![]() |
|
Log-Analyse und Auswertung: Google-Suchergebnisse führen auf andere SeitenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Google-Suchergebnisse führen auf andere Seiten Guten Abend! Ich habe mich jetzt extra hier angemeldet (also bitte habt Nachsehen für Anfängerfehler), weil auf dem Laptop meiner Gutsten seit längerem ein für mich nicht lösbares Browser-Problem kursiert. Ich habe hier zwar schon mindestens einen in analoger Art lautenden Thread gefunden, aber die dort gegebenen Lösungsvorschläge konnte ich nur fragmentartig versuchen nachzuempfinden. Letztlich hat nichts geholfen und deshalb denke ich, wir sollten nochmal ganz von vorn anfangen. Wo liegt das Problem? Beim Anklicken von Google-Suchergebnissen wird man hin und wieder (schätzungsweise bei durchschnittlich jedem zweiten bis dritten Anlauf) auf falsche Seiten geleitet. Diese öffnen sich allerdings meistens nicht, man sieht nur die URL oben, z. B. "shootermovies", "ihavenet". Oftmals muss man den Browser auch neustarten, um überhaupt wieder die gewünschte Seite zu erreichen. Passieren tut dies sowohl bei Opera als auch mit Firefox. Danke für Hilfe! Gruß, Molsterpöbel Hier die Log-Texte: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 21:12 on 03/09/2013 (Admi) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... -=E.O.F=- Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2013 03 Ran by Admi (administrator) on NINJA on 03-09-2013 21:15:37 Running from C:\Users\Admi\Downloads\für TrBo Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe (Validity Sensors, Inc.) C:\Windows\system32\vcsFPService.exe (DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Atheros) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe () C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe (Atheros Communications) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe () C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (Dropbox, Inc.) C:\Users\Admi\AppData\Roaming\Dropbox\bin\Dropbox.exe () C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files\Mozilla\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla\plugin-container.exe (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Adobe Systems, Inc.) C:\windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [525312 2011-01-25] (IDT, Inc.) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-16] (Synaptics Incorporated) HKLM\...\Run: [QuickSet] - C:\Program Files\Dell\QuickSet\QuickSet.exe [3666800 2011-01-22] (Dell Inc.) HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [627360 2011-05-20] (Atheros Communications) HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe [379552 2011-05-20] (Atheros Commnucations) HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1580368 2010-11-03] (Logitech, Inc.) HKLM\...\Policies\Explorer: [NoActiveDesktop] 1 HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1 HKCU\...\Run: [Adobe Reader Synchronizer] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe [1272912 2013-05-10] (Adobe Systems Incorporated) HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation) MountPoints2: {95313474-e502-11e0-8079-806e6f6e6963} - D:\autorun.exe HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-06] (Intel Corporation) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [] - [x] HKLM-x32\...\Run: [RoxWatchTray] - c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions) HKLM-x32\...\Run: [Desktop Disc Tool] - c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] () HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2009-07-06] (CyberLink Corp.) HKLM-x32\...\Run: [PDVD9LanguageShortcut] - C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-04-29] (CyberLink Corp.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [37960 2013-05-10] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Guard.Mail.ru.gui] - C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-10-04] () HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-02] (Avira Operations GmbH & Co. KG) Lsa: [Notification Packages] DPPassFilter scecli Startup: C:\Users\Admi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Admi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/USSMB/8 BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll (Trend Micro Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg32.dll (Trend Micro Inc.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll (Trend Micro Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg32.dll (Trend Micro Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Admi\AppData\Roaming\Mozilla\Firefox\Profiles\6g172uca.default FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\ FF Extension: DigitalPersona Extension - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\ FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\FirefoxExtension FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files (x86)\Trend Micro\Client Server Security Agent\bho\1009\FirefoxExtension FF StartMenuInternet: FIREFOX.EXE - C:\Program Files\Mozilla\firefox.exe ==================== Services (Whitelisted) ================= R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [622648 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-02] (Avira Operations GmbH & Co. KG) R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [815160 2013-09-02] (Avira Operations GmbH & Co. KG) R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-20] (Atheros) R2 Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-10-04] () R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] () R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-02] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-29] (Avira Operations GmbH & Co. KG) R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-03 21:12 - 2013-09-03 21:12 - 00000000 _____ C:\Users\Admi\defogger_reenable 2013-09-03 21:10 - 2013-09-03 21:10 - 00069513 _____ C:\Users\Admi\Desktop\Anleitung.htm 2013-09-03 21:10 - 2013-09-03 21:10 - 00000000 ____D C:\Users\Admi\Desktop\Anleitung-Dateien 2013-09-03 21:01 - 2013-09-03 21:12 - 00000000 ____D C:\Users\Admi\Downloads\für TrBo 2013-09-03 20:28 - 2013-09-03 20:28 - 00002770 _____ C:\windows\System32\Tasks\CCleanerSkipUAC 2013-09-03 20:28 - 2013-09-03 20:28 - 00000000 ____D C:\Program Files\CCleaner 2013-09-03 20:27 - 2013-09-03 20:27 - 04454952 _____ (Piriform Ltd) C:\Users\Admi\Downloads\ccsetup405.exe 2013-09-03 20:06 - 2013-09-03 20:06 - 00000000 ___RD C:\Users\Admi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\Users\Admi\AppData\Roaming\Malwarebytes 2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-09-03 18:18 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2013-09-03 18:17 - 2013-09-03 18:17 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Admi\Downloads\mbam-setup-1.75.0.1300.exe 2013-09-03 18:04 - 2013-09-03 20:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-09-03 18:04 - 2013-09-03 18:04 - 00000000 ____D C:\Users\Admi\Neuer Ordner 2013-09-03 18:04 - 2013-09-03 18:04 - 00000000 ____D C:\Program Files\Mozilla 2013-09-03 17:59 - 2013-09-03 17:59 - 22240760 _____ (Mozilla) C:\Users\Admi\Downloads\Firefox Setup 23.0.1.exe 2013-09-03 17:46 - 2013-09-03 17:49 - 00000989 _____ C:\freefallprotection.log 2013-09-03 17:29 - 2013-09-03 17:39 - 00000000 ____D C:\AdwCleaner 2013-09-03 17:26 - 2013-09-03 17:26 - 00000000 ____D C:\windows\system32\IO 2013-09-03 17:12 - 2013-09-03 18:13 - 00000125 _____ C:\Users\Admi\Desktop\laktosefreier Kuchen.html.txt 2013-08-15 12:11 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2013-08-15 12:11 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2013-08-15 12:11 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe 2013-08-15 12:11 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2013-08-15 12:11 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2013-08-15 12:11 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2013-08-15 12:11 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2013-08-15 12:11 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2013-08-15 12:11 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2013-08-15 12:11 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2013-08-15 12:11 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll 2013-08-15 12:11 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll 2013-08-15 12:11 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll 2013-08-15 12:11 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll 2013-08-15 12:11 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb 2013-08-15 12:11 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2013-08-15 12:11 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2013-08-15 12:11 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2013-08-15 12:11 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2013-08-15 12:11 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2013-08-15 12:11 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2013-08-15 12:11 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2013-08-15 12:11 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2013-08-15 12:11 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll 2013-08-15 12:11 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll 2013-08-15 12:11 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll 2013-08-15 12:11 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2013-08-15 12:11 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll 2013-08-15 12:11 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb 2013-08-15 12:11 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe 2013-08-15 12:11 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-14 18:47 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL 2013-08-14 18:47 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMVDECOD.DLL 2013-08-14 18:47 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll 2013-08-14 18:47 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll 2013-08-14 18:47 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe 2013-08-14 18:47 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll 2013-08-14 18:47 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll 2013-08-14 18:47 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\windows\system32\wintrust.dll 2013-08-14 18:47 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll 2013-08-14 18:47 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll 2013-08-14 18:47 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\windows\system32\cryptsvc.dll 2013-08-14 18:47 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\windows\system32\cryptnet.dll 2013-08-14 18:47 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe 2013-08-14 18:47 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe 2013-08-14 18:47 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll 2013-08-14 18:47 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll 2013-08-14 18:47 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\windows\SysWOW64\wintrust.dll 2013-08-14 18:47 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll 2013-08-14 18:47 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\windows\SysWOW64\crypt32.dll 2013-08-14 18:47 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptsvc.dll 2013-08-14 18:47 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptnet.dll 2013-08-14 18:47 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe 2013-08-14 18:47 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll 2013-08-14 18:47 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe 2013-08-14 18:47 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe 2013-08-14 18:47 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys 2013-08-14 18:47 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tssecsrv.sys ==================== One Month Modified Files and Folders ======= 2013-09-03 21:14 - 2013-09-03 21:14 - 00000000 ____D C:\FRST 2013-09-03 21:12 - 2013-09-03 21:12 - 00000000 _____ C:\Users\Admi\defogger_reenable 2013-09-03 21:12 - 2013-09-03 21:01 - 00000000 ____D C:\Users\Admi\Downloads\für TrBo 2013-09-03 21:12 - 2011-10-11 16:02 - 00000000 ____D C:\Users\Admi 2013-09-03 21:10 - 2013-09-03 21:10 - 00069513 _____ C:\Users\Admi\Desktop\Anleitung.htm 2013-09-03 21:10 - 2013-09-03 21:10 - 00000000 ____D C:\Users\Admi\Desktop\Anleitung-Dateien 2013-09-03 21:08 - 2009-07-14 06:45 - 00020928 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-03 21:08 - 2009-07-14 06:45 - 00020928 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-03 20:43 - 2012-03-30 17:48 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job 2013-09-03 20:36 - 2012-02-02 23:25 - 00000000 ____D C:\windows\Minidump 2013-09-03 20:36 - 2011-11-19 21:41 - 00000000 ____D C:\Users\Admi\Tracing 2013-09-03 20:36 - 2011-10-12 16:00 - 00000000 ____D C:\Users\Admi\AppData\Local\CrashDumps 2013-09-03 20:36 - 2011-02-23 15:08 - 00000000 ____D C:\windows\Panther 2013-09-03 20:28 - 2013-09-03 20:28 - 00002770 _____ C:\windows\System32\Tasks\CCleanerSkipUAC 2013-09-03 20:28 - 2013-09-03 20:28 - 00000000 ____D C:\Program Files\CCleaner 2013-09-03 20:27 - 2013-09-03 20:27 - 04454952 _____ (Piriform Ltd) C:\Users\Admi\Downloads\ccsetup405.exe 2013-09-03 20:13 - 2011-09-22 14:57 - 00719614 _____ C:\windows\system32\perfh007.dat 2013-09-03 20:13 - 2011-09-22 14:57 - 00157298 _____ C:\windows\system32\perfc007.dat 2013-09-03 20:13 - 2009-07-14 07:13 - 01675454 _____ C:\windows\system32\PerfStringBackup.INI 2013-09-03 20:09 - 2011-09-22 12:08 - 01151057 ____N C:\windows\WindowsUpdate.log 2013-09-03 20:07 - 2011-11-15 21:27 - 00000000 ____D C:\Users\Admi\AppData\Roaming\Dropbox 2013-09-03 20:06 - 2013-09-03 20:06 - 00000000 ___RD C:\Users\Admi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices 2013-09-03 20:06 - 2011-11-15 21:32 - 00000000 ___RD C:\Users\Admi\Dropbox 2013-09-03 20:05 - 2013-09-03 18:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-09-03 20:05 - 2013-03-21 15:28 - 00000302 _____ C:\windows\Tasks\oijjby.job 2013-09-03 20:05 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT 2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\Users\Admi\AppData\Roaming\Malwarebytes 2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-03 18:18 - 2013-09-03 18:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-09-03 18:17 - 2013-09-03 18:17 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Admi\Downloads\mbam-setup-1.75.0.1300.exe 2013-09-03 18:13 - 2013-09-03 17:12 - 00000125 _____ C:\Users\Admi\Desktop\laktosefreier Kuchen.html.txt 2013-09-03 18:04 - 2013-09-03 18:04 - 00000000 ____D C:\Users\Admi\Neuer Ordner 2013-09-03 18:04 - 2013-09-03 18:04 - 00000000 ____D C:\Program Files\Mozilla 2013-09-03 18:04 - 2011-10-11 16:19 - 00000000 ____D C:\Users\Admi\AppData\Roaming\Mozilla 2013-09-03 17:59 - 2013-09-03 17:59 - 22240760 _____ (Mozilla) C:\Users\Admi\Downloads\Firefox Setup 23.0.1.exe 2013-09-03 17:58 - 2013-04-23 11:16 - 00000000 ____D C:\Program Files (x86)\Opera 2013-09-03 17:49 - 2013-09-03 17:46 - 00000989 _____ C:\freefallprotection.log 2013-09-03 17:47 - 2011-09-22 12:12 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-09-03 17:39 - 2013-09-03 17:29 - 00000000 ____D C:\AdwCleaner 2013-09-03 17:26 - 2013-09-03 17:26 - 00000000 ____D C:\windows\system32\IO 2013-09-03 17:21 - 2013-02-20 12:26 - 00000000 ____D C:\Program Files\Canon 2013-09-03 16:08 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache 2013-09-03 15:01 - 2013-04-23 11:18 - 00000000 ____D C:\Users\Admi\Desktop\Sonstiges 2013-09-03 14:59 - 2011-09-22 12:50 - 00000000 ____D C:\ProgramData\Sonic 2013-09-02 23:14 - 2011-10-11 16:06 - 00000000 ____D C:\Users\Admi\Documents\Bluetooth Folder 2013-09-02 14:34 - 2013-05-13 08:56 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avnetflt.sys 2013-09-02 14:34 - 2013-03-29 11:29 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avipbb.sys 2013-09-02 14:34 - 2013-03-29 11:29 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\windows\system32\Drivers\avgntflt.sys 2013-09-02 08:27 - 2012-06-26 21:53 - 00000000 ____D C:\Users\Admi\Documents\DLC 2013-09-02 08:26 - 2013-05-30 18:38 - 00000000 ____D C:\ProgramData\CanonIJPLM 2013-08-24 21:09 - 2012-10-04 22:26 - 00000000 ____D C:\Users\Admi\AppData\Roaming\ICQ 2013-08-20 21:43 - 2012-03-30 17:48 - 00692104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2013-08-20 21:43 - 2012-03-30 17:48 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater 2013-08-20 21:43 - 2011-10-18 20:21 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-15 12:06 - 2011-10-15 12:24 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-08-15 12:05 - 2011-10-19 18:10 - 78161360 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe 2013-08-07 11:32 - 2013-05-22 15:06 - 00003440 _____ C:\windows\System32\Tasks\PCDEventLauncherTask 2013-08-05 20:22 - 2013-03-14 21:21 - 00000240 _____ C:\Users\Admi\Spiele.ini Files to move or delete: ==================== C:\Users\Admi\Hangdat.exe C:\Users\Admi\Hangman.dat C:\Users\Admi\Hangman.exe C:\Users\Admi\Kaese.exe C:\Users\Admi\Knack.exe C:\Users\Admi\Kniffel.exe C:\Users\Admi\Mad.exe C:\Users\Admi\Master.exe C:\Users\Admi\Memory.exe C:\Users\Admi\PCQuiz.dat C:\Users\Admi\PCQuiz.exe C:\Users\Admi\PCRoul.exe C:\Users\Admi\Puzzle.exe C:\Users\Admi\Schiffe.exe C:\Users\Admi\Spiele.exe C:\Users\Admi\Uninstal.exe C:\Users\Admi\AppData\Local\Temp\Quarantine.exe C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\mcbrwsr2.dll C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\McInstallerRes.dll C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\McInstallerRes_LD.dll C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\McInstallerStartup.dll C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\McUICnt.exe C:\Users\Admi\AppData\Local\Temp\MSS\3.0.318.3\SecurityScanner.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-03 16:01 ==================== End Of Log ============================ Code:
ATTFilter GMER 2.1.19163 - hxxp://www.gmer.net Rootkit scan 2013-09-03 21:53:40 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 SAMSUNG_ rev.2AK1 465,76GB Running: gmer_2.1.19163.exe; Driver: C:\Users\Admi\AppData\Local\Temp\uxldqpow.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544 fffff800031be000 65 bytes [00, 00, 15, 02, 46, 69, 6C, ...] INITKDBG C:\windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 610 fffff800031be042 4 bytes [00, 00, 00, 00] ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe[1288] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077c11465 2 bytes [C1, 77] .text C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe[1288] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000077c114bb 2 bytes [C1, 77] .text ... * 2 .text C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE[1352] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077c11465 2 bytes [C1, 77] .text C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE[1352] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000077c114bb 2 bytes [C1, 77] .text ... * 2 .text C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[2080] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077c11465 2 bytes [C1, 77] .text C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe[2080] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000077c114bb 2 bytes [C1, 77] .text ... * 2 ? C:\windows\system32\mssprxy.dll [2608] entry point in ".rdata" section 00000000749f71e6 .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3084] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077c11465 2 bytes [C1, 77] .text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3084] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000077c114bb 2 bytes [C1, 77] .text ... * 2 .text C:\Users\Admi\AppData\Roaming\Dropbox\bin\Dropbox.exe[4620] C:\windows\syswow64\Psapi.dll!GetModuleInformation + 69 0000000077c11465 2 bytes [C1, 77] .text C:\Users\Admi\AppData\Roaming\Dropbox\bin\Dropbox.exe[4620] C:\windows\syswow64\Psapi.dll!GetModuleInformation + 155 0000000077c114bb 2 bytes [C1, 77] .text ... * 2 .text C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe[4652] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077c11465 2 bytes [C1, 77] .text C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe[4652] C:\windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000077c114bb 2 bytes [C1, 77] .text ... * 2 ---- Threads - GMER 2.1 ---- Thread C:\windows\SysWOW64\rundll32.exe [1628:1744] 0000000000206390 Thread C:\windows\SysWOW64\rundll32.exe [1628:1748] 0000000000183a80 Thread C:\windows\SysWOW64\rundll32.exe [1628:1888] 0000000000183a10 Thread C:\windows\SysWOW64\rundll32.exe [1628:4980] 000000000037832b Thread C:\windows\SysWOW64\rundll32.exe [1628:4948] 0000000000375514 Thread C:\windows\SysWOW64\rundll32.exe [1628:4944] 0000000000375a5e ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0015007f6c3b Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\9439e5209566 Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\9439e5209566@0023d7535fda 0xE2 0xBA 0x48 0x0E ... Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\bc7737048afc Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0015007f6c3b (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\9439e5209566 (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\9439e5209566@0023d7535fda 0xE2 0xBA 0x48 0x0E ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\bc7737048afc (not active ControlSet) ---- EOF - GMER 2.1 ---- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-09-2013 03 Ran by Admi at 2013-09-03 21:16:50 Running from C:\Users\Admi\Downloads\für TrBo Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= Update for Microsoft Office 2007 (KB2508958) (x32) 64 Bit HP CIO Components Installer (Version: 8.2.2) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7) Advanced Audio FX Engine (x32 Version: 1.12.05) Age of Empires III (x32 Version: 1.00.0000) Anno 1602 (x32) Avira Antivirus Premium (x32 Version: 13.0.0.4052) Bluetooth Win7 Suite (64) (Version: 7.2.0.83) Canon IJ Scan Utility (x32) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (x32 Version: 4.0.0) Canon Kurzwahlprogramm (x32 Version: 1.3.0) Canon MX390 series Benutzerregistrierung (x32) Canon MX390 series MP Drivers (Version: 1.00) Canon MX390 series On-screen Manual (x32 Version: 7.6.0) Canon My Image Garden (x32 Version: 1.1.0) Canon My Image Garden Design Files (x32 Version: 1.0.1) Canon My Printer (x32 Version: 3.1.0) Carcassonne (x32) CyberLink PowerDVD 9.5 (x32 Version: 9.5.1.3225) D3DX10 (x32 Version: 15.4.2368.0902) Dell Backup and Recovery Manager (Version: 1.3) Dell Edoc Viewer (Version: 1.0.0) Dell Touchpad (Version: 15.2.5.2) Dell Webcam Central (x32 Version: 2.00.44) Dell WLAN and Bluetooth Client Installation (x32 Version: 9.0) Die Sims (x32) DigitalPersona Fingerprint Software 5.20 (Version: 5.20.230) DirectX 9 Runtime (x32 Version: 1.00.0000) Dropbox (HKCU Version: 2.0.22) eaner (Version: 4.05) Guard.ICQ (x32) ICQ 7.8 Build #6800 Banner Remover 1.0 (x32) ICQ7M (x32 Version: 7.8) IDT Audio (x32 Version: 1.0.6324.0) Intel(R) Control Center (x32 Version: 1.2.1.1007) Intel(R) Management Engine Components (x32 Version: 7.0.0.1118) Intel(R) Processor Graphics (x32 Version: 8.15.10.2361) Intel(R) Rapid Storage Technology (x32 Version: 10.1.0.1008) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Logitech Unifying-Software 2.00 (Version: 2.00.43) Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300) Mesh Runtime (x32 Version: 15.4.5722.2) Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322) Microsoft .NET Framework 1.1 (x32) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Age of Empires (x32) Microsoft Age of Empires Expansion (x32) Microsoft Age of Empires II (x32) Microsoft Age of Empires II: The Conquerors Expansion (x32) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Office 2007 Service Pack 3 (SP3) (x32) Microsoft Office 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000) Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32) Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000) Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000) Microsoft Silverlight (Version: 5.1.20513.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1) Mozilla Maintenance Service (x32 Version: 23.0.1) MSVCRT (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) My Dell (Version: 3.3.6280.92) p.i.c.s. Spielesammlung (x32) Pando Media Booster (x32 Version: 2.6.0.6) PhotoShowExpress (x32 Version: 2.0.063) Quickset64 (Version: 10.09.20) Railroad Tycoon II - Platinum (x32) RBVirtualFolder64Inst (Version: 1.00.0000) Realtek Ethernet Controller Driver (x32 Version: 7.31.1025.2010) Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30126) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0) Rossmann Fotowelt Software 4.12.1 (x32 Version: 4.12.1) Roxio Activation Module (x32 Version: 1.0) Roxio BackOnTrack (x32 Version: 1.3.3) Roxio Burn (x32 Version: 1.8) Roxio Creator Starter (x32 Version: 1.0.439) Roxio Creator Starter (x32 Version: 12.1.77.0) Roxio Creator Starter (x32 Version: 5.0.0) Roxio Express Labeler 3 (x32 Version: 3.2.2) Roxio File Backup (Version: 1.3.2) Skat24sv (x32) Skype™ 6.6 (x32 Version: 6.6.106) Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0) Update for 2007 Microsoft Office System (KB967642) (x32) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32) Update für Microsoft Office Excel 2007 Help (KB963678) (x32) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32) Update für Microsoft Office Word 2007 Help (KB963665) (x32) Validity Sensors DDK (Version: 4.3.108.0) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3538.0513) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3538.0513) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) ==================== Restore Points ========================= ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => start w32time task_started Task: {2FFC4E11-98E4-4E50-B6DA-9AD683627C08} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-20] (Adobe Systems Incorporated) Task: {385760C7-35FB-4CF7-96A9-CC6F0284C710} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2013-05-07] (PC-Doctor, Inc.) Task: {44CE376F-6845-4012-BC18-B8A6124B2097} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation) Task: {72ACF2B8-593C-443A-A08B-DCEB43FD1CF5} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {835B38ED-DB15-4EFF-A21B-13281850FEF5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-08-21] (Piriform Ltd) Task: {97FCADF6-D002-4AA6-A1C0-6D7576F031DA} - System32\Tasks\oijjby => C:\windows\SysWOW64\kbdnecx.dll [2013-03-21] () Task: {AC1EB3CD-167B-47AD-AD87-449BE0DF30B0} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2013-07-18] (PC-Doctor, Inc.) Task: {C72A4A25-FAC5-4308-9985-C40EB9FC08CD} - System32\Tasks\SystemToolsDailyTest => C:\Windows\System32\uaclauncher.exe No File Task: {C9FDD39C-0C0D-493C-A9EC-79AB5B701A18} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => start osppsvc Task: {F08B39AE-BD84-470B-8ABF-DDD1DFF94538} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-21] (Microsoft Corporation) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\oijjby.job => C:\windows\SysWOW64\kbdnecx.dll ==================== Loaded Modules (whitelisted) ============= 2009-07-14 02:18 - 2009-07-14 03:38 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\imaadp32.acm 2009-07-14 02:18 - 2009-07-14 03:38 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\msg711.acm 2009-07-14 02:18 - 2009-07-14 03:38 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\msgsm32.acm 2009-07-14 02:18 - 2009-07-14 03:38 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\msadp32.acm 2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm 2013-05-25 02:36 - 2013-05-25 02:36 - 00164016 _____ (Dropbox, Inc.) C:\Users\Admi\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00061088 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthCopyHook.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00315552 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\FolderViewImpl.dll 2010-11-11 05:53 - 2010-11-11 05:53 - 00817136 _____ () c:\Program Files\Roxio\Roxio Burn\RBVirtualFolder64.dll 2011-09-22 14:33 - 2011-04-10 21:13 - 00335872 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll 2011-09-22 14:33 - 2011-04-10 21:13 - 00286720 _____ (Intel Corporation) C:\windows\system32\igfxrDEU.lrc 2010-11-21 05:24 - 2010-11-21 05:24 - 00145920 _____ (Microsoft Corporation) C:\windows\system32\SPPC.DLL 2011-09-22 14:33 - 2011-04-10 20:40 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2011-09-22 12:23 - 2011-01-25 11:57 - 04637184 _____ (IDT, Inc.) C:\Program Files\IDT\WDM\STLang64.dll 2011-09-22 12:23 - 2011-01-25 11:57 - 00651776 ____N (IDT, Inc.) C:\Windows\system32\stapi64.dll 2011-09-22 14:35 - 2010-12-16 05:53 - 00404776 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll 2011-09-22 14:35 - 2010-12-16 05:53 - 00216360 _____ (Synaptics Incorporated) C:\windows\system32\SynTPAPI.dll 2011-05-20 18:16 - 2011-05-20 18:16 - 00066720 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Sync.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00073888 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\GOEP_SINGLE.DLL 2011-05-20 18:15 - 2011-05-20 18:15 - 02234016 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\OutLookLib.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00119456 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\L2capLib.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00043680 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BTBIP.DLL 2011-05-20 18:16 - 2011-05-20 18:16 - 00081056 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\RfcommLib.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00044704 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BPP.DLL 2011-05-20 18:15 - 2011-05-20 18:15 - 00079520 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\GOEP_bpp.DLL 2011-05-20 18:15 - 2011-05-20 18:15 - 00079008 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Handsfree.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00207520 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtObexFt.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00029856 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtFileStore.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00208544 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BTOBEXOP.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00030368 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtFileStoreOpp.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00072864 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\goep.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00305824 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\filetransfer.dll 2011-05-20 18:16 - 2011-05-20 18:16 - 00140448 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\skypeagent.dll 2011-05-20 18:15 - 2011-05-20 18:15 - 00118944 _____ (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ObjPush.dll 2011-09-22 12:13 - 2009-09-08 17:01 - 00237056 ____N (Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\CTLoadRs.dll 2009-07-14 01:26 - 2009-07-14 03:41 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\Nlsdl.dll 2011-09-22 12:13 - 2010-07-22 20:01 - 00065536 ____N (Creative Technology Ltd.) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\CtPinMgr.dll 2013-08-20 21:45 - 2013-08-20 21:45 - 00475648 _____ (Intel Corporation) C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\2b87cb064e64ff40778ca12322abb710\IAStorUtil.ni.dll 2011-09-22 12:15 - 2010-11-06 06:50 - 00032768 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\de-DE\IAStorIcon.resources.dll 2011-09-22 12:15 - 2010-11-06 06:50 - 01109504 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IntelVisualDesign.dll 2011-09-22 12:15 - 2010-11-06 06:50 - 00004608 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\de-DE\IntelVisualDesign.resources.dll 2013-07-12 13:58 - 2013-07-12 13:58 - 00014336 _____ (Intel Corp.) C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\14dd60b57c8e7542cc9711866ef63e8a\IAStorCommon.ni.dll 2011-09-22 12:15 - 2010-11-06 06:50 - 00164864 _____ (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUIHelper.dll 2010-11-17 19:52 - 2010-11-17 19:52 - 00096904 _____ (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll 2010-11-09 18:59 - 2010-11-09 18:59 - 04479472 _____ (Sonic Solutions) C:\Program Files (x86)\Roxio\OEM\Roxio Burn\AS_Storage_w32.dll 2012-11-28 16:49 - 2012-10-16 09:39 - 00561664 _____ (Microsoft Corporation) C:\windows\AppPatch\AcLayers.DLL 2010-11-25 05:34 - 2010-11-25 05:34 - 00632304 _____ (Sonic Solutions) c:\program files (x86)\common files\roxio shared\dllshared\homepermitsconfig13.dll 2010-11-22 20:27 - 2010-11-22 20:27 - 00190960 _____ (Roxio, Inc.) c:\program files (x86)\common files\roxio shared\dllshared\rsl.dll 2010-11-25 05:44 - 2010-11-25 05:44 - 00375280 _____ () c:\program files (x86)\common files\roxio shared\dllshared\SQLite352.dll 2010-11-22 20:27 - 2010-11-22 20:27 - 00186864 _____ (Sonic Solutions) c:\program files (x86)\common files\roxio shared\dllshared\rcsl.dll 2010-11-25 05:35 - 2010-11-25 05:35 - 00961008 _____ (Sonic Solutions) c:\program files (x86)\common files\roxio shared\dllshared\SonicHTTPClient13.dll 2010-11-25 05:35 - 2010-11-25 05:35 - 00712688 _____ (Sonic Solutions) c:\program files (x86)\common files\roxio shared\dllshared\SonicLicenseManager13.dll 2009-07-14 02:09 - 2009-07-14 03:41 - 00018944 _____ (Microsoft Corporation) C:\windows\system32\netbios.dll 2010-05-10 08:01 - 2010-05-10 08:01 - 00100848 _____ (Sonic Solutions) C:\Program Files (x86)\Common Files\PX Storage Engine\vxblock.dll 2010-11-25 09:36 - 2010-11-25 09:36 - 00100848 _____ (Sonic Solutions) c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\DLLShared\cdral.DLL 2009-07-14 01:50 - 2009-07-14 03:32 - 00005120 _____ (Microsoft Corporation) C:\windows\system32\security.dll 2012-11-14 01:32 - 2012-11-14 01:32 - 03558400 _____ (wxWidgets development team) C:\Users\Admi\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll 2013-03-13 22:48 - 2013-03-13 22:48 - 24978944 _____ () C:\Users\Admi\AppData\Roaming\Dropbox\bin\libcef.dll 2013-03-13 22:48 - 2013-03-13 22:48 - 09956864 _____ (The ICU Project) C:\Users\Admi\AppData\Roaming\Dropbox\bin\icudt.dll 2013-09-03 18:04 - 2013-08-14 19:55 - 03551640 _____ () C:\Program Files\Mozilla\mozjs.dll 2013-08-20 21:43 - 2013-08-20 21:43 - 16166280 _____ () C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ==================== Alternate Data Streams (whitelisted) ========== ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (09/03/2013 08:06:52 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/03/2013 05:41:26 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/03/2013 05:28:55 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (09/03/2013 04:04:42 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Komponente 2: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Error: (09/03/2013 02:58:33 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/02/2013 11:01:46 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/02/2013 07:50:00 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/02/2013 02:27:59 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/02/2013 08:23:03 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (09/01/2013 09:03:55 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (08/19/2013 00:16:41 PM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (08/17/2013 09:36:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (08/17/2013 09:36:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (08/17/2013 09:36:07 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (08/17/2013 09:36:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Mozilla Maintenance Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 44% Total physical RAM: 4003.18 MB Available physical RAM: 2233.77 MB Total Pagefile: 8004.54 MB Available Pagefile: 5754.43 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:451.01 GB) (Free:397.88 GB) NTFS Drive d: (AOE) (CDROM) (Total:5.1 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 675BA925) Partition 1: (Not Active) - (Size=100 MB) - (Type=DE) Partition 2: (Active) - (Size=15 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=451 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
Themen zu Google-Suchergebnisse führen auf andere Seiten |
adobe, antivir, antivirus, avira, browser, canon, ccsetup, desktop, error, excel, explorer, farbar, farbar recovery scan tool, firefox, flash player, home, installation, mozilla, opera, plug-in, registry, richtlinie, rundll, scan, security, seiten, server, services.exe, software, svchost.exe, system, temp, umleitung, usb, wlan |