCeeScheduleForHP => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard) Task: {3ADF3A47-9853-49A4-83F0-94A728388F23} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-14] (Google Inc.) Task: {4C1F8CEC-FFF1-4D40-B8EE-D4291016D108} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-09-05] (Hewlett-Packard Company) Task: {4E0E9B39-520E-4F9D-81BB-59F108D70F01} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {52CE1B4B-8F05-4454-8AAE-04377D4395EF} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation) Task: {7648EF69-B456-4B11-BE2A-AA66F9741075} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-08-14] (Google Inc.) Task: {91467664-413E-49EA-8F9D-59671F07EB50} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company) Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\System32\srrstr.dll [2010-11-21] (Microsoft Corporation) Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\System32\aepdu.dll [2010-11-21] (Microsoft Corporation) Task: {C0760DC9-FE9D-4487-A48A-C8788BAB6A05} - System32\Tasks\LyricXeeker Update => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe [2013-08-28] () Task: {C64542BC-2431-4ED5-85F3-886949B5FE2B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {D0038725-E205-46BA-BEF1-11C3CE300847} - System32\Tasks\WPD\SqmUpload_S-1-5-21-3418871380-3702506198-2498725809-1000 => C:\Windows\System32\portabledeviceapi.dll [2010-11-21] (Microsoft Corporation) Task: {D5365D79-A631-4C55-86C4-7C1AB49757E2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company) Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => C:\Windows\System32\acproxy.dll [2009-07-14] (Microsoft Corporation) Task: {DA0105BE-FC23-4097-A777-49BC80AB40BA} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2013-02-08] () Task: {DF5C19CC-9963-4440-8DF7-8C5B62EE37F2} - System32\Tasks\BrowserDefendert => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation) Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => C:\Windows\System32\bfe.dll [2010-11-21] (Microsoft Corporation) Task: {F319C697-CD64-4DC9-8DFA-5D8967694ACC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2013-08-09] (Hewlett-Packard) Task: {F7C858AA-75EE-49EF-A52E-513620870E57} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-09-27] (Hewlett-Packard Company) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HPCeeScheduleForHP.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\Windows\Tasks\LyricXeeker Update.job => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe ==================== Alternate Data Streams (whitelisted) ========== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (08/28/2013 05:11:06 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: cor_ar_201381417179_qvo6.exe, Version: 2.0.2.2580, Zeitstempel: 0x520aef72 Name des fehlerhaften Moduls: cor_ar_201381417179_qvo6.exe, Version: 2.0.2.2580, Zeitstempel: 0x520aef72 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00019647 ID des fehlerhaften Prozesses: 0x197c Startzeit der fehlerhaften Anwendung: 0xcor_ar_201381417179_qvo6.exe0 Pfad der fehlerhaften Anwendung: cor_ar_201381417179_qvo6.exe1 Pfad des fehlerhaften Moduls: cor_ar_201381417179_qvo6.exe2 Berichtskennung: cor_ar_201381417179_qvo6.exe3 Error: (08/28/2013 05:10:14 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 23.0.1.4974, Zeitstempel: 0x520bc1d5 Name des fehlerhaften Moduls: mozalloc.dll, Version: 23.0.1.4974, Zeitstempel: 0x520ba12c Ausnahmecode: 0x80000003 Fehleroffset: 0x00001988 ID des fehlerhaften Prozesses: 0x1768 Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (08/28/2013 05:07:49 PM) (Source: VSS) (User: ) Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert . Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess. Vorgang: Generatordaten werden gesammelt Kontext: Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220} Generatorname: System Writer Generatorinstanz-ID: {ff777e7f-81ec-4dd0-9ff6-9820fb37bacb} Error: (08/26/2013 01:21:41 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: HEROES3.EXE, Version: 4.0.0.0, Zeitstempel: 0x39b83835 Name des fehlerhaften Moduls: MP3DEC.ASI, Version: 3.0.0.0, Zeitstempel: 0x36910efa Ausnahmecode: 0xc0000005 Fehleroffset: 0x000076f1 ID des fehlerhaften Prozesses: 0x1608 Startzeit der fehlerhaften Anwendung: 0xHEROES3.EXE0 Pfad der fehlerhaften Anwendung: HEROES3.EXE1 Pfad des fehlerhaften Moduls: HEROES3.EXE2 Berichtskennung: HEROES3.EXE3 Error: (08/26/2013 01:12:55 PM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: HEROES3.EXE, Version: 4.0.0.0, Zeitstempel: 0x39b83835 Name des fehlerhaften Moduls: MP3DEC.ASI, Version: 3.0.0.0, Zeitstempel: 0x36910efa Ausnahmecode: 0xc0000005 Fehleroffset: 0x000076f1 ID des fehlerhaften Prozesses: 0x1224 Startzeit der fehlerhaften Anwendung: 0xHEROES3.EXE0 Pfad der fehlerhaften Anwendung: HEROES3.EXE1 Pfad des fehlerhaften Moduls: HEROES3.EXE2 Berichtskennung: HEROES3.EXE3 Error: (08/26/2013 11:32:53 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: HEROES3.EXE, Version: 4.0.0.0, Zeitstempel: 0x39b83835 Name des fehlerhaften Moduls: MP3DEC.ASI, Version: 3.0.0.0, Zeitstempel: 0x36910efa Ausnahmecode: 0xc0000005 Fehleroffset: 0x000076f1 ID des fehlerhaften Prozesses: 0x9c4 Startzeit der fehlerhaften Anwendung: 0xHEROES3.EXE0 Pfad der fehlerhaften Anwendung: HEROES3.EXE1 Pfad des fehlerhaften Moduls: HEROES3.EXE2 Berichtskennung: HEROES3.EXE3 Error: (08/26/2013 11:32:36 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: HEROES3.EXE, Version: 4.0.0.0, Zeitstempel: 0x39b83835 Name des fehlerhaften Moduls: MP3DEC.ASI, Version: 3.0.0.0, Zeitstempel: 0x36910efa Ausnahmecode: 0xc0000005 Fehleroffset: 0x000076f1 ID des fehlerhaften Prozesses: 0xfd8 Startzeit der fehlerhaften Anwendung: 0xHEROES3.EXE0 Pfad der fehlerhaften Anwendung: HEROES3.EXE1 Pfad des fehlerhaften Moduls: HEROES3.EXE2 Berichtskennung: HEROES3.EXE3 Error: (08/26/2013 11:31:10 AM) (Source: Application Error) (User: ) Description: Name der fehlerhaften Anwendung: HEROES3.EXE, Version: 4.0.0.0, Zeitstempel: 0x39b83835 Name des fehlerhaften Moduls: MP3DEC.ASI, Version: 3.0.0.0, Zeitstempel: 0x36910efa Ausnahmecode: 0xc0000005 Fehleroffset: 0x000076f1 ID des fehlerhaften Prozesses: 0xbc8 Startzeit der fehlerhaften Anwendung: 0xHEROES3.EXE0 Pfad der fehlerhaften Anwendung: HEROES3.EXE1 Pfad des fehlerhaften Moduls: HEROES3.EXE2 Berichtskennung: HEROES3.EXE3 Error: (08/26/2013 08:52:37 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 9984 Error: (08/26/2013 08:52:37 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 9984 System errors: ============= Error: (08/28/2013 05:17:42 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Wsys Service" wurde nicht richtig gestartet. Error: (08/28/2013 05:16:21 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden. Modulpfad: C:\Windows\system32\athExt.dll Fehlercode: 126 Error: (08/28/2013 05:15:32 PM) (Source: DCOM) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (08/28/2013 04:47:40 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden. Modulpfad: C:\Windows\system32\athExt.dll Fehlercode: 126 Error: (08/28/2013 07:15:02 AM) (Source: DCOM) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (08/28/2013 06:18:21 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden. Modulpfad: C:\Windows\system32\athExt.dll Fehlercode: 126 Error: (08/27/2013 09:28:46 PM) (Source: DCOM) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (08/27/2013 06:35:39 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden. Modulpfad: C:\Windows\system32\athExt.dll Fehlercode: 126 Error: (08/27/2013 07:30:01 AM) (Source: DCOM) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (08/27/2013 06:30:03 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden. Modulpfad: C:\Windows\system32\athExt.dll Fehlercode: 126 Microsoft Office Sessions: ========================= Error: (08/28/2013 05:11:06 PM) (Source: Application Error)(User: ) Description: cor_ar_201381417179_qvo6.exe2.0.2.2580520aef72cor_ar_201381417179_qvo6.exe2.0.2.2580520aef72c000000500019647197c01cea400d158b0c5C:\Users\HP\AppData\Local\Temp\IS1275~1\cor_ar_201381417179_qvo6.exeC:\Users\HP\AppData\Local\Temp\IS1275~1\cor_ar_201381417179_qvo6.exe0f3c88bd-0ff4-11e3-9099-e840f20797d7 Error: (08/28/2013 05:10:14 PM) (Source: Application Error)(User: ) Description: plugin-container.exe23.0.1.4974520bc1d5mozalloc.dll23.0.1.4974520ba12c8000000300001988176801cea400af2108c2C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllf047bbe3-0ff3-11e3-9099-e840f20797d7 Error: (08/28/2013 05:07:49 PM) (Source: VSS)(User: ) Description: 0x80070005, Zugriff verweigert Vorgang: Generatordaten werden gesammelt Kontext: Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220} Generatorname: System Writer Generatorinstanz-ID: {ff777e7f-81ec-4dd0-9ff6-9820fb37bacb} Error: (08/26/2013 01:21:41 PM) (Source: Application Error)(User: ) Description: HEROES3.EXE4.0.0.039b83835MP3DEC.ASI3.0.0.036910efac0000005000076f1160801cea24d3a15dfb2C:\Program Files (x86)\3DO\Heroes 3 Complete\HEROES3.EXEC:\Program Files (x86)\3DO\Heroes 3 Complete\MP3DEC.ASIae12e725-0e41-11e3-a6c5-e840f20797d7 Error: (08/26/2013 01:12:55 PM) (Source: Application Error)(User: ) Description: HEROES3.EXE4.0.0.039b83835MP3DEC.ASI3.0.0.036910efac0000005000076f1122401cea24a6f3007a1C:\Program Files (x86)\3DO\Heroes 3 Complete\HEROES3.EXEC:\Program Files (x86)\3DO\Heroes 3 Complete\MP3DEC.ASI7490b8f5-0e40-11e3-a6c5-e840f20797d7 Error: (08/26/2013 11:32:53 AM) (Source: Application Error)(User: ) Description: HEROES3.EXE4.0.0.039b83835MP3DEC.ASI3.0.0.036910efac0000005000076f19c401cea23f35b169fcC:\Program Files (x86)\3DO\Heroes 3 Complete\HEROES3.EXEC:\Program Files (x86)\3DO\Heroes 3 Complete\MP3DEC.ASI7adfe146-0e32-11e3-a6c5-e840f20797d7 Error: (08/26/2013 11:32:36 AM) (Source: Application Error)(User: ) Description: HEROES3.EXE4.0.0.039b83835MP3DEC.ASI3.0.0.036910efac0000005000076f1fd801cea23f0317e424C:\Program Files (x86)\3DO\Heroes 3 Complete\HEROES3.EXEC:\Program Files (x86)\3DO\Heroes 3 Complete\MP3DEC.ASI70bf9b3d-0e32-11e3-a6c5-e840f20797d7 Error: (08/26/2013 11:31:10 AM) (Source: Application Error)(User: ) Description: HEROES3.EXE4.0.0.039b83835MP3DEC.ASI3.0.0.036910efac0000005000076f1bc801cea239f8b361fcC:\Program Files (x86)\3DO\Heroes 3 Complete\HEROES3.EXEC:\Program Files (x86)\3DO\Heroes 3 Complete\MP3DEC.ASI3db20cc0-0e32-11e3-a6c5-e840f20797d7 Error: (08/26/2013 08:52:37 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 9984 Error: (08/26/2013 08:52:37 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 9984 ==================== Memory info =========================== Percentage of memory in use: 35% Total physical RAM: 5618.85 MB Available physical RAM: 3624.59 MB Total Pagefile: 11235.88 MB Available Pagefile: 8724.38 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:919.06 GB) (Free:805.19 GB) NTFS Drive d: (HP_RECOVERY) (Fixed) (Total:12.36 GB) (Free:1.52 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive e: (HEROES3) (CDROM) (Total:0.97 GB) (Free:0 GB) CDFS Drive i: (Fotos_u_Daten) (Fixed) (Total:931.51 GB) (Free:839.38 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 906F8625) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=919 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=12 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Size: 932 GB) (Disk ID: 6B36D48F) Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Gruß, KJ-Antje |
Themen zu Pop-Up: Spyware gefunden; langsamer Rechner |
adobe, antivir, antivirus, autorun, avg, avira, bingbar, bonjour, branding, diagnostics, entfernen, excel, explorer, farbar, farbar recovery scan tool, firefox, firefox 23.0.1, flash player, home, iexplore.exe, langsamer rechner, lyricxeeker, lyrixeeker, mozilla, object, pc speed maximizer, plug-in, pop up, registry, scan, security, software, spyware, symantec, system, temp, unerwarteter fehler, wajam, wickel, wildtangent games |