Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Google-Suchergebnisse führen auf andere Seiten

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 03.09.2013, 21:24   #1
Molsterpöbel
 
Google-Suchergebnisse führen auf andere Seiten - Standard

Google-Suchergebnisse führen auf andere Seiten



Guten Abend!

Ich habe mich jetzt extra hier angemeldet (also bitte habt Nachsehen für Anfängerfehler), weil auf dem Laptop meiner Gutsten seit längerem ein für mich nicht lösbares Browser-Problem kursiert. Ich habe hier zwar schon mindestens einen in analoger Art lautenden Thread gefunden, aber die dort gegebenen Lösungsvorschläge konnte ich nur fragmentartig versuchen nachzuempfinden. Letztlich hat nichts geholfen und deshalb denke ich, wir sollten nochmal ganz von vorn anfangen.

Wo liegt das Problem?
Beim Anklicken von Google-Suchergebnissen wird man hin und wieder (schätzungsweise bei durchschnittlich jedem zweiten bis dritten Anlauf) auf falsche Seiten geleitet. Diese öffnen sich allerdings meistens nicht, man sieht nur die URL oben, z. B. "shootermovies", "ihavenet". Oftmals muss man den Browser auch neustarten, um überhaupt wieder die gewünschte Seite zu erreichen. Passieren tut dies sowohl bei Opera als auch mit Firefox.

Danke für Hilfe!

Gruß,
Molsterpöbel

Hier die Log-Texte:

Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 21:12 on 03/09/2013 (Admi)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2013 03
Ran by Admi (administrator) on NINJA on 03-09-2013 21:15:37
Running from C:\Users\Admi\Downloads\für TrBo
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Validity Sensors, Inc.) C:\Windows\system32\vcsFPService.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
() C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Atheros Communications) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe
(Dropbox, Inc.) C:\Users\Admi\AppData\Roaming\Dropbox\bin\Dropbox.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files\Mozilla\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla\plugin-container.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [525312 2011-01-25] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-16] (Synaptics Incorporated)
HKLM\...\Run: [QuickSet] - C:\Program Files\Dell\QuickSet\QuickSet.exe [3666800 2011-01-22] (Dell Inc.)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [627360 2011-05-20] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe [379552 2011-05-20] (Atheros Commnucations)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1580368 2010-11-03] (Logitech, Inc.)
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKCU\...\Run: [Adobe Reader Synchronizer] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe [1272912 2013-05-10] (Adobe Systems Incorporated)
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
MountPoints2: {95313474-e502-11e0-8079-806e6f6e6963} - D:\autorun.exe
HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [] -  [x]
HKLM-x32\...\Run: [RoxWatchTray] - c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2009-07-06] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD9LanguageShortcut] - C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-04-29] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [37960 2013-05-10] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Guard.Mail.ru.gui] - C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-10-04] ()
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\Users\Admi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Admi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/USSMB/8
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll (Trend Micro Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} -  No File
BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg32.dll (Trend Micro Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll (Trend Micro Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg32.dll (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Admi\AppData\Roaming\Mozilla\Firefox\Profiles\6g172uca.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\
FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\FirefoxExtension
FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\FirefoxExtension
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla\firefox.exe

==================== Services (Whitelisted) =================

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [622648 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-02] (Avira Operations GmbH & Co. KG)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-20] (Atheros)
R2 Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-10-04] ()
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-29] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-03 21:12 - 2013-09-03 21:12 - 00000000 _____ C:\Users\Admi\defogger_reenable
2013-09-03 21:10 - 2013-09-03 21:10 - 00069513 _____ C:\Users\Admi\Desktop\Anleitung.htm
2013-09-03 21:10 - 2013-09-03 21:10 - 00000000 ____D C:\Users\Admi\Desktop\Anleitung-Dateien
2013-09-03 21:01 - 2013-09-03 21:12 - 00000000 ____D C:\Users\Admi\Downloads\für TrBo
2013-09-03 20:28 - 2013-09-03 20:28 - 00002770 _____ C:\windows\System32\Tasks\CCleanerSkipUAC
2013-09-03 20:28 - 2013-09-03 20:28 - 00000000 ____D C:\Program Files\CCleaner
2013-09-03 20:27 - 2013-09-03 20:27 - 04454952 _____ (Piriform Ltd) C:\Users\Admi\Downloads\ccsetup405.exe
2013-09-03 20:06 - 2013-09-03 20:06 - 00000000 ___RD C:\Users\Admi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\Users\Admi\AppData\Roaming\Malwarebytes
2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-03 18:18 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-09-03 18:17 - 2013-09-03 18:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Admi\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-03 18:04 - 2013-09-03 20:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-03 18:04 - 2013-09-03 18:04 - 00000000 ____D C:\Users\Admi\Neuer Ordner
2013-09-03 18:04 - 2013-09-03 18:04 - 00000000 ____D C:\Program Files\Mozilla
2013-09-03 17:59 - 2013-09-03 17:59 - 22240760 _____ (Mozilla) C:\Users\Admi\Downloads\Firefox Setup 23.0.1.exe
2013-09-03 17:46 - 2013-09-03 17:49 - 00000989 _____ C:\freefallprotection.log
2013-09-03 17:29 - 2013-09-03 17:39 - 00000000 ____D C:\AdwCleaner
2013-09-03 17:26 - 2013-09-03 17:26 - 00000000 ____D C:\windows\system32\IO
2013-09-03 17:12 - 2013-09-03 18:13 - 00000125 _____ C:\Users\Admi\Desktop\laktosefreier Kuchen.html.txt
2013-08-15 12:11 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-08-15 12:11 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-08-15 12:11 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-08-15 12:11 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-08-15 12:11 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-08-15 12:11 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-08-15 12:11 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-08-15 12:11 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-08-15 12:11 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-08-15 12:11 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-08-15 12:11 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-08-15 12:11 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-08-15 12:11 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-08-15 12:11 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-08-15 12:11 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-08-15 12:11 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-08-15 12:11 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-08-15 12:11 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-08-15 12:11 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-08-15 12:11 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-08-15 12:11 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-08-15 12:11 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-08-15 12:11 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-08-15 12:11 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-08-15 12:11 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-08-15 12:11 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-08-15 12:11 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-08-15 12:11 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-08-15 12:11 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-08-15 12:11 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-08-15 12:11 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 18:47 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-08-14 18:47 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL
2013-08-14 18:47 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-08-14 18:47 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-08-14 18:47 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-08-14 18:47 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-08-14 18:47 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll
2013-08-14 18:47 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll
2013-08-14 18:47 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2013-08-14 18:47 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-08-14 18:47 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll
2013-08-14 18:47 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll
2013-08-14 18:47 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe
2013-08-14 18:47 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe
2013-08-14 18:47 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2013-08-14 18:47 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll
2013-08-14 18:47 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll
2013-08-14 18:47 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll
2013-08-14 18:47 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll
2013-08-14 18:47 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll
2013-08-14 18:47 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll
2013-08-14 18:47 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe
2013-08-14 18:47 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll
2013-08-14 18:47 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe
2013-08-14 18:47 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe
2013-08-14 18:47 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-08-14 18:47 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys

==================== One Month Modified Files and Folders =======

2013-09-03 21:14 - 2013-09-03 21:14 - 00000000 ____D C:\FRST
2013-09-03 21:12 - 2013-09-03 21:12 - 00000000 _____ C:\Users\Admi\defogger_reenable
2013-09-03 21:12 - 2013-09-03 21:01 - 00000000 ____D C:\Users\Admi\Downloads\für TrBo
2013-09-03 21:12 - 2011-10-11 16:02 - 00000000 ____D C:\Users\Admi
2013-09-03 21:10 - 2013-09-03 21:10 - 00069513 _____ C:\Users\Admi\Desktop\Anleitung.htm
2013-09-03 21:10 - 2013-09-03 21:10 - 00000000 ____D C:\Users\Admi\Desktop\Anleitung-Dateien
2013-09-03 21:08 - 2009-07-14 06:45 - 00020928 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-03 21:08 - 2009-07-14 06:45 - 00020928 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-03 20:43 - 2012-03-30 17:48 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-03 20:36 - 2012-02-02 23:25 - 00000000 ____D C:\windows\Minidump
2013-09-03 20:36 - 2011-11-19 21:41 - 00000000 ____D C:\Users\Admi\Tracing
2013-09-03 20:36 - 2011-10-12 16:00 - 00000000 ____D C:\Users\Admi\AppData\Local\CrashDumps
2013-09-03 20:36 - 2011-02-23 15:08 - 00000000 ____D C:\windows\Panther
2013-09-03 20:28 - 2013-09-03 20:28 - 00002770 _____ C:\windows\System32\Tasks\CCleanerSkipUAC
2013-09-03 20:28 - 2013-09-03 20:28 - 00000000 ____D C:\Program Files\CCleaner
2013-09-03 20:27 - 2013-09-03 20:27 - 04454952 _____ (Piriform Ltd) C:\Users\Admi\Downloads\ccsetup405.exe
2013-09-03 20:13 - 2011-09-22 14:57 - 00719614 _____ C:\windows\system32\perfh007.dat
2013-09-03 20:13 - 2011-09-22 14:57 - 00157298 _____ C:\windows\system32\perfc007.dat
2013-09-03 20:13 - 2009-07-14 07:13 - 01675454 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-03 20:09 - 2011-09-22 12:08 - 01151057 ____N C:\windows\WindowsUpdate.log
2013-09-03 20:07 - 2011-11-15 21:27 - 00000000 ____D C:\Users\Admi\AppData\Roaming\Dropbox
2013-09-03 20:06 - 2013-09-03 20:06 - 00000000 ___RD C:\Users\Admi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-09-03 20:06 - 2011-11-15 21:32 - 00000000 ___RD C:\Users\Admi\Dropbox
2013-09-03 20:05 - 2013-09-03 18:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-03 20:05 - 2013-03-21 15:28 - 00000302 _____ C:\windows\Tasks\oijjby.job
2013-09-03 20:05 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\Users\Admi\AppData\Roaming\Malwarebytes
2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-03 18:17 - 2013-09-03 18:17 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Admi\Downloads\mbam-setup-1.75.0.1300.exe
2013-09-03 18:13 - 2013-09-03 17:12 - 00000125 _____ C:\Users\Admi\Desktop\laktosefreier Kuchen.html.txt
2013-09-03 18:04 - 2013-09-03 18:04 - 00000000 ____D C:\Users\Admi\Neuer Ordner
2013-09-03 18:04 - 2013-09-03 18:04 - 00000000 ____D C:\Program Files\Mozilla
2013-09-03 18:04 - 2011-10-11 16:19 - 00000000 ____D C:\Users\Admi\AppData\Roaming\Mozilla
2013-09-03 17:59 - 2013-09-03 17:59 - 22240760 _____ (Mozilla) C:\Users\Admi\Downloads\Firefox Setup 23.0.1.exe
2013-09-03 17:58 - 2013-04-23 11:16 - 00000000 ____D C:\Program Files (x86)\Opera
2013-09-03 17:49 - 2013-09-03 17:46 - 00000989 _____ C:\freefallprotection.log
2013-09-03 17:47 - 2011-09-22 12:12 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-03 17:39 - 2013-09-03 17:29 - 00000000 ____D C:\AdwCleaner
2013-09-03 17:26 - 2013-09-03 17:26 - 00000000 ____D C:\windows\system32\IO
2013-09-03 17:21 - 2013-02-20 12:26 - 00000000 ____D C:\Program Files\Canon
2013-09-03 16:08 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-09-03 15:01 - 2013-04-23 11:18 - 00000000 ____D C:\Users\Admi\Desktop\Sonstiges
2013-09-03 14:59 - 2011-09-22 12:50 - 00000000 ____D C:\ProgramData\Sonic
2013-09-02 23:14 - 2011-10-11 16:06 - 00000000 ____D C:\Users\Admi\Documents\Bluetooth Folder
2013-09-02 14:34 - 2013-05-13 08:56 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys
2013-09-02 14:34 - 2013-03-29 11:29 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys
2013-09-02 14:34 - 2013-03-29 11:29 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys
2013-09-02 08:27 - 2012-06-26 21:53 - 00000000 ____D C:\Users\Admi\Documents\DLC
2013-09-02 08:26 - 2013-05-30 18:38 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-08-24 21:09 - 2012-10-04 22:26 - 00000000 ____D C:\Users\Admi\AppData\Roaming\ICQ
2013-08-20 21:43 - 2012-03-30 17:48 - 00692104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-08-20 21:43 - 2012-03-30 17:48 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-08-20 21:43 - 2011-10-18 20:21 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-15 12:06 - 2011-10-15 12:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-15 12:05 - 2011-10-19 18:10 - 78161360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-08-07 11:32 - 2013-05-22 15:06 - 00003440 _____ C:\windows\System32\Tasks\PCDEventLauncherTask
2013-08-05 20:22 - 2013-03-14 21:21 - 00000240 _____ C:\Users\Admi\Spiele.ini

Files to move or delete:
====================
C:\Users\Admi\Hangdat.exe
C:\Users\Admi\Hangman.dat
C:\Users\Admi\Hangman.exe
C:\Users\Admi\Kaese.exe
C:\Users\Admi\Knack.exe
C:\Users\Admi\Kniffel.exe
C:\Users\Admi\Mad.exe
C:\Users\Admi\Master.exe
C:\Users\Admi\Memory.exe
C:\Users\Admi\PCQuiz.dat
C:\Users\Admi\PCQuiz.exe
C:\Users\Admi\PCRoul.exe
C:\Users\Admi\Puzzle.exe
C:\Users\Admi\Schiffe.exe
C:\Users\Admi\Spiele.exe
C:\Users\Admi\Uninstal.exe
C:\Users\Admi\AppData\Local\Temp\Quarantine.exe
C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\mcbrwsr2.dll
C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\McInstallerRes.dll
C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\McInstallerRes_LD.dll
C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\McInstallerStartup.dll
C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\McUICnt.exe
C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\SecurityScanner.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-03 16:01

==================== End Of Log ============================
         
Code:
ATTFilter
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-09-03 21:53:40
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 SAMSUNG_ rev.2AK1 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Admi\AppData\Local\Temp\uxldqpow.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544                                                                                     fffff800031be000 65 bytes [00, 00, 15, 02, 46, 69, 6C, ...]
INITKDBG  C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 610                                                                                     fffff800031be042 4 bytes [00, 00, 00, 00]

---- User code sections - GMER 2.1 ----

.text     C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe[1288] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                            0000000077c11465 2 bytes [C1, 77]
.text     C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe[1288] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                           0000000077c114bb 2 bytes [C1, 77]
.text     ...                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE[1352] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                          0000000077c11465 2 bytes [C1, 77]
.text     C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE[1352] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                         0000000077c114bb 2 bytes [C1, 77]
.text     ...                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[2080] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                        0000000077c11465 2 bytes [C1, 77]
.text     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[2080] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                       0000000077c114bb 2 bytes [C1, 77]
.text     ...                                                                                                                                                    * 2
?         C:\windows\system32\mssprxy.dll [2608] entry point in ".rdata" section                                                                                 00000000749f71e6
.text     C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3084] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000077c11465 2 bytes [C1, 77]
.text     C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3084] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000077c114bb 2 bytes [C1, 77]
.text     ...                                                                                                                                                    * 2
.text     C:\Users\Admi\AppData\Roaming\Dropbox\bin\Dropbox.exe[4620] C:\windows\syswow64\Psapi.dll!GetModuleInformation + 69                                    0000000077c11465 2 bytes [C1, 77]
.text     C:\Users\Admi\AppData\Roaming\Dropbox\bin\Dropbox.exe[4620] C:\windows\syswow64\Psapi.dll!GetModuleInformation + 155                                   0000000077c114bb 2 bytes [C1, 77]
.text     ...                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe[4652] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                            0000000077c11465 2 bytes [C1, 77]
.text     C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe[4652] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                           0000000077c114bb 2 bytes [C1, 77]
.text     ...                                                                                                                                                    * 2

---- Threads - GMER 2.1 ----

Thread    C:\windows\SysWOW64\rundll32.exe [1628:1744]                                                                                                           0000000000206390
Thread    C:\windows\SysWOW64\rundll32.exe [1628:1748]                                                                                                           0000000000183a80
Thread    C:\windows\SysWOW64\rundll32.exe [1628:1888]                                                                                                           0000000000183a10
Thread    C:\windows\SysWOW64\rundll32.exe [1628:4980]                                                                                                           000000000037832b
Thread    C:\windows\SysWOW64\rundll32.exe [1628:4948]                                                                                                           0000000000375514
Thread    C:\windows\SysWOW64\rundll32.exe [1628:4944]                                                                                                           0000000000375a5e

---- Registry - GMER 2.1 ----

Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0015007f6c3b                                                                            
Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\9439e5209566                                                                            
Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\9439e5209566@0023d7535fda                                                               0xE2 0xBA 0x48 0x0E ...
Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\bc7737048afc                                                                            
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0015007f6c3b (not active ControlSet)                                                        
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\9439e5209566 (not active ControlSet)                                                        
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\9439e5209566@0023d7535fda                                                                   0xE2 0xBA 0x48 0x0E ...
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\bc7737048afc (not active ControlSet)                                                        

---- EOF - GMER 2.1 ----
         
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-09-2013 03
Ran by Admi at 2013-09-03 21:16:50
Running from C:\Users\Admi\Downloads\für TrBo
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
 Update for Microsoft Office 2007 (KB2508958) (x32)
64 Bit HP CIO Components Installer (Version: 8.2.2)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Advanced Audio FX Engine (x32 Version: 1.12.05)
Age of Empires III (x32 Version: 1.00.0000)
Anno 1602 (x32)
Avira Antivirus Premium (x32 Version: 13.0.0.4052)
Bluetooth Win7 Suite (64) (Version: 7.2.0.83)
Canon IJ Scan Utility (x32)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32 Version: 4.0.0)
Canon Kurzwahlprogramm (x32 Version: 1.3.0)
Canon MX390 series Benutzerregistrierung (x32)
Canon MX390 series MP Drivers (Version: 1.00)
Canon MX390 series On-screen Manual (x32 Version: 7.6.0)
Canon My Image Garden (x32 Version: 1.1.0)
Canon My Image Garden Design Files (x32 Version: 1.0.1)
Canon My Printer (x32 Version: 3.1.0)
Carcassonne (x32)
CyberLink PowerDVD 9.5 (x32 Version: 9.5.1.3225)
D3DX10 (x32 Version: 15.4.2368.0902)
Dell Backup and Recovery Manager (Version: 1.3)
Dell Edoc Viewer (Version: 1.0.0)
Dell Touchpad (Version: 15.2.5.2)
Dell Webcam Central (x32 Version: 2.00.44)
Dell WLAN and Bluetooth Client Installation (x32 Version: 9.0)
Die Sims (x32)
DigitalPersona Fingerprint Software 5.20 (Version: 5.20.230)
DirectX 9 Runtime (x32 Version: 1.00.0000)
Dropbox (HKCU Version: 2.0.22)
eaner (Version: 4.05)
Guard.ICQ (x32)
ICQ 7.8 Build #6800 Banner Remover 1.0 (x32)
ICQ7M (x32 Version: 7.8)
IDT Audio (x32 Version: 1.0.6324.0)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2361)
Intel(R) Rapid Storage Technology (x32 Version: 10.1.0.1008)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Logitech Unifying-Software 2.00 (Version: 2.00.43)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322)
Microsoft .NET Framework 1.1 (x32)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Age of Empires (x32)
Microsoft Age of Empires Expansion (x32)
Microsoft Age of Empires II (x32)
Microsoft Age of Empires II: The Conquerors Expansion (x32)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
My Dell (Version: 3.3.6280.92)
p.i.c.s. Spielesammlung (x32)
Pando Media Booster (x32 Version: 2.6.0.6)
PhotoShowExpress (x32 Version: 2.0.063)
Quickset64 (Version: 10.09.20)
Railroad Tycoon II - Platinum (x32)
RBVirtualFolder64Inst (Version: 1.00.0000)
Realtek Ethernet Controller Driver (x32 Version: 7.31.1025.2010)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30126)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0)
Rossmann Fotowelt Software 4.12.1 (x32 Version: 4.12.1)
Roxio Activation Module (x32 Version: 1.0)
Roxio BackOnTrack (x32 Version: 1.3.3)
Roxio Burn (x32 Version: 1.8)
Roxio Creator Starter (x32 Version: 1.0.439)
Roxio Creator Starter (x32 Version: 12.1.77.0)
Roxio Creator Starter (x32 Version: 5.0.0)
Roxio Express Labeler 3 (x32 Version: 3.2.2)
Roxio File Backup (Version: 1.3.2)
Skat24sv (x32)
Skype™ 6.6 (x32 Version: 6.6.106)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
Validity Sensors DDK (Version: 4.3.108.0)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => start w32time task_started
Task: {2FFC4E11-98E4-4E50-B6DA-9AD683627C08} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-20] (Adobe Systems Incorporated)
Task: {385760C7-35FB-4CF7-96A9-CC6F0284C710} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-05-07] (PC-Doctor, Inc.)
Task: {44CE376F-6845-4012-BC18-B8A6124B2097} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)
Task: {72ACF2B8-593C-443A-A08B-DCEB43FD1CF5} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {835B38ED-DB15-4EFF-A21B-13281850FEF5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd)
Task: {97FCADF6-D002-4AA6-A1C0-6D7576F031DA} - System32\Tasks\oijjby => C:\windows\SysWOW64\kbdnecx.dll [2013-03-21] ()
Task: {AC1EB3CD-167B-47AD-AD87-449BE0DF30B0} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-07-18] (PC-Doctor, Inc.)
Task: {C72A4A25-FAC5-4308-9985-C40EB9FC08CD} - System32\Tasks\SystemToolsDailyTest => C:\Windows\System32\uaclauncher.exe No File
Task: {C9FDD39C-0C0D-493C-A9EC-79AB5B701A18} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => start osppsvc
Task: {F08B39AE-BD84-470B-8ABF-DDD1DFF94538} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-21] (Microsoft Corporation)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\oijjby.job => C:\windows\SysWOW64\kbdnecx.dll

==================== Loaded Modules (whitelisted) =============

2009-07-14 02:18 - 2009-07-14 03:38 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\imaadp32.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\msg711.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\msgsm32.acm
2009-07-14 02:18 - 2009-07-14 03:38 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\msadp32.acm
2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm
2013-05-25 02:36 - 2013-05-25 02:36 - 00164016 _____ (Dropbox, Inc.) C:\Users\Admi\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00061088 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthCopyHook.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00315552 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\FolderViewImpl.dll
2010-11-11 05:53 - 2010-11-11 05:53 - 00817136 _____ () c:\Program Files\Roxio\Roxio Burn\RBVirtualFolder64.dll
2011-09-22 14:33 - 2011-04-10 21:13 - 00335872 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll
2011-09-22 14:33 - 2011-04-10 21:13 - 00286720 _____ (Intel Corporation) C:\windows\system32\igfxrDEU.lrc
2010-11-21 05:24 - 2010-11-21 05:24 - 00145920 _____ (Microsoft Corporation) C:\windows\system32\SPPC.DLL
2011-09-22 14:33 - 2011-04-10 20:40 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-09-22 12:23 - 2011-01-25 11:57 - 04637184 _____ (IDT, Inc.) C:\Program Files\IDT\WDM\STLang64.dll
2011-09-22 12:23 - 2011-01-25 11:57 - 00651776 ____N (IDT, Inc.) C:\Windows\system32\stapi64.dll
2011-09-22 14:35 - 2010-12-16 05:53 - 00404776 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2011-09-22 14:35 - 2010-12-16 05:53 - 00216360 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll
2011-05-20 18:16 - 2011-05-20 18:16 - 00066720 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Sync.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00073888 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\GOEP_SINGLE.DLL
2011-05-20 18:15 - 2011-05-20 18:15 - 02234016 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\OutLookLib.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00119456 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\L2capLib.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00043680 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BTBIP.DLL
2011-05-20 18:16 - 2011-05-20 18:16 - 00081056 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\RfcommLib.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00044704 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BPP.DLL
2011-05-20 18:15 - 2011-05-20 18:15 - 00079520 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\GOEP_bpp.DLL
2011-05-20 18:15 - 2011-05-20 18:15 - 00079008 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Handsfree.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00207520 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtObexFt.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00029856 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtFileStore.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00208544 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BTOBEXOP.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00030368 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtFileStoreOpp.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00072864 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\goep.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00305824 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\filetransfer.dll
2011-05-20 18:16 - 2011-05-20 18:16 - 00140448 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\skypeagent.dll
2011-05-20 18:15 - 2011-05-20 18:15 - 00118944 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ObjPush.dll
2011-09-22 12:13 - 2009-09-08 17:01 - 00237056 ____N (Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\CTLoadRs.dll
2009-07-14 01:26 - 2009-07-14 03:41 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\Nlsdl.dll
2011-09-22 12:13 - 2010-07-22 20:01 - 00065536 ____N (Creative Technology Ltd.) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\CtPinMgr.dll
2013-08-20 21:45 - 2013-08-20 21:45 - 00475648 _____ (Intel Corporation) C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\2b87cb064e64ff40778ca12322abb710\IAStorUtil.ni.dll
2011-09-22 12:15 - 2010-11-06 06:50 - 00032768 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\de-DE\IAStorIcon.resources.dll
2011-09-22 12:15 - 2010-11-06 06:50 - 01109504 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IntelVisualDesign.dll
2011-09-22 12:15 - 2010-11-06 06:50 - 00004608 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\de-DE\IntelVisualDesign.resources.dll
2013-07-12 13:58 - 2013-07-12 13:58 - 00014336 _____ (Intel Corp.) C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\14dd60b57c8e7542cc9711866ef63e8a\IAStorCommon.ni.dll
2011-09-22 12:15 - 2010-11-06 06:50 - 00164864 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUIHelper.dll
2010-11-17 19:52 - 2010-11-17 19:52 - 00096904 _____ (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll
2010-11-09 18:59 - 2010-11-09 18:59 - 04479472 _____ (Sonic Solutions) C:\Program Files (x86)\Roxio\OEM\Roxio Burn\AS_Storage_w32.dll
2012-11-28 16:49 - 2012-10-16 09:39 - 00561664 _____ (Microsoft Corporation) C:\windows\AppPatch\AcLayers.DLL
2010-11-25 05:34 - 2010-11-25 05:34 - 00632304 _____ (Sonic Solutions) c:\program files (x86)\common files\roxio shared\dllshared\homepermitsconfig13.dll
2010-11-22 20:27 - 2010-11-22 20:27 - 00190960 _____ (Roxio, Inc.) c:\program files (x86)\common files\roxio shared\dllshared\rsl.dll
2010-11-25 05:44 - 2010-11-25 05:44 - 00375280 _____ () c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll
2010-11-22 20:27 - 2010-11-22 20:27 - 00186864 _____ (Sonic Solutions) c:\program files (x86)\common files\roxio shared\dllshared\rcsl.dll
2010-11-25 05:35 - 2010-11-25 05:35 - 00961008 _____ (Sonic Solutions) c:\program files (x86)\common files\roxio shared\dllshared\SonicHTTPClient13.dll
2010-11-25 05:35 - 2010-11-25 05:35 - 00712688 _____ (Sonic Solutions) c:\program files (x86)\common files\roxio shared\dllshared\SonicLicenseManager13.dll
2009-07-14 02:09 - 2009-07-14 03:41 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\netbios.dll
2010-05-10 08:01 - 2010-05-10 08:01 - 00100848 _____ (Sonic Solutions) C:\Program Files (x86)\Common Files\PX Storage Engine\vxblock.dll
2010-11-25 09:36 - 2010-11-25 09:36 - 00100848 _____ (Sonic Solutions) c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\DLLShared\cdral.DLL
2009-07-14 01:50 - 2009-07-14 03:32 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\security.dll
2012-11-14 01:32 - 2012-11-14 01:32 - 03558400 _____ (wxWidgets development team) C:\Users\Admi\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Admi\AppData\Roaming\Dropbox\bin\libcef.dll
2013-03-13 22:48 - 2013-03-13 22:48 - 09956864 _____ (The ICU Project) C:\Users\Admi\AppData\Roaming\Dropbox\bin\icudt.dll
2013-09-03 18:04 - 2013-08-14 19:55 - 03551640 _____ () C:\Program Files\Mozilla\mozjs.dll
2013-08-20 21:43 - 2013-08-20 21:43 - 16166280 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll

==================== Alternate Data Streams (whitelisted) ==========



==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/03/2013 08:06:52 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/03/2013 05:41:26 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/03/2013 05:28:55 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (09/03/2013 04:04:42 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (09/03/2013 02:58:33 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2013 11:01:46 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2013 07:50:00 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2013 02:27:59 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/02/2013 08:23:03 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/01/2013 09:03:55 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (08/19/2013 00:16:41 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (08/17/2013 09:36:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/17/2013 09:36:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/17/2013 09:36:07 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 4003.18 MB
Available physical RAM: 2233.77 MB
Total Pagefile: 8004.54 MB
Available Pagefile: 5754.43 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:451.01 GB) (Free:397.88 GB) NTFS
Drive d: (AOE) (CDROM) (Total:5.1 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 675BA925)
Partition 1: (Not Active) - (Size=100 MB) - (Type=DE)
Partition 2: (Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=451 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

 

Themen zu Google-Suchergebnisse führen auf andere Seiten
adobe, antivir, antivirus, avira, browser, canon, ccsetup, desktop, error, excel, explorer, farbar, farbar recovery scan tool, firefox, flash player, home, installation, mozilla, opera, plug-in, registry, richtlinie, rundll, scan, security, seiten, server, services.exe, software, svchost.exe, system, temp, umleitung, usb, wlan




Ähnliche Themen: Google-Suchergebnisse führen auf andere Seiten


  1. Google-Links führen zu falschen Seiten
    Log-Analyse und Auswertung - 20.07.2013 (15)
  2. Google Suchergebnisse verweisen auf ungewünschte Seiten
    Plagegeister aller Art und deren Bekämpfung - 19.07.2013 (13)
  3. Google Redirect ? Suchergebnisse werden auf andere Seiten umgeleitet
    Plagegeister aller Art und deren Bekämpfung - 23.03.2013 (7)
  4. Google Suchergebnisse führen auf Werbeseiten, sowie dauerhafte Deaktivierung Windows Sicherheitscenter
    Log-Analyse und Auswertung - 10.01.2013 (5)
  5. Google links führen auf falsche Seiten
    Plagegeister aller Art und deren Bekämpfung - 20.12.2012 (7)
  6. Google Links (und andere) führen zu Werbung
    Plagegeister aller Art und deren Bekämpfung - 18.12.2012 (8)
  7. Google Links führen zu dubiosen Seiten...
    Plagegeister aller Art und deren Bekämpfung - 02.08.2012 (8)
  8. Google Links führen auf falsche Seiten
    Log-Analyse und Auswertung - 15.07.2012 (52)
  9. Google links führen auf falsche Seiten
    Plagegeister aller Art und deren Bekämpfung - 05.07.2012 (9)
  10. Google-Suchergebnisse führen zu fremden Seiten
    Plagegeister aller Art und deren Bekämpfung - 21.04.2012 (30)
  11. Google Suchanfragen führen auf falsche Seiten und langsames Booten
    Plagegeister aller Art und deren Bekämpfung - 01.03.2012 (25)
  12. google links führen zu falschen seiten
    Log-Analyse und Auswertung - 17.11.2011 (9)
  13. Google leitet Suchergebnisse auf andere Seiten um und Rechner spielt unverlangt Hintergrundmusik ab
    Plagegeister aller Art und deren Bekämpfung - 03.08.2011 (1)
  14. IE öffnet automatisch; Google-Links führen zu falschen Seiten
    Log-Analyse und Auswertung - 03.09.2009 (9)
  15. Google Links (und andere) führen zu Werbung + Partition unformatiert
    Log-Analyse und Auswertung - 01.09.2009 (14)
  16. Google-Links führen zu falschen Seiten
    Log-Analyse und Auswertung - 12.05.2009 (0)
  17. Google: Links führen zu falschen Seiten oder werden umgeleitet
    Plagegeister aller Art und deren Bekämpfung - 10.02.2009 (42)

Zum Thema Google-Suchergebnisse führen auf andere Seiten - Guten Abend! Ich habe mich jetzt extra hier angemeldet (also bitte habt Nachsehen für Anfängerfehler), weil auf dem Laptop meiner Gutsten seit längerem ein für mich nicht lösbares Browser-Problem kursiert. - Google-Suchergebnisse führen auf andere Seiten...
Archiv
Du betrachtest: Google-Suchergebnisse führen auf andere Seiten auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.